Edit tour

Windows Analysis Report
Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg

Overview

General Information

Sample name:	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg
Analysis ID:	1531082
MD5:	398072dc6ec7dfadffda31e9168ee01e
SHA1:	0f643d9b647ce5db62d9e68bf55dc5e33bbb3999
SHA256:	2b5de44e3a9303b32f29bc0d182f5715e8b0b717466e966479e3206cfe091a5f
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

AI detected landing page (webpage, office document or email)

HTML body contains low number of good links

HTML page contains hidden javascript code

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Stores files to the Windows start menu directory

Stores large binary data to the registry

Classification

Process Tree

System is w10x64_ra

OUTLOOK.EXE (PID: 6944 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg" MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 6360 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "4AE037F2-F682-43BD-B677-F9DD98FD1808" "838F29C9-1758-47F6-976A-97D89964306D" "6944" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 3724 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://avp100.huddle.com/workspace/1189459/files/#/folder/4319955 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2080,i,2313067344593807637,7431847318301714659,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 6944, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin\1

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/

LLM: Score: 9 Reasons: The brand 'Federal Aviation Administration' is a well-known government agency., The URL 'login.huddle.com' does not match the legitimate domain 'faa.gov' associated with the Federal Aviation Administration., The domain 'huddle.com' is unrelated to the Federal Aviation Administration, which raises suspicion., The presence of an email input field on a domain not associated with the Federal Aviation Administration is a common phishing tactic. DOM: 1.5.pages.csv

Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/

HTTP Parser: Number of links: 0

Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955

HTTP Parser: Base64 decoded: naU_JTWDX\WM1GDJPFX]]@\U

Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/	HTTP Parser: Iframe src: javascript:false
Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/	HTTP Parser: Iframe src: javascript:false

Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955	HTTP Parser: No favicon
Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/	HTTP Parser: No favicon
Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/	HTTP Parser: No favicon
Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/	HTTP Parser: No favicon
Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/	HTTP Parser: No favicon

Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/	HTTP Parser: No <meta name="author".. found
Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/	HTTP Parser: No <meta name="author".. found

Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/	HTTP Parser: No <meta name="copyright".. found
Source: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.190.159.73:443 -> 192.168.2.17:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.17:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.73:443 -> 192.168.2.17:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.17:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.17:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.11.206.59:443 -> 192.168.2.17:49771 version: TLS 1.2

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 104.18.70.113 104.18.70.113
Source: Joe Sandbox View	IP Address: 216.198.54.1 216.198.54.1

Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4
Source: Joe Sandbox View	JA3 fingerprint: 6271f898ce5be7dd52b0fc260d0662b3
Source: Joe Sandbox View	JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.159.73

Source: global traffic	HTTP traffic detected: GET /workspace/1189459/files/ HTTP/1.1Host: avp100.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MgFfPwO4RwD58wp&MD=7N1b1yk3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://avp100.huddle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/css/assets/fonts/fontawesome-webfont-v3.2.1.woff HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.huddle.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/css/styles.min.1452.css HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/js/vendor.min.52642a88.js HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/js/app.min.1452.js HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/js/vendor.min.52642a88.js HTTP/1.1Host: login.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nr-632.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.huddle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/js/app.min.1452.js HTTP/1.1Host: login.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /customisation/logo?subdomain=avp100&callback=_jqjsp&_1728585345266= HTTP/1.1Host: api.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.huddle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /localisation/cultures/categories/identityui?callback=_jqjsp HTTP/1.1Host: api.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.huddle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /nr-632.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: login.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /customisation/logo?subdomain=avp100&callback=_jqjsp&_1728585345266= HTTP/1.1Host: api.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?accessRequestId= HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /localisation/cultures/categories/identityui?callback=_jqjsp HTTP/1.1Host: api.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?accessRequestId= HTTP/1.1Host: login.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sectok="6bea2439-19a3-4fca-8445-72a634b8fd71"
Source: global traffic	HTTP traffic detected: GET /login/entry?access_request=93921932-863b-4ff1-adf8-ebd1dab6991b HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
Source: global traffic	HTTP traffic detected: GET /embeddable_framework/main.js HTTP/1.1Host: assets.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.huddle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/entry?access_request=93921932-863b-4ff1-adf8-ebd1dab6991b HTTP/1.1Host: login.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
Source: global traffic	HTTP traffic detected: GET /res/9824fab9-3605-43b9-a635-c6fc23fbfb45.ashx?login-logo.jpg HTTP/1.1Host: avp100.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.huddle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/css/assets/marketing-buttons/badge-ios.svg HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
Source: global traffic	HTTP traffic detected: GET /user/css/assets/marketing-buttons/badge-android.svg HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
Source: global traffic	HTTP traffic detected: GET /user/css/assets/marketing-buttons/badge-windows.svg HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
Source: global traffic	HTTP traffic detected: GET /user/css/assets/marketing-buttons/badge-mac.svg HTTP/1.1Host: login.huddle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
Source: global traffic	HTTP traffic detected: GET /ekr/asset_composer.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.huddle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/css/assets/marketing-buttons/badge-ios.svg HTTP/1.1Host: login.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
Source: global traffic	HTTP traffic detected: GET /user/css/assets/marketing-buttons/badge-android.svg HTTP/1.1Host: login.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
Source: global traffic	HTTP traffic detected: GET /ekr/asset_composer.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compose/web_widget/huddle.zendesk.com HTTP/1.1Host: ekr.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.huddle.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://login.huddle.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /user/css/assets/marketing-buttons/badge-windows.svg HTTP/1.1Host: login.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
Source: global traffic	HTTP traffic detected: GET /user/css/assets/marketing-buttons/badge-mac.svg HTTP/1.1Host: login.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
Source: global traffic	HTTP traffic detected: GET /res/9824fab9-3605-43b9-a635-c6fc23fbfb45.ashx?login-logo.jpg HTTP/1.1Host: avp100.huddle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compose/web_widget/huddle.zendesk.com HTTP/1.1Host: ekr.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-main-cbf609b.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-main-cbf609b.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-cbf609b.js HTTP/1.1Host: static.zdassets.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: huddle.zendesk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://login.huddle.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embeddable/config HTTP/1.1Host: huddle.zendesk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-cbf609b.js HTTP/1.1Host: static.zdassets.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MgFfPwO4RwD58wp&MD=7N1b1yk3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAASFycsIWHYJTbTZ4bfq6JUV/89wEHeuqoueePJYoLl1OwI5L3cqee%2BLEpbOBTPGZDOVL3I4Xz8/RcBJwaQzXzYUAcqE0AHvWMFJUAUlnAArXDPmKqBQTscKz/8gOsiCLB0KhY42TOkuGgT6FWGkF62tlge1z1avv9LdWkM/PA7xjgQXHVkhaMr/VOeKyy%2B8FWGY7HnGTXmf5ooatHZoVM5tWG3ZSmX4v/WEwjVnRwFxNSk92vJ4lIPz8YMcMSlszfM0%2BSrU4LktE3vpC8BcvJq/mhWGBQkbPd1i5w7OM0z1kIQyovv3LLFoboxm4dhXpHTCYIE4Ads6Y0KItCB413B4QZgAAECgkJFNYMOxy4wEsOcHNhZ2wAddKGrWRuajsHBlLMEXMzvwRSf9JqB8LET1uO9N0qwrfdI80H7oV6R9cAH%2B5tqhC%2Btv5bTVeCKTh8sENrbvEEWNTvP1Brcevr%2BuYS2GdeMlZmZ97nVnnxnsi5j8uKlIi6OtZxm3gu51bLnhpmxNVjO3006J/WoIKCsdrz7zLK4qTq6WCaJFuao8yRO4T%2B4p8lsMHubzwGx9Z9CWEAJNeDAw3rr5b%2BrIhU7oKJ2HAuzF50C57/94Ixe/QPhWgWh8fgptHB971vv5Ou4LpM%2BT30FHrwKFpu37/TXPEU4RLrOBjq1RRTGgyM86Fu6JR2PQ7S7D4lRMVJ3L/eT0ZZ4JvJWntFj58o6nB/alRN3uePf0NZWZd0t6oH2bTTapqPQ05XfR8/WoW7AdKEiSlDwOnJBmgOz6nJUda9qJl%2B4fW7ZC74iqk%2BrgTgcQBuOR0VM%2B4nG5ipQWSmXc7h0ckGx9LsGUYAUUReJfBBdmXaFsLb6HbCLqW//WU7oXZAQm3v1J1drZoSWfIKFLnSnCYORyGEAclNlqUihlTo8iYbeMNzcIuwMM81/Btjhp8URJNDzMScdcB%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1728585385User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 13379A1CC5D2439BA17891CA39F51146X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B

Source: global traffic	DNS traffic detected: DNS query: avp100.huddle.com
Source: global traffic	DNS traffic detected: DNS query: login.huddle.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: api.huddle.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: assets.zendesk.com
Source: global traffic	DNS traffic detected: DNS query: static.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: ekr.zdassets.com
Source: global traffic	DNS traffic detected: DNS query: huddle.zendesk.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: chromecache_115.9.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/
Source: 57C8EDB95DF3F0AD4EE2DC2B8CFD4157.0.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab
Source: chromecache_115.9.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_115.9.dr	String found in binary or memory: http://fontawesome.io.
Source: chromecache_115.9.dr	String found in binary or memory: http://kyruus.com
Source: chromecache_115.9.dr	String found in binary or memory: http://opensource.org/licenses/mit-license.html
Source: Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg	String found in binary or memory: http://schema.org
Source: chromecache_115.9.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_115.9.dr	String found in binary or memory: http://twitter.com/davegandy
Source: chromecache_115.9.dr	String found in binary or memory: http://twitter.com/fontawesome.
Source: chromecache_115.9.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_116.9.dr, chromecache_98.9.dr, chromecache_121.9.dr, chromecache_96.9.dr, chromecache_100.9.dr, chromecache_102.9.dr, chromecache_123.9.dr, chromecache_113.9.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_124.9.dr, chromecache_97.9.dr	String found in binary or memory: https://api.huddle.com/rest/customisation/logo?subdomain=avp100
Source: ~WRS{91DDFA33-440A-44BA-8DB5-0140BC4A5508}.tmp.0.dr	String found in binary or memory: https://avp100.huddle.com/res/9824fab9-3605-43b9-a635-c6fc23fbfb45.ashx?login-logo.jpg
Source: ~WRS{91DDFA33-440A-44BA-8DB5-0140BC4A5508}.tmp.0.dr	String found in binary or memory: https://avp100.huddle.com/workspace/1189459/files/
Source: Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg	String found in binary or memory: https://avp100.huddle.com/workspace/1189459/files/#/folder/4319955
Source: chromecache_106.9.dr, chromecache_107.9.dr	String found in binary or memory: https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal
Source: chromecache_95.9.dr, chromecache_119.9.dr	String found in binary or memory: https://ekr.zendesk.com/compose_product/web_widget/cbf609b2dfb3cf337c37e8e93f118288d11f355b?features
Source: OUTLOOK_16_0_16827_20130-20241010T1435330661-6944.etl.0.dr	String found in binary or memory: https://login.windows.localnull
Source: OUTLOOK_16_0_16827_20130-20241010T1435330661-6944.etl.0.dr	String found in binary or memory: https://login.windows.localrosR
Source: chromecache_95.9.dr, chromecache_119.9.dr	String found in binary or memory: https://static.zdassets.com/web_widget/classic/latest/web-widget-main-cbf609b.js
Source: Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg, ~WRS{91DDFA33-440A-44BA-8DB5-0140BC4A5508}.tmp.0.dr	String found in binary or memory: https://us.huddle.com/myhuddle/profile.aspx?WebFeeds=1

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 20.190.159.73:443 -> 192.168.2.17:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.17:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.159.73:443 -> 192.168.2.17:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.17:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.100.63.156:443 -> 192.168.2.17:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.149.20.212:443 -> 192.168.2.17:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.11.206.59:443 -> 192.168.2.17:49771 version: TLS 1.2

Source: classification engine

Classification label: mal52.phis.winMSG@17/77@32/11

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241010T1435330661-6944.etl

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "4AE037F2-F682-43BD-B677-F9DD98FD1808" "838F29C9-1758-47F6-976A-97D89964306D" "6944" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://avp100.huddle.com/workspace/1189459/files/#/folder/4319955
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2080,i,2313067344593807637,7431847318301714659,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "4AE037F2-F682-43BD-B677-F9DD98FD1808" "838F29C9-1758-47F6-976A-97D89964306D" "6944" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://avp100.huddle.com/workspace/1189459/files/#/folder/4319955	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2080,i,2313067344593807637,7431847318301714659,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\InprocServer32

Jump to behavior

Source: Google Drive.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window found: window name: SysTabControl32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: Email	LLM: Page contains button: 'View Team A Pictures and Presentation' Source: 'Email'
Source: Email	LLM: Email contains prominent button: 'view team a pictures and presentation'

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Common\ExperimentConfigs\Ecs\outlook\ConfigContextData 1

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File Volume queried: C:\Windows\SysWOW64 FullSizeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Queries volume information: C:\Program Files (x86)\Microsoft Office\root\Office16\AI\WordCombinedFloatieLreOnline.onnx VolumeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 DLL Side-Loading	1 Modify Registry	LSASS Memory	13 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
http://fontawesome.io	0%	URL Reputation	safe
http://www.bohemiancoding.com/sketch	0%	URL Reputation	safe
http://schema.org	0%	URL Reputation	safe
http://scripts.sil.org/OFL	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
static.zdassets.com	104.18.72.113	true	false	unknown
huddle.zendesk.com	216.198.54.1	true	false	unknown
cf.zdassets.com	104.18.70.113	true	false	unknown
js-agent.newrelic.com	162.247.243.39	true	false	unknown
ekr.zdassets.com	104.18.70.113	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com	18.210.252.197	true	false	unknown
assets.zendesk.com	unknown	unknown	false	unknown
avp100.huddle.com	unknown	unknown	false	unknown
login.huddle.com	unknown	unknown	true	unknown
api.huddle.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://login.huddle.com/user/css/assets/marketing-buttons/badge-windows.svg	false	unknown
https://login.huddle.com/login	false	unknown
https://static.zdassets.com/ekr/asset_composer.js	false	unknown
https://login.huddle.com/user/js/vendor.min.52642a88.js	false	unknown
https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955	false	unknown
https://js-agent.newrelic.com/nr-632.min.js	false	unknown
https://login.huddle.com/user/css/assets/marketing-buttons/badge-ios.svg	false	unknown
https://ekr.zdassets.com/compose/web_widget/huddle.zendesk.com	false	unknown
https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/	true	unknown
https://static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-cbf609b.js	false	unknown
https://login.huddle.com/user/css/assets/marketing-buttons/badge-mac.svg	false	unknown
https://avp100.huddle.com/res/9824fab9-3605-43b9-a635-c6fc23fbfb45.ashx?login-logo.jpg	false	unknown
https://static.zdassets.com/web_widget/classic/latest/web-widget-main-cbf609b.js	false	unknown
https://login.huddle.com/login/entry?access_request=93921932-863b-4ff1-adf8-ebd1dab6991b	false	unknown
https://login.huddle.com/user/css/assets/marketing-buttons/badge-android.svg	false	unknown
https://login.huddle.com/user/css/styles.min.1452.css	false	unknown
https://login.huddle.com/user/js/app.min.1452.js	false	unknown
https://avp100.huddle.com/workspace/1189459/files/	false	unknown
https://api.huddle.com/localisation/cultures/categories/identityui?callback=_jqjsp	false	unknown
https://login.huddle.com/login?accessRequestId=	false	unknown
https://login.huddle.com/user/css/assets/fonts/fontawesome-webfont-v3.2.1.woff	false	unknown
https://api.huddle.com/customisation/logo?subdomain=avp100&callback=_jqjsp&_1728585345266=	false	unknown
https://assets.zendesk.com/embeddable_framework/main.js	false	unknown
https://login.huddle.com/favicon.ico	false	unknown
https://huddle.zendesk.com/embeddable/config	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://kyruus.com	chromecache_115.9.dr	false		unknown
http://fontawesome.io	chromecache_115.9.dr	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_115.9.dr	false		unknown
https://avp100.huddle.com/workspace/1189459/files/#/folder/4319955	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg	false		unknown
https://login.windows.localrosR	OUTLOOK_16_0_16827_20130-20241010T1435330661-6944.etl.0.dr	false		unknown
http://www.bohemiancoding.com/sketch	chromecache_116.9.dr, chromecache_98.9.dr, chromecache_121.9.dr, chromecache_96.9.dr, chromecache_100.9.dr, chromecache_102.9.dr, chromecache_123.9.dr, chromecache_113.9.dr	false	URL Reputation: safe	unknown
https://login.windows.localnull	OUTLOOK_16_0_16827_20130-20241010T1435330661-6944.etl.0.dr	false		unknown
http://creativecommons.org/licenses/by/3.0/	chromecache_115.9.dr	false		unknown
http://opensource.org/licenses/mit-license.html	chromecache_115.9.dr	false		unknown
https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal	chromecache_106.9.dr, chromecache_107.9.dr	false		unknown
http://schema.org	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg	false	URL Reputation: safe	unknown
http://twitter.com/fontawesome.	chromecache_115.9.dr	false		unknown
http://fontawesome.io.	chromecache_115.9.dr	false		unknown
https://ekr.zendesk.com/compose_product/web_widget/cbf609b2dfb3cf337c37e8e93f118288d11f355b?features	chromecache_95.9.dr, chromecache_119.9.dr	false		unknown
http://twitter.com/davegandy	chromecache_115.9.dr	false		unknown
http://scripts.sil.org/OFL	chromecache_115.9.dr	false	URL Reputation: safe	unknown
https://us.huddle.com/myhuddle/profile.aspx?WebFeeds=1	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg, ~WRS{91DDFA33-440A-44BA-8DB5-0140BC4A5508}.tmp.0.dr	false		unknown
https://api.huddle.com/rest/customisation/logo?subdomain=avp100	chromecache_124.9.dr, chromecache_97.9.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
52.23.1.4	unknown	United States	14618	AMAZON-AESUS	false
18.210.252.197	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
3.93.32.136	unknown	United States	14618	AMAZON-AESUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.18.70.113	cf.zdassets.com	United States	13335	CLOUDFLARENETUS	false
216.198.54.1	huddle.zendesk.com	United States	7321	LNET-ASNUS	false
216.198.53.1	unknown	United States	7321	LNET-ASNUS	false
104.18.72.113	static.zdassets.com	United States	13335	CLOUDFLARENETUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1531082
Start date and time:	2024-10-10 20:35:01 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	23
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg
Detection:	MAL
Classification:	mal52.phis.winMSG@17/77@32/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .msg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 52.113.194.132, 52.109.68.129, 2.19.126.151, 2.19.126.160, 93.184.221.240, 172.217.16.195, 142.250.184.206, 64.233.184.84, 34.104.35.123, 192.229.221.95, 20.42.65.84, 142.250.185.106, 142.250.185.234, 142.250.185.74, 142.250.185.202, 142.250.185.138, 142.250.186.74, 216.58.206.74, 216.58.206.42, 172.217.16.202, 142.250.184.202, 142.250.184.234, 142.250.186.170, 172.217.18.106, 142.250.181.234, 142.250.185.170, 216.58.212.170, 142.250.184.195, 172.217.16.142
Excluded domains from analysis (whitelisted): omex.cdn.office.net, slscr.update.microsoft.com, clientservices.googleapis.com, eur.roaming1.live.com.akadns.net, wu.azureedge.net, ecs-office.s-0005.s-msedge.net, roaming.officeapps.live.com, clients2.google.com, ocsp.digicert.com, login.live.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, onedscolprdeus02.eastus.cloudapp.azure.com, update.googleapis.com, frc-azsc-000.roaming.officeapps.live.com, wu-b-net.trafficmanager.net, a1864.dscd.akamai.net, www.bing.com, clients1.google.com, ecs.office.com, self-events-data.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, self.events.data.microsoft.com, osiprod-frc-buff-azsc-000.francecentral.cloudapp.azure.com, ctldl.windowsupdate.com, prod.roaming1.live.com.akadns.net, s-0005-office.config.skype.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, s-0005.s-msedg
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg

Input	Output
URL: Email Model: jbxai	{ "brands":["Microsoft", "Google", "Yahoo"], "text":"Kevin Burrell shared Team A Pictures and Presentation with you In the Eric Meyn's Workspace workspace I've just uploaded 1 file to this folder: Boneyard Presentation - Aztec.pptx View Team A Pictures and Presentation This notification has been sent to you, Heather Hunn, Robert Stegeman, David Gerlach and 639 other(s) You are getting notifications instantly. You can change the frequency.", "contains_trigger_text":true, "trigger_text":"View Team A Pictures and Presentation", "prominent_button_name":"View Team A Pictures and Presentation", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/ Model: jbxai	{ "brands":[], "text":"Email", "contains_trigger_text":true, "trigger_text":"By signing in, you agree to the Terms of Use and Privacy Policy", "prominent_button_name":"Continue", "text_input_field_labels":["Email"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/ Model: jbxai	{ "brands":["Federal Aviation Administration", "Huddle"], "text":"FEDERAL AVIATION ADMINISTRATION ACCIDENT INVESTIGATION DIVISION AVP-100", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Continue", "text_input_field_labels":["Email"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/ Model: jbxai	{ "brands":["Federal Aviation Administration", "Huddle"], "text":"FEDERAL AVIATION ADMINISTRATION ACCIDENT INVESTIGATION DIVISION AVP-100", "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Continue", "text_input_field_labels":["Email"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/ Model: jbxai	{ "phishing_score":9, "brands":"Federal Aviation Administration", "legit_domain":"faa.gov", "classification":"wellknown", "reasons":["The brand 'Federal Aviation Administration' is a well-known government agency.", "The URL 'login.huddle.com' does not match the legitimate domain 'faa.gov' associated with the Federal Aviation Administration.", "The domain 'huddle.com' is unrelated to the Federal Aviation Administration, which raises suspicion.", "The presence of an email input field on a domain not associated with the Federal Aviation Administration is a common phishing tactic."], "brand_matches":[false], "url_match":false, "brand_input":"Federal Aviation Administration", "input_fields":"Email"}

URL: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955#/ Model: jbxai

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
239.255.255.250	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse
	original (1).eml	Get hash	malicious	Unknown	Browse
	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse
	https://soloist.ai/grcewalm	Get hash	malicious	Unknown	Browse
	https://mb3.io/y6jt3ofc	Get hash	malicious	Unknown	Browse
	vmsg_0101024.htm	Get hash	malicious	Unknown	Browse
	https://www.canva.com/design/DAGTGtfEYnw/CziuYyD8EEWyTr61OD4BbQ/edit?utm_content=DAGTGtfEYnw&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutto	Get hash	malicious	HtmlDropper	Browse
	brayton HR Bulletin_270852_3BU4-ZSJO2U-JMY3.pdf	Get hash	malicious	Unknown	Browse
	36.msi	Get hash	malicious	Numando	Browse
	33.msi	Get hash	malicious	Numando	Browse
104.18.70.113	http://www.ledger-secure03948.sssgva.com/	Get hash	malicious	Unknown	Browse	theme.zdassets.com/theme_assets/1431543/42244b4719d17000223f59a778152d5ea374bbd2.png
216.198.54.1	https://future.nhs.uk	Get hash	malicious	Unknown	Browse
	http://tcaconnect.ac-page.com/toronto-construction-association-inc/	Get hash	malicious	Unknown	Browse
	http://ak437453-76542337354.com/	Get hash	malicious	Unknown	Browse
	https://polidos.com/	Get hash	malicious	Unknown	Browse
	https://jenifer-lopezz.pages.dev/	Get hash	malicious	Unknown	Browse
	https://uyapcezaportal.com/sorgu	Get hash	malicious	Unknown	Browse
	https://orchid-special-saga.glitch.me/ONLINE0NNO0OVERIFY.html	Get hash	malicious	Unknown	Browse
	http://fix-bill.com/	Get hash	malicious	Unknown	Browse
	http://auth-blockchain.vercel.app/	Get hash	malicious	Unknown	Browse
	https://campaignjoinnow42.cloud/	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
static.zdassets.com	https://issuu.com/ryanrodger/docs/smn8263528?fr=sMTQ5NTc4NTgxNDc	Get hash	malicious	Unknown	Browse	104.18.72.113
	https://email.oxblue.com/e3t/Ctc/Q+113/cdDrv04/VXdfjN46m5dxW4GJlKB4fd0DdW2sbCLr5lTFq6N7Hm8xT3qgyTW7Y8-PT6lZ3lzW1ccS1H8Y8rzXW1hrlTV77h1NhW5_pVzH8bsnn6W1PWxqV8D5TN_W4_z5yx2Cz_4sMrZF-GqDHzcW8pZQ3N3BhYgKW3tmwg72n4TxDW4fS46V1-s7dgW57YVF64HfrMMW2BxxC75X21XdW1nBYw_1PMVGyW8s_YKQ6BTQZmW8wDJ4k3-yNbbW2_BGfy66mfVdW937hqt5kq1CcW4XD3mN54BQSWW4G8TK98NTx7zW74frv25zlZbQW5ztJ6n6fGJFrMSqBjr36qwYW2tk9Xh21wMKrW5RXwDq1M2mmrW3nyq_P20wBvNN8-tVH1nqcD1W5m3Vz04sj9CQf2ygfDq04	Get hash	malicious	Unknown	Browse	104.18.70.113
	https://future.nhs.uk	Get hash	malicious	Unknown	Browse	104.18.72.113
	http://tcaconnect.ac-page.com/toronto-construction-association-inc/	Get hash	malicious	Unknown	Browse	104.18.72.113
	http://ak437453-76542337354.com/	Get hash	malicious	Unknown	Browse	104.18.72.113
	http://www.ledger-secure03948.sssgva.com/	Get hash	malicious	Unknown	Browse	104.18.72.113
	https://polidos.com/	Get hash	malicious	Unknown	Browse	104.18.72.113
	https://mx1.margarettaphilomena.net/	Get hash	malicious	Unknown	Browse	104.18.70.113
	https://jenifer-lopezz.pages.dev/	Get hash	malicious	Unknown	Browse	104.18.72.113
	http://0fic3365-ms-1drve-shar1drve-0ffce1drvve-0ffic365new.glitch.me/	Get hash	malicious	Unknown	Browse	104.18.72.113
js-agent.newrelic.com	https://mb3.io/y6jt3ofc	Get hash	malicious	Unknown	Browse	162.247.243.39
	https://premierbb.sharefile.com/public/share/web-189361297164461c	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	162.247.243.39
	http://fortcollinsfineart.com/	Get hash	malicious	Unknown	Browse	162.247.243.39
	https://www.google.com.bo/url?url=https://coqjcqixwpeuzndc&hpj=jguragr&fwbtzg=qoe&ffzzf=olnshn&aes=fvotjnl&garqe=txbrxc&emrj=ycbtmrgd&uwzlcgsurn=eygnbnharg&q=amp/jhjn24u.v%C2%ADvg%C2%ADzy%C2%ADnp%C2%ADe%C2%ADw%C2%ADl%C2%ADkkukl.com%E2%80%8B/4b3puorbt&vijx=zlglfoj&qcobrch=pupf&cjaim=omgedz&guneqiu=xqm&d=DwMFAg	Get hash	malicious	Unknown	Browse	162.247.243.39
	https://minthunts4.vercel.app/	Get hash	malicious	HTMLPhisher	Browse	162.247.243.39
	http://pancakeswaplogin.educatorpages.com/	Get hash	malicious	Unknown	Browse	162.247.243.39
	http://bellsouth.univer.se/	Get hash	malicious	Unknown	Browse	162.247.243.39
	TsxJNxhxMJfQTd.ps1	Get hash	malicious	Unknown	Browse	162.247.243.39
	c42oX67S73.ps1	Get hash	malicious	Unknown	Browse	162.247.243.39
	https://myworkspace183015a0ec.myclickfunnels.com/reviewdoc--96b32?preview=true	Get hash	malicious	Unknown	Browse	162.247.243.39
cf.zdassets.com	http://ak437453-76542337354.com/	Get hash	malicious	Unknown	Browse	104.18.70.113
	https://campaignjoinnow42.cloud/	Get hash	malicious	Unknown	Browse	104.18.72.113
	http://www.samyinyue.com/fr.php	Get hash	malicious	Unknown	Browse	104.18.72.113
	http://frhb68273ds.ikexpress.com	Get hash	malicious	Unknown	Browse	104.18.70.113
	http://nys-ns.com/	Get hash	malicious	Unknown	Browse	104.18.72.113
	http://nys-ns.com/	Get hash	malicious	Unknown	Browse	104.18.70.113
	http://newbetter.click/	Get hash	malicious	Unknown	Browse	104.18.70.113
	https://api.virtru.com/accounts/email-activation?linkId=6a354426-d14b-461c-9068-d631a3772906-99eaadf1-1535-4926-b117-94d72b1cdf72&loginRedirectUrl=https://jpmchase.secure.virtru.com/secure-reader&userId=supplies@stinsons.com&senderEmail=noreplies.sua@jpmchase.com&c=E,1,GJLSrPtvth0tvKAsk9Y8SirlbwhoEVEruSrOswYM_LloAIiVFwyhuRHy64qpEnuVb816Gf3-lgJ8eHDKwE1BYzbKlN_iUmGn6C8RtrX3Te-ZHW3l4Q,,&typo=1	Get hash	malicious	Unknown	Browse	104.18.72.113
	https://aliorpl.com/	Get hash	malicious	Unknown	Browse	104.18.70.113
	https://syderybaba.site/	Get hash	malicious	Unknown	Browse	104.18.72.113
ekr.zdassets.com	https://issuu.com/ryanrodger/docs/smn8263528?fr=sMTQ5NTc4NTgxNDc	Get hash	malicious	Unknown	Browse	104.18.72.113
	https://email.oxblue.com/e3t/Ctc/Q+113/cdDrv04/VXdfjN46m5dxW4GJlKB4fd0DdW2sbCLr5lTFq6N7Hm8xT3qgyTW7Y8-PT6lZ3lzW1ccS1H8Y8rzXW1hrlTV77h1NhW5_pVzH8bsnn6W1PWxqV8D5TN_W4_z5yx2Cz_4sMrZF-GqDHzcW8pZQ3N3BhYgKW3tmwg72n4TxDW4fS46V1-s7dgW57YVF64HfrMMW2BxxC75X21XdW1nBYw_1PMVGyW8s_YKQ6BTQZmW8wDJ4k3-yNbbW2_BGfy66mfVdW937hqt5kq1CcW4XD3mN54BQSWW4G8TK98NTx7zW74frv25zlZbQW5ztJ6n6fGJFrMSqBjr36qwYW2tk9Xh21wMKrW5RXwDq1M2mmrW3nyq_P20wBvNN8-tVH1nqcD1W5m3Vz04sj9CQf2ygfDq04	Get hash	malicious	Unknown	Browse	104.18.72.113
	https://future.nhs.uk	Get hash	malicious	Unknown	Browse	104.18.70.113
	http://tcaconnect.ac-page.com/toronto-construction-association-inc/	Get hash	malicious	Unknown	Browse	104.18.72.113
	https://mx1.margarettaphilomena.net/	Get hash	malicious	Unknown	Browse	104.18.70.113
	https://jenifer-lopezz.pages.dev/	Get hash	malicious	Unknown	Browse	104.18.70.113
	https://phase-thief-0566.typedream.app/	Get hash	malicious	Unknown	Browse	104.18.72.113
	http://fix-bill.com/	Get hash	malicious	Unknown	Browse	104.18.72.113
	https://user1logs91597.ac-page.com/visiomvaxer-0394875348488574279595784543	Get hash	malicious	Unknown	Browse	104.18.72.113
	http://ww82.www.gg/	Get hash	malicious	HTMLPhisher	Browse	104.18.70.113

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AMAZON-AESUS	https://mb3.io/y6jt3ofc	Get hash	malicious	Unknown	Browse	44.208.8.183
	brayton HR Bulletin_270852_3BU4-ZSJO2U-JMY3.pdf	Get hash	malicious	Unknown	Browse	52.5.13.197
	rrfVaSCIYc.elf	Get hash	malicious	Mirai	Browse	23.131.150.218
	vEOTtk6FeG.elf	Get hash	malicious	Mirai	Browse	34.197.225.120
	RFNnJGB7wy.elf	Get hash	malicious	Mirai	Browse	54.56.120.220
	cIhVfU4Bus.elf	Get hash	malicious	Mirai	Browse	18.205.206.187
	UZV5A2N5j8.elf	Get hash	malicious	Mirai	Browse	34.202.219.221
	Fw_ Complete with Docusign_ J929272_SOW Extension_002_09-OCT-24_201415.pdf.eml	Get hash	malicious	Unknown	Browse	52.204.90.22
	http://braintumourresearch.org	Get hash	malicious	Unknown	Browse	54.162.9.233
	http://flipsnack.com/BA85A977C6F/oct2024/full-view.html	Get hash	malicious	HTMLPhisher	Browse	3.239.232.65
CLOUDFLARENETUS	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse	104.21.54.168
	original (1).eml	Get hash	malicious	Unknown	Browse	1.1.1.1
	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse	104.21.54.168
	https://soloist.ai/grcewalm	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://mb3.io/y6jt3ofc	Get hash	malicious	Unknown	Browse	162.247.243.29
	vmsg_0101024.htm	Get hash	malicious	Unknown	Browse	188.114.96.3
	https://www.canva.com/design/DAGTGtfEYnw/CziuYyD8EEWyTr61OD4BbQ/edit?utm_content=DAGTGtfEYnw&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutto	Get hash	malicious	HtmlDropper	Browse	172.67.74.152
	file.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	Set-up.exe	Get hash	malicious	LummaC	Browse	172.67.206.204
	79VAlgfTk8.elf	Get hash	malicious	Mirai	Browse	8.47.122.16
AMAZON-AESUS	https://mb3.io/y6jt3ofc	Get hash	malicious	Unknown	Browse	44.208.8.183
	brayton HR Bulletin_270852_3BU4-ZSJO2U-JMY3.pdf	Get hash	malicious	Unknown	Browse	52.5.13.197
	rrfVaSCIYc.elf	Get hash	malicious	Mirai	Browse	23.131.150.218
	vEOTtk6FeG.elf	Get hash	malicious	Mirai	Browse	34.197.225.120
	RFNnJGB7wy.elf	Get hash	malicious	Mirai	Browse	54.56.120.220
	cIhVfU4Bus.elf	Get hash	malicious	Mirai	Browse	18.205.206.187
	UZV5A2N5j8.elf	Get hash	malicious	Mirai	Browse	34.202.219.221
	Fw_ Complete with Docusign_ J929272_SOW Extension_002_09-OCT-24_201415.pdf.eml	Get hash	malicious	Unknown	Browse	52.204.90.22
	http://braintumourresearch.org	Get hash	malicious	Unknown	Browse	54.162.9.233
	http://flipsnack.com/BA85A977C6F/oct2024/full-view.html	Get hash	malicious	HTMLPhisher	Browse	3.239.232.65
AMAZON-AESUS	https://mb3.io/y6jt3ofc	Get hash	malicious	Unknown	Browse	44.208.8.183
	brayton HR Bulletin_270852_3BU4-ZSJO2U-JMY3.pdf	Get hash	malicious	Unknown	Browse	52.5.13.197
	rrfVaSCIYc.elf	Get hash	malicious	Mirai	Browse	23.131.150.218
	vEOTtk6FeG.elf	Get hash	malicious	Mirai	Browse	34.197.225.120
	RFNnJGB7wy.elf	Get hash	malicious	Mirai	Browse	54.56.120.220
	cIhVfU4Bus.elf	Get hash	malicious	Mirai	Browse	18.205.206.187
	UZV5A2N5j8.elf	Get hash	malicious	Mirai	Browse	34.202.219.221
	Fw_ Complete with Docusign_ J929272_SOW Extension_002_09-OCT-24_201415.pdf.eml	Get hash	malicious	Unknown	Browse	52.204.90.22
	http://braintumourresearch.org	Get hash	malicious	Unknown	Browse	54.162.9.233
	http://flipsnack.com/BA85A977C6F/oct2024/full-view.html	Get hash	malicious	HTMLPhisher	Browse	3.239.232.65

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse	4.175.87.197 95.100.63.156 20.190.159.73 52.149.20.212
	O1cd60GrHb.exe	Get hash	malicious	RHADAMANTHYS	Browse	4.175.87.197 95.100.63.156 20.190.159.73 52.149.20.212
	https://soloist.ai/grcewalm	Get hash	malicious	Unknown	Browse	4.175.87.197 95.100.63.156 20.190.159.73 52.149.20.212
	https://mb3.io/y6jt3ofc	Get hash	malicious	Unknown	Browse	4.175.87.197 95.100.63.156 20.190.159.73 52.149.20.212
	vmsg_0101024.htm	Get hash	malicious	Unknown	Browse	4.175.87.197 95.100.63.156 20.190.159.73 52.149.20.212
	https://www.canva.com/design/DAGTGtfEYnw/CziuYyD8EEWyTr61OD4BbQ/edit?utm_content=DAGTGtfEYnw&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutto	Get hash	malicious	HtmlDropper	Browse	4.175.87.197 95.100.63.156 20.190.159.73 52.149.20.212
	brayton HR Bulletin_270852_3BU4-ZSJO2U-JMY3.pdf	Get hash	malicious	Unknown	Browse	4.175.87.197 95.100.63.156 20.190.159.73 52.149.20.212
	36.msi	Get hash	malicious	Numando	Browse	4.175.87.197 95.100.63.156 20.190.159.73 52.149.20.212
	33.msi	Get hash	malicious	Numando	Browse	4.175.87.197 95.100.63.156 20.190.159.73 52.149.20.212
	QbAwyjyAk3.lnk	Get hash	malicious	Numando	Browse	4.175.87.197 95.100.63.156 20.190.159.73 52.149.20.212
6271f898ce5be7dd52b0fc260d0662b3	36.msi	Get hash	malicious	Numando	Browse	23.11.206.59
	33.msi	Get hash	malicious	Numando	Browse	23.11.206.59
	QbAwyjyAk3.lnk	Get hash	malicious	Numando	Browse	23.11.206.59
	btm4e0L3pw.lnk	Get hash	malicious	Numando	Browse	23.11.206.59
	26.msi	Get hash	malicious	Numando	Browse	23.11.206.59
	Untitled.eml	Get hash	malicious	HTMLPhisher	Browse	23.11.206.59
	https://na2.docusign.net/Signing/EmailStart.aspx?a=65ce31e3-0f62-43e8-8a06-1efc3ff79e46&etti=24&acct=f03a97ef-a21a-4b5f-a673-fe222edf542a&er=c4396d2f-541c-4d1d-bd82-7b6b044f29c3	Get hash	malicious	HTMLPhisher	Browse	23.11.206.59
	https://www.google.com/url?q=https://zyxd.centerspp.com/gBWWy/&sa=D&source=editors&ust=1728569033796392	Get hash	malicious	HTMLPhisher	Browse	23.11.206.59
	https://videostreamingsettlement.simplurisdev.com/form/choice	Get hash	malicious	Unknown	Browse	23.11.206.59
	https://imago-technologies.com/	Get hash	malicious	Unknown	Browse	23.11.206.59
3b5074b1b5d032e5620f69f9f700ff0e	https://www.canva.com/design/DAGTGtfEYnw/CziuYyD8EEWyTr61OD4BbQ/edit?utm_content=DAGTGtfEYnw&utm_campaign=designshare&utm_medium=link2&utm_source=sharebutto	Get hash	malicious	HtmlDropper	Browse	13.107.5.88
	36.msi	Get hash	malicious	Numando	Browse	13.107.5.88
	33.msi	Get hash	malicious	Numando	Browse	13.107.5.88
	QbAwyjyAk3.lnk	Get hash	malicious	Numando	Browse	13.107.5.88
	btm4e0L3pw.lnk	Get hash	malicious	Numando	Browse	13.107.5.88
	26.msi	Get hash	malicious	Numando	Browse	13.107.5.88
	Untitled.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.5.88
	https://media.thesocialpresskit.com/american-bankers-association/BNAT2024PrintablesPostcard2.zip	Get hash	malicious	Unknown	Browse	13.107.5.88
	https://www.google.com/url?q=https://zyxd.centerspp.com/gBWWy/&sa=D&source=editors&ust=1728569033796392	Get hash	malicious	HTMLPhisher	Browse	13.107.5.88
	z76ik.exe	Get hash	malicious	MassLogger RAT	Browse	13.107.5.88

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	338
Entropy (8bit):	3.471639254206456
Encrypted:	false
SSDEEP:	6:kKXJK8oJFN+SkQlPlEGYRMY9z+s3Ql2DUevat:RK4kPlE99SCQl2DUevat
MD5:	318366C75D4CABBDAA5740F99F6AED22
SHA1:	9E233A5B98AAC0D2768A6B7E449217AB9E48BB54
SHA-256:	FC41CB74B76760AE5930481467028EA72FE4F9C5C3A34147C819CFA713FED1FC
SHA-512:	9E4E47991DDB5F77F7CA8FAFC4938F9255A5195F42ECCE03F3D1CF737FFB685B5A67AFA2C6B92E6EA5DEB82E423B529A266AA088F904B337F20F5E76115515B3
Malicious:	false
Reputation:	low
Preview:	p...... ........T..2C...(...............................................B:.VZ.. .........p.........$...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.d.i.s.a.l.l.o.w.e.d.c.e.r.t.s.t.l...c.a.b...".7.4.6.7.8.7.a.3.f.0.d.9.1.:.0."...

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	231348
Entropy (8bit):	4.380496122682095
Encrypted:	false
SSDEEP:	1536:o2YLCygsHUIR1OyF3gsrMNcAz79ysQqt2EQkxqoQKIrcm0FvteWyceloSs0Lk9lE:8zgesAgbmiGu2CqoQNrt0FvinKDm9sHI
MD5:	16322847C186401B4E3FE54A189932A9
SHA1:	9CE692D686DEE8426D81416B077AFC3E8EB8E1D5
SHA-256:	F7CDD7EB5306866E7DA1ABE738B96125B8A626DE6A29638EE11FAE7A9C191860
SHA-512:	EF047A9BB55EE6F7AA99A3049A5890DB208B770A2AE47C0CC5F2289A0F31EF091DB9FD77DA3C3B46FB71DAA947FF58B37A3E834F4E717E59DD53178EF848655A
Malicious:	false
Reputation:	low
Preview:	TH02...... . ..&C.......SM01X...,...@..&C...........IPM.Activity...........h...............h............H..h........:.g....h........`Z..H..h\tor ...AppD...h.\|..0..........h...............h........_`.k...h~...@...I.+w...h....H...8..k...0....T...............d.........2h...............k..............!h.............. h.\c.... .....#h....8.........$h`Z......8....."h..............'h..............1h....<.........0h....4.....k../h....h......kH..h....p.........-h .......L.....+h:...............t.y.-.L.i.c. ..............F7..............FIPM.Activity..o.Form..r.Standard..e.Journal Entry.S.IPM.Microsoft.FolderDesign.FormsDescription................F.k..........1122110020000000..o.Microsoft.t.This form is used to create journal entries.......D.kf...... ..........&...........(.......(... ...@.....................................................................................................................fffffffff........wwwwwwww.p....pp..............p...............pw..............pw..DDDDO..

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	322260
Entropy (8bit):	4.000299760592446
Encrypted:	false
SSDEEP:	6144:dztCFLNyoAHq5Rv2SCtUTnRe4N2+A/3oKBL37GZbTSB+pMZIrh:HMLgvKz9CtgRemO3oUHi3SBSMZIl
MD5:	CC90D669144261B198DEAD45AA266572
SHA1:	EF164048A8BC8BD3A015CF63E78BDAC720071305
SHA-256:	89C701EEFF939A44F28921FD85365ECD87041935DCD0FE0BAF04957DA12C9899
SHA-512:	16F8A8A6DCBAEAEFB88C7CFF910BCCC71B76A723CF808B810F500E28E543112C2FAE2491D4D209569BD810490EDFF564A2B084709B02963BCAF6FDF1AEEC59AC
Malicious:	false
Reputation:	high, very likely benign file
Preview:	51253fe60063c31af0d295afb42228b0:v2:2:1:1590:2:8479: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

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	10
Entropy (8bit):	2.5219280948873624
Encrypted:	false
SSDEEP:	3:LNQS0:h6
MD5:	D76729CA6A39A60AED8CA0A8A0F80F52
SHA1:	1441A43C1E52AF25BF44112367CAE66E843AC1E8
SHA-256:	488B682927F88FE8FC0252A8F2A94A6D9B61B1EA947A22B61F6051AEE719067C
SHA-512:	93B1EF8E29FC8EE48E8B6F0CD86D575D62A7006D0B944B17550AF96B5930A39AAB228CAD6D22C1C9CBE34F902D970AC581BED7E5CE4FED1D6B7184719343724E
Malicious:	false
Reputation:	low
Preview:	1728585337

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite 3.x database, last written using SQLite version 3023002, writer version 2, read version 2, file counter 2, database pages 1, cookie 0, schema 0, largest root page 1, unknown 0 encoding, version-valid-for 2
Category:	dropped
Size (bytes):	4096
Entropy (8bit):	0.09216609452072291
Encrypted:	false
SSDEEP:	3:lSWFN3l/klslpF/4llfll:l9F8E0/
MD5:	F138A66469C10D5761C6CBB36F2163C3
SHA1:	EEA136206474280549586923B7A4A3C6D5DB1E25
SHA-256:	C712D6C7A60F170A0C6C5EC768D962C58B1F59A2D417E98C7C528A037C427AB6
SHA-512:	9D25F943B6137DD2981EE75D57BAF3A9E0EE27EEA2DF19591D580F02EC8520D837B8E419A8B1EB7197614A3C6D8793C56EBC848C38295ADA23C31273DAA302D9
Malicious:	false
Reputation:	high, very likely benign file
Preview:	SQLite format 3......@ .......................................................................... .....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-journal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	4616
Entropy (8bit):	0.13760166725504608
Encrypted:	false
SSDEEP:	3:7FEG2l+Nl/FllkpMRgSWbNFl/sl+ltlslVlllfllE:7+/lGg9bNFlEs1EP/0
MD5:	090FC400C59C0AB6DFD40AFE4CAB1288
SHA1:	CEF18D31A65831AEB7185F66A3F684D24CE08036
SHA-256:	0D761714CB37BFC3685199118D483082E8217B08927300278A317C4A1EBE2626
SHA-512:	07535BC68E0FC27FB501B6CAEF92943EAA1CE6ACD2992A67B2501E29B6122C487237ED67CA9AB35717B195651C5F27E034455AA098639B82836A1368FC5AE0D8
Malicious:	false
Preview:	.... .c........!....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................SQLite format 3......@ .......................................................................... .................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.04474441261042196
Encrypted:	false
SSDEEP:	6:G4l2aqHl4iCl2aqHl4tML9XXPH4l942U:l2a9im2a9a5A0
MD5:	39415BC106772BA96B5C26AB4EC56E58
SHA1:	7E0E21755D7C3D0751A0DF117C97FA6A6CC18140
SHA-256:	BF8749936E2AA645AC4B78EA0C0AEB2AB1DB37B316B291B391A03BDB75435F34
SHA-512:	C59C8EC97B9A07961231EC9CE3F7362D4196AFA6F25E442724540511D146624348061F48767D515ECB305CDC21B70C2D59A60F03251B4B4DBBBC9225B41DDFA5
Malicious:	false
Preview:	..-......................4.y&T..A]..n~...#.......-......................4.y&T..A]..n~...#.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	modified
Size (bytes):	45352
Entropy (8bit):	0.3931260733935072
Encrypted:	false
SSDEEP:	48:dfNLQ1s7nUll7DYMsurlzO8VFDYMsYQT:d1Mq7Ull4DurRjVGDYQT
MD5:	20FAD4494BD34185AC66C4E1A835BD9B
SHA1:	B96150A929CB57079B6D30DC9E0C0AAE2820F140
SHA-256:	DE6833491B6D2361C9B0F1E5390477707C100189893C607858A8613096E0D8FB
SHA-512:	338BB76FE3B312F57B0B37E35C8A4B73549F0D0F73E6849541100E9F67F274828BFEDCD02FC891EDA774E6C948C04EDF304642D1CFDD7F8B6946E2B2B3ECEA8C
Malicious:	false
Preview:	7....-..........A]..n~....`T.l.g........A]..n~.....R..}aSQLite format 3......@ .......................................................................... .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	2278
Entropy (8bit):	3.8529257289167367
Encrypted:	false
SSDEEP:	48:uiTrlKxsxxLN0xl9Il8uzLWOUU0K90xCN3r5ywy4ebhKWf2QmfPYd1rc:vaYJWOUU0W0kN3r/WOQU
MD5:	FF36510FB31BC5E156374F7044DDA7C1
SHA1:	062251F60084F92FE6434580CC0EB491695F4B1C
SHA-256:	FF55725727EE511495CCB27EEC724524CF2A373D45319FDBEA6B8BE2FD22DC4A
SHA-512:	2FB3FF8CFAC781D00B558E7E7A831956492F8B74D8F98038F4BAAF163C34AD4823A5E34DF5DEA5F62CA5872544DA2D208E5496C68E3B45736BA7D9F0295135E1
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".C.J.1.m.u.g.S.o.z.s.S.9.x.S.Z./.Q.v.O.c.+.E.J.4.u.2.c.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.E.f.7.k.k.s.b.2.w.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.f.u.h.v./.J.

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	2684
Entropy (8bit):	3.9064024391431755
Encrypted:	false
SSDEEP:	48:uiTrlKxJxVxl9Il8uzLmFb0Ctwlo7haPjScYItRaIu/und/vc:QYJmx0uP4OLGaz2S
MD5:	DCDFA24A7FA57F610380880A7CECF7D1
SHA1:	E19128B35133100A712D3B990C28C30BFB89795D
SHA-256:	4954A9F27BB6187BED17E3490E73C278B612BC1EAD14F5F79E02E2F3701D4C94
SHA-512:	C3320301BCF441F1D6B282F8C2E70283B2FBE66855A4F85C05086CAD26AB8F84C903CE409487DAF05AB3EFDC4231E355B4F4101AA5C0AD7BAA09AF8A157ECBF7
Malicious:	false
Preview:	{.".T.B.D.a.t.a.S.t.o.r.e.O.b.j.e.c.t.".:.{.".H.e.a.d.e.r.".:.{.".O.b.j.e.c.t.T.y.p.e.".:.".T.o.k.e.n.R.e.s.p.o.n.s.e.".,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.a.j.o.r.".:.2.,.".S.c.h.e.m.a.V.e.r.s.i.o.n.M.i.n.o.r.".:.1.}.,.".O.b.j.e.c.t.D.a.t.a.".:.{.".S.y.s.t.e.m.D.e.f.i.n.e.d.P.r.o.p.e.r.t.i.e.s.".:.{.".R.e.q.u.e.s.t.I.n.d.e.x.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".V.H.X.L.G.R.5.H.j.D.k.3.C.i.F.b.L.a.m.K.N.+.n.c.g.T.0.=.".}.,.".E.x.p.i.r.a.t.i.o.n.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".O.V.h.I.q.h.Q.6.3.A.E.=.".}.,.".S.t.a.t.u.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.f.a.l.s.e.,.".V.a.l.u.e.".:.".A.A.A.A.A.A.=.=.".}.,.".R.e.s.p.o.n.s.e.B.y.t.e.s.".:.{.".T.y.p.e.".:.".I.n.l.i.n.e.B.y.t.e.s.".,.".I.s.P.r.o.t.e.c.t.e.d.".:.t.r.u.e.,.".V.a.l.u.e.".:.".A.Q.A.A.A.N.C.M.n.d.8.B.F.d.E.R.j.H.o.A.w.E./.C.l.+.s.B.A.A.A.A.f.u.h.v./.J.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8573189E.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 140x140, components 3
Category:	dropped
Size (bytes):	6163
Entropy (8bit):	7.809858627688683
Encrypted:	false
SSDEEP:	96:/EGGalBPIaAoew5LUL4A3qlCxuaAssncQq3T7/UU8xypWWmhJvhkjGhg8:/AEorx3wUux3ncQq3fsD7hJpDW8
MD5:	B698B3B9DDB67F98F8A7C417E998DFA7
SHA1:	1AEFB7C8C75CEC32712757223310C54F7CF2734A
SHA-256:	E3E8322826180EA9C071794C7318F88EE16C56E8654DC088FAB5BE0645199C6B
SHA-512:	970C1984242ED36B825F1ED9B4C4DC70D364C2E2DAD08E8457AFF05CF6FDC9DFD753729CE8768FF3B4B65E0FAC7363FFC865D5D070D779949806BFC897CC1B89
Malicious:	false
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(....?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...+./.c.....v.n....D..0...$>...........v..j?k._.6......~..h..y.p..?.c....l~>...=.........aF....YsU..............^i....Q...L..4..*\.%RK.V.:Q.!'y.)..V..6......y...............j..k.....eh.......C...y.....f....<.7....?.eNY.`s.$q.m...gR.8..U..t.S.%zt..V..>....6e.b..p.U.J.<J..W....N...U.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{91DDFA33-440A-44BA-8DB5-0140BC4A5508}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	7116
Entropy (8bit):	3.759831379110584
Encrypted:	false
SSDEEP:	192:E3VxQoLMgxlWQmclap0Z6qkPsFl4hcrz:EBMgxlWQmcI61kPsFl4h
MD5:	BB951A8C5CA1F695C275110903542030
SHA1:	4343F9735C4431227466975CCBE359C0E0DB006C
SHA-256:	C34C879A508E7721E559363ECB4DFFDE053B475ECAEC1AA0F8A084E862940948
SHA-512:	4849F7632F5ED2FED942BB01328A57742D6A8DAED013EC264B613E6A2329E6D37F18883935AD1AA00C4BF518B7EBB94E4E81E9A503A393C0BCF80FA6E933C494
Malicious:	false
Preview:	....C.A.U.T.I.O.N.:. .......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................r...v.......t...................j...l...n...p...X...Z...\........................................................................................................................................................................................................................................$.a$.....$..$.If....:V.......t.....6......4........4........a.........dh...*...$..$.If........!v..h.#v....:V.......t.....6......5.......4........4........a.........d,............di.......

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728585333934607200_13D7860A-7640-4B78-A10B-3D2000F80CF5.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (859), with CRLF line terminators
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.00752975587258291
Encrypted:	false
SSDEEP:	192:8P3tTA2XKTCLAhLjBuksmCbNe0j4N70bFbVBlzR:8Pn6TCLILjBuk9CbNeoa70bzBlzR
MD5:	2AD635EA4577AD55482141162C923D62
SHA1:	7D4988575FC76BE34AB2BE536EBE20BA4EEFD409
SHA-256:	1F00FE66F610A67C7688F83433099C1174148D0B6A050A8B0E7B453137E0D265
SHA-512:	C722EE6A87CE107EC2283A6C23AF28EF5E24BD72CC2A30F6849520CEDD36E895F0831C04185C336235C15F27542A17A9E41EE99E5BD8FEDF6B9DDBAF22A8E5AE
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..10/10/2024 18:35:33.964.OUTLOOK (0x1B20).0x1B24.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.System.GracefulExit.GracefulAppExitDesktop","Flags":33777014402039809,"InternalSequenceNumber":21,"Time":"2024-10-10T18:35:33.964Z","Data.PreviousAppMajor":16,"Data.PreviousAppMinor":0,"Data.PreviousAppBuild":16827,"Data.PreviousAppRevision":20130,"Data.PreviousSessionId":"4DD397A3-B13F-459C-AE4A-4A714D0DABE2","Data.PreviousSessionInitTime":"2024-10-10T18:35:14.425Z","Data.PreviousSessionUninitTime":"2024-10-10T18:35:17.519Z","Data.SessionFlags":2147483652,"Data.InstallMethod":0,"Data.OfficeUILang":1033,"Data.PreviousBuild":"Unknown","Data.EcsETag":"\"\"","Data.ProcessorArchitecture":"x64"}...10/10/2024 18:35:34.027.OUTLOOK (0x1B20).0x1BA0.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Telemetry.LoadXmlRules","Flags":33777014401990913,"InternalSequenceNumber":28

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728585333935677900_13D7860A-7640-4B78-A10B-3D2000F80CF5.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	8F4E33F3DC3E414FF94E5FB6905CBA8C
SHA1:	9674344C90C2F0646F0B78026E127C9B86E3AD77
SHA-256:	CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC
SHA-512:	7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241010T1435330661-6944.etl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	4.739751691163462
Encrypted:	false
SSDEEP:	1536:j3HL9VS4XR94ABi1D7OmP8WhoFhb6/Xi7:m4XRmAkXi7
MD5:	C750D71C3ADDA8FFA66E6DE1DD151B2D
SHA1:	67E52B2B0EDC6E4BC743E6999B7D742A9090AC89
SHA-256:	1195D57723421BB7AC70A5E58ABA54408D22E4FD0B42CBB7853DCCEB150E7064
SHA-512:	F9274D011C233513418FC94FBCDB2E7DF46CCF6A86AC253E184D47B0D5929526F224F86EF54F48E4FE00CAEE5E534523F081B9B7206C16DB62A11965F7536E1B
Malicious:	false
Preview:	............................................................................d...$... ....?.1C...................eJ..............Zb..2...................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1.............................................................c..Y...........?.1C...........v.2._.O.U.T.L.O.O.K.:.1.b.2.0.:.c.f.2.3.b.7.b.5.f.e.b.c.4.8.e.8.b.d.5.7.2.8.5.9.0.4.7.d.a.b.1.a...C.:.\.U.s.e.r.s.\.t.o.r.r.e.s.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.O.u.t.l.o.o.k. .L.o.g.g.i.n.g.\.O.U.T.L.O.O.K._.1.6._.0._.1.6.8.2.7._.2.0.1.3.0.-.2.0.2.4.1.0.1.0.T.1.4.3.5.3.3.0.6.6.1.-.6.9.4.4...e.t.l...........P.P.$... ....?.1C...................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF33FEA0AC0848533B.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	163840
Entropy (8bit):	0.42405611301311114
Encrypted:	false
SSDEEP:	192:HFcYiffoP/C22SN7NJslSdAN4e0xa1ty/HNgiXHWQOoqAbAF/:Cff2FHzdW4e0xBWiXHOoqM
MD5:	AA4DE25D3A37031EC09D5355DBBE04CA
SHA1:	31895684936002E3DF65E2FAA7A4E6004DBC5364
SHA-256:	533461EE5362537AA229DBDC977C012979A270D4E7AAB0AD0513887F258EC40D
SHA-512:	527AA1DA21C6D432591142632C6F4054C7B4A5B119BB036B6F630DCC344B643FCE2007787E150B42E18D93F0252CAD27D174A2488602FEEB47057B89129F5DC1
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	1.2389205950315936
Encrypted:	false
SSDEEP:	3:fkullt:Mull
MD5:	0413F5DC3B641BA1416B9B8068FF9ECA
SHA1:	A0A99C2C726001BCEC067382184D214D089D7859
SHA-256:	3C6B1E08F2D760C4DA5B237C5AB0FCFB89C54ABA5C59245465FCABB0D490A79C
SHA-512:	4B05785567F53E3286092D3EAF44F6880790CAC38F55C3E84AA8585A4862670660125AC0716FE38CB09FE456FD88C87518979E55A79589C20ABD36C422BCA360
Malicious:	false
Preview:	....(.........................

C:\Users\user\AppData\Roaming\Microsoft\Outlook\NoEmail.srs

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	16384
Entropy (8bit):	0.6681233239371785
Encrypted:	false
SSDEEP:	12:rl3baF4kqLKeTy2MyheC8T23BMyhe+S7wzQP9zNMyhe+S7xMyheCmZ:rfmnq1Py961mZ
MD5:	8DE2202DDD26A481F4D114AAA5F72E4D
SHA1:	1EDEC6539740234812A0583C8A668D4F56E901CB
SHA-256:	AD3B0A9D3E525F576D0EF53E5F15F6A3106D882818D3D3BCAF90D1F120C09459
SHA-512:	478CEF5123104CBD210BD44E6DFEF163C93CFFC62B47A21B864FA63E8DA26C245557A1C6FCB07EAC6B1141779265F9C8534A609CA6D2D22E594641BCE7B1BD9A
Malicious:	true
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 17:35:43 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.99714346942485
Encrypted:	false
SSDEEP:	48:8cvdjT07JeHAidAKZdA1JehwiZUklqehBy+3:8c5wBuy
MD5:	2F3D929228C4280ECA1701183B5154B7
SHA1:	21CC4E25096F78A078E47CE24137BF879B6A8FCB
SHA-256:	499B35EE2CB1E2BA6B6872BA22BEE16E1E79CF3FD8A8FD5D675B97FC82B6AE2D
SHA-512:	D4A175F9EE5B097717AFBC5B6F28A5704645A1C4A9340C38ACC11C88477D1DE015CAEB3843DBD19197C879613DA5BDF783201E2ABFADA78B09850EDCE550939A
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......6C.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IJYh.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYu.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VJYu.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VJYu............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VJYv............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 17:35:43 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.010313406912135
Encrypted:	false
SSDEEP:	48:8mvdjT07JeHAidAKZdA10eh/iZUkAQkqehey+2:8m5wj9QHy
MD5:	999585F3A4E32F9042A7468ABB144612
SHA1:	DD81EB8E86AF34D0F65D3FAF349D74A5A4009646
SHA-256:	69302F3790F81CEC603FCAA5F687A74617EF21624178D13CFD6FAD4AD9605F2B
SHA-512:	6D03A45A5EDBD138097C306A7B6D0BF2F25C80A409B7D2DCBE4C5099D862CE30B1D5971B0081633B76B4B54CAAEDEDE1F3FE82FC8151BC313615A659711A6366
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......6C.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IJYh.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYu.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VJYu.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VJYu............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VJYv............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0195049618455645
Encrypted:	false
SSDEEP:	48:8evdjT07JjHAidAKZdA14tIeh7sFiZUkmgqeh7sEy+BX:8e5wMnCy
MD5:	7D5ED5DA224C263276BB176F49A87D09
SHA1:	7C3295C09EC7DF0B25E6970B513EE12FFE0ED1EA
SHA-256:	0AE6A4B9B3E58F45EFDCC2A8D6C7BF3429D2E3532EC2DD28CA5A40B59485EE2D
SHA-512:	27BF2A9DD7FC2B3B4AAA0EEFFF4E34C1C6E1546D769133759063A7E9DE335CFDD3BB38193FCA3007E6F97376AD6501E0F23A797772FB8112219470FE818275FA
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IJYh.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYu.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VJYu.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VJYu............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 17:35:43 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.010743941874039
Encrypted:	false
SSDEEP:	48:8XAvdjT07JeHAidAKZdA1behDiZUkwqeh6y+R:8Q5wwcy
MD5:	4A4F9C8DDC4A26F3C1A39CF6A07B503F
SHA1:	4A1BC4DD61D80234DF73633C9FE3AAAD86F51247
SHA-256:	F24C41CE8B5392A25C64F723C501CDAAF261EE669374C9996EE3721C1657604A
SHA-512:	853EBBA7712F4FFCFF7048272C83EF1A344A95D9F1132A7BFF8BD54F7219E321409A01AB61A874A33BEDF4F07A3C06637022E7B9C3B9E6007C243BCE376F8217
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......6C.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IJYh.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYu.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VJYu.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VJYu............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VJYv............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 17:35:43 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9978359774247747
Encrypted:	false
SSDEEP:	48:8KvdjT07JeHAidAKZdA1VehBiZUk1W1qehYy+C:8K5wQ94y
MD5:	520672B447A6255D3F484AFCCB45502A
SHA1:	9CDA66ED67ECE8758A753C969A1CDEAB686A7F72
SHA-256:	AB72003A2D10DDB4B2ABB34CF006C2DD9DA6ECD24BD1609E309008A7A89D558F
SHA-512:	DEA45DE6860674ABEC4F313ACDF87FA171CBD81C7504A5F9B1107B67A31A9C76CA5E346E9D8E799926BB883C47A4AB0315B36E82EBEA713A8C9D6D64C76EDC6C
Malicious:	false
Preview:	L..................F.@.. ...$+.,....@..6C.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IJYh.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYu.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VJYu.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VJYu............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VJYv............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 10 17:35:43 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.0099717173949285
Encrypted:	false
SSDEEP:	48:8XCvdjT07JeHAidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbCy+yT+:8y5waTTTbxWOvTbCy7T
MD5:	4861B6F0DA4C9D10605B0C8317EC5152
SHA1:	290FBC8FAF967D3327971EEDD969B2A6C2FCFBF8
SHA-256:	7A6D4023101E784AA71EEE6356F4401FB24A1AEC873E9FD89E339F65418706DF
SHA-512:	9AA7565B5F1D76C6153344EC800AE0E9835464ACE58D16682E77B1EEF0941D3541B38CF7F06193266DE6E115D553EA28DE6F79F398089E5C7F26F2E930CC59CA
Malicious:	false
Preview:	L..................F.@.. ...$+.,......6C.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IJYh.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VJYu.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VJYu.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VJYu............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VJYv............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............w.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Microsoft Outlook email folder (>=2003)
Category:	dropped
Size (bytes):	271360
Entropy (8bit):	1.428578108551656
Encrypted:	false
SSDEEP:	768:aQcwHnVdNNvqfvkPDlWuDzAUuKGz+k8BUTIZp:JV3NvqgDlTa+keNZp
MD5:	FE490268FDD871F33BA40D6D62B694DD
SHA1:	BD39826617E057321E51AFA04900074681CF3E01
SHA-256:	F48B0A1AF0C9902FFF01D9FFBC4E43E1EF049E1AC800B1793210341223A30374
SHA-512:	CEB6F14EC1CA7C70993C30229D0D20E78AC86582C30AD3FAEF600087682E38BB17A728B9915B31419B38F76AECC5EB9E20E2E1959EEE5BBA80956B65FA61908C
Malicious:	true
Preview:	!BDN".%.SM......\......................\................@...........@...@...................................@...........................................................................$.......D......@:..........................................................................................................................................................................................................................................................................................................................H...........l.`.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	1.7255481522692082
Encrypted:	false
SSDEEP:	384:aetK0wxxITpS4MRx1tU6T14xGNXMFRUpTjPpW3WSl7uZQ1R4IAE9G0yYjTIXJPDD:7eAQMGiEjHQv8BUTIZPutX1
MD5:	0368858F563A66C7EBB92D60DD78265C
SHA1:	B0149195F85CB6B1EFDE03C1A322AF1743F30A78
SHA-256:	CA6F578453CF74FC84EE83B2FB6B2814F6C86621CFC9FF28BE0E0E35C0141975
SHA-512:	C985E01F0AC30A03B0540CF3816504EC82107413ACD397E11491F6658C89B118775C7C3B88F8521A32F64C287A2DB98A60E61BDBEAAAF9A7F29F78A131706D4A
Malicious:	true
Preview:	..D.C...9....... ......0C.....................#.!BDN".%.SM......\......................\................@...........@...@...................................@...........................................................................$.......D......@:..........................................................................................................................................................................................................................................................................................................................H...........l.`....0C........B............#.........................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8987
Entropy (8bit):	4.286068870919611
Encrypted:	false
SSDEEP:	192:BQH+509z6apq2bybXslPcKUxOeeu9/Wex+Dz42Nsw:E+69z9q2e6exP/Wu+DBsw
MD5:	83F535CED5E77B848476B8A431577B15
SHA1:	50D3300313FBFA609A87B45440E3ADF6B5D11A59
SHA-256:	5AA075B01D61489421CC0EAB6CD69FE7A28B1CFB5937C898AA0CD5C93E79A19A
SHA-512:	C6981606590C2E754746F34B564B20254D45734B8D05330E816026E5FB14955BA93C2364BFFFA0A4B9A3D39B5A9950A8FB123EB0663BB7FC412B41A8F35076E3
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.3.2 (12043) - http://www.bohemiancoding.com/sketch -->. <title>badge-windows</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="app-badges" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g sketch:type="MSArtboardGroup" transform="translate(-80.000000, -240.000000)" id="badge-windows" fill="#FFFFFF">. <g sketch:type="MSLayerGroup" transform="translate(80.000000, 240.000000)">. <path d="M10,17.0344828 L10,22.8 L4,22 L4,11 L10,10 L10,10 L10,16 L4,16 L4,17.0344828 L10,17.0344828 Z M19,16 L19,8.5 L11,9.83333333 L11,16 L19,16 Z M19,17.0344828 L19,24 L11,22.9333333 L11,17.0344828 L19,17.0344828 Z" id="Rectangle-26"

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10215), with no line terminators
Category:	downloaded
Size (bytes):	10215
Entropy (8bit):	5.19635503737451
Encrypted:	false
SSDEEP:	192:KFSkRRORr6kI8b1c4QK8xtBpkFbNO5uBbnMamqi7M6/hD2DjklCtsboLlHn:KFSk/OROk5u4QK0kTOkcISh2Djkots8N
MD5:	D90DBB2A9F98C3C53CD0F1D480381E2E
SHA1:	8B084D3CE74782BB402A57E2FCEE067C848EEE7B
SHA-256:	D5E73AE42ED4F068014F2AC26F036966E4997AA1FD32C2182859E3163DD1F71A
SHA-512:	86A9689B564599B6A7E7403A1676315157A72A87844A69192AAC2524EDEB248517DFFF38BAB9B57B2D7C398017E8AA0849D721215216709CA25CD660908E9A32
Malicious:	false
URL:	https://static.zdassets.com/ekr/asset_composer.js
Preview:	(()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onreadystatechange=function(){"loaded"!==r.readyState&&"complete"!==r.readyState\|\|(r.onreadystatechange=null,t())}:r.onload=function(){t()},r.src=e,document.getElementsByTagName("head")[0].appendChild(r)}}}},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={id:e,loaded:!1,exports:{}};return r[e](o,o.exports,s),o.loaded=!0,o.exports}s.m=r,s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduc

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9379
Entropy (8bit):	4.326015932855572
Encrypted:	false
SSDEEP:	192:f5Q6ElaJEx6cMBF1jRSEyY/MbGC53ZY23XLI7T1:RrEx2FSEsbGC53J3XsZ
MD5:	65468EA6BF663935FF6B7E8588986DB4
SHA1:	0B032B0427697CEC536E7709DCC9710907F2C7D5
SHA-256:	0D14747BF285A0F9C3410BBF4771F6FA3FE9D6A49A210A4B7157B728A868AE3B
SHA-512:	1990AF68F03D46929631A81ACBDB4DC0A441D546CC095C50132EE972C1CDD973D381E7BD280ADEB67FFD53730E9F3D8FAE0CA5C43587D9D1F6751444E8C98E2B
Malicious:	false
URL:	https://login.huddle.com/user/css/assets/marketing-buttons/badge-android.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.3.2 (12043) - http://www.bohemiancoding.com/sketch -->. <title>badge-android</title>. <desc>Created with Sketch.</desc>. <defs>. <path d="M18.2271127,13.3740034 L15.6914722,11.9694437 C15.6914722,11.9694437 9.16952697,8.35598388 8.78648299,8.14368992 C8.47583406,7.97180538 8.16643854,8.02350733 8.0599092,8.28492264 L8.0599092,8.28492264 L15.8721964,15.5699984 L18.2271127,13.3740034 Z M19.1469787,13.883542 L19.2707983,13.952129 C19.2707983,13.952129 22.3950606,15.695107 22.7360398,15.8710623 C23.0763817,16.0476552 23.1152598,16.354302 22.7118207,16.5780713 C22.3077444,16.8012031 19.2707983,18.4842543 19.2707983,18.4842543 C19.2707983,18.4842543 19.2069624,18.5196033 19.0992328,18.5792585 L16.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65490)
Category:	downloaded
Size (bytes):	197240
Entropy (8bit):	5.298751675697194
Encrypted:	false
SSDEEP:	3072:OHUGE+3i5GNLc/GnXVkZQ47GKKOcLLuOYmjneT5KptRc:O7El5MxlOQ47GK5ehneTYc
MD5:	52642A88598326B19795FC34A4722823
SHA1:	06D2C08BAABCC2EB55C8EF9FE24DCDF5FAEF670D
SHA-256:	7C0E7571144283E1DA89211D72FB1E35360D163C865E415FA400DCEB9B6D385B
SHA-512:	DD2EE66F35DF4244181AEB76950C85A3EF6775540ACEA3116936FE5DA00BABF64631E5FF71C3C5D10CA9642DE358D7E111B515A479F1F844D0B9B1F710B81D17
Malicious:	false
URL:	https://login.huddle.com/user/js/vendor.min.52642a88.js
Preview:	/! Huddle-IdentityUI v0.0.0 2024-07-04 /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";function g(e){return null!=e&&e===e.window}var t=[],n=Object.getPrototypeOf,s=t.slice,m=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,r={},o=r.toString,v=r.hasOwnProperty,a=v.toString,c=a.call(Object),b={},y=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},E=C.document,l={type:!0,src:!0,nonce:!0,noModule:!0};function x(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in l)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function h(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?r[o

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25701), with no line terminators
Category:	dropped
Size (bytes):	25703
Entropy (8bit):	4.76132914733528
Encrypted:	false
SSDEEP:	384:rdq2te24z8VEB4yCSVYC+tQ52PX2NT91z:pe24z8V24R+3z52PXyz
MD5:	EF48436BF7997A9FED0856CD3DF28C0F
SHA1:	413D809A8680F59BC72EE16FB46DF88350055C67
SHA-256:	B87B92CD9B2943BCC97A64011EB833EF4205009327EAFFE17DB1CD001AE9ECC8
SHA-512:	2D6E1AB2EDCDE2B0CC74C0CB9FAE9D115E01561A4F7B17939E8B40C0260F6B00D8A14CBD90C38AC0ECD13A4E8BDBA63AB88ED42B0E1A61C9A8B215B57979A063
Malicious:	false
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9393],{46933:e=>{e.exports=JSON.parse('{"locale":{"locale":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_framework.answerBot.article.feedback.no.reason.title":"Please tell us why.","embeddable_framework.answerBot.article.feedback.no.reason.unrelated":"It\'s not related to my question","embeddable_framework.answerBot.article.feedback.title":"Does this article answer your question?","embeddable_framework.answerBot.article.feedback.yes":"Yes","embeddable_framework.answerBot.bot.name":"Answer Bot","embeddable_framework.answerBot.button.get_in_touch":"Get in touch","embeddable_framework.answerBot.contextualResults.intro.many_articles":"Here are some top suggestions f

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65492)
Category:	downloaded
Size (bytes):	113730
Entropy (8bit):	5.37332856661958
Encrypted:	false
SSDEEP:	1536:qta68NCfoSme5zVNZwNJn1LWLadQOYOcBZjA5c+eJAEQnUikgAwIfnC/ZxT:wacieaCXjAeSZU2hIfIT
MD5:	21B93573F700188F41D60231812C65D7
SHA1:	D361F359D49F2B8A81C424C771645D282AB3F265
SHA-256:	9F6823EFB5B77FCA389976A167BB5977E9EE7BA81D0C2C144E198BC6CF17DADB
SHA-512:	3AD1F6A01BA0A2A8CDF9240845EDC15D6F522D59CAA92DC2CF511BBB44ED49319F231F90ACC0D4C50A6677C481FD9C8FF6FDBA26C71817ABF74F467170D3CC12
Malicious:	false
URL:	https://login.huddle.com/user/js/app.min.1452.js
Preview:	/! Huddle-IdentityUI v0.0.0 2024-07-04 /..$sessionTimeout=function(t,r,n){var o={};n(function(){!function(){try{return t.top.document!==t.document}catch(t){return!1}}()&&(o=function(t){var e;t=t\|\|r.search.substring(1);function n(t){return decodeURIComponent(t.replace(/\+/g," "))}var o={},i=/([^&=]+)=?([^&])/g;for(;e=i.exec(t);)o[n(e[1])]=n(e[2]);return o}(),n(t).on("focus",function(t){var e;n.cookie("auth_token")&&"true"===o.expired&&(e=o.ReturnUrl)&&r.assign(e)}))})}(window,window.location,jQuery),function(){var p,e,t,m,r,a,h,f,v,g,b,w,n;function s(t,e){var n,o,i,r,a,s,c,u,d,l,p=e&&e.split("/"),m=b.map,h=m&&m[""]\|\|{};if(t&&"."===t.charAt(0)&&e){for(t=(p=p.slice(0,p.length-1)).concat(t.split("/")),u=0;u<t.length;u+=1)if("."===(l=t[u]))t.splice(u,1),--u;else if(".."===l){if(1===u&&(".."===t[2]\|\|".."===t[0]))break;0<u&&(t.splice(u-1,2),u-=2)}t=t.join("/")}if((p\|\|h)&&m){for(u=(n=t.split("/")).length;0<u;--u){if(o=n.slice(0,u).join("/"),p)for(d=p.length;0<d;--d)if(i=m[p.slice(0,d).join

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	dropped
Size (bytes):	849271
Entropy (8bit):	5.526955722582094
Encrypted:	false
SSDEEP:	6144:YnxqmeEabsadVtJ01DDjR0QlBnU8VqybpX+xFlRoz9tIEiXbdFcyOYXqQ0bGBH4G:5ZDQvn5OxAirdmJkjm+GV2XhssAQ44/
MD5:	07AEC65EB3477704556F6CF3F106F8FB
SHA1:	A8FD30E66ACF8BB2299DC01223AAD67149EEB751
SHA-256:	0A4ADE685B6856DE52182B225D4C621764825A5EDAFEBEC1BD7DFD0BB9D966F1
SHA-512:	46518E65D074FF302F30BCED3E4D1AC7787E7F33E8908AAF130CCA37FD6E87E0EF7507B51D4DDD790905D1AB4E027552CFFF189E91348714C40BCA4286BD5D38
Malicious:	false
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(()=>{var e,t,n,r,o={6470:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)({}).hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(null,arguments)}const i=({title:e,titleId:t,...n})=>o.createElement("svg",a({xmlns:"http://www.w3.org/2000/svg",width:12,height:12,focusable:"false",viewBox:"0 0 12 12","aria-labelledby":t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:1.25,d:"M3 6l2 2 4-4"})))},96689:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){retu

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65307)
Category:	downloaded
Size (bytes):	849271
Entropy (8bit):	5.526955722582094
Encrypted:	false
SSDEEP:	6144:YnxqmeEabsadVtJ01DDjR0QlBnU8VqybpX+xFlRoz9tIEiXbdFcyOYXqQ0bGBH4G:5ZDQvn5OxAirdmJkjm+GV2XhssAQ44/
MD5:	07AEC65EB3477704556F6CF3F106F8FB
SHA1:	A8FD30E66ACF8BB2299DC01223AAD67149EEB751
SHA-256:	0A4ADE685B6856DE52182B225D4C621764825A5EDAFEBEC1BD7DFD0BB9D966F1
SHA-512:	46518E65D074FF302F30BCED3E4D1AC7787E7F33E8908AAF130CCA37FD6E87E0EF7507B51D4DDD790905D1AB4E027552CFFF189E91348714C40BCA4286BD5D38
Malicious:	false
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-main-cbf609b.js
Preview:	/! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /.(()=>{var e,t,n,r,o={6470:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)({}).hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(null,arguments)}const i=({title:e,titleId:t,...n})=>o.createElement("svg",a({xmlns:"http://www.w3.org/2000/svg",width:12,height:12,focusable:"false",viewBox:"0 0 12 12","aria-labelledby":t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:1.25,d:"M3 6l2 2 4-4"})))},96689:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){retu

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 500x90, components 3
Category:	downloaded
Size (bytes):	45764
Entropy (8bit):	7.819129250525655
Encrypted:	false
SSDEEP:	768:WIcSf/HGVeifFpNUw16CUR4cqEmWnqeYtH1WNJTV1NBIdOP4ROg91gAZ:WIdf/HXwfNU66CUbqE5q/wBGOwIgbX
MD5:	8D62845537A98EAB5527F5667C31711A
SHA1:	AFCA1F08A2652CB3293BD7BB324C82FCEA9F8ED5
SHA-256:	EB833FDDD2179CCAD9FC998CD33C854730FFF2E4DA7A5FEC5AC46E027E993A12
SHA-512:	5A942DC8D8FA4ED3CB0733D6526276074839854D3325B3DEEDC625C12F9EBFA32B3FEDCE4FC92C01A93CDF4122343255DCA68042C20E6A8D69A29EB2973AEDF7
Malicious:	false
URL:	https://avp100.huddle.com/res/9824fab9-3605-43b9-a635-c6fc23fbfb45.ashx?login-logo.jpg
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................Z...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..........=.....x.a...;.1..~..=.O#'......_.~?.....W/.....~..Ci?.~)i.k+.{._.>..!>M..M..6....i....M...6>+.7..v..s....a.'.YQ..Wvn.:Q.I.m....C..).\|i.a....1..o.......%Z.K..)?..M.y5...i?.UC;.UQ.X......k.\|W.T~....:w..?\|......c.L.#xR..+...OduO.@@.\....NH.+.....n/._..$....h.-.......ao......^5:e...o..>.k..`]*..B..X..u.++.[+.m......:-..B..~#._...uO..[.4M;T..........

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (370), with CRLF line terminators
Category:	dropped
Size (bytes):	10689
Entropy (8bit):	4.822116578090367
Encrypted:	false
SSDEEP:	192:Aw6+Qa2XbXxmmYVkX/CisWIdlHB8X0Y1bcw/hFeUT8alCadGGvA5WYpIQ1bBl:Af+72XTxmX8IdlHgp1Iw/hcUIalCadGD
MD5:	67B4AA163D9B70EA3FDB0F03E1907B2A
SHA1:	140E2BBCDAD162F13C330A8F6B8F7131CB36358F
SHA-256:	009CE457784C3DEE45BACB3C4C746AEFEEA70607C6B4991D8A18DA4C9587DC30
SHA-512:	AFC4935538A122E0E337539BE6A33CA5C4525ED88914EF2CA2F265FAFE96AF646DCC78E88C9288CCFD94BB5C6085E1ED971D55D862418128B7922B5CEDC5C097
Malicious:	false
Preview:	_jqjsp({.. "category": "identityui",.. "resources": {.. "fieldLabel_email": "Email or username",.. "fieldLabel_email2": "Email",.. "fieldLabel_password": "Password",.. "fieldLabel_twoFactor": "Two Factor Authentication Code",.. "fieldLabel_rememberMe": "Remember my username",.. "btnLabel_continue": "Continue",.. "btnLabel_signIn": "Sign in",.. "forgottenPassword": "Forgotten your password?",.. "userNotFound": "User not found",.. "apiGenericError": "An error occurred, please try again later",.. "footerLink_about": "About Huddle",.. "footerLink_terms": "Terms of use",.. "footerLink_privacy": "Privacy Policy",.. "footerLink_feedback": "Feedback",.. "footerLink_help": "Help",.. "footerLink_blog": "Blog",.. "entrybannerAccept": "Accept",.. "entrybannerDecline": "Decline",.. "authDecline": "Cancel",.. "authAllow": "Allow access",.. "MarketingButtons_Heading": "Get the Huddle apps for mobile and desktop",.. "instruction_enter

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22469), with no line terminators
Category:	dropped
Size (bytes):	22469
Entropy (8bit):	5.31444133579441
Encrypted:	false
SSDEEP:	384:eiVww0ZtwSZZPYQoy1wtrb8UGhu4mlB6fhFbcIdRzJFnof+VLzIXqEnbzeAPJ3fA:eidaKSLPYQoyfhWBe7JUYUuz
MD5:	F9CDCB1E4B2BE3825B6DFCBD33DEFF25
SHA1:	2CBBC0BE7B002F270A17D2E4B1A17A52FB456D9A
SHA-256:	C28F3FCFA4E839D67ED83A489CA461CF6C3182C47D1A35E7EB719DEBA23F9106
SHA-512:	D57195F5905E7FA893B9DCBE7EAEB316FD498525486AFE5C3592E6F76036CC8F9E249B1D922BD8D1C1AF9D862DBC08F2E58751EAA3C8AEF2FBE1940590EBF3B5
Malicious:	false
Preview:	!function(e,n,t){function r(t,i){if(!n[t]){if(!e[t]){var a="function"==typeof __nr_require&&__nr_require;if(!i&&a)return a(t,!0);if(o)return o(t,!0);throw new Error("Cannot find module '"+t+"'")}var u=n[t]={exports:{}};e[t][0].call(u.exports,function(n){var o=e[t][1][n];return r(o?o:n)},u,u.exports)}return n[t].exports}for(var o="function"==typeof __nr_require&&__nr_require,i=0;i<t.length;i++)r(t[i]);return r}({1:[function(e,n){n.exports=function(e,n){return"addEventListener"in window?addEventListener(e,n,!1):"attachEvent"in window?attachEvent("on"+e,n):void 0}},{}],2:[function(e,n){function t(e,n,t,o){d("bstAgg",[e,n,t,o]),m[e]\|\|(m[e]={});var i=m[e][n];return i\|\|(m[e][n]=i={params:t\|\|{}}),i.metrics=r(o,i.metrics),i}function r(e,n){return n\|\|(n={count:0}),n.count+=1,c(e,function(e,t){n[e]=o(t,n[e])}),n}function o(e,n){return n?(n&&!n.c&&(n={t:n.t,min:n.t,max:n.t,sos:n.tn.t,c:1}),n.c+=1,n.t+=e,n.sos+=ee,e>n.max&&(n.max=e),e<n.min&&(n.min=e),n):{t:e}}function i(e,n){return n?m[e]&&m[e]

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	3.9917292966721747
Encrypted:	false
SSDEEP:	3:3/uTG2C2Y:PuTpO
MD5:	21A867825AE7B03B0F982AF87EECF37A
SHA1:	57B48DAB9D451AB812F4F0F0C749311397D1F50C
SHA-256:	842F52A26DD358B654C23B0CD7D7A9E0BE4C3CA93340AD37FA289FEBE36D6016
SHA-512:	EC08C125CAF0E57B97FA93D30228B794F335E8D69342EECFCD80C0CE0122D6C34A2433314DC652E230E95E3B370990380F95394F82EC34F4403E4A965BC0A111
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAl72ipbah-0TxIFDYLNdpo=?alt=proto
Preview:	ChQKEg2CzXaaGgQICRgBGgUImgEYAg==

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, baseline, precision 8, 500x90, components 3
Category:	dropped
Size (bytes):	45764
Entropy (8bit):	7.819129250525655
Encrypted:	false
SSDEEP:	768:WIcSf/HGVeifFpNUw16CUR4cqEmWnqeYtH1WNJTV1NBIdOP4ROg91gAZ:WIdf/HXwfNU66CUbqE5q/wBGOwIgbX
MD5:	8D62845537A98EAB5527F5667C31711A
SHA1:	AFCA1F08A2652CB3293BD7BB324C82FCEA9F8ED5
SHA-256:	EB833FDDD2179CCAD9FC998CD33C854730FFF2E4DA7A5FEC5AC46E027E993A12
SHA-512:	5A942DC8D8FA4ED3CB0733D6526276074839854D3325B3DEEDC625C12F9EBFA32B3FEDCE4FC92C01A93CDF4122343255DCA68042C20E6A8D69A29EB2973AEDF7
Malicious:	false
Preview:	......JFIF.....x.x.....C....................................................................C.......................................................................Z...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..........=.....x.a...;.1..~..=.O#'......_.~?.....W/.....~..Ci?.~)i.k+.{._.>..!>M..M..6....i....M...6>+.7..v..s....a.'.YQ..Wvn.:Q.I.m....C..).\|i.a....1..o.......%Z.K..)?..M.y5...i?.UC;.UQ.X......k.\|W.T~....:w..?\|......c.L.#xR..+...OduO.@@.\....NH.+.....n/._..$....h.-.......ao......^5:e...o..>.k..`]*..B..X..u.++.[+.m......:-..B..~#._...uO..[.4M;T..........

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6151
Entropy (8bit):	4.429773688371838
Encrypted:	false
SSDEEP:	96:5rXbW68yHXUvZ+4lXBkrsbDfIzf9Zi+hvtugRJl57O1UXecrrQkyZNKBT0FpQ:NOyHuZ+4lXBkrsbbIzDi+/JL0+/QbE02
MD5:	D363DCF04761E8DFDE2A143F0207CFE9
SHA1:	87C72CA3B6AB4662AE8AE6DE73FDF4A28E776664
SHA-256:	25B5CAB5277CDEE51DDC4E02DDECF381F9751BB4E9667A52793B52E26E788141
SHA-512:	CCD35A2EC7865CFEBC24ABE8DA87E3EEA87D678812C3E619CB8469A48E1FDBE6BA90BDEDC91A9943BADDE63E6DCC5F87F168D156BBD433AA017B0FAF14A47D57
Malicious:	false
URL:	https://login.huddle.com/user/css/assets/marketing-buttons/badge-ios.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.3.2 (12043) - http://www.bohemiancoding.com/sketch -->. <title>badge-ios</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="app-badges" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g sketch:type="MSArtboardGroup" transform="translate(-80.000000, -80.000000)" id="badge-ios" fill="#FFFFFF">. <g sketch:type="MSLayerGroup" transform="translate(80.000000, 80.000000)">. <path d="M21,6.991155 C21,5.89147046 21.9019504,5 23.0085302,5 L30.9914698,5 C32.1007504,5 33,5.88967395 33,6.991155 L33,25.008845 C33,26.1085295 32.0980496,27 30.9914698,27 L23.0085302,27 C21.8992496,27 21,26.1103261 21,25.008845 L21,6.991155 Z M

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43572, version 1.0
Category:	downloaded
Size (bytes):	43572
Entropy (8bit):	7.991846190596049
Encrypted:	true
SSDEEP:	768:9aVzVymSbSDcPi1iyD9m9ySj+H2fmwsTtxNXfmQZKQ6srdeujlLANRWOvClvztaO:KVyW6i1iyD9Epj+umwsxmir6soCKvXvY
MD5:	B683029BAFE0305AC2234038A03E1541
SHA1:	12F8C193902E99348493ACE32E498031BF79B654
SHA-256:	18E6B5FF511B90EDF098E62AC45ED9D6673A3EEE10165D0DE4164D4D02A3A77F
SHA-512:	44823904027DD2E901429BFF1672132600AE6895486EBCFD3B97A5315635104BB1D555F614DC5FDCA9645B01C65056D2D55842351B1324290C163A2451307E46
Malicious:	false
URL:	https://login.huddle.com/user/css/assets/fonts/fontawesome-webfont-v3.2.1.woff
Preview:	wOFF.......4......4.........................FFTM...D........epa.GDEF...`....... ....OS/2.......>...`..z.cmap....... ...j.5..gasp................glyf............2..head.......1...6.\."hhea...........$....hmtx................loca............q...maxp........... ....name.......f....<.e.post...0........2...webf...,.........RQ..........=.......T.0......<.x.c`d``..b...`b`d`dl..,`........x.c`f}.8............B3.3D..8AAeQ1....W.6..@>...2.bDR......R....x...J.Q...n~. {...(.f.@}....ZR.X..H...!.e..$.6AD.tV...$Y.,.L...n\..l...s.....!...FrR.(...T....D)..6.P.......~.../..6.....h......}.c,.8..E."5iHkH.D.....G_x.F.%....&...).q.....W6.$e.........3.f.l.....?.z]7....gy..x..x..9..+&m.X.....G.I?.....)..O..".......M........H.....2tn........x...\|T..0~.s..;..Y..d2.d.$d..Y............ ..(.....j...]..j..jW}mkW...m..^...?[!s.....$$.}....{.}=..s.s......x...N.l....!.....v2.]....q.8.....3................H(.Oe.!....H.:. =.R..r.x.7..O..on.6z..1*..`t......s....`.cub.......J.$.C..^.8..

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62479)
Category:	downloaded
Size (bytes):	241528
Entropy (8bit):	5.139373634419868
Encrypted:	false
SSDEEP:	1536:EaMJ2azm6O/AyATCdZHSz5SDHR5YuPrjm0w6+8mWfBypAFhw7kIWOvpuQiFgGrDi:WJoO5vwm
MD5:	20A11AD279BD2CE61C1C1ACD00677929
SHA1:	A99DE2CC29098D8CDBAE8B8B06AE045A7BBED24A
SHA-256:	6F13E95D06A700131141F9B4015379D7F11BE7C11CC670A586A5874A1C3D884E
SHA-512:	B5D2DC3316AD11906C7ABF2FF884D8F33B6E5CC4995851EAF90B7218E64E6955E63CA58A73055F5297ABF206AC83B8AC8253D7F826E5406A7204C5BFF0FDE945
Malicious:	false
URL:	https://login.huddle.com/user/css/styles.min.1452.css
Preview:	@charset "UTF-8";.clearfix:after,.clearfix:before{display:table;content:""}.clearfix:after{clear:both}.hide-text{font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0}.input-block-level{display:block;width:100%;min-height:28px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;-ms-box-sizing:border-box;box-sizing:border-box}.b_s .dialog-box{background-color:#fff;border-radius:4px;padding-bottom:1px;margin-bottom:-1px;border:1px solid #e6eef6;-webkit-box-shadow:inset 0 0 2px #516d7c;box-shadow:inset 0 0 2px #516d7c;filter:none}@media screen and (max-width:480px){.b_s .dialog-box{border-radius:0;-webkit-box-shadow:0 2px 2px #aabac5;box-shadow:0 2px 2px #aabac5}}.b_s .dialog-box__body,.b_s .dialog-box__footer{margin:32px 32px 32px;background-color:#fff}.b_s .center-content.dialog-box__body,.b_s .center-content.dialog-box__footer{text-align:center}@media screen and (max-width:800px){.b_s .dialog-box__body,.b_s .dialog-box__footer{margin:16px 16px 16px}}.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6817
Entropy (8bit):	4.397783313007039
Encrypted:	false
SSDEEP:	96:5r5BnQi9Lb6yS34fNG8g7e47NalMCwUIjpDpqHWHas1SMnBBVHA6rnC:TFQdx3yRgcyjzrHj1SMr9FrC
MD5:	DD7FAA4B94A273A74ECBB723BC13CD1D
SHA1:	50327970F9B0626895637A09F1695FD9945F2B1B
SHA-256:	FC1DF37ECAFEF40A0B57C39984BC8B1631A1A00C30E2EF6ED7A5539DD51BA488
SHA-512:	5A34DBA3C42D882FA7555BA7950CF57B2B4DD18074529EE31E3A04046E1B984157D7C460E014021DA41F8940321E06301573BC6893ED2058C37F93BFFAC78C1B
Malicious:	false
URL:	https://login.huddle.com/user/css/assets/marketing-buttons/badge-mac.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.3.2 (12043) - http://www.bohemiancoding.com/sketch -->. <title>badge-mac</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="app-badges" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g sketch:type="MSArtboardGroup" transform="translate(-80.000000, -316.000000)" id="badge-mac" fill="#FFFFFF">. <g sketch:type="MSLayerGroup" transform="translate(80.000000, 316.000000)">. <g id="icon" transform="translate(17.000000, 6.000000)" sketch:type="MSShapeGroup">. <path d="M12.373809,9.63547071 C12.3532132,7.34648691 14.2480344,6.23288884 14.3346791,6.18104403 C13.2615626,4.61646714 11.5982675,4.4026960

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10215), with no line terminators
Category:	dropped
Size (bytes):	10215
Entropy (8bit):	5.19635503737451
Encrypted:	false
SSDEEP:	192:KFSkRRORr6kI8b1c4QK8xtBpkFbNO5uBbnMamqi7M6/hD2DjklCtsboLlHn:KFSk/OROk5u4QK0kTOkcISh2Djkots8N
MD5:	D90DBB2A9F98C3C53CD0F1D480381E2E
SHA1:	8B084D3CE74782BB402A57E2FCEE067C848EEE7B
SHA-256:	D5E73AE42ED4F068014F2AC26F036966E4997AA1FD32C2182859E3163DD1F71A
SHA-512:	86A9689B564599B6A7E7403A1676315157A72A87844A69192AAC2524EDEB248517DFFF38BAB9B57B2D7C398017E8AA0849D721215216709CA25CD660908E9A32
Malicious:	false
Preview:	(()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.readyState?r.onreadystatechange=function(){"loaded"!==r.readyState&&"complete"!==r.readyState\|\|(r.onreadystatechange=null,t())}:r.onload=function(){t()},r.src=e,document.getElementsByTagName("head")[0].appendChild(r)}}}},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={id:e,loaded:!1,exports:{}};return r[e](o,o.exports,s),o.loaded=!0,o.exports}s.m=r,s.d=(e,t)=>{for(var r in t)s.o(t,r)&&!s.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},s.f={},s.e=e=>Promise.all(Object.keys(s.f).reduc

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	320
Entropy (8bit):	4.605469694192492
Encrypted:	false
SSDEEP:	6:YeIQ3kF3/X53HJxAZjg6VCs/U4HdZHJn9uVHH011XZXete/4HdZHShNb:Yyk3x3oZk6VCs8Kd5J9uyvKd5wb
MD5:	36E7226DE03883057AF84C931DEE6829
SHA1:	ABA631AD5D3DDD543D5B195815371830075BF0FE
SHA-256:	329B4FFD5CDF528698B44FF1C66D5D6434C169C4F9220FA3FE60B03B6BE31658
SHA-512:	ED81575754C53D12E58C262981CD53AD5FB5DC43CB72024976F73AC31C3D5954D7F2CBDAB9FDADE0BEAC4DF16FA4A91E6F532190A563714EF07914F7A338A31B
Malicious:	false
Preview:	{"hideZendeskLogo":true,"brand":"Huddle","brandCount":2,"color":"#056d78","textColor":"#ffffff","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#056d78","buttonLabelKey":"contact","contextualHelpEnabled":true}},"launcher":{"embed":"launcher","props":{"color":"#056d78"}}},"features":{"fastLoad":true}}

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	734
Entropy (8bit):	5.05607948524628
Encrypted:	false
SSDEEP:	12:YoG2kbjEFcQJUy/q/k6VCs8Kd5KuvvKd5DXfUzhqszHrFZg9jZ+tHNwUUDEAVT:Y+9FfJS/k6VoKrKuvvKrDXcUszHrFu9/
MD5:	72A70943AFA489A963A2093EC66312D1
SHA1:	5F3F462A27674DE1045FE6DA94B123F54D68651C
SHA-256:	76B8B6F046E8BA2E8094DA7CBA39D6893511A0A5C6FD7467E0AF747B4535251B
SHA-512:	EE38CF2DF7A16E6352C892A70C6939BDE975D41F4346E2CC8080A723E42952B6B92C6A98080F21585F0D69C3B05BCE76DA31B3F8103C74428CDC35896DA526FC
Malicious:	false
Preview:	{"products":[{"name":"web_widget","id":"huddle.zendesk.com","bootstrap":{"config":{"features":{"fastLoad":true},"color":"#056d78","brandCount":2.0,"hideZendeskLogo":true,"brand":"Huddle","textColor":"#ffffff","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#056d78","contextualHelpEnabled":true,"buttonLabelKey":"contact"}},"launcher":{"embed":"launcher","props":{"color":"#056d78"}}}}},"features":["help_center","ticket_submission"],"url":"https://ekr.zendesk.com/compose_product/web_widget/cbf609b2dfb3cf337c37e8e93f118288d11f355b?features%5B%5D=help_center\u0026features%5B%5D=ticket_submission","assets":{"scripts":[{"src":"https://static.zdassets.com/web_widget/classic/latest/web-widget-main-cbf609b.js"}]}}]}

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65492)
Category:	dropped
Size (bytes):	113730
Entropy (8bit):	5.37332856661958
Encrypted:	false
SSDEEP:	1536:qta68NCfoSme5zVNZwNJn1LWLadQOYOcBZjA5c+eJAEQnUikgAwIfnC/ZxT:wacieaCXjAeSZU2hIfIT
MD5:	21B93573F700188F41D60231812C65D7
SHA1:	D361F359D49F2B8A81C424C771645D282AB3F265
SHA-256:	9F6823EFB5B77FCA389976A167BB5977E9EE7BA81D0C2C144E198BC6CF17DADB
SHA-512:	3AD1F6A01BA0A2A8CDF9240845EDC15D6F522D59CAA92DC2CF511BBB44ED49319F231F90ACC0D4C50A6677C481FD9C8FF6FDBA26C71817ABF74F467170D3CC12
Malicious:	false
Preview:	/! Huddle-IdentityUI v0.0.0 2024-07-04 /..$sessionTimeout=function(t,r,n){var o={};n(function(){!function(){try{return t.top.document!==t.document}catch(t){return!1}}()&&(o=function(t){var e;t=t\|\|r.search.substring(1);function n(t){return decodeURIComponent(t.replace(/\+/g," "))}var o={},i=/([^&=]+)=?([^&])/g;for(;e=i.exec(t);)o[n(e[1])]=n(e[2]);return o}(),n(t).on("focus",function(t){var e;n.cookie("auth_token")&&"true"===o.expired&&(e=o.ReturnUrl)&&r.assign(e)}))})}(window,window.location,jQuery),function(){var p,e,t,m,r,a,h,f,v,g,b,w,n;function s(t,e){var n,o,i,r,a,s,c,u,d,l,p=e&&e.split("/"),m=b.map,h=m&&m[""]\|\|{};if(t&&"."===t.charAt(0)&&e){for(t=(p=p.slice(0,p.length-1)).concat(t.split("/")),u=0;u<t.length;u+=1)if("."===(l=t[u]))t.splice(u,1),--u;else if(".."===l){if(1===u&&(".."===t[2]\|\|".."===t[0]))break;0<u&&(t.splice(u-1,2),u-=2)}t=t.join("/")}if((p\|\|h)&&m){for(u=(n=t.split("/")).length;0<u;--u){if(o=n.slice(0,u).join("/"),p)for(d=p.length;0<d;--d)if(i=m[p.slice(0,d).join

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9379
Entropy (8bit):	4.326015932855572
Encrypted:	false
SSDEEP:	192:f5Q6ElaJEx6cMBF1jRSEyY/MbGC53ZY23XLI7T1:RrEx2FSEsbGC53J3XsZ
MD5:	65468EA6BF663935FF6B7E8588986DB4
SHA1:	0B032B0427697CEC536E7709DCC9710907F2C7D5
SHA-256:	0D14747BF285A0F9C3410BBF4771F6FA3FE9D6A49A210A4B7157B728A868AE3B
SHA-512:	1990AF68F03D46929631A81ACBDB4DC0A441D546CC095C50132EE972C1CDD973D381E7BD280ADEB67FFD53730E9F3D8FAE0CA5C43587D9D1F6751444E8C98E2B
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.3.2 (12043) - http://www.bohemiancoding.com/sketch -->. <title>badge-android</title>. <desc>Created with Sketch.</desc>. <defs>. <path d="M18.2271127,13.3740034 L15.6914722,11.9694437 C15.6914722,11.9694437 9.16952697,8.35598388 8.78648299,8.14368992 C8.47583406,7.97180538 8.16643854,8.02350733 8.0599092,8.28492264 L8.0599092,8.28492264 L15.8721964,15.5699984 L18.2271127,13.3740034 Z M19.1469787,13.883542 L19.2707983,13.952129 C19.2707983,13.952129 22.3950606,15.695107 22.7360398,15.8710623 C23.0763817,16.0476552 23.1152598,16.354302 22.7118207,16.5780713 C22.3077444,16.8012031 19.2707983,18.4842543 19.2707983,18.4842543 C19.2707983,18.4842543 19.2069624,18.5196033 19.0992328,18.5792585 L16.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (25701), with no line terminators
Category:	downloaded
Size (bytes):	25703
Entropy (8bit):	4.76132914733528
Encrypted:	false
SSDEEP:	384:rdq2te24z8VEB4yCSVYC+tQ52PX2NT91z:pe24z8V24R+3z52PXyz
MD5:	EF48436BF7997A9FED0856CD3DF28C0F
SHA1:	413D809A8680F59BC72EE16FB46DF88350055C67
SHA-256:	B87B92CD9B2943BCC97A64011EB833EF4205009327EAFFE17DB1CD001AE9ECC8
SHA-512:	2D6E1AB2EDCDE2B0CC74C0CB9FAE9D115E01561A4F7B17939E8B40C0260F6B00D8A14CBD90C38AC0ECD13A4E8BDBA63AB88ED42B0E1A61C9A8B215B57979A063
Malicious:	false
URL:	https://static.zdassets.com/web_widget/classic/latest/web-widget-locales/classic/en-us-json-cbf609b.js
Preview:	"use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9393],{46933:e=>{e.exports=JSON.parse('{"locale":{"locale":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_framework.answerBot.article.feedback.no.reason.title":"Please tell us why.","embeddable_framework.answerBot.article.feedback.no.reason.unrelated":"It\'s not related to my question","embeddable_framework.answerBot.article.feedback.title":"Does this article answer your question?","embeddable_framework.answerBot.article.feedback.yes":"Yes","embeddable_framework.answerBot.bot.name":"Answer Bot","embeddable_framework.answerBot.button.get_in_touch":"Get in touch","embeddable_framework.answerBot.contextualResults.intro.many_articles":"Here are some top suggestions f

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6817
Entropy (8bit):	4.397783313007039
Encrypted:	false
SSDEEP:	96:5r5BnQi9Lb6yS34fNG8g7e47NalMCwUIjpDpqHWHas1SMnBBVHA6rnC:TFQdx3yRgcyjzrHj1SMr9FrC
MD5:	DD7FAA4B94A273A74ECBB723BC13CD1D
SHA1:	50327970F9B0626895637A09F1695FD9945F2B1B
SHA-256:	FC1DF37ECAFEF40A0B57C39984BC8B1631A1A00C30E2EF6ED7A5539DD51BA488
SHA-512:	5A34DBA3C42D882FA7555BA7950CF57B2B4DD18074529EE31E3A04046E1B984157D7C460E014021DA41F8940321E06301573BC6893ED2058C37F93BFFAC78C1B
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.3.2 (12043) - http://www.bohemiancoding.com/sketch -->. <title>badge-mac</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="app-badges" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g sketch:type="MSArtboardGroup" transform="translate(-80.000000, -316.000000)" id="badge-mac" fill="#FFFFFF">. <g sketch:type="MSLayerGroup" transform="translate(80.000000, 316.000000)">. <g id="icon" transform="translate(17.000000, 6.000000)" sketch:type="MSShapeGroup">. <path d="M12.373809,9.63547071 C12.3532132,7.34648691 14.2480344,6.23288884 14.3346791,6.18104403 C13.2615626,4.61646714 11.5982675,4.4026960

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	302
Entropy (8bit):	4.868256750363606
Encrypted:	false
SSDEEP:	6:L6A3SOCCyExe5L+myMQOEU6oMUyP7FFCo+T:GAiBWxe5aOifP7cT
MD5:	1522BA4FCB94E644B32546655E38A0A9
SHA1:	236D203DBFBFBF6CD0381BEF49F8420073341A47
SHA-256:	AAF53092EA7CA0E26C8C57DE53245C2736B05F6A57CB7D53A407B7E1FB2A5246
SHA-512:	406F7A42CB0BD93F75C7652308E68EC856CFA6AC297125A1476D24F78C013DBAF76BD52B37A41AB75D77F2F5E320BEF3BE3296F4292CD9BD09A17B421C77F972
Malicious:	false
URL:	https://api.huddle.com/customisation/logo?subdomain=avp100&callback=_jqjsp&_1728585345266=
Preview:	_jqjsp({ .. "links": [ { .. "rel": "self",.. "href": "https://api.huddle.com/rest/customisation/logo?subdomain=avp100".. }, { .. "rel": "login-logo",.. "href": "/res/9824fab9-3605-43b9-a635-c6fc23fbfb45.ashx?login-logo.jpg",.. "type": "image/jpeg".. } ]..});

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (370), with CRLF line terminators
Category:	downloaded
Size (bytes):	10689
Entropy (8bit):	4.822116578090367
Encrypted:	false
SSDEEP:	192:Aw6+Qa2XbXxmmYVkX/CisWIdlHB8X0Y1bcw/hFeUT8alCadGGvA5WYpIQ1bBl:Af+72XTxmX8IdlHgp1Iw/hcUIalCadGD
MD5:	67B4AA163D9B70EA3FDB0F03E1907B2A
SHA1:	140E2BBCDAD162F13C330A8F6B8F7131CB36358F
SHA-256:	009CE457784C3DEE45BACB3C4C746AEFEEA70607C6B4991D8A18DA4C9587DC30
SHA-512:	AFC4935538A122E0E337539BE6A33CA5C4525ED88914EF2CA2F265FAFE96AF646DCC78E88C9288CCFD94BB5C6085E1ED971D55D862418128B7922B5CEDC5C097
Malicious:	false
URL:	https://api.huddle.com/localisation/cultures/categories/identityui?callback=_jqjsp
Preview:	_jqjsp({.. "category": "identityui",.. "resources": {.. "fieldLabel_email": "Email or username",.. "fieldLabel_email2": "Email",.. "fieldLabel_password": "Password",.. "fieldLabel_twoFactor": "Two Factor Authentication Code",.. "fieldLabel_rememberMe": "Remember my username",.. "btnLabel_continue": "Continue",.. "btnLabel_signIn": "Sign in",.. "forgottenPassword": "Forgotten your password?",.. "userNotFound": "User not found",.. "apiGenericError": "An error occurred, please try again later",.. "footerLink_about": "About Huddle",.. "footerLink_terms": "Terms of use",.. "footerLink_privacy": "Privacy Policy",.. "footerLink_feedback": "Feedback",.. "footerLink_help": "Help",.. "footerLink_blog": "Blog",.. "entrybannerAccept": "Accept",.. "entrybannerDecline": "Decline",.. "authDecline": "Cancel",.. "authAllow": "Allow access",.. "MarketingButtons_Heading": "Get the Huddle apps for mobile and desktop",.. "instruction_enter

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22469), with no line terminators
Category:	downloaded
Size (bytes):	22469
Entropy (8bit):	5.31444133579441
Encrypted:	false
SSDEEP:	384:eiVww0ZtwSZZPYQoy1wtrb8UGhu4mlB6fhFbcIdRzJFnof+VLzIXqEnbzeAPJ3fA:eidaKSLPYQoyfhWBe7JUYUuz
MD5:	F9CDCB1E4B2BE3825B6DFCBD33DEFF25
SHA1:	2CBBC0BE7B002F270A17D2E4B1A17A52FB456D9A
SHA-256:	C28F3FCFA4E839D67ED83A489CA461CF6C3182C47D1A35E7EB719DEBA23F9106
SHA-512:	D57195F5905E7FA893B9DCBE7EAEB316FD498525486AFE5C3592E6F76036CC8F9E249B1D922BD8D1C1AF9D862DBC08F2E58751EAA3C8AEF2FBE1940590EBF3B5
Malicious:	false
URL:	https://js-agent.newrelic.com/nr-632.min.js
Preview:	!function(e,n,t){function r(t,i){if(!n[t]){if(!e[t]){var a="function"==typeof __nr_require&&__nr_require;if(!i&&a)return a(t,!0);if(o)return o(t,!0);throw new Error("Cannot find module '"+t+"'")}var u=n[t]={exports:{}};e[t][0].call(u.exports,function(n){var o=e[t][1][n];return r(o?o:n)},u,u.exports)}return n[t].exports}for(var o="function"==typeof __nr_require&&__nr_require,i=0;i<t.length;i++)r(t[i]);return r}({1:[function(e,n){n.exports=function(e,n){return"addEventListener"in window?addEventListener(e,n,!1):"attachEvent"in window?attachEvent("on"+e,n):void 0}},{}],2:[function(e,n){function t(e,n,t,o){d("bstAgg",[e,n,t,o]),m[e]\|\|(m[e]={});var i=m[e][n];return i\|\|(m[e][n]=i={params:t\|\|{}}),i.metrics=r(o,i.metrics),i}function r(e,n){return n\|\|(n={count:0}),n.count+=1,c(e,function(e,t){n[e]=o(t,n[e])}),n}function o(e,n){return n?(n&&!n.c&&(n={t:n.t,min:n.t,max:n.t,sos:n.tn.t,c:1}),n.c+=1,n.t+=e,n.sos+=ee,e>n.max&&(n.max=e),e<n.min&&(n.min=e),n):{t:e}}function i(e,n){return n?m[e]&&m[e]

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	320
Entropy (8bit):	4.605469694192492
Encrypted:	false
SSDEEP:	6:YeIQ3kF3/X53HJxAZjg6VCs/U4HdZHJn9uVHH011XZXete/4HdZHShNb:Yyk3x3oZk6VCs8Kd5J9uyvKd5wb
MD5:	36E7226DE03883057AF84C931DEE6829
SHA1:	ABA631AD5D3DDD543D5B195815371830075BF0FE
SHA-256:	329B4FFD5CDF528698B44FF1C66D5D6434C169C4F9220FA3FE60B03B6BE31658
SHA-512:	ED81575754C53D12E58C262981CD53AD5FB5DC43CB72024976F73AC31C3D5954D7F2CBDAB9FDADE0BEAC4DF16FA4A91E6F532190A563714EF07914F7A338A31B
Malicious:	false
URL:	https://huddle.zendesk.com/embeddable/config
Preview:	{"hideZendeskLogo":true,"brand":"Huddle","brandCount":2,"color":"#056d78","textColor":"#ffffff","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#056d78","buttonLabelKey":"contact","contextualHelpEnabled":true}},"launcher":{"embed":"launcher","props":{"color":"#056d78"}}},"features":{"fastLoad":true}}

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	734
Entropy (8bit):	5.05607948524628
Encrypted:	false
SSDEEP:	12:YoG2kbjEFcQJUy/q/k6VCs8Kd5KuvvKd5DXfUzhqszHrFZg9jZ+tHNwUUDEAVT:Y+9FfJS/k6VoKrKuvvKrDXcUszHrFu9/
MD5:	72A70943AFA489A963A2093EC66312D1
SHA1:	5F3F462A27674DE1045FE6DA94B123F54D68651C
SHA-256:	76B8B6F046E8BA2E8094DA7CBA39D6893511A0A5C6FD7467E0AF747B4535251B
SHA-512:	EE38CF2DF7A16E6352C892A70C6939BDE975D41F4346E2CC8080A723E42952B6B92C6A98080F21585F0D69C3B05BCE76DA31B3F8103C74428CDC35896DA526FC
Malicious:	false
URL:	https://ekr.zdassets.com/compose/web_widget/huddle.zendesk.com
Preview:	{"products":[{"name":"web_widget","id":"huddle.zendesk.com","bootstrap":{"config":{"features":{"fastLoad":true},"color":"#056d78","brandCount":2.0,"hideZendeskLogo":true,"brand":"Huddle","textColor":"#ffffff","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#056d78","contextualHelpEnabled":true,"buttonLabelKey":"contact"}},"launcher":{"embed":"launcher","props":{"color":"#056d78"}}}}},"features":["help_center","ticket_submission"],"url":"https://ekr.zendesk.com/compose_product/web_widget/cbf609b2dfb3cf337c37e8e93f118288d11f355b?features%5B%5D=help_center\u0026features%5B%5D=ticket_submission","assets":{"scripts":[{"src":"https://static.zdassets.com/web_widget/classic/latest/web-widget-main-cbf609b.js"}]}}]}

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8987
Entropy (8bit):	4.286068870919611
Encrypted:	false
SSDEEP:	192:BQH+509z6apq2bybXslPcKUxOeeu9/Wex+Dz42Nsw:E+69z9q2e6exP/Wu+DBsw
MD5:	83F535CED5E77B848476B8A431577B15
SHA1:	50D3300313FBFA609A87B45440E3ADF6B5D11A59
SHA-256:	5AA075B01D61489421CC0EAB6CD69FE7A28B1CFB5937C898AA0CD5C93E79A19A
SHA-512:	C6981606590C2E754746F34B564B20254D45734B8D05330E816026E5FB14955BA93C2364BFFFA0A4B9A3D39B5A9950A8FB123EB0663BB7FC412B41A8F35076E3
Malicious:	false
URL:	https://login.huddle.com/user/css/assets/marketing-buttons/badge-windows.svg
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.3.2 (12043) - http://www.bohemiancoding.com/sketch -->. <title>badge-windows</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="app-badges" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g sketch:type="MSArtboardGroup" transform="translate(-80.000000, -240.000000)" id="badge-windows" fill="#FFFFFF">. <g sketch:type="MSLayerGroup" transform="translate(80.000000, 240.000000)">. <path d="M10,17.0344828 L10,22.8 L4,22 L4,11 L10,10 L10,10 L10,16 L4,16 L4,17.0344828 L10,17.0344828 Z M19,16 L19,8.5 L11,9.83333333 L11,16 L19,16 Z M19,17.0344828 L19,24 L11,22.9333333 L11,17.0344828 L19,17.0344828 Z" id="Rectangle-26"

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	302
Entropy (8bit):	4.868256750363606
Encrypted:	false
SSDEEP:	6:L6A3SOCCyExe5L+myMQOEU6oMUyP7FFCo+T:GAiBWxe5aOifP7cT
MD5:	1522BA4FCB94E644B32546655E38A0A9
SHA1:	236D203DBFBFBF6CD0381BEF49F8420073341A47
SHA-256:	AAF53092EA7CA0E26C8C57DE53245C2736B05F6A57CB7D53A407B7E1FB2A5246
SHA-512:	406F7A42CB0BD93F75C7652308E68EC856CFA6AC297125A1476D24F78C013DBAF76BD52B37A41AB75D77F2F5E320BEF3BE3296F4292CD9BD09A17B421C77F972
Malicious:	false
Preview:	_jqjsp({ .. "links": [ { .. "rel": "self",.. "href": "https://api.huddle.com/rest/customisation/logo?subdomain=avp100".. }, { .. "rel": "login-logo",.. "href": "/res/9824fab9-3605-43b9-a635-c6fc23fbfb45.ashx?login-logo.jpg",.. "type": "image/jpeg".. } ]..});

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6151
Entropy (8bit):	4.429773688371838
Encrypted:	false
SSDEEP:	96:5rXbW68yHXUvZ+4lXBkrsbDfIzf9Zi+hvtugRJl57O1UXecrrQkyZNKBT0FpQ:NOyHuZ+4lXBkrsbbIzDi+/JL0+/QbE02
MD5:	D363DCF04761E8DFDE2A143F0207CFE9
SHA1:	87C72CA3B6AB4662AE8AE6DE73FDF4A28E776664
SHA-256:	25B5CAB5277CDEE51DDC4E02DDECF381F9751BB4E9667A52793B52E26E788141
SHA-512:	CCD35A2EC7865CFEBC24ABE8DA87E3EEA87D678812C3E619CB8469A48E1FDBE6BA90BDEDC91A9943BADDE63E6DCC5F87F168D156BBD433AA017B0FAF14A47D57
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="no"?>.<svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">. Generator: Sketch 3.3.2 (12043) - http://www.bohemiancoding.com/sketch -->. <title>badge-ios</title>. <desc>Created with Sketch.</desc>. <defs></defs>. <g id="app-badges" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd" sketch:type="MSPage">. <g sketch:type="MSArtboardGroup" transform="translate(-80.000000, -80.000000)" id="badge-ios" fill="#FFFFFF">. <g sketch:type="MSLayerGroup" transform="translate(80.000000, 80.000000)">. <path d="M21,6.991155 C21,5.89147046 21.9019504,5 23.0085302,5 L30.9914698,5 C32.1007504,5 33,5.88967395 33,6.991155 L33,25.008845 C33,26.1085295 32.0980496,27 30.9914698,27 L23.0085302,27 C21.8992496,27 21,26.1103261 21,25.008845 L21,6.991155 Z M

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65490)
Category:	dropped
Size (bytes):	197240
Entropy (8bit):	5.298751675697194
Encrypted:	false
SSDEEP:	3072:OHUGE+3i5GNLc/GnXVkZQ47GKKOcLLuOYmjneT5KptRc:O7El5MxlOQ47GK5ehneTYc
MD5:	52642A88598326B19795FC34A4722823
SHA1:	06D2C08BAABCC2EB55C8EF9FE24DCDF5FAEF670D
SHA-256:	7C0E7571144283E1DA89211D72FB1E35360D163C865E415FA400DCEB9B6D385B
SHA-512:	DD2EE66F35DF4244181AEB76950C85A3EF6775540ACEA3116936FE5DA00BABF64631E5FF71C3C5D10CA9642DE358D7E111B515A479F1F844D0B9B1F710B81D17
Malicious:	false
Preview:	/! Huddle-IdentityUI v0.0.0 2024-07-04 /..!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";function g(e){return null!=e&&e===e.window}var t=[],n=Object.getPrototypeOf,s=t.slice,m=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,r={},o=r.toString,v=r.hasOwnProperty,a=v.toString,c=a.call(Object),b={},y=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},E=C.document,l={type:!0,src:!0,nonce:!0,noModule:!0};function x(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in l)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function h(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?r[o

Static File Info

General

File type:	CDFV2 Microsoft Outlook Message
Entropy (8bit):	4.447404901397565
TrID:	Outlook Message (71009/1) 58.92% Outlook Form Template (41509/1) 34.44% Generic OLE2 / Multistream Compound File (8008/1) 6.64%
File name:	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg
File size:	128'512 bytes
MD5:	398072dc6ec7dfadffda31e9168ee01e
SHA1:	0f643d9b647ce5db62d9e68bf55dc5e33bbb3999
SHA256:	2b5de44e3a9303b32f29bc0d182f5715e8b0b717466e966479e3206cfe091a5f
SHA512:	53c71b98405b2b88bbfdc4a1c907a61fb67f6ff13831f122586df412486b20cd6746888020b60d7b0aad9d6a6c6095b25e42593fb0134399c9dac0050cfbec6a
SSDEEP:	1536:iQIUEjwWrcWN5VHEVL7Am4aLt+rWmWrh6KMP40UVJMJbF3bRZDN:fIUEjhb5FUL7Am4gt+eh6zP40UGblD
TLSH:	C0C3451539EA4219F3779F358BE350AB8536FD43AD24965F2095330E0A73941A862F3F
File Content Preview:	........................>......................................................................................................................................................................................................................................

Static Mail

General

Subject:	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you
From:	"Kevin Burrell (via Huddle)" <hello@huddle.com>
To:	"Scott Rothe" <vernon.s.rothe@faa.gov>
Cc:
BCC:
Date:	Thu, 10 Oct 2024 20:18:00 +0200
Communications:	CAUTION: This email originated from outside of the Federal Aviation Administration (FAA). Do not click on links or open attachments unless you recognize the sender and know the content is safe. Kevin Burrell shared Team A Pictures and Presentation with you In the Eric Meyn's Workspace workspace I've just uploaded 1 file to this folder: Boneyard Presentation - Aztec.pptx View Team A Pictures and Presentation This notification has been sent to you, Heather Hunn, Robert Stegeman, David Gerlach and 639 other(s) You are getting notifications instantly. You can change the frequency.
Attachments:	userAvatarId-1283483

Headers

Key	Value
Received	from USLIVE-SVC-23D (unknown [10.101.16.23])
18	19:39 +0000
by DM8PR09MB6599.namprd09.prod.outlook.com (2603	10b6:5:2e1::17) with
2024 18	19:36 +0000
(2603	10b6:930:1::10) with Microsoft SMTP Server (version=TLS1_2,
Transport; Thu, 10 Oct 2024 18	19:35 +0000
Authentication-Results	spf=fail (sender IP is 204.108.8.6)
Received-SPF	Pass (amcrelay3.faa.gov: domain of hello@huddle.com
15.20.8048.13 via Frontend Transport; Thu, 10 Oct 2024 18	19:34 +0000
by oexinternalrelay1.faa.gov with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 10 Oct 2024 14	19:33 -0400
ip4	18.130.0.11 ip4:35.177.186.34 ip4:35.178.131.6 -all"
include	_spfc.docusign.com ip4:34.234.198.35 ip4:52.70.144.20
Authentication-Results-Original	amcrelay3.faa.gov; dkim=none (message not
IronPort-SDR	67081a59_05QID436BaSEYo2523IX0Ss3OdTJXe67rniE4nrNG3dnYaj
X-IPAS-Result	=?us-ascii?q?A0B/AACp9gdndyJZ7CJaHAEBAQEBAQcBARIBAQQEAQGBe?=
IronPort-PHdr	A9a23:pXcgQRWq/xJBC5cSrEUO1aWMdG7V8Kz3UzF92vMcY8FmKuCP+p34N
IronPort-Data	A9a23:tp1iTquhSvmwZVc6dcXCassMqufnVBFUMUV32f8akzHdYApBs4E2e
IronPort-HdrOrdr	A9a23:Odbpgq3Z0jU3Xl1o7AnU5AqjBN0kLtp133Aq2lEZdPU1SKylfq
X-Talos-CUID	9a23:sERaEG3NCnMfoJ9cxtvdprxfFuQIdCz+3l3pDxXlEWh2ZuDKE2G7wfYx
X-Talos-MUID	=?us-ascii?q?9a23=3Axi5+VQ2VX+grXUlWzIHE3fFR9zUjvo6MOBksqJk?=
X-IronPort-Anti-Spam-Filtered	true
X-IronPort-AV	E=Sophos;i="6.11,193,1725339600";
Message-Id	<a1bec2$ju6reo@amcrelay3.faa.gov>
by amcrelay3.faa.gov with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 10 Oct 2024 13	18:01 -0500
for <vernon.s.rothe@faa.gov>; Thu, 10 Oct 2024 18	18:00 +0000 (UTC)
MIME-Version	1.0
From	"Kevin Burrell (via Huddle)" <hello@huddle.com>
To	"Scott Rothe" <vernon.s.rothe@faa.gov>
Reply-To	"Kevin Burrell" <kevin.j.burrell@faa.gov>
Date	10 Oct 2024 18:18:00 +0000
Subject	Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric
Content-Type	multipart/alternative;
Return-Path	hello@huddle.com
X-MS-Exchange-Organization-ExpirationStartTime	10 Oct 2024 18:19:34.8730
X-MS-Exchange-Organization-ExpirationStartTimeReason	OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval	1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason	OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id	cb7ea610-7393-4215-b516-08dce95817fe
X-EOPAttributedMessage	0
X-MS-Exchange-Organization-MessageDirectionality	Originating
X-MS-PublicTrafficType	Email
X-MS-TrafficTypeDiagnostic	DS1PEPF00017E07:EE_\|DM8PR09MB6599:EE_\|PH0PR09MB11407:EE_
X-MS-Exchange-Organization-AuthSource	DS1PEPF00017E07.namprd09.prod.outlook.com
X-MS-Exchange-Organization-AuthAs	Anonymous
X-OriginatorOrg	usfaa.onmicrosoft.com
X-MS-Office365-Filtering-Correlation-Id	cb7ea610-7393-4215-b516-08dce95817fe
X-MS-Exchange-Organization-SCL	1
X-Microsoft-Antispam	BCL:0;ARA:13230040\|5073199012\|4073199012\|2092899012\|3092899012\|3072899012\|5062899012\|82310400026\|12012899012\|69100299015;
X-Forefront-Antispam-Report	CIP:204.108.8.6;CTRY:US;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:oexinternalrelay1.faa.gov;PTR:ErrorRetry;CAT:NONE;SFS:(13230040)(5073199012)(4073199012)(2092899012)(3092899012)(3072899012)(5062899012)(82310400026)(12012899012)(69100299015);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime	10 Oct 2024 18:19:34.5605
X-MS-Exchange-CrossTenant-Network-Message-Id	cb7ea610-7393-4215-b516-08dce95817fe
X-MS-Exchange-CrossTenant-Id	2b69d099-dc61-447b-84c8-001733d8be3a
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp	TenantId=2b69d099-dc61-447b-84c8-001733d8be3a;Ip=[204.108.8.6];Helo=[oexinternalrelay1.faa.gov]
X-MS-Exchange-CrossTenant-AuthSource	DS1PEPF00017E07.namprd09.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs	Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader	HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped	DM8PR09MB6599
X-MS-Exchange-Transport-EndToEndLatency	00:00:04.8661002
X-MS-Exchange-Processed-By-BccFoldering	15.20.8048.017
X-Microsoft-Antispam-Mailbox-Delivery	ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506478)(944626604)(920097)(930097)(140003);
X-Microsoft-Antispam-Message-Info	=?us-ascii?Q?kdxtN523QhOKFzesoqYxq7ssQU7SXGd2gZhAxPNWyaGNFjfMcbd+UeRYZnvz?=
date	Thu, 10 Oct 2024 20:18:00 +0200

File Icon


Icon Hash:	c4e1928eacb280a2

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 20:35:32.401139975 CEST	49676	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:35:32.401189089 CEST	49677	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:35:32.401189089 CEST	49678	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:35:40.545526981 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:40.545629025 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:40.545737028 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:40.547364950 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:40.547394037 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.321372986 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.321466923 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.371834993 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.371876001 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.372723103 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.374766111 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.374824047 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.374880075 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.698417902 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.698484898 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.698544025 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.698587894 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.698621988 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.698657036 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.699053049 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.699121952 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.699317932 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.699352026 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.699378014 CEST	49703	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.699414015 CEST	443	49703	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.968733072 CEST	49706	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.968832016 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:41.968928099 CEST	49706	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.969258070 CEST	49706	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:41.969286919 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:42.384535074 CEST	49708	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:42.384567976 CEST	443	49708	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:42.384831905 CEST	49708	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:42.384831905 CEST	49708	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:42.384857893 CEST	443	49708	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:42.768269062 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:42.769119024 CEST	49706	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:42.769154072 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:42.769781113 CEST	49706	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:42.769787073 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:42.769833088 CEST	49706	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:42.769840956 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:42.957257986 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:42.957307100 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:42.957539082 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:42.959372997 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:42.959384918 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:43.026611090 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:43.026635885 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:43.026700020 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:43.026874065 CEST	49706	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:43.026874065 CEST	49706	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:43.026897907 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:43.026974916 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:43.029586077 CEST	49706	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:43.036274910 CEST	49706	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:43.036276102 CEST	49706	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:43.036292076 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:43.036300898 CEST	443	49706	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:43.092978001 CEST	443	49708	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:43.107121944 CEST	49708	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:43.107134104 CEST	443	49708	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:43.108038902 CEST	443	49708	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:43.108216047 CEST	49708	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:43.115809917 CEST	49708	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:43.115889072 CEST	443	49708	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:43.117749929 CEST	49708	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:43.159410954 CEST	443	49708	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:43.174132109 CEST	49708	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:43.174151897 CEST	443	49708	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:43.215126991 CEST	49708	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:43.266719103 CEST	443	49708	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:43.266793013 CEST	443	49708	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:43.266887903 CEST	49708	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:43.267786980 CEST	49708	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:43.267807961 CEST	443	49708	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:43.284308910 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:43.284410954 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:43.289206982 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:43.289630890 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:43.289654970 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:43.344033003 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:43.344065905 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:43.344137907 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:43.344381094 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:43.344388008 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:43.344444036 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:43.344594955 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:43.344603062 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:43.344744921 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:43.344752073 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:43.349448919 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:35:43.354396105 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:35:43.438709974 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 10, 2024 20:35:43.447809935 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:35:43.447853088 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:35:43.447870016 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:35:43.447873116 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:35:43.447905064 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:35:43.447921038 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:35:43.448163033 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:35:43.448210955 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:35:43.448283911 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:35:43.448326111 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:35:43.448451996 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:35:43.448467970 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:35:43.448501110 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:35:43.448518038 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:35:43.739593983 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 10, 2024 20:35:43.877590895 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:43.877721071 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:43.879998922 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:43.880036116 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:43.880460978 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:43.929107904 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:43.952305079 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:43.999404907 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.011435986 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.011733055 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.011746883 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.013113976 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.013176918 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.014291048 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.014343023 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.014486074 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.014494896 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.017394066 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.017615080 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.017622948 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.018965960 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.019040108 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.019345045 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.019484997 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.057065010 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.072050095 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.072057962 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.120043039 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.129374027 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.129398108 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.129405022 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.129420042 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.129486084 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.129494905 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.129538059 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.129551888 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.129663944 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.132175922 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.132303953 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.150222063 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.150255919 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.150631905 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.154400110 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.154455900 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.154498100 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.154584885 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.155071020 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.155112028 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.155405998 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.155405998 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.155451059 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.199398041 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.215157986 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.215248108 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.215281963 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.215320110 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.215401888 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.215660095 CEST	49713	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.215675116 CEST	443	49713	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.227883101 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.227941036 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.227962971 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.228025913 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:44.228038073 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.228060007 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:44.228069067 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.228091002 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:44.228094101 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.228117943 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:44.228140116 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:44.228271961 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.228353024 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:44.228363991 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.228552103 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.228606939 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:44.240113020 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:44.240142107 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.240154028 CEST	49711	443	192.168.2.17	4.175.87.197
Oct 10, 2024 20:35:44.240160942 CEST	443	49711	4.175.87.197	192.168.2.17
Oct 10, 2024 20:35:44.263415098 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.263473988 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.263495922 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.263514996 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.263555050 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.263562918 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.263573885 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.263605118 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.263644934 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.263684988 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.263684988 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.312104940 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.344044924 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.344079971 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.344098091 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 10, 2024 20:35:44.344136953 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.344156027 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.344183922 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.344196081 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.344683886 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.344683886 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.344691992 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.345397949 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.345442057 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.345535994 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.345535994 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.345541000 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.345618010 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.345947027 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.345947027 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.350558043 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.350610018 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.350709915 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.350971937 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.350986004 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.636290073 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.636312962 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.636353016 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.636365891 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.636430979 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.636481047 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.636481047 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.636560917 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.637129068 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.637129068 CEST	49712	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.637171984 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.637186050 CEST	443	49712	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.660058022 CEST	49714	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:44.660079002 CEST	443	49714	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:44.729409933 CEST	49720	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.729509115 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:44.729635954 CEST	49720	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.729839087 CEST	49720	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:44.729873896 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:45.072585106 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.072937012 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.072968006 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.074035883 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.074139118 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.075113058 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.075295925 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.075308084 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.075316906 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.075449944 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.075647116 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.075953007 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.076006889 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.076081038 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.123404980 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.123423100 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.127115965 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.218801022 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.218861103 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.218909025 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.219038010 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.219038963 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.219084978 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.219536066 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.219989061 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.220017910 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.220026970 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.220071077 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.220099926 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.220118046 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.220140934 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.220164061 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.220174074 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.220218897 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.220218897 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.270705938 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.270729065 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.270823956 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.270857096 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.271055937 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.305172920 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.305187941 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.305263042 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.305278063 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.305322886 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.306189060 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.306242943 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.306304932 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.306313992 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.306349993 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.306370020 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.306375027 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.308895111 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.308947086 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.308974981 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.308984041 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.309056997 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.357533932 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.357553959 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.357676983 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.357700109 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.357747078 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.359227896 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.359241962 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.359328985 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.359337091 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.359381914 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.361776114 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.361789942 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.361846924 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.361855030 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.361917019 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.393404961 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.393430948 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.393534899 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.393558979 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.393606901 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.394324064 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.394367933 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.394409895 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.394419909 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.394450903 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.394471884 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.397064924 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.397108078 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.397160053 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.397171021 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.397201061 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.397219896 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.398797989 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.398840904 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.398890972 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.398900032 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.398924112 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.398945093 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.444591045 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.444614887 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.444703102 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.444725990 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.444756985 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.444776058 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.446487904 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.446502924 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.446629047 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.446638107 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.446681976 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.448321104 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.448334932 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.448441982 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.448450089 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.448518991 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.479515076 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.479568958 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.479614973 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.479633093 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.479671001 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.479681015 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.481818914 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.481829882 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.481837988 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.481904030 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.481913090 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.481925011 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.481944084 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.481981039 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.481987000 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.482018948 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.482089996 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.483792067 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.483808994 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.483839035 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.483870029 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.483880997 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.483918905 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.483918905 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.484111071 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.485815048 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.485857964 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.485909939 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.485923052 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.485971928 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.487613916 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.487663031 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.487704992 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.487716913 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.487730026 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.487848997 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.489434004 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.489476919 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.489480972 CEST	49718	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.489510059 CEST	443	49718	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.489521980 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.489530087 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.489547968 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.489579916 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.491149902 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.491192102 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.491223097 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.491233110 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.491262913 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.491290092 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.495417118 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.495460987 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.495526075 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.495750904 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.495763063 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.523332119 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:45.523461103 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:45.523900032 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:45.524100065 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:45.524132967 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:45.548212051 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 10, 2024 20:35:45.566196918 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.566224098 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.566322088 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.566346884 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.566399097 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.567408085 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.567430973 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.567462921 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.567471027 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.567518950 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.567533016 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.569048882 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.569123030 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.569129944 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.569142103 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.569185019 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.572942972 CEST	49717	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:45.572966099 CEST	443	49717	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:45.650722980 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:45.651355028 CEST	49720	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:45.651401997 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:45.652107954 CEST	49720	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:45.652113914 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:45.652151108 CEST	49720	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:45.652162075 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:45.704750061 CEST	49724	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:45.704797029 CEST	443	49724	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:45.704879045 CEST	49724	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:45.705754042 CEST	49724	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:45.705791950 CEST	443	49724	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:45.904531956 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:45.904555082 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:45.904598951 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:45.904726028 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:45.904746056 CEST	49720	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:45.904746056 CEST	49720	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:45.904783010 CEST	49720	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:45.904964924 CEST	49720	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:45.904989004 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:45.905000925 CEST	49720	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:35:45.905005932 CEST	443	49720	20.190.159.73	192.168.2.17
Oct 10, 2024 20:35:46.211498976 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.211869001 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.211890936 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.212197065 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.212601900 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.212662935 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.212798119 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.215758085 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.215966940 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.215986013 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.217328072 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.217400074 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.217722893 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.217788935 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.217866898 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.217873096 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.259406090 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.262727022 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.530884027 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.530894041 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.530905962 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.530917883 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.530924082 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.530927896 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.530936003 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.530977964 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.531027079 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.531088114 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.531104088 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.531143904 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.531166077 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.531166077 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.531222105 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.534388065 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.534403086 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.534487963 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.534504890 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.538451910 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.538470030 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.538543940 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.538543940 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.538556099 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.538562059 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.538575888 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.538594961 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.538625002 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.538640022 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.538681030 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.538688898 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.538693905 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.538881063 CEST	443	49724	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:46.538969040 CEST	49724	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:46.541363001 CEST	49724	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:46.541393042 CEST	443	49724	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:46.541615963 CEST	443	49724	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:46.542001009 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.542012930 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.542087078 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.542102098 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.542351961 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.542365074 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.542418003 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.542439938 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.542463064 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.544317961 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.544337034 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.544390917 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.544409990 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.544433117 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.545753956 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.545770884 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.545783043 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.545794964 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.545829058 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.545844078 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.545875072 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.545878887 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.545893908 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.547157049 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.547168970 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.547230959 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.547244072 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.548386097 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.548397064 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.548470020 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.548482895 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.548554897 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.548866987 CEST	49722	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.548896074 CEST	443	49722	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.549514055 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.549530029 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.549588919 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.549602032 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.549628973 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.553940058 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.553978920 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.554056883 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.554271936 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.554284096 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.558206081 CEST	49726	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.558216095 CEST	443	49726	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.558269024 CEST	49726	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.558438063 CEST	49726	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.558449030 CEST	443	49726	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.566836119 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:46.566884041 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:46.566981077 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:46.567214012 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:46.567241907 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:46.584469080 CEST	49724	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:46.596054077 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.605899096 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.605922937 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.606030941 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.606040955 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.606081009 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.606586933 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.606605053 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.606661081 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.606667042 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.606717110 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.607104063 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.607117891 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.607184887 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.607192039 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.607229948 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.608110905 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.608129978 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.608202934 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.608210087 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.608256102 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.608843088 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.608861923 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.608886957 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.608907938 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.608915091 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.608942986 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.608973980 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.609016895 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.609132051 CEST	49723	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:46.609148026 CEST	443	49723	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:46.631402016 CEST	443	49724	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:46.644432068 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.644504070 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.644593000 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.644726992 CEST	49729	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.644815922 CEST	443	49729	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.644963026 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.644988060 CEST	49729	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.644990921 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.645226955 CEST	49729	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:46.645258904 CEST	443	49729	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:46.827869892 CEST	443	49724	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:46.827923059 CEST	443	49724	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:46.828169107 CEST	49724	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:46.828169107 CEST	49724	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:46.828169107 CEST	49724	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:46.828269005 CEST	443	49724	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:46.855417967 CEST	49730	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:46.855453014 CEST	443	49730	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:46.855531931 CEST	49730	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:46.855779886 CEST	49730	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:46.855791092 CEST	443	49730	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:47.030493975 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.030802011 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.030848026 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.031918049 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.032047987 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.033179045 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.033265114 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.033380985 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.033404112 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.086033106 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.113241911 CEST	49731	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:35:47.113281012 CEST	443	49731	142.250.185.132	192.168.2.17
Oct 10, 2024 20:35:47.113351107 CEST	49731	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:35:47.113521099 CEST	49731	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:35:47.113535881 CEST	443	49731	142.250.185.132	192.168.2.17
Oct 10, 2024 20:35:47.128504992 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.128539085 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.128586054 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.128619909 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.128751040 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.128909111 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.128921032 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.128938913 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.129162073 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.129204035 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.129236937 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.129290104 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.129302025 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.130070925 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.130213022 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.130224943 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.134049892 CEST	49724	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:47.134115934 CEST	443	49724	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:47.146714926 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.146787882 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.146817923 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.198050976 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.218266964 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.218321085 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.218354940 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.218410969 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.218431950 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.218483925 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.218496084 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.218533993 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.218671083 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.218795061 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.218895912 CEST	49727	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.218925953 CEST	443	49727	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.219427109 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.219440937 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.219785929 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.219868898 CEST	443	49726	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.220076084 CEST	49726	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.220082998 CEST	443	49726	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.220375061 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.220437050 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.220494986 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.220568895 CEST	443	49726	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.220822096 CEST	49726	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.220896006 CEST	443	49726	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.220920086 CEST	49726	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.232603073 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.232650042 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.235168934 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.235433102 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.235467911 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.261035919 CEST	49726	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.261050940 CEST	443	49726	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.263397932 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.309607029 CEST	443	49729	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.309922934 CEST	49729	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.309931993 CEST	443	49729	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.311359882 CEST	443	49729	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.311705112 CEST	49729	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.312544107 CEST	49729	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.312545061 CEST	49729	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.312555075 CEST	443	49729	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.312623978 CEST	443	49729	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.332511902 CEST	443	49726	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.332612991 CEST	443	49726	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.332890987 CEST	49726	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.333237886 CEST	49726	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.333252907 CEST	443	49726	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.335905075 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.336430073 CEST	49733	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.336457014 CEST	443	49733	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.336694002 CEST	49733	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.336704969 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.336760998 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.336806059 CEST	49733	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.336818933 CEST	443	49733	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.338884115 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.338907003 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.338924885 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.339195967 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.339205980 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.339288950 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.339767933 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.339910030 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.340209961 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.340305090 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.340347052 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.356307983 CEST	49729	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.356316090 CEST	443	49729	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.387070894 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.387094021 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.403105021 CEST	49729	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.419822931 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.419842005 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.419986010 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.419996023 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.420088053 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.425358057 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.425374031 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.425488949 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.425488949 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.425496101 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.427767038 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.435432911 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.447956085 CEST	443	49729	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.448152065 CEST	443	49729	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.448348045 CEST	49729	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.448750973 CEST	49729	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.448765993 CEST	443	49729	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.500233889 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:47.500288963 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:47.500365019 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:47.500622034 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:47.500633955 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:47.506465912 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.506495953 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.506508112 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.506522894 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.506531954 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.506556988 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.506582975 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.506613016 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.506618977 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.506761074 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.507118940 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.507143021 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.507217884 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.507239103 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.507262945 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.507319927 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.507329941 CEST	49728	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.507343054 CEST	443	49728	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.507492065 CEST	443	49730	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:47.507693052 CEST	49730	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:47.508209944 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.508228064 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.508614063 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.508619070 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.508827925 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.510284901 CEST	49730	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:47.510301113 CEST	443	49730	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:47.510633945 CEST	443	49730	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:47.511987925 CEST	49735	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:47.512079000 CEST	443	49735	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:47.512995005 CEST	49730	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:47.513005018 CEST	49735	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:47.513184071 CEST	49735	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:47.513221979 CEST	443	49735	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:47.515099049 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.515116930 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.515204906 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.515204906 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.515212059 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.515398026 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.516802073 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.516854048 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.516892910 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.516897917 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.516947031 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.516947031 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.518452883 CEST	49725	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:47.518461943 CEST	443	49725	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:47.555444956 CEST	443	49730	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:47.595068932 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 10, 2024 20:35:47.628475904 CEST	49736	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.628515959 CEST	443	49736	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.628664017 CEST	49736	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.628901005 CEST	49736	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:47.628910065 CEST	443	49736	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:47.733478069 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.735724926 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.735745907 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.738878965 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.739080906 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.739428997 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.739479065 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.739548922 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.787405968 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.789868116 CEST	443	49731	142.250.185.132	192.168.2.17
Oct 10, 2024 20:35:47.791436911 CEST	49731	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:35:47.791491032 CEST	443	49731	142.250.185.132	192.168.2.17
Oct 10, 2024 20:35:47.792365074 CEST	443	49731	142.250.185.132	192.168.2.17
Oct 10, 2024 20:35:47.792500973 CEST	49731	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:35:47.793597937 CEST	49731	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:35:47.793664932 CEST	443	49731	142.250.185.132	192.168.2.17
Oct 10, 2024 20:35:47.803427935 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.803442955 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.835436106 CEST	49731	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:35:47.835464001 CEST	443	49731	142.250.185.132	192.168.2.17
Oct 10, 2024 20:35:47.835828066 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.835905075 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.835993052 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.836056948 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.836098909 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.836112976 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.836148977 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.836978912 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.836983919 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.838406086 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.839420080 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.839423895 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.841695070 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.845165968 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.845169067 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.845175028 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.845240116 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.845244884 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:47.867122889 CEST	443	49730	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:47.867326975 CEST	443	49730	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:47.867542982 CEST	49730	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:47.868065119 CEST	49730	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:47.868065119 CEST	49730	443	192.168.2.17	95.100.63.156
Oct 10, 2024 20:35:47.868086100 CEST	443	49730	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:47.868093967 CEST	443	49730	95.100.63.156	192.168.2.17
Oct 10, 2024 20:35:47.882065058 CEST	49731	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:35:47.898165941 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 10, 2024 20:35:47.902194977 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:47.967070103 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 10, 2024 20:35:48.211771011 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:48.211846113 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:48.211872101 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:48.211904049 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:48.211939096 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:48.211935997 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:48.211966991 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:48.211999893 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:48.212044954 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:48.212063074 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:48.212131023 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:48.212340117 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:48.212356091 CEST	443	49732	162.247.243.39	192.168.2.17
Oct 10, 2024 20:35:48.212491989 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:48.212521076 CEST	49732	443	192.168.2.17	162.247.243.39
Oct 10, 2024 20:35:48.215317965 CEST	443	49733	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:48.215867996 CEST	49733	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:48.215893030 CEST	443	49733	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:48.216362953 CEST	443	49733	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:48.216861963 CEST	49733	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:48.216861963 CEST	49733	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:48.217004061 CEST	443	49733	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:48.263061047 CEST	49733	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:48.322905064 CEST	443	49733	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:48.322990894 CEST	443	49733	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:48.323051929 CEST	49733	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:48.323633909 CEST	49733	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:48.323662043 CEST	443	49733	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:48.403671026 CEST	443	49735	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.404016018 CEST	49735	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.404045105 CEST	443	49735	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.405658960 CEST	443	49735	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.405729055 CEST	49735	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.406107903 CEST	49735	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.406213045 CEST	443	49735	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.406306028 CEST	49735	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.406311989 CEST	443	49735	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.406635046 CEST	443	49736	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:48.406924009 CEST	49736	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:48.406939030 CEST	443	49736	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:48.407340050 CEST	443	49736	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:48.407627106 CEST	49736	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:48.407708883 CEST	443	49736	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:48.407742977 CEST	49736	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:48.409524918 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.410023928 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.410085917 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.411748886 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.411833048 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.412208080 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.412301064 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.412364960 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.412379980 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.454056978 CEST	49735	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.454062939 CEST	49736	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:48.454082012 CEST	443	49736	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:48.454086065 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.502150059 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 10, 2024 20:35:48.524589062 CEST	443	49735	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.524688959 CEST	443	49735	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.524739027 CEST	49735	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.525268078 CEST	49735	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.525285959 CEST	443	49735	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.566323996 CEST	443	49736	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:48.566404104 CEST	443	49736	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:48.566447020 CEST	49736	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:48.567416906 CEST	49736	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:48.567430019 CEST	443	49736	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:48.570807934 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.570880890 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.570897102 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.570921898 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.570957899 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.571017981 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.571048975 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:48.571049929 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.571099997 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.571876049 CEST	49737	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:48.571914911 CEST	443	49737	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:48.571974993 CEST	49737	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:48.572288990 CEST	49737	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:48.572298050 CEST	443	49737	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:48.573640108 CEST	49738	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:48.573647976 CEST	443	49738	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:48.573710918 CEST	49738	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:48.574115992 CEST	49738	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:48.574125051 CEST	443	49738	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:48.574201107 CEST	49734	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:48.574232101 CEST	443	49734	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:49.395080090 CEST	443	49738	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:49.395468950 CEST	49738	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:49.395481110 CEST	443	49738	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:49.395984888 CEST	443	49738	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:49.396258116 CEST	443	49737	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:49.396337986 CEST	49738	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:49.396416903 CEST	443	49738	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:49.396428108 CEST	49738	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:49.396662951 CEST	49737	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:49.396670103 CEST	443	49737	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:49.397003889 CEST	443	49737	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:49.397320032 CEST	49737	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:49.397320032 CEST	49737	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:49.397377968 CEST	443	49737	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:49.438038111 CEST	49738	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:49.438038111 CEST	49737	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:49.438051939 CEST	443	49738	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:49.675437927 CEST	443	49737	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:49.675508976 CEST	443	49737	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:49.675523996 CEST	443	49738	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:49.675622940 CEST	443	49738	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:49.675647974 CEST	49737	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:49.675709009 CEST	49738	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:49.677162886 CEST	49737	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:49.677185059 CEST	443	49737	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:49.677422047 CEST	49738	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:49.677427053 CEST	443	49738	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:49.678030014 CEST	49739	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:49.678061008 CEST	443	49739	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:49.678409100 CEST	49739	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:49.678409100 CEST	49739	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:49.678438902 CEST	443	49739	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:49.705193996 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 10, 2024 20:35:50.358756065 CEST	443	49739	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.359034061 CEST	49739	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.359050035 CEST	443	49739	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.359375000 CEST	443	49739	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.363457918 CEST	49739	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.363457918 CEST	49739	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.363475084 CEST	443	49739	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.363538980 CEST	443	49739	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.408082962 CEST	49739	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.519637108 CEST	443	49739	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.519723892 CEST	443	49739	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.519774914 CEST	49739	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.521569967 CEST	49739	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.521584988 CEST	443	49739	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.535295010 CEST	49740	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:50.535341978 CEST	443	49740	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:50.535428047 CEST	49740	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:50.537316084 CEST	49740	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:50.537332058 CEST	443	49740	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:50.623610973 CEST	49741	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:50.623677969 CEST	443	49741	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:50.623765945 CEST	49741	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:50.624033928 CEST	49741	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:50.624069929 CEST	443	49741	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:50.658626080 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:50.658659935 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:50.658739090 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:50.658998013 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:50.659028053 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:50.718094110 CEST	49744	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.718127966 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.718202114 CEST	49744	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.718478918 CEST	49745	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.718569040 CEST	443	49745	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.718652964 CEST	49745	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.718787909 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.718811035 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.718872070 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.719027996 CEST	49744	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.719057083 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.719285011 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.719304085 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.719366074 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.719463110 CEST	49745	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.719499111 CEST	443	49745	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.719594002 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.719619989 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:50.719767094 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:50.719793081 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.089713097 CEST	443	49741	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:51.090053082 CEST	49741	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:51.090084076 CEST	443	49741	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:51.091119051 CEST	443	49741	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:51.091197968 CEST	49741	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:51.092408895 CEST	49741	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:51.092482090 CEST	443	49741	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:51.092650890 CEST	49741	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:51.092665911 CEST	443	49741	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:51.142055988 CEST	49741	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:51.214843035 CEST	443	49740	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.215157986 CEST	49740	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.215186119 CEST	443	49740	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.215573072 CEST	443	49740	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.215956926 CEST	49740	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.216022968 CEST	443	49740	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.216223955 CEST	49740	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.230691910 CEST	443	49741	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:51.230746031 CEST	443	49741	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:51.230809927 CEST	49741	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:51.232163906 CEST	49741	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:51.232196093 CEST	443	49741	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:51.242229939 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:51.242275953 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:51.242362022 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:51.242568016 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:51.242584944 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:51.263413906 CEST	443	49740	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.309922934 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.310257912 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.310291052 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.310642958 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.311028004 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.311100006 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.311203957 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.351418972 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.370131016 CEST	443	49740	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.370223999 CEST	443	49740	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.370304108 CEST	49740	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.370738029 CEST	49740	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.370755911 CEST	443	49740	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.403048038 CEST	443	49745	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.403466940 CEST	49745	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.403531075 CEST	443	49745	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.403877974 CEST	443	49745	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.404196978 CEST	49745	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.404268026 CEST	443	49745	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.404340982 CEST	49745	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.408334970 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.408550024 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.408565044 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.409610033 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.409672022 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.409696102 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.409964085 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.410021067 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.410109043 CEST	49744	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.410115957 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.410213947 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.410221100 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.410451889 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.410716057 CEST	49744	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.410774946 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.410801888 CEST	49744	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.412404060 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.412610054 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.412626982 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.413489103 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.413568020 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.413841963 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.413901091 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.413964033 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.436716080 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.436741114 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.436760902 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.436814070 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.436822891 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.436851025 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.436872959 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.447422981 CEST	443	49745	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.451406956 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.459395885 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.460028887 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.460119963 CEST	49744	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.460154057 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.460215092 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.508150101 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.512023926 CEST	443	49745	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.512039900 CEST	443	49745	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.512079954 CEST	443	49745	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.512118101 CEST	49745	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.512152910 CEST	49745	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.513021946 CEST	49745	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.513062954 CEST	443	49745	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.515723944 CEST	49749	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.515760899 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.515853882 CEST	49749	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.516091108 CEST	49749	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.516107082 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.516204119 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.516263962 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.516284943 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.516316891 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.516323090 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.516345978 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.516345978 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.516387939 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.516397953 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.516475916 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.516525030 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.517379045 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.517395973 CEST	443	49747	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.517405033 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.517522097 CEST	49747	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.517950058 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.517980099 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.518032074 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.518038034 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.518060923 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.518080950 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.519825935 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.519857883 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.519901991 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.519911051 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.519958973 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.520122051 CEST	49750	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.520133018 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.520193100 CEST	49750	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.520366907 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.520387888 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.520396948 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.520450115 CEST	49744	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.520461082 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.520504951 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.520514965 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.520538092 CEST	49750	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.520551920 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.520554066 CEST	49744	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.520634890 CEST	49742	443	192.168.2.17	18.210.252.197
Oct 10, 2024 20:35:51.520639896 CEST	443	49742	18.210.252.197	192.168.2.17
Oct 10, 2024 20:35:51.523669004 CEST	49744	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.523673058 CEST	443	49744	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.526001930 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.526025057 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.526032925 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.526072025 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.526093006 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.526122093 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.526185036 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.526211977 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.526269913 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.526456118 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.526468992 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.527093887 CEST	49746	443	192.168.2.17	52.23.1.4
Oct 10, 2024 20:35:51.527107954 CEST	443	49746	52.23.1.4	192.168.2.17
Oct 10, 2024 20:35:51.529417992 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.529484987 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.529609919 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.529774904 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.529804945 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.863416910 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.863465071 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.863533020 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.863790989 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:51.863807917 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:51.868794918 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:51.869349003 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:51.869364977 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:51.870209932 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:51.870342970 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:51.871401072 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:51.871433020 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:51.871439934 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:51.871465921 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:51.924036026 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:51.924043894 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:51.971049070 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.029438019 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.029467106 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.029618979 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.029628038 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.029712915 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.029745102 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.029757023 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.029763937 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.029798031 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.030168056 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.030200005 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.030230999 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.030267954 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.030301094 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.030318022 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.030853033 CEST	49748	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.030865908 CEST	443	49748	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.042424917 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.042510986 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.042700052 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.042865038 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.042881966 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.043683052 CEST	49755	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.043701887 CEST	443	49755	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:52.043787003 CEST	49755	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.043920040 CEST	49755	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.043934107 CEST	443	49755	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:52.115298033 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 10, 2024 20:35:52.184308052 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.184643030 CEST	49750	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.184680939 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.185800076 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.186126947 CEST	49750	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.186279058 CEST	49750	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.186306953 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.211261034 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.211596966 CEST	49749	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.211618900 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.212014914 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.212409973 CEST	49749	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.212491035 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.212563038 CEST	49749	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.227121115 CEST	49750	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.259038925 CEST	49749	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.259053946 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.303483963 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.303539038 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.303586960 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.303637981 CEST	49750	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.303694963 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.303726912 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.303795099 CEST	49750	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.304465055 CEST	49750	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.304493904 CEST	443	49750	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.325021982 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.325052023 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.325058937 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.325138092 CEST	49749	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.325160027 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.325229883 CEST	49749	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.325923920 CEST	49749	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.325937986 CEST	443	49749	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.502765894 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.503110886 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.503166914 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.506812096 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.506900072 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.507005930 CEST	443	49755	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:52.507205009 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.507349968 CEST	49755	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.507365942 CEST	443	49755	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:52.507441044 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.507453918 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.508254051 CEST	443	49755	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:52.508337975 CEST	49755	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.508851051 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.509242058 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.509283066 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.509391069 CEST	49755	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.509458065 CEST	443	49755	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:52.509576082 CEST	49755	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.509592056 CEST	443	49755	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:52.510737896 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.510821104 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.511118889 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.511203051 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.511239052 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.519494057 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.519795895 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.519859076 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.520725012 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.520818949 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.521063089 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.521122932 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.521183968 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.544985056 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.545315027 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.545362949 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.546216011 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.546305895 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.546582937 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.546637058 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.546720028 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.551410913 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.551430941 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.563031912 CEST	49755	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.563044071 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.563055992 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.563061953 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.563076019 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.563077927 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.563102007 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.587430000 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.595050097 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.595061064 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.611025095 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.611048937 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.611154079 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.643034935 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.654026031 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.654174089 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.654262066 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.654330015 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.654341936 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.654371023 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.654407978 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.654519081 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.654587984 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.654607058 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.654700994 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.654755116 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.654767990 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.654892921 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.655019999 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.655657053 CEST	49754	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.655689955 CEST	443	49754	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.656709909 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.656775951 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.656797886 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.656820059 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.656852961 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.656889915 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.656889915 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.656929016 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.657035112 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.657042980 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.657156944 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.657850981 CEST	49751	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.657883883 CEST	443	49751	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.661402941 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.661468029 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.661489964 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.661536932 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.661603928 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.661637068 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.661637068 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.661659956 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.661683083 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.663306952 CEST	49752	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.663338900 CEST	443	49752	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.688034058 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.688086987 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.688107014 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.688124895 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.688147068 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.688168049 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.688183069 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.688189983 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.688209057 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.688225985 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.688241959 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.688256979 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.688257933 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.688282013 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.751027107 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.751065016 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.770136118 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 10, 2024 20:35:52.771677017 CEST	443	49755	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:52.771770954 CEST	443	49755	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:52.772136927 CEST	49755	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.772794962 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.772809982 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.772846937 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.772856951 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.772876024 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.772886038 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.772902966 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.772917032 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.772921085 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.772938967 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.772963047 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.773425102 CEST	49755	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.773439884 CEST	443	49755	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:52.774610043 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.774620056 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.774647951 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.774676085 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.774677038 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.774719000 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.774740934 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.777760029 CEST	49753	443	192.168.2.17	3.93.32.136
Oct 10, 2024 20:35:52.777771950 CEST	443	49753	3.93.32.136	192.168.2.17
Oct 10, 2024 20:35:52.794608116 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.794691086 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.794784069 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.795005083 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:52.795042992 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:52.796205044 CEST	49762	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.796267033 CEST	443	49762	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:52.796343088 CEST	49762	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.796550989 CEST	49762	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:52.796590090 CEST	443	49762	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:53.254839897 CEST	443	49762	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:53.255135059 CEST	49762	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:53.255165100 CEST	443	49762	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:53.256056070 CEST	443	49762	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:53.256134033 CEST	49762	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:53.256515980 CEST	49762	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:53.256572008 CEST	443	49762	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:53.256606102 CEST	49762	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:53.269407988 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.269612074 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.269639969 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.269970894 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.270225048 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.270289898 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.270350933 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.303443909 CEST	443	49762	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:53.310034037 CEST	49762	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:53.310049057 CEST	443	49762	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:53.311398029 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.357017994 CEST	49762	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:53.415858030 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.415890932 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.415924072 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.415951967 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.415956020 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.415987968 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.416009903 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.416668892 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.416742086 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.416750908 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.416812897 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.416857004 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.416857004 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.416866064 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.416903019 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.420998096 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.469028950 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.469048977 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.517024040 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.881087065 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881149054 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881170988 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881201982 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881211042 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.881231070 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881248951 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.881428957 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881479025 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881505966 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881526947 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.881534100 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881556988 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.881588936 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881633043 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.881637096 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881650925 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.881699085 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.881706953 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882049084 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882078886 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882098913 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.882105112 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882132053 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882153988 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882175922 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.882183075 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882206917 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.882213116 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882252932 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.882258892 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882718086 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882741928 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882776022 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.882782936 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.882807016 CEST	443	49762	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:53.882827997 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.882906914 CEST	443	49762	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:53.882999897 CEST	49762	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:53.883805990 CEST	49762	443	192.168.2.17	104.18.70.113
Oct 10, 2024 20:35:53.883821964 CEST	443	49762	104.18.70.113	192.168.2.17
Oct 10, 2024 20:35:53.886149883 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.886509895 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.886531115 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.886557102 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.886583090 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.886590958 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.886609077 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.886678934 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.886728048 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.886734962 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.886780024 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.887672901 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.887732983 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.887811899 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.887856960 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.888581991 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.888638973 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.888761997 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.888819933 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.889563084 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.889622927 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.889694929 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.889748096 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.890470982 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.890531063 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.891279936 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.891330957 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.891500950 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.891555071 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.892201900 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.892267942 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.892375946 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.892433882 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.893021107 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.893083096 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.893659115 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.893714905 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.894131899 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.894200087 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.894354105 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.894412041 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.895159006 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.895221949 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.895282030 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.895329952 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.896120071 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.896183014 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.896327972 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.896392107 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.897211075 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.897274017 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.897324085 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.897377014 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.898202896 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.898269892 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.898731947 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.898794889 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.899549961 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.899610996 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.899697065 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.899756908 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.899898052 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.899923086 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.899950027 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.899955988 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.899998903 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.900197983 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.900245905 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.900526047 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.900551081 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.900569916 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.900576115 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.900594950 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.900856972 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.900913954 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.900921106 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.900962114 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.901021957 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.901082039 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.901477098 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.901539087 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.901549101 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.901604891 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.901700020 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.901755095 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.901921034 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.901949883 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.901967049 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.901972055 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.902013063 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.902468920 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.902530909 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.903038025 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.903098106 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.903539896 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.903548002 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.903579950 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.903611898 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.903620005 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.903647900 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.904886961 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.904906988 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.904946089 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.904952049 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.905002117 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.905715942 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.905741930 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.905786037 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.905791998 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.905826092 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.906234980 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.906259060 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.906299114 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.906303883 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.906327009 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.907015085 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.907031059 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.907082081 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.907092094 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.907104015 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.908046007 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.908071041 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.908122063 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.908128023 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.908158064 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.908524990 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.908545971 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.908624887 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.908631086 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.909225941 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.909249067 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.909292936 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.909297943 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.909327984 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.910123110 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.910140038 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.910177946 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.910183907 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.910214901 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.911089897 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.911109924 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.911148071 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.911153078 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.911180973 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.912050009 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.912066936 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.912106991 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.912111998 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.912122965 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.912139893 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.912142038 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.912170887 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.912177086 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.912225008 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.912993908 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.913017035 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.913055897 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.913062096 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.913094044 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.913934946 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.913958073 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.914001942 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.914006948 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.914012909 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.914022923 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.914047956 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.914079905 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.914084911 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.914182901 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.960665941 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.960683107 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.960755110 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.960762978 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.960815907 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.960977077 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.960994959 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.961042881 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.961050034 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.961096048 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.961358070 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.961378098 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.961436987 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.961445093 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.961488008 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.962305069 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.962320089 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.962384939 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.962392092 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.962425947 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.962434053 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.962439060 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.962451935 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.962480068 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.962486982 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.962516069 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.962524891 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.963299990 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.963313103 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.963361979 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.963368893 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.963407040 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.963407040 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.964170933 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.964185953 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.964260101 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.964267969 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.964312077 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.965010881 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.965023994 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.965101957 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:53.965110064 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:53.965150118 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.050882101 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.050903082 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.050966024 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.050992966 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.051019907 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.051032066 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.051666975 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.051691055 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.051732063 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.051738977 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.051764011 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.051780939 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.052333117 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.052350998 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.052407980 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.052414894 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.052449942 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.052762985 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.052776098 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.052839041 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.052845955 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.052881002 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.053319931 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.053333998 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.053385019 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.053391933 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.053431988 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.054219961 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.054234028 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.054281950 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.054287910 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.054316998 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.054336071 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.055118084 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.055139065 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.055190086 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.055197001 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.055233002 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.095249891 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.095267057 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.095330954 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.095344067 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.095371008 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.095405102 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.141321898 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.141339064 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.141405106 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.141438961 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.141685009 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.141927004 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.141946077 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.142010927 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.142019987 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.142119884 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.142729044 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.142745018 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.142815113 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.142822027 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.142858028 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.143520117 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.143532991 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.143594027 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.143601894 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.143640995 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.144347906 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.144361973 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.144396067 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.144424915 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.144431114 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.144450903 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.144464016 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.144490004 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.145351887 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.145364046 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.145416021 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.145422935 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.145440102 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.146105051 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.146137953 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.146167040 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.146173954 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.146194935 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.146197081 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.146239042 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.146348000 CEST	49761	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.146364927 CEST	443	49761	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.150053024 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.150095940 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.150187016 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.150365114 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.150377989 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.232652903 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.232749939 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.232821941 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.233259916 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.233297110 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.251204014 CEST	49765	443	192.168.2.17	216.198.54.1
Oct 10, 2024 20:35:54.251271009 CEST	443	49765	216.198.54.1	192.168.2.17
Oct 10, 2024 20:35:54.251351118 CEST	49765	443	192.168.2.17	216.198.54.1
Oct 10, 2024 20:35:54.251537085 CEST	49765	443	192.168.2.17	216.198.54.1
Oct 10, 2024 20:35:54.251568079 CEST	443	49765	216.198.54.1	192.168.2.17
Oct 10, 2024 20:35:54.623712063 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.624032021 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.624052048 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.624381065 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.624763012 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.624826908 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.624947071 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.667406082 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.706826925 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.707078934 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.707142115 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.707436085 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.707679033 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.707727909 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.707839966 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.721671104 CEST	443	49765	216.198.54.1	192.168.2.17
Oct 10, 2024 20:35:54.721884966 CEST	49765	443	192.168.2.17	216.198.54.1
Oct 10, 2024 20:35:54.721895933 CEST	443	49765	216.198.54.1	192.168.2.17
Oct 10, 2024 20:35:54.722770929 CEST	443	49765	216.198.54.1	192.168.2.17
Oct 10, 2024 20:35:54.722856998 CEST	49765	443	192.168.2.17	216.198.54.1
Oct 10, 2024 20:35:54.723965883 CEST	49765	443	192.168.2.17	216.198.54.1
Oct 10, 2024 20:35:54.724052906 CEST	443	49765	216.198.54.1	192.168.2.17
Oct 10, 2024 20:35:54.724119902 CEST	49765	443	192.168.2.17	216.198.54.1
Oct 10, 2024 20:35:54.724137068 CEST	443	49765	216.198.54.1	192.168.2.17
Oct 10, 2024 20:35:54.755404949 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.759036064 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.764321089 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.764360905 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.764386892 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.764414072 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.764421940 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.764440060 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.764466047 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.764506102 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.764534950 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.764549017 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.764555931 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.764653921 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.764659882 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.765239000 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.765261889 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.765295029 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.765304089 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.765343904 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.769188881 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.775037050 CEST	49765	443	192.168.2.17	216.198.54.1
Oct 10, 2024 20:35:54.822031975 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.852691889 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.853296995 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.853352070 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.853351116 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.853370905 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.853481054 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.853487968 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.853512049 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.853622913 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.853630066 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.853781939 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.853806973 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.853852034 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.853859901 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.853908062 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.853950977 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.854722977 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.854747057 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.854774952 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.854787111 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.854794979 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.854823112 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.855166912 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855206013 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855297089 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855319977 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855315924 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.855370998 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.855379105 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855381966 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855421066 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.855446100 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855460882 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.855485916 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855562925 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.855571032 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855648994 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855685949 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855705023 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855763912 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.855781078 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.855849028 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.855968952 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.857247114 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.857347012 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.857358932 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.860008001 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.860073090 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.860085011 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.880515099 CEST	443	49765	216.198.54.1	192.168.2.17
Oct 10, 2024 20:35:54.880634069 CEST	443	49765	216.198.54.1	192.168.2.17
Oct 10, 2024 20:35:54.880703926 CEST	49765	443	192.168.2.17	216.198.54.1
Oct 10, 2024 20:35:54.881278038 CEST	49765	443	192.168.2.17	216.198.54.1
Oct 10, 2024 20:35:54.881311893 CEST	443	49765	216.198.54.1	192.168.2.17
Oct 10, 2024 20:35:54.901890993 CEST	49766	443	192.168.2.17	216.198.53.1
Oct 10, 2024 20:35:54.901979923 CEST	443	49766	216.198.53.1	192.168.2.17
Oct 10, 2024 20:35:54.902025938 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.902040958 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.902059078 CEST	49766	443	192.168.2.17	216.198.53.1
Oct 10, 2024 20:35:54.902146101 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.902340889 CEST	49766	443	192.168.2.17	216.198.53.1
Oct 10, 2024 20:35:54.902375937 CEST	443	49766	216.198.53.1	192.168.2.17
Oct 10, 2024 20:35:54.941313028 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.941370010 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.941385984 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.941469908 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.941529036 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.941536903 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.941941977 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.941996098 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.942022085 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.942030907 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.942084074 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.942086935 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.942096949 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.942137003 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.942378044 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.942384005 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.942433119 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.942440987 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.942776918 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.942827940 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.942835093 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.942879915 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.942899942 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.942907095 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.942940950 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.943243980 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.943314075 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.943321943 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.943367004 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.943470001 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.943531036 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.943631887 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.943686962 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.943866968 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.943950891 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.944020987 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.944041014 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.944052935 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.944109917 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.944145918 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.944145918 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.944173098 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.944211006 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.944335938 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.944372892 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.944395065 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.944402933 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.944421053 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.944644928 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.944861889 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.944926977 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.945070028 CEST	49764	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.945101976 CEST	443	49764	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.947675943 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.947724104 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.947805882 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.947967052 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:54.947994947 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:54.998034000 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.030219078 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.030230045 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.030262947 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.030301094 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.030318975 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.030358076 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.030375957 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.030704975 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.030734062 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.030755997 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.030765057 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.030788898 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.030806065 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.031013966 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.031073093 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.031189919 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.031303883 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.031495094 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.031518936 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.031555891 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.031563044 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.031586885 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.031606913 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.031610012 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.031619072 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.031650066 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.031892061 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.031914949 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.031939030 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.031945944 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.031989098 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.077019930 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.284698009 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.284784079 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.284801960 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.284863949 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.284889936 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.284943104 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.284993887 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.285048962 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.285233974 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.285284042 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.285304070 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.285348892 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.285659075 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.285706043 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.285763025 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.285813093 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.285835028 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.285877943 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.287053108 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.287113905 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.287240982 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.287303925 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.287498951 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.287552118 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.287601948 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.287656069 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.287798882 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.287858963 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.287950039 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.287998915 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.288311005 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.288367033 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.288377047 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.288434982 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.288443089 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.288491011 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.289172888 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.289180994 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.289237976 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.289249897 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.289257050 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.289303064 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.289755106 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.289773941 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.289839029 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.289844990 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.290296078 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.290321112 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.290369034 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.290375948 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.290414095 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.290880919 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.290895939 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.290937901 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.290946007 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.290991068 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.291630030 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.291649103 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.291687965 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.291695118 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.291722059 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.292475939 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.292490959 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.292555094 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.292562008 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.296158075 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.296176910 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.296238899 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.296247005 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.297079086 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.297095060 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.297156096 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.297163963 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.297637939 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.297656059 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.297708035 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.297714949 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.297745943 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.298089027 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.298105001 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.298166990 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.298175097 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.299124002 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.299143076 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.299187899 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.299195051 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.299226999 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.299571037 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.299585104 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.299649954 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.299657106 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.300302029 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.300318956 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.300365925 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.300374031 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.300400972 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.301328897 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.301342010 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.301414013 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.301420927 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.304151058 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.304168940 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.304225922 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.304234028 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.304739952 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.304754019 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.304800987 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.304809093 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.304831982 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.305202007 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.305218935 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.305258989 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.305264950 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.305293083 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.305512905 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.305526018 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.305577993 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.305584908 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.306282043 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.306299925 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.306365967 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.306374073 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.306833982 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.306848049 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.306915045 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.306921005 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.306943893 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.306962013 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.307013035 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.307019949 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.307872057 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.307883978 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.307966948 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.307972908 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.348193884 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.385391951 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.385406971 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.385890961 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.385900021 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.386092901 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.386110067 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.386131048 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.386137962 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.386198997 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.386198997 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.386691093 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.386759996 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.386801004 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.386805058 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.386836052 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.387423038 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.387434959 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.387597084 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.387603998 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.388077974 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.388091087 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.388377905 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.388384104 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.388520002 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.388535023 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.388586998 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.388596058 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.388633013 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.389292955 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.389307022 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.389559031 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.389565945 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.390074968 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.390088081 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.390249968 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.390256882 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.405163050 CEST	443	49766	216.198.53.1	192.168.2.17
Oct 10, 2024 20:35:55.405405998 CEST	49766	443	192.168.2.17	216.198.53.1
Oct 10, 2024 20:35:55.405437946 CEST	443	49766	216.198.53.1	192.168.2.17
Oct 10, 2024 20:35:55.406748056 CEST	443	49766	216.198.53.1	192.168.2.17
Oct 10, 2024 20:35:55.406907082 CEST	49766	443	192.168.2.17	216.198.53.1
Oct 10, 2024 20:35:55.407094955 CEST	49766	443	192.168.2.17	216.198.53.1
Oct 10, 2024 20:35:55.407159090 CEST	443	49766	216.198.53.1	192.168.2.17
Oct 10, 2024 20:35:55.407191038 CEST	49766	443	192.168.2.17	216.198.53.1
Oct 10, 2024 20:35:55.418653965 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.418886900 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.418952942 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.419471025 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.419944048 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.420032978 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.420133114 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.443425894 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.451445103 CEST	443	49766	216.198.53.1	192.168.2.17
Oct 10, 2024 20:35:55.459095001 CEST	49766	443	192.168.2.17	216.198.53.1
Oct 10, 2024 20:35:55.459131956 CEST	443	49766	216.198.53.1	192.168.2.17
Oct 10, 2024 20:35:55.463424921 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.474375963 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.474401951 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.474505901 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.474505901 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.474523067 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.474647045 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.474848986 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.474865913 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.474968910 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.474977016 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.475075006 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.475090027 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.475547075 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.475565910 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.475667953 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.475667953 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.475677967 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.475773096 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.476253033 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.476268053 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.476620913 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.476628065 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.476824045 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.476896048 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.476916075 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.477093935 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.477102041 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.477262974 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.477444887 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.477461100 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.477608919 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.477615118 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.477684975 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.478187084 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.478203058 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.478344917 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.478352070 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.478576899 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.478916883 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.478940964 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.479229927 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.479237080 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.479420900 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.507435083 CEST	49766	443	192.168.2.17	216.198.53.1
Oct 10, 2024 20:35:55.552181959 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.552306890 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.552407980 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.552438021 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.552465916 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.552567959 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.552651882 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.552680969 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.552686930 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.552803040 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.552830935 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.552834988 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.553296089 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.553329945 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.553333998 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.553560019 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.557145119 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.557276011 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.557281017 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.562180996 CEST	443	49766	216.198.53.1	192.168.2.17
Oct 10, 2024 20:35:55.562313080 CEST	443	49766	216.198.53.1	192.168.2.17
Oct 10, 2024 20:35:55.562841892 CEST	49766	443	192.168.2.17	216.198.53.1
Oct 10, 2024 20:35:55.563189030 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.563224077 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.563286066 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.563287020 CEST	49766	443	192.168.2.17	216.198.53.1
Oct 10, 2024 20:35:55.563302994 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.563334942 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.563333988 CEST	443	49766	216.198.53.1	192.168.2.17
Oct 10, 2024 20:35:55.563380957 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.563441038 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.565608978 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.565619946 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.602117062 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.649588108 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.649669886 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.649698973 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.649729967 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.649760962 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.649780035 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.649815083 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.650065899 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.650099993 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.650183916 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.650211096 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.650332928 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.651417017 CEST	49767	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:55.651432037 CEST	443	49767	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.775403976 CEST	443	49763	104.18.72.113	192.168.2.17
Oct 10, 2024 20:35:55.775536060 CEST	49763	443	192.168.2.17	104.18.72.113
Oct 10, 2024 20:35:56.047507048 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 10, 2024 20:35:56.350068092 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 10, 2024 20:35:56.923053980 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 10, 2024 20:35:56.955085993 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 10, 2024 20:35:57.688030958 CEST	443	49731	142.250.185.132	192.168.2.17
Oct 10, 2024 20:35:57.688163996 CEST	443	49731	142.250.185.132	192.168.2.17
Oct 10, 2024 20:35:57.688227892 CEST	49731	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:35:57.824779987 CEST	49731	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:35:57.824820995 CEST	443	49731	142.250.185.132	192.168.2.17
Oct 10, 2024 20:35:58.168165922 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 10, 2024 20:36:00.578039885 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 10, 2024 20:36:02.384402037 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 10, 2024 20:36:05.382275105 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 10, 2024 20:36:06.531179905 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 10, 2024 20:36:13.374372959 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:36:13.381191969 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:36:13.788930893 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:36:13.789031982 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:36:13.789129019 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:36:13.789211988 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:36:13.790282011 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:36:13.790318012 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:36:13.790409088 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:36:13.790787935 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:36:13.790901899 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:36:13.795196056 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:36:13.795300961 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:36:13.795651913 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:36:13.795664072 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:36:13.795794964 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:36:13.795970917 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:36:13.888509035 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:36:13.888616085 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:36:13.979155064 CEST	443	49691	204.79.197.200	192.168.2.17
Oct 10, 2024 20:36:13.979301929 CEST	49691	443	192.168.2.17	204.79.197.200
Oct 10, 2024 20:36:14.990022898 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 10, 2024 20:36:21.301666021 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:21.301760912 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:21.301875114 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:21.302347898 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:21.302382946 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.131230116 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.131377935 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:22.133133888 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:22.133146048 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.133517981 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.135479927 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:22.179441929 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.473551989 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.473578930 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.473599911 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.473680973 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:22.473748922 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.473793983 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:22.473826885 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:22.474630117 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.474703074 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:22.474709988 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.474749088 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.474781990 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:22.475359917 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.475445986 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:22.478337049 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:22.478374958 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:22.478401899 CEST	49768	443	192.168.2.17	52.149.20.212
Oct 10, 2024 20:36:22.478415966 CEST	443	49768	52.149.20.212	192.168.2.17
Oct 10, 2024 20:36:26.766076088 CEST	49769	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:36:26.766175985 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:26.766448021 CEST	49769	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:36:26.766448021 CEST	49769	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:36:26.766585112 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:27.284522057 CEST	49770	443	192.168.2.17	13.107.5.88
Oct 10, 2024 20:36:27.284591913 CEST	443	49770	13.107.5.88	192.168.2.17
Oct 10, 2024 20:36:27.284692049 CEST	49770	443	192.168.2.17	13.107.5.88
Oct 10, 2024 20:36:27.320457935 CEST	49770	443	192.168.2.17	13.107.5.88
Oct 10, 2024 20:36:27.320494890 CEST	443	49770	13.107.5.88	192.168.2.17
Oct 10, 2024 20:36:28.228003979 CEST	443	49770	13.107.5.88	192.168.2.17
Oct 10, 2024 20:36:28.228099108 CEST	49770	443	192.168.2.17	13.107.5.88
Oct 10, 2024 20:36:28.231802940 CEST	49770	443	192.168.2.17	13.107.5.88
Oct 10, 2024 20:36:28.231829882 CEST	443	49770	13.107.5.88	192.168.2.17
Oct 10, 2024 20:36:28.232096910 CEST	443	49770	13.107.5.88	192.168.2.17
Oct 10, 2024 20:36:28.235917091 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:28.236387014 CEST	49769	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:36:28.236409903 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:28.237025976 CEST	49769	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:36:28.237034082 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:28.237047911 CEST	49769	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:36:28.237060070 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:28.267896891 CEST	49770	443	192.168.2.17	13.107.5.88
Oct 10, 2024 20:36:28.315411091 CEST	443	49770	13.107.5.88	192.168.2.17
Oct 10, 2024 20:36:28.538769007 CEST	443	49770	13.107.5.88	192.168.2.17
Oct 10, 2024 20:36:28.541867971 CEST	49770	443	192.168.2.17	13.107.5.88
Oct 10, 2024 20:36:28.541918993 CEST	443	49770	13.107.5.88	192.168.2.17
Oct 10, 2024 20:36:28.542087078 CEST	443	49770	13.107.5.88	192.168.2.17
Oct 10, 2024 20:36:28.542110920 CEST	49770	443	192.168.2.17	13.107.5.88
Oct 10, 2024 20:36:28.542138100 CEST	49770	443	192.168.2.17	13.107.5.88
Oct 10, 2024 20:36:28.728604078 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:28.728635073 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:28.728676081 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:28.728710890 CEST	49769	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:36:28.728725910 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:28.728734016 CEST	49769	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:36:28.728749037 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:28.728862047 CEST	49769	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:36:28.729176998 CEST	49769	443	192.168.2.17	20.190.159.73
Oct 10, 2024 20:36:28.729192019 CEST	443	49769	20.190.159.73	192.168.2.17
Oct 10, 2024 20:36:28.810590982 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:28.810682058 CEST	443	49771	23.11.206.59	192.168.2.17
Oct 10, 2024 20:36:28.810956955 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:28.812382936 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:28.812432051 CEST	443	49771	23.11.206.59	192.168.2.17
Oct 10, 2024 20:36:29.552582979 CEST	443	49771	23.11.206.59	192.168.2.17
Oct 10, 2024 20:36:29.552700996 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:29.598280907 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:29.598309994 CEST	443	49771	23.11.206.59	192.168.2.17
Oct 10, 2024 20:36:29.598788977 CEST	443	49771	23.11.206.59	192.168.2.17
Oct 10, 2024 20:36:29.598865986 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:29.600663900 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:29.600720882 CEST	443	49771	23.11.206.59	192.168.2.17
Oct 10, 2024 20:36:29.866208076 CEST	443	49771	23.11.206.59	192.168.2.17
Oct 10, 2024 20:36:29.866260052 CEST	443	49771	23.11.206.59	192.168.2.17
Oct 10, 2024 20:36:29.866297007 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:29.866336107 CEST	443	49771	23.11.206.59	192.168.2.17
Oct 10, 2024 20:36:29.866369009 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:29.866754055 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:29.868575096 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:29.868630886 CEST	443	49771	23.11.206.59	192.168.2.17
Oct 10, 2024 20:36:29.868690968 CEST	49771	443	192.168.2.17	23.11.206.59
Oct 10, 2024 20:36:47.161170006 CEST	49773	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:36:47.161221981 CEST	443	49773	142.250.185.132	192.168.2.17
Oct 10, 2024 20:36:47.161329985 CEST	49773	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:36:47.161545038 CEST	49773	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:36:47.161556959 CEST	443	49773	142.250.185.132	192.168.2.17
Oct 10, 2024 20:36:48.070487976 CEST	443	49773	142.250.185.132	192.168.2.17
Oct 10, 2024 20:36:48.070836067 CEST	49773	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:36:48.070863008 CEST	443	49773	142.250.185.132	192.168.2.17
Oct 10, 2024 20:36:48.071114063 CEST	443	49773	142.250.185.132	192.168.2.17
Oct 10, 2024 20:36:48.071373940 CEST	49773	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:36:48.071434975 CEST	443	49773	142.250.185.132	192.168.2.17
Oct 10, 2024 20:36:48.119927883 CEST	49773	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:36:57.865299940 CEST	443	49773	142.250.185.132	192.168.2.17
Oct 10, 2024 20:36:57.865391016 CEST	443	49773	142.250.185.132	192.168.2.17
Oct 10, 2024 20:36:57.865608931 CEST	49773	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:36:58.631813049 CEST	49773	443	192.168.2.17	142.250.185.132
Oct 10, 2024 20:36:58.631855011 CEST	443	49773	142.250.185.132	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 20:35:42.337486982 CEST	51442	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:42.339442968 CEST	52427	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:42.343684912 CEST	53	53752	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:42.377342939 CEST	53	52427	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:42.383238077 CEST	53	51442	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:42.391666889 CEST	53	61326	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:43.299305916 CEST	64149	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:43.299464941 CEST	59952	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:43.341064930 CEST	53	59952	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:43.343429089 CEST	53	64149	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:43.428359985 CEST	53	65057	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:45.498811960 CEST	50042	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:45.499110937 CEST	63464	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:45.507441998 CEST	53	50042	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:45.526401997 CEST	53	63464	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:46.556632996 CEST	49381	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:46.556804895 CEST	58556	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:46.565639019 CEST	53	49381	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:46.566432953 CEST	53	58556	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:46.600661993 CEST	59730	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:46.600838900 CEST	50039	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:46.632205009 CEST	53	59730	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:46.651524067 CEST	53	50039	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:47.102880955 CEST	55306	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:47.103094101 CEST	64331	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:47.112323046 CEST	53	55306	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:47.112335920 CEST	53	64331	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:47.223612070 CEST	51432	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:47.223959923 CEST	52013	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:47.231498003 CEST	53	52013	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:47.232135057 CEST	53	51432	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:47.451756001 CEST	64951	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:47.451947927 CEST	57761	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:47.483294010 CEST	53	64951	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:47.521775961 CEST	53	57761	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:50.607367039 CEST	56190	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:50.607521057 CEST	55965	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:50.616997957 CEST	53	56190	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:50.623115063 CEST	53	55965	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:50.710731030 CEST	53	60169	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:51.233740091 CEST	57015	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:51.233917952 CEST	63919	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:51.241653919 CEST	53	57015	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:51.241695881 CEST	53	63919	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:51.523339987 CEST	50174	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:51.523492098 CEST	49617	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:51.862611055 CEST	53	49617	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:51.862649918 CEST	53	50174	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:52.034003019 CEST	64460	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:52.034346104 CEST	61793	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:52.035329103 CEST	51905	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:52.035465956 CEST	51811	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:52.041977882 CEST	53	61793	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:52.042021990 CEST	53	64460	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:52.043270111 CEST	53	51905	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:52.043437958 CEST	53	51811	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:52.788233042 CEST	56414	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:52.788672924 CEST	64594	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:52.795486927 CEST	53	56414	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:52.795727968 CEST	53	64594	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:54.233818054 CEST	61010	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:54.233944893 CEST	54902	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:54.249407053 CEST	53	61010	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:54.250844955 CEST	53	54902	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:54.883976936 CEST	51158	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:54.884121895 CEST	54913	53	192.168.2.17	1.1.1.1
Oct 10, 2024 20:35:54.901369095 CEST	53	51158	1.1.1.1	192.168.2.17
Oct 10, 2024 20:35:54.901380062 CEST	53	54913	1.1.1.1	192.168.2.17
Oct 10, 2024 20:36:00.507843018 CEST	53	59166	1.1.1.1	192.168.2.17
Oct 10, 2024 20:36:19.419368029 CEST	53	54464	1.1.1.1	192.168.2.17
Oct 10, 2024 20:36:41.930957079 CEST	53	61281	1.1.1.1	192.168.2.17
Oct 10, 2024 20:36:42.282962084 CEST	53	57198	1.1.1.1	192.168.2.17
Oct 10, 2024 20:36:44.817348957 CEST	138	138	192.168.2.17	192.168.2.255
Oct 10, 2024 20:37:10.489299059 CEST	53	50468	1.1.1.1	192.168.2.17

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 10, 2024 20:35:45.526585102 CEST	192.168.2.17	1.1.1.1	c290	(Port unreachable)	Destination Unreachable
Oct 10, 2024 20:35:46.651590109 CEST	192.168.2.17	1.1.1.1	c28e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 10, 2024 20:35:42.337486982 CEST	192.168.2.17	1.1.1.1	0xe948	Standard query (0)	avp100.huddle.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:42.339442968 CEST	192.168.2.17	1.1.1.1	0x98bc	Standard query (0)	avp100.huddle.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:43.299305916 CEST	192.168.2.17	1.1.1.1	0x2c20	Standard query (0)	login.huddle.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:43.299464941 CEST	192.168.2.17	1.1.1.1	0xe29b	Standard query (0)	login.huddle.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:45.498811960 CEST	192.168.2.17	1.1.1.1	0xd52a	Standard query (0)	login.huddle.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:45.499110937 CEST	192.168.2.17	1.1.1.1	0x76b6	Standard query (0)	login.huddle.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:46.556632996 CEST	192.168.2.17	1.1.1.1	0x7d07	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:46.556804895 CEST	192.168.2.17	1.1.1.1	0x88f1	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:46.600661993 CEST	192.168.2.17	1.1.1.1	0x6a3e	Standard query (0)	api.huddle.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:46.600838900 CEST	192.168.2.17	1.1.1.1	0x3f8a	Standard query (0)	api.huddle.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:47.102880955 CEST	192.168.2.17	1.1.1.1	0xc731	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:47.103094101 CEST	192.168.2.17	1.1.1.1	0x367e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:47.223612070 CEST	192.168.2.17	1.1.1.1	0xe4b8	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:47.223959923 CEST	192.168.2.17	1.1.1.1	0xbf0c	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:47.451756001 CEST	192.168.2.17	1.1.1.1	0xb6bb	Standard query (0)	api.huddle.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:47.451947927 CEST	192.168.2.17	1.1.1.1	0xc3f2	Standard query (0)	api.huddle.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:50.607367039 CEST	192.168.2.17	1.1.1.1	0xdada	Standard query (0)	assets.zendesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:50.607521057 CEST	192.168.2.17	1.1.1.1	0x400a	Standard query (0)	assets.zendesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:51.233740091 CEST	192.168.2.17	1.1.1.1	0xb35f	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:51.233917952 CEST	192.168.2.17	1.1.1.1	0xae2	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:51.523339987 CEST	192.168.2.17	1.1.1.1	0x5199	Standard query (0)	avp100.huddle.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:51.523492098 CEST	192.168.2.17	1.1.1.1	0xfc1c	Standard query (0)	avp100.huddle.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:52.034003019 CEST	192.168.2.17	1.1.1.1	0x8215	Standard query (0)	static.zdassets.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:52.034346104 CEST	192.168.2.17	1.1.1.1	0x163e	Standard query (0)	static.zdassets.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:52.035329103 CEST	192.168.2.17	1.1.1.1	0xe686	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:52.035465956 CEST	192.168.2.17	1.1.1.1	0xf1bb	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:52.788233042 CEST	192.168.2.17	1.1.1.1	0xc558	Standard query (0)	ekr.zdassets.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:52.788672924 CEST	192.168.2.17	1.1.1.1	0x3f28	Standard query (0)	ekr.zdassets.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:54.233818054 CEST	192.168.2.17	1.1.1.1	0x9cf6	Standard query (0)	huddle.zendesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:54.233944893 CEST	192.168.2.17	1.1.1.1	0xba3c	Standard query (0)	huddle.zendesk.com	65	IN (0x0001)	false
Oct 10, 2024 20:35:54.883976936 CEST	192.168.2.17	1.1.1.1	0x4c06	Standard query (0)	huddle.zendesk.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:54.884121895 CEST	192.168.2.17	1.1.1.1	0xbfce	Standard query (0)	huddle.zendesk.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 10, 2024 20:35:42.377342939 CEST	1.1.1.1	192.168.2.17	0x98bc	No error (0)	avp100.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:42.383238077 CEST	1.1.1.1	192.168.2.17	0xe948	No error (0)	avp100.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:42.383238077 CEST	1.1.1.1	192.168.2.17	0xe948	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		18.210.252.197	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:42.383238077 CEST	1.1.1.1	192.168.2.17	0xe948	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		52.23.1.4	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:42.383238077 CEST	1.1.1.1	192.168.2.17	0xe948	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		3.93.32.136	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:43.341064930 CEST	1.1.1.1	192.168.2.17	0xe29b	No error (0)	login.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:43.343429089 CEST	1.1.1.1	192.168.2.17	0x2c20	No error (0)	login.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:43.343429089 CEST	1.1.1.1	192.168.2.17	0x2c20	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		52.23.1.4	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:43.343429089 CEST	1.1.1.1	192.168.2.17	0x2c20	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		3.93.32.136	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:43.343429089 CEST	1.1.1.1	192.168.2.17	0x2c20	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		18.210.252.197	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:45.507441998 CEST	1.1.1.1	192.168.2.17	0xd52a	No error (0)	login.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:45.507441998 CEST	1.1.1.1	192.168.2.17	0xd52a	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		3.93.32.136	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:45.507441998 CEST	1.1.1.1	192.168.2.17	0xd52a	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		18.210.252.197	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:45.507441998 CEST	1.1.1.1	192.168.2.17	0xd52a	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		52.23.1.4	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:45.526401997 CEST	1.1.1.1	192.168.2.17	0x76b6	No error (0)	login.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:46.565639019 CEST	1.1.1.1	192.168.2.17	0x7d07	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:46.632205009 CEST	1.1.1.1	192.168.2.17	0x6a3e	No error (0)	api.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:46.632205009 CEST	1.1.1.1	192.168.2.17	0x6a3e	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		52.23.1.4	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:46.632205009 CEST	1.1.1.1	192.168.2.17	0x6a3e	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		3.93.32.136	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:46.632205009 CEST	1.1.1.1	192.168.2.17	0x6a3e	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		18.210.252.197	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:46.651524067 CEST	1.1.1.1	192.168.2.17	0x3f8a	No error (0)	api.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:47.112323046 CEST	1.1.1.1	192.168.2.17	0xc731	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:47.112335920 CEST	1.1.1.1	192.168.2.17	0x367e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 10, 2024 20:35:47.232135057 CEST	1.1.1.1	192.168.2.17	0xe4b8	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:47.483294010 CEST	1.1.1.1	192.168.2.17	0xb6bb	No error (0)	api.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:47.483294010 CEST	1.1.1.1	192.168.2.17	0xb6bb	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		18.210.252.197	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:47.483294010 CEST	1.1.1.1	192.168.2.17	0xb6bb	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		52.23.1.4	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:47.483294010 CEST	1.1.1.1	192.168.2.17	0xb6bb	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		3.93.32.136	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:47.521775961 CEST	1.1.1.1	192.168.2.17	0xc3f2	No error (0)	api.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:50.616997957 CEST	1.1.1.1	192.168.2.17	0xdada	No error (0)	assets.zendesk.com	cf.zdassets.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:50.616997957 CEST	1.1.1.1	192.168.2.17	0xdada	No error (0)	cf.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:50.616997957 CEST	1.1.1.1	192.168.2.17	0xdada	No error (0)	cf.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:50.623115063 CEST	1.1.1.1	192.168.2.17	0x400a	No error (0)	assets.zendesk.com	cf.zdassets.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:51.241653919 CEST	1.1.1.1	192.168.2.17	0xb35f	No error (0)	static.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:51.241653919 CEST	1.1.1.1	192.168.2.17	0xb35f	No error (0)	static.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:51.862611055 CEST	1.1.1.1	192.168.2.17	0xfc1c	No error (0)	avp100.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:51.862649918 CEST	1.1.1.1	192.168.2.17	0x5199	No error (0)	avp100.huddle.com	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 20:35:51.862649918 CEST	1.1.1.1	192.168.2.17	0x5199	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		3.93.32.136	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:51.862649918 CEST	1.1.1.1	192.168.2.17	0x5199	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		52.23.1.4	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:51.862649918 CEST	1.1.1.1	192.168.2.17	0x5199	No error (0)	aws-uslive-web-public-elb-1943012778.us-east-1.elb.amazonaws.com		18.210.252.197	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:52.042021990 CEST	1.1.1.1	192.168.2.17	0x8215	No error (0)	static.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:52.042021990 CEST	1.1.1.1	192.168.2.17	0x8215	No error (0)	static.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:52.043270111 CEST	1.1.1.1	192.168.2.17	0xe686	No error (0)	ekr.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:52.043270111 CEST	1.1.1.1	192.168.2.17	0xe686	No error (0)	ekr.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:52.795486927 CEST	1.1.1.1	192.168.2.17	0xc558	No error (0)	ekr.zdassets.com		104.18.70.113	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:52.795486927 CEST	1.1.1.1	192.168.2.17	0xc558	No error (0)	ekr.zdassets.com		104.18.72.113	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:54.249407053 CEST	1.1.1.1	192.168.2.17	0x9cf6	No error (0)	huddle.zendesk.com		216.198.54.1	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:54.249407053 CEST	1.1.1.1	192.168.2.17	0x9cf6	No error (0)	huddle.zendesk.com		216.198.53.1	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:54.901369095 CEST	1.1.1.1	192.168.2.17	0x4c06	No error (0)	huddle.zendesk.com		216.198.53.1	A (IP address)	IN (0x0001)	false
Oct 10, 2024 20:35:54.901369095 CEST	1.1.1.1	192.168.2.17	0x4c06	No error (0)	huddle.zendesk.com		216.198.54.1	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

avp100.huddle.com

slscr.update.microsoft.com

https:

js-agent.newrelic.com

api.huddle.com

assets.zendesk.com

static.zdassets.com

ekr.zdassets.com

fs.microsoft.com

huddle.zendesk.com

evoke-windowsservices-tas.msedge.net

www.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49703	20.190.159.73	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:41 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-10-10 18:35:41 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-10 18:35:41 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 10 Oct 2024 18:34:41 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_SN1 x-ms-request-id: 014695df-1d5d-4310-bdb5-642bf4137b06 PPServer: PPV: 30 H: SN1PEPF00040151 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 10 Oct 2024 18:35:41 GMT Connection: close Content-Length: 11389
2024-10-10 18:35:41 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49706	20.190.159.73	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:42 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-10 18:35:42 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-10 18:35:43 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 10 Oct 2024 18:34:42 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BL2 x-ms-request-id: 94af9266-d9c3-4521-a0a8-05c2ef3c2e66 PPServer: PPV: 30 H: BL02EPF0001D901 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 10 Oct 2024 18:35:42 GMT Connection: close Content-Length: 11389
2024-10-10 18:35:43 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49708	18.210.252.197	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:43 UTC	684	OUT	GET /workspace/1189459/files/ HTTP/1.1 Host: avp100.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:43 UTC	346	IN	HTTP/1.1 401 Unauthorized Date: Thu, 10 Oct 2024 18:35:43 GMT Content-Type: text/html; charset=utf-8 Content-Length: 793 Connection: close Cache-Control: private, no-store X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:43 UTC	793	IN	Data Raw: 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 6c 6f 63 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 61 6e 64 69 6e 67 55 72 6c 20 3d 20 6c 6f 63 2e 68 72 65 66 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 63 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 68 75 64 64 6c 65 2e 63 6f 6d 2f 75 73 65 72 2f 3f 73 75 62 64 6f 6d 61 69 6e 3d 61 76 70 31 30 30 26 52 65 74 75 72 6e 55 72 6c 3d 27 20 2b 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f Data Ascii: <!doctype html><html> <head> <meta charset="utf-8"> <script> (function(loc){ var landingUrl = loc.href; loc.replace('https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=' + encodeURICompo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49711	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:43 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MgFfPwO4RwD58wp&MD=7N1b1yk3 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-10 18:35:44 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f6ef5427-11d6-4f75-b636-2eba0877986e MS-RequestId: 586e5bc1-9b27-4f12-a13e-9c940a7f52c0 MS-CV: YW/TNXpMk0+eud6v.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 10 Oct 2024 18:35:43 GMT Connection: close Content-Length: 24490
2024-10-10 18:35:44 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-10 18:35:44 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49713	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:44 UTC	800	OUT	GET /user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://avp100.huddle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:44 UTC	356	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:44 GMT Content-Type: text/html Content-Length: 27709 Connection: close Cache-Control: private, no-store Last-Modified: Wed, 21 Aug 2024 02:15:19 GMT Accept-Ranges: bytes ETag: "36eb52f86ff3da1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:44 UTC	16028	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 36 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 20 6e 6f 6e 2d 6a 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 20 6e 6f 6e 2d 6a 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 20 6e 6f 6e 2d 6a 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 20 6e 6f 6e 2d 6a 73 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 Data Ascii: <!DOCTYPE html>...[if lte IE 6 ]><html class="ie ie6 non-js"><![endif]-->...[if IE 7 ]><html class="ie ie7 non-js"><![endif]-->...[if IE 8 ]><html class="ie ie8 non-js"><![endif]-->...[if gte IE 9 ]><html class="ie ie9 non-js"><![endif]-->...[if
2024-10-10 18:35:44 UTC	11681	IN	Data Raw: 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 6f 75 72 63 65 74 69 6d 69 6e 67 62 75 66 66 65 72 66 75 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 28 22 62 73 74 52 65 73 6f 75 72 63 65 22 2c 5b 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 72 65 73 6f 75 72 63 65 22 29 5d 29 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 63 6c 65 61 72 52 65 73 6f 75 72 63 65 54 69 6d 69 6e 67 73 28 29 7d 2c 21 31 29 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 63 72 6f 6c 6c 22 2c 65 2c 21 31 29 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 Data Ascii: ndow.performance.addEventListener("resourcetimingbufferfull",function(){r("bstResource",[window.performance.getEntriesByType("resource")]),window.performance.clearResourceTimings()},!1)),document.addEventListener("scroll",e,!1),document.addEventListener("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49712	20.190.159.73	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:44 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-10-10 18:35:44 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-10 18:35:44 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 10 Oct 2024 18:34:44 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_SN1 x-ms-request-id: e6e6cc9e-0164-4786-9951-88ce61959984 PPServer: PPV: 30 H: SN1PEPF0002F0C2 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 10 Oct 2024 18:35:43 GMT Connection: close Content-Length: 11389
2024-10-10 18:35:44 UTC	11389	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49714	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:44 UTC	718	OUT	GET /user/css/assets/fonts/fontawesome-webfont-v3.2.1.woff HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.huddle.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:44 UTC	366	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:44 GMT Content-Type: application/font-woff Content-Length: 43572 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:26 GMT Accept-Ranges: bytes ETag: "065a745f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:44 UTC	16018	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 aa 34 00 0e 00 00 00 01 34 e4 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 44 00 00 00 1c 00 00 00 1c 65 70 61 d1 47 44 45 46 00 00 01 60 00 00 00 1f 00 00 00 20 01 b4 00 04 4f 53 2f 32 00 00 01 80 00 00 00 3e 00 00 00 60 8b 02 7a 12 63 6d 61 70 00 00 01 c0 00 00 01 20 00 00 02 6a e9 35 b0 f2 67 61 73 70 00 00 02 e0 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 02 e8 00 00 96 af 00 01 13 c4 81 32 87 f7 68 65 61 64 00 00 99 98 00 00 00 31 00 00 00 36 02 5c c3 22 68 68 65 61 00 00 99 cc 00 00 00 1f 00 00 00 24 0d 82 07 e1 68 6d 74 78 00 00 99 ec 00 00 01 c2 00 00 06 16 d9 ec 0e 11 6c 6f 63 61 00 00 9b b0 00 00 02 f5 00 00 03 10 71 10 b5 ea 6d 61 78 70 00 00 9e a8 00 00 00 Data Ascii: wOFF44FFTMDepaGDEF` OS/2>`zcmap j5gaspglyf2head16\"hhea$hmtxlocaqmaxp
2024-10-10 18:35:44 UTC	16384	IN	Data Raw: a8 4e 8f db b0 f0 0c 1c b1 62 a1 63 e9 40 0a fa 75 4e a4 70 f6 9a 55 2f 3c 0b 5b 74 aa a5 3f ad 8d cc fe cc b3 d7 dd f1 24 40 37 1f 12 8e 5c f0 89 c3 5b e0 72 cf a3 d7 c4 7b db c2 8d 96 c8 1c 52 63 ad 73 d7 78 15 08 a6 fb f3 24 5f d3 d1 1c e2 79 89 2c cf 79 10 c3 0e c5 bd dd 73 5b 56 a6 67 ba 06 93 a9 81 0a 2b b2 26 78 fa 8a 5c 2e 5e 1a dd 22 0e d6 ec f9 9f ba 4d 1c 38 cf e3 9e d9 73 f8 82 f3 0f 77 cd db b3 3f 92 eb 59 e1 ce 2e e1 71 10 1d aa b1 bf c2 ab 65 7c 6d 06 5b 42 79 24 a8 e9 84 56 08 b3 3b 55 d9 a1 df 14 3a 98 d9 5e dd 66 1c fb cf 8e 32 c6 d8 96 aa 4e b9 56 b1 44 01 64 f4 ef 06 32 86 82 c7 cb b0 a7 32 09 f7 f8 b8 a9 4e 9d 04 0d 04 a1 21 4f a7 bd 38 f9 b4 9f 3f 06 1c eb f4 cf 1a 76 55 c3 e4 54 80 bb fa 23 40 68 05 9c b9 ea f1 49 71 5d 94 97 4d f5 Data Ascii: Nbc@uNpU/<[t?$@7\[r{Rcsx$_y,ys[Vg+&x\.^"M8sw?Y.qe\|m[By$V;U:^f2NVDd22N!O8?vUT#@hIq]M
2024-10-10 18:35:44 UTC	19	IN	Data Raw: 65 10 4d 6c 3f ae eb d7 83 c2 e5 7f 3d 07 1a 05 95 8a 06 Data Ascii: eMl?=
2024-10-10 18:35:44 UTC	11151	IN	Data Raw: f4 96 bf 2c ca 7c a2 14 34 10 c2 ed f4 65 6b d7 1e 3e bc 76 2d 3c 9a 59 2b db 8b 8a eb dd 88 eb 1d 2c d4 9b 3d 63 bd 41 49 cd e8 6f 6c 87 6f 51 ef 3b 46 d4 4e 3c 63 2b e4 ab fd 5f 63 d5 5a 1a 2e 54 8f b9 74 54 13 a8 91 cc b6 1d ad 3b 7d 59 ac 39 bc 96 6b a6 26 63 dc bd e0 37 bc e2 91 33 01 fd 6f 1e c3 a1 b1 ab cc 78 8a b5 11 58 3d 90 22 7d 3a 45 0e 24 99 b8 23 4d 0e e4 29 05 a0 df fe b1 6a 5d 44 25 f0 f9 59 76 65 7d 6b ae fe fa 42 fd 4b 6b 19 fc 86 57 5f a2 75 39 cb 31 33 a2 02 92 67 ec d6 80 83 25 75 1e d1 1a 85 76 f2 e4 ab b2 79 ac a6 00 9b cf de 00 a4 cf b3 af 64 fb 7c 0f f6 1c 0e 12 c7 00 62 ed 3f 73 9f 0f 9a 78 9a b0 87 24 64 d9 35 e1 c7 3c 97 59 ec 7b fc 01 60 90 88 76 40 9c 34 30 bf 0d db bd b0 b5 b1 63 72 6f c3 84 cc 77 ce 50 e9 4f 1c 4d 7d db c6 Data Ascii: ,\|4ek>v-<Y+,=cAIoloQ;FN<c+_cZ.TtT;}Y9k&c73oxX="}:E$#M)j]D%Yve}kBKkW_u913g%uvyd\|b?sx$d5<Y{`v@40crowPOM}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49717	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:45 UTC	678	OUT	GET /user/css/styles.min.1452.css HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:45 UTC	354	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:45 GMT Content-Type: text/css Content-Length: 241528 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:58 GMT Accept-Ranges: bytes ETag: "035ba58f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:45 UTC	16030	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 68 69 64 65 2d 74 65 78 74 7b 66 6f 6e 74 3a 30 2f 30 20 61 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 69 6e 70 75 74 2d 62 6c 6f 63 6b 2d 6c 65 76 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 38 70 Data Ascii: @charset "UTF-8";.clearfix:after,.clearfix:before{display:table;content:""}.clearfix:after{clear:both}.hide-text{font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0}.input-block-level{display:block;width:100%;min-height:28p
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 6f 6e 2d 67 61 6d 65 70 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 9b 22 7d 2e 69 63 6f 6e 2d 6b 65 79 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 9c 22 7d 2e 69 63 6f 6e 2d 66 6c 61 67 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 9d 22 7d 2e 69 63 6f 6e 2d 66 6c 61 67 2d 63 68 65 63 6b 65 72 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 9e 22 7d 2e 69 63 6f 6e 2d 74 65 72 6d 69 6e 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 a0 22 7d 2e 69 63 6f 6e 2d 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 a1 22 7d 2e 69 63 6f 6e 2d 72 65 70 6c 79 2d 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 84 a2 22 7d 2e 69 63 6f Data Ascii: on-gamepad:before{content:""}.icon-keyboard:before{content:""}.icon-flag-alt:before{content:""}.icon-flag-checkered:before{content:""}.icon-terminal:before{content:""}.icon-code:before{content:""}.icon-reply-all:before{content:""}.ico
2024-10-10 18:35:45 UTC	19	IN	Data Raw: 61 28 30 2c 30 2c 30 2c 2e 31 29 20 72 67 62 61 28 30 2c Data Ascii: a(0,0,0,.1) rgba(0,
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 30 2c 30 2c 2e 32 35 29 7d 2e 62 5f 73 20 2e 62 74 6e 2d 69 6e 76 65 72 73 65 2e 61 63 74 69 76 65 2c 2e 62 5f 73 20 2e 62 74 6e 2d 69 6e 76 65 72 73 65 2e 64 69 73 61 62 6c 65 64 2c 2e 62 5f 73 20 2e 62 74 6e 2d 69 6e 76 65 72 73 65 3a 61 63 74 69 76 65 2c 2e 62 5f 73 20 2e 62 74 6e 2d 69 6e 76 65 72 73 65 3a 68 6f 76 65 72 2c 2e 62 5f 73 20 2e 62 74 6e 2d 69 6e 76 65 72 73 65 5b 64 69 73 61 62 6c 65 64 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 32 32 7d 2e 62 5f 73 20 62 75 74 74 6f 6e 2e 62 74 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 2e 62 5f 73 20 62 75 74 74 6f 6e 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 2e 62 5f 73 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: 0,0,.25)}.b_s .btn-inverse.active,.b_s .btn-inverse.disabled,.b_s .btn-inverse:active,.b_s .btn-inverse:hover,.b_s .btn-inverse[disabled]{background-color:#222}.b_s button.btn::-moz-focus-inner,.b_s button.dropdown-toggle::-moz-focus-inner,.b_s input[type
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 63 6b 2d 6c 65 76 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 73 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 62 5f 73 20 2e 64 69 61 6c 6f 67 2d 62 6f 78 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 31 70 78 3b 62 6f 72 64 65 Data Ascii: ck-level{display:block;width:100%;min-height:28px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;-ms-box-sizing:border-box;box-sizing:border-box}.b_s .dialog-box{background-color:#fff;border-radius:4px;padding-bottom:1px;margin-bottom:-1px;borde
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 65 2d 61 76 61 74 61 72 5f 5f 66 6f 6e 74 2d 69 63 6f 6e 20 69 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 74 6f 72 71 75 65 2d 61 76 61 74 61 72 20 2e 74 6f 72 71 75 65 2d 61 76 61 74 61 72 5f 5f 66 6f 6e 74 2d 69 63 6f 6e 20 69 3a 62 65 66 6f 72 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 74 6f 72 71 75 65 2d 61 76 61 74 61 72 2d 2d 65 78 74 72 61 2d 6c 61 72 67 65 20 2e 74 6f 72 71 75 65 2d 61 76 61 74 61 72 5f 5f 66 6f 6e 74 2d 69 63 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 30 70 78 7d 2e 74 6f 72 71 75 65 2d 61 76 61 74 61 72 2d 2d 65 78 74 72 61 2d 6c 61 72 67 65 2c 2e 74 6f 72 71 75 65 2d 61 76 61 74 61 72 2d 2d 65 78 74 72 61 2d 6c 61 72 67 65 20 2e 74 6f 72 71 75 65 Data Ascii: e-avatar__font-icon i{margin-top:10%;display:inline-block}.torque-avatar .torque-avatar__font-icon i:before{line-height:1}.torque-avatar--extra-large .torque-avatar__font-icon{font-size:140px}.torque-avatar--extra-large,.torque-avatar--extra-large .torque
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 35 73 20 65 61 73 65 2d 6f 75 74 7d 2e 62 65 74 61 2d 73 77 69 74 63 68 20 64 69 76 7b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 62 65 74 61 2d 73 77 69 74 63 68 20 69 6d 67 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 62 65 74 61 2d 73 77 69 74 63 68 20 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 62 65 74 61 2d 73 77 69 74 63 68 20 61 2c 2e 62 65 74 61 2d 73 77 69 74 63 68 20 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b Data Ascii: kground-color .5s ease-out}.beta-switch div{padding:0 20px;margin:0 auto;line-height:40px}.beta-switch img{padding-right:6px;vertical-align:middle}.beta-switch span{display:inline-block;vertical-align:middle}.beta-switch a,.beta-switch a:hover{color:#fff;
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 75 70 65 64 2d 66 69 6c 65 2d 6c 69 73 74 5f 5f 69 6e 66 6f 2d 62 6f 78 20 70 7b 63 6f 6c 6f 72 3a 23 38 37 39 33 61 32 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 37 64 64 65 30 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 20 32 34 70 78 20 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 2c 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 68 69 64 65 2d 74 65 78 74 7b 66 6f 6e 74 3a 30 2f 30 20 61 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f Data Ascii: uped-file-list__info-box p{color:#8793a2;border-bottom:1px solid #d7dde0;padding:12px 0 24px 0;display:inline-block}.clearfix:after,.clearfix:before{display:table;content:""}.clearfix:after{clear:both}.hide-text{font:0/0 a;color:transparent;text-shadow:no
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 74 3a 31 38 70 78 7d 2e 62 5f 73 20 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 7d 2e 62 5f 73 20 63 69 74 65 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 62 5f 73 20 2e 68 31 2c 2e 62 5f 73 20 2e 68 32 2c 2e 62 5f 73 20 2e 68 33 2c 2e 62 5f 73 20 2e 68 34 2c 2e 62 5f 73 20 2e 68 35 2c 2e 62 5f 73 20 2e 68 36 2c 2e 62 5f 73 20 68 31 2c 2e 62 5f 73 20 68 32 2c 2e 62 5f 73 20 68 33 2c 2e 62 5f 73 20 68 34 2c 2e 62 5f 73 20 68 35 2c 2e 62 5f 73 20 68 36 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 6f 70 74 69 6d 69 7a 65 6c 65 67 69 62 69 6c 69 74 79 Data Ascii: t:18px}.b_s small{font-size:100%}.b_s cite{font-style:normal}.b_s .h1,.b_s .h2,.b_s .h3,.b_s .h4,.b_s .h5,.b_s .h6,.b_s h1,.b_s h2,.b_s h3,.b_s h4,.b_s h5,.b_s h6{margin:0;font-family:inherit;font-weight:700;color:inherit;text-rendering:optimizelegibility
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 62 5f 73 20 69 6e 70 75 74 3a 66 6f 63 75 73 3a 72 65 71 75 69 72 65 64 3a 69 6e 76 61 6c 69 64 2c 2e 62 5f 73 20 73 65 6c 65 63 74 3a 66 6f 63 75 73 3a 72 65 71 75 69 72 65 64 3a 69 6e 76 61 6c 69 64 2c 2e 62 5f 73 20 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 3a 72 65 71 75 69 72 65 64 3a 69 6e 76 61 6c 69 64 7b 63 6f 6c 6f 72 3a 23 62 39 34 61 34 38 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 65 35 66 35 62 7d 2e 62 5f 73 20 69 6e 70 75 74 3a 66 6f 63 75 73 3a 72 65 71 75 69 72 65 64 3a 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 2c 2e 62 5f 73 20 73 65 6c 65 63 74 3a 66 6f 63 75 73 3a 72 65 71 75 69 72 65 64 3a 69 6e 76 61 6c 69 64 3a 66 6f 63 75 73 2c 2e 62 5f 73 20 74 65 78 74 61 72 65 61 3a 66 6f 63 75 73 3a 72 65 71 75 69 72 65 64 3a 69 6e 76 61 6c Data Ascii: b_s input:focus:required:invalid,.b_s select:focus:required:invalid,.b_s textarea:focus:required:invalid{color:#b94a48;border-color:#ee5f5b}.b_s input:focus:required:invalid:focus,.b_s select:focus:required:invalid:focus,.b_s textarea:focus:required:inval

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49718	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:45 UTC	666	OUT	GET /user/js/vendor.min.52642a88.js HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:45 UTC	367	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:45 GMT Content-Type: application/javascript Content-Length: 197240 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:56 GMT Accept-Ranges: bytes ETag: "088957f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:45 UTC	16017	IN	Data Raw: 2f 2a 21 20 48 75 64 64 6c 65 2d 49 64 65 6e 74 69 74 79 55 49 20 76 30 2e 30 2e 30 20 32 30 32 34 2d 30 37 2d 30 34 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 Data Ascii: /! Huddle-IdentityUI v0.0.0 2024-07-04 /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");retur
2024-10-10 18:35:45 UTC	19	IN	Data Raw: 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 Data Ascii: niqueID]\|\|(o[a.uniq
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 5f 26 26 72 5b 31 5d 3a 70 29 29 66 6f 72 28 3b 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 63 5d 7c 7c 28 70 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 26 26 28 28 79 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 3d 66 3a 31 21 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 7c 7c 21 2b 2b 70 7c 7c 28 64 26 26 28 28 69 3d 28 6f 3d 61 5b 6b 5d 7c 7c 28 61 5b 6b 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 5f 2c 70 5d 29 2c 61 21 3d 3d 65 29 29 3b 29 3b 72 65 74 75 72 6e 28 70 2d 3d 6d 29 3d 3d 3d 67 7c 7c 70 25 67 3d 3d 30 26 26 30 3c 3d 70 2f 67 7d 7d 7d 2c 50 53 45 55 44 4f Data Ascii: ueID]={}))[h]\|\|[])[0]===_&&r[1]:p))for(;(a=++s&&a&&a[c]\|\|(p=s=0)\|\|u.pop())&&((y?a.nodeName.toLowerCase()!==f:1!==a.nodeType)\|\|!++p\|\|(d&&((i=(o=a[k]\|\|(a[k]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[_,p]),a!==e)););return(p-=m)===g\|\|p%g==0&&0<=p/g}}},PSEUDO
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 2e 72 65 70 6c 61 63 65 28 24 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 57 2c 7a 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 58 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 54 2e 65 78 70 61 6e 64 6f 2b 58 2e 75 69 64 2b 2b 7d 58 2e 75 69 64 3d 31 2c 58 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 4a 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f Data Ascii: .replace($,"ms-").replace(W,z)}function J(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType}function X(){this.expando=T.expando+X.uid++}X.uid=1,X.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},J(e)&&(e.nodeType?e[this.expando]=t:O
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 68 65 28 65 29 2c 61 3d 61 7c 7c 68 65 28 6c 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 46 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 46 65 28 65 2c 6c 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 68 65 28 6c 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 67 65 28 61 2c 21 66 26 26 68 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 6c 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 54 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 Data Ascii: tValue=s.defaultValue);if(t)if(n)for(o=o\|\|he(e),a=a\|\|he(l),r=0,i=o.length;r<i;r++)Fe(o[r],a[r]);else Fe(e,l);return 0<(a=he(l,"script")).length&&ge(a,!f&&he(e,"script")),l},cleanData:function(e){for(var t,n,r,i=T.event.special,o=0;void 0!==(n=e[o]);o++)if
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 54 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 54 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 54 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 54 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 62 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 54 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 74 29 3a 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 28 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 6e 2b 22 22 29 2c 6e 29 3a 21 28 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 Data Ascii: =e.getAttribute?T.prop(e,t,n):(1===o&&T.isXMLDoc(e)\|\|(i=T.attrHooks[t.toLowerCase()]\|\|(T.expr.match.bool.test(t)?bt:void 0)),void 0!==n?null===n?void T.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setAttribute(t,n+""),n):!(i&&"get"in i&&nu
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 6f 3d 61 3d 72 2e 6f 6e 6c 6f 61 64 3d 72 2e 6f 6e 65 72 72 6f 72 3d 72 2e 6f 6e 61 62 6f 72 74 3d 72 2e 6f 6e 74 69 6d 65 6f 75 74 3d 72 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 22 61 62 6f 72 74 22 3d 3d 3d 65 3f 72 2e 61 62 6f 72 74 28 29 3a 22 65 72 72 6f 72 22 3d 3d 3d 65 3f 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 72 2e 73 74 61 74 75 73 3f 74 28 30 2c 22 65 72 72 6f 72 22 29 3a 74 28 72 2e 73 74 61 74 75 73 2c 72 2e 73 74 61 74 75 73 54 65 78 74 29 3a 74 28 58 74 5b 72 2e 73 74 61 74 75 73 5d 7c 7c 72 2e 73 74 61 74 75 73 2c 72 2e 73 Data Ascii: RequestHeader(n,e[n]);o=function(e){return function(){o&&(o=a=r.onload=r.onerror=r.onabort=r.ontimeout=r.onreadystatechange=null,"abort"===e?r.abort():"error"===e?"number"!=typeof r.status?t(0,"error"):t(r.status,r.statusText):t(Xt[r.status]\|\|r.status,r.s
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 6e 2b 2b 29 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 41 2e 6f 61 28 65 5b 6e 5d 29 29 3b 72 65 74 75 72 6e 20 74 7d 2c 43 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 5b 5d 3b 6e 3c 72 3b 6e 2b 2b 29 7b 76 61 72 20 6f 3d 65 5b 6e 5d 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 3b 69 2e 70 75 73 68 28 74 3f 41 2e 6f 61 28 6f 29 3a 6f 29 7d 72 65 74 75 72 6e 20 69 7d 2c 76 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 41 2e 61 2e 54 62 28 65 29 2c 74 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 5b 6e 5d 29 7d 2c 58 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e Data Ascii: n++)t.appendChild(A.oa(e[n]));return t},Ca:function(e,t){for(var n=0,r=e.length,i=[];n<r;n++){var o=e[n].cloneNode(!0);i.push(t?A.oa(o):o)}return i},va:function(e,t){if(A.a.Tb(e),t)for(var n=0,r=t.length;n<r;n++)e.appendChild(t[n])},Xc:function(e,t){var n
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 76 28 29 2c 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 41 2e 4f 28 74 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 7d 3a 74 3b 74 68 69 73 2e 79 61 28 29 3b 66 6f 72 28 76 61 72 20 72 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 72 3b 72 2d 2d 29 7b 76 61 72 20 69 3d 65 5b 72 5d 3b 6e 28 69 29 26 26 28 69 2e 5f 64 65 73 74 72 6f 79 3d 21 30 29 7d 74 68 69 73 2e 78 61 28 29 7d 2c 64 65 73 74 72 6f 79 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 54 65 3f 74 68 69 73 2e 64 65 73 74 72 6f 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 29 3a 74 3f 74 Data Ascii: ,destroy:function(t){var e=this.v(),n="function"!=typeof t\|\|A.O(t)?function(e){return e===t}:t;this.ya();for(var r=e.length-1;0<=r;r--){var i=e[r];n(i)&&(i._destroy=!0)}this.xa()},destroyAll:function(t){return t===Te?this.destroy(function(){return!0}):t?t
2024-10-10 18:35:45 UTC	16384	IN	Data Raw: 29 3a 6f 2c 76 29 7d 2c 66 3d 61 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 28 61 28 29 5b 65 5d 29 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 5b 65 5d 7d 2c 6c 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 5b 65 5d 26 26 66 28 65 29 28 29 7d 2c 6c 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 20 6f 7d 2c 41 2e 69 2e 48 20 69 6e 20 6f 26 26 41 2e 69 2e 73 75 62 73 63 72 69 62 65 28 69 2c 41 2e 69 2e 48 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 28 30 2c 6f 5b 41 2e 69 2e 48 5d 29 28 29 3b 21 74 7c 7c 28 65 3d 41 2e 68 2e 63 68 69 6c 64 4e 6f 64 65 73 28 69 29 29 2e 6c 65 6e Data Ascii: ):o,v)},f=a?function(e){return function(){return v(a()[e])}}:function(e){return o[e]},l.get=function(e){return o[e]&&f(e)()},l.has=function(e){return e in o},A.i.H in o&&A.i.subscribe(i,A.i.H,function(){var e,t=(0,o[A.i.H])();!t\|\|(e=A.h.childNodes(i)).len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49720	20.190.159.73	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:45 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4742 Host: login.live.com
2024-10-10 18:35:45 UTC	4742	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-10 18:35:45 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 10 Oct 2024 18:34:45 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BL2 x-ms-request-id: c56deeb4-9508-4f08-9e03-a3db7b1be735 PPServer: PPV: 30 H: BL02EPF0001D87E V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 10 Oct 2024 18:35:45 GMT Connection: close Content-Length: 10197
2024-10-10 18:35:45 UTC	10197	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49722	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:46 UTC	659	OUT	GET /user/js/app.min.1452.js HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:46 UTC	367	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:46 GMT Content-Type: application/javascript Content-Length: 113730 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:56 GMT Accept-Ranges: bytes ETag: "088957f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:46 UTC	16017	IN	Data Raw: 2f 2a 21 20 48 75 64 64 6c 65 2d 49 64 65 6e 74 69 74 79 55 49 20 76 30 2e 30 2e 30 20 32 30 32 34 2d 30 37 2d 30 34 20 2a 2f 0a 0a 24 73 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 3d 7b 7d 3b 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 21 3d 3d 74 2e 64 6f 63 75 6d 65 6e 74 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 26 26 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 74 3d 74 7c 7c 72 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f Data Ascii: /! Huddle-IdentityUI v0.0.0 2024-07-04 /$sessionTimeout=function(t,r,n){var o={};n(function(){!function(){try{return t.top.document!==t.document}catch(t){return!1}}()&&(o=function(t){var e;t=t\|\|r.search.substring(1);function n(t){return decodeURICompo
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 2c 65 2c 6e 2c 6f 2c 69 29 7b 65 3d 6c 2e 67 65 74 53 65 74 74 69 6e 67 73 28 65 29 3b 6c 2e 63 6f 6d 70 6f 73 65 28 74 2c 65 2c 69 29 7d 7d 2c 6b 6f 2e 76 69 72 74 75 61 6c 45 6c 65 6d 65 6e 74 73 2e 61 6c 6c 6f 77 65 64 42 69 6e 64 69 6e 67 73 2e 63 6f 6d 70 6f 73 65 3d 21 30 2c 6c 7d 29 2c 74 28 22 64 75 72 61 6e 64 61 6c 2f 77 69 64 67 65 74 22 2c 5b 22 2e 2f 73 79 73 74 65 6d 22 2c 22 2e 2f 63 6f 6d 70 6f 73 69 74 69 6f 6e 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 6f 29 7b 76 61 72 20 75 3d 22 64 61 74 61 2d 70 61 72 74 22 2c 69 3d 7b 7d 2c 72 3d 7b 7d 2c 61 3d 5b 22 6d 6f 64 65 6c 22 2c 22 76 69 65 77 22 2c 22 6b 69 6e 64 22 5d 2c 73 3d 7b 67 65 74 50 61 72 74 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 63 2e 69 73 41 72 72 Data Ascii: ,e,n,o,i){e=l.getSettings(e);l.compose(t,e,i)}},ko.virtualElements.allowedBindings.compose=!0,l}),t("durandal/widget",["./system","./composition"],function(c,o){var u="data-part",i={},r={},a=["model","view","kind"],s={getParts:function(t){var e={};c.isArr
2024-10-10 18:35:46 UTC	19	IN	Data Raw: 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 3c 31 Data Ascii: ment.documentMode<1
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 30 3f 28 73 2e 73 65 74 43 75 73 74 6f 6d 41 74 74 72 69 62 75 74 65 28 22 69 73 45 76 65 72 67 72 65 65 6e 42 72 6f 77 73 65 72 22 2c 22 66 61 6c 73 65 22 29 2c 73 2e 73 65 74 43 75 73 74 6f 6d 41 74 74 72 69 62 75 74 65 28 22 69 65 42 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 2c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 29 29 3a 28 73 2e 73 65 74 43 75 73 74 6f 6d 41 74 74 72 69 62 75 74 65 28 22 69 73 45 76 65 72 67 72 65 65 6e 42 72 6f 77 73 65 72 22 2c 22 74 72 75 65 22 29 2c 73 2e 73 65 74 43 75 73 74 6f 6d 41 74 74 72 69 62 75 74 65 28 22 69 65 42 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 2c 30 29 29 29 3b 69 3d 7b 7d 2c 72 3d 7b 7d 2c 74 2e 6f 6e 28 22 70 65 72 66 3a 61 6a 61 78 43 61 6c 6c 53 74 61 72 74 22 2c 66 75 6e 63 74 Data Ascii: 0?(s.setCustomAttribute("isEvergreenBrowser","false"),s.setCustomAttribute("ieBrowserVersion",document.documentMode)):(s.setCustomAttribute("isEvergreenBrowser","true"),s.setCustomAttribute("ieBrowserVersion",0)));i={},r={},t.on("perf:ajaxCallStart",funct
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 22 69 6e 76 69 74 61 74 69 6f 6e 22 2c 5b 74 5d 29 3b 65 6c 73 65 20 73 2e 64 66 64 26 26 22 72 65 73 6f 6c 76 65 64 22 21 3d 3d 73 2e 64 66 64 2e 73 74 61 74 65 28 29 3f 73 2e 64 66 64 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 22 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 52 65 71 75 69 72 65 64 22 2c 5b 74 5d 29 3a 69 2e 74 72 69 67 67 65 72 28 22 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2d 72 65 71 75 69 72 65 64 22 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 29 7b 76 61 72 20 65 3d 67 28 74 29 2c 74 3d 24 28 27 3c 66 6f 72 6d 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 20 69 64 3d 22 73 73 6f 46 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 27 2b 65 2e 5f 61 63 74 69 6f 6e 2b 27 22 20 6d 65 74 68 6f Data Ascii: .resolveWith("invitation",[t]);else s.dfd&&"resolved"!==s.dfd.state()?s.dfd.resolveWith("authorizationRequired",[t]):i.trigger("authorization-required",t)}}function v(t){var e=g(t),t=$('<form style="display: none" id="ssoForm" action="'+e._action+'" metho
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 5f 72 65 71 75 65 73 74 3d 22 2b 74 68 69 73 2e 69 6e 76 69 74 61 74 69 6f 6e 46 6f 72 6d 2e 41 63 63 65 73 73 52 65 71 75 65 73 74 2c 65 3d 74 68 69 73 2c 6e 3d 24 2e 70 6f 73 74 28 74 68 69 73 2e 69 6e 76 69 74 61 74 69 6f 6e 46 6f 72 6d 2e 41 63 74 69 6f 6e 2c 6e 29 2c 24 2e 77 68 65 6e 28 6e 2c 74 29 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 3d 73 2e 70 61 72 73 65 4c 69 6e 6b 46 72 6f 6d 52 65 73 70 6f 6e 73 65 28 6e 29 3b 69 66 28 6e 2e 6c 6f 63 61 74 69 6f 6e 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 63 68 61 6e 67 65 4c 6f 63 61 74 69 6f 6e 28 6e 2e 6c 6f 63 61 74 69 6f 6e 29 2c 21 30 3b 72 65 74 75 72 6e 22 2f 6c 6f 67 69 6e 2f 74 77 6f 2d 66 61 63 74 6f 72 2d 61 75 74 68 2d 73 Data Ascii: _request="+this.invitationForm.AccessRequest,e=this,n=$.post(this.invitationForm.Action,n),$.when(n,t).done(function(t){!function(t,e,n){n=s.parseLinkFromResponse(n);if(n.location)return window.changeLocation(n.location),!0;return"/login/two-factor-auth-s
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 73 2e 6d 61 78 56 65 72 69 66 69 63 61 74 69 6f 6e 43 6f 64 65 4c 65 6e 67 74 68 28 29 26 26 21 74 68 69 73 2e 73 75 62 6d 69 74 74 69 6e 67 28 29 7d 2c 6f 2e 73 75 62 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 74 2c 72 3d 74 68 69 73 3b 72 2e 63 61 6e 53 75 62 6d 69 74 28 29 26 26 28 72 2e 73 75 62 6d 69 74 74 69 6e 67 28 21 30 29 2c 74 3d 22 61 63 63 65 73 73 5f 72 65 71 75 65 73 74 3d 22 2b 72 2e 66 6f 72 6d 44 61 74 61 2e 41 63 63 65 73 73 52 65 71 75 65 73 74 2b 22 26 63 6c 69 65 6e 74 5f 69 64 3d 22 2b 72 2e 66 6f 72 6d 44 61 74 61 2e 43 6c 69 65 6e 74 49 64 2b 22 26 74 77 6f 5f 66 61 63 74 6f 72 5f 61 75 74 68 5f 63 6f 64 65 3d 22 2b 72 2e 76 65 72 69 66 69 63 61 74 69 6f 6e 43 6f 64 65 28 29 2c 28 74 3d 24 2e 70 6f 73 74 28 72 Data Ascii: s.maxVerificationCodeLength()&&!this.submitting()},o.submit=function(){var i,t,r=this;r.canSubmit()&&(r.submitting(!0),t="access_request="+r.formData.AccessRequest+"&client_id="+r.formData.ClientId+"&two_factor_auth_code="+r.verificationCode(),(t=$.post(r
2024-10-10 18:35:46 UTC	15774	IN	Data Raw: 64 3d 22 76 69 73 69 62 6c 65 3a 20 74 72 75 65 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 24 72 6f 6f 74 2e 73 68 6f 77 69 6e 67 53 65 74 75 70 46 6f 72 6d 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 69 73 69 62 6c 65 3a 20 24 72 6f 6f 74 2e 73 68 6f 77 47 65 6e 65 72 69 63 45 72 72 6f 72 4d 65 73 73 61 67 65 22 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 62 6f 78 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 62 6f 78 2d 69 63 6f 6e 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 Data Ascii: d="visible: true" style="display: none">\n \x3c!-- ko if: $root.showingSetupForm --\x3e\n <div data-bind="visible: $root.showGenericErrorMessage" class="error-box">\n <div class="error-box-icon">\n <svg width="14" h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49723	3.93.32.136	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:46 UTC	370	OUT	GET /user/js/vendor.min.52642a88.js HTTP/1.1 Host: login.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:46 UTC	367	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:46 GMT Content-Type: application/javascript Content-Length: 197240 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:56 GMT Accept-Ranges: bytes ETag: "088957f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:46 UTC	16017	IN	Data Raw: 2f 2a 21 20 48 75 64 64 6c 65 2d 49 64 65 6e 74 69 74 79 55 49 20 76 30 2e 30 2e 30 20 32 30 32 34 2d 30 37 2d 30 34 20 2a 2f 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 Data Ascii: /! Huddle-IdentityUI v0.0.0 2024-07-04 /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");retur
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 5f 26 26 72 5b 31 5d 3a 70 29 29 66 6f 72 28 3b 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 63 5d 7c 7c 28 70 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 26 26 28 28 79 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 21 3d 3d 66 3a 31 21 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 7c 7c 21 2b 2b 70 7c 7c 28 64 26 26 28 28 69 3d 28 6f 3d 61 5b 6b 5d 7c 7c 28 61 5b 6b 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 3d 5b 5f 2c 70 5d 29 2c 61 21 3d 3d 65 29 29 3b 29 3b 72 65 74 75 72 6e 28 70 2d 3d 6d 29 3d 3d 3d 67 7c 7c 70 25 67 3d 3d Data Ascii: niqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===_&&r[1]:p))for(;(a=++s&&a&&a[c]\|\|(p=s=0)\|\|u.pop())&&((y?a.nodeName.toLowerCase()!==f:1!==a.nodeType)\|\|!++p\|\|(d&&((i=(o=a[k]\|\|(a[k]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]=[_,p]),a!==e)););return(p-=m)===g\|\|p%g==
2024-10-10 18:35:46 UTC	19	IN	Data Raw: 63 74 69 6f 6e 20 55 28 65 29 7b 72 65 74 75 72 6e 20 65 Data Ascii: ction U(e){return e
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 2e 72 65 70 6c 61 63 65 28 24 2c 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 57 2c 7a 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 58 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 54 2e 65 78 70 61 6e 64 6f 2b 58 2e 75 69 64 2b 2b 7d 58 2e 75 69 64 3d 31 2c 58 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 4a 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f Data Ascii: .replace($,"ms-").replace(W,z)}function J(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType}function X(){this.expando=T.expando+X.uid++}X.uid=1,X.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},J(e)&&(e.nodeType?e[this.expando]=t:O
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 68 65 28 65 29 2c 61 3d 61 7c 7c 68 65 28 6c 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 46 65 28 6f 5b 72 5d 2c 61 5b 72 5d 29 3b 65 6c 73 65 20 46 65 28 65 2c 6c 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 68 65 28 6c 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 67 65 28 61 2c 21 66 26 26 68 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 6c 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 54 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 Data Ascii: tValue=s.defaultValue);if(t)if(n)for(o=o\|\|he(e),a=a\|\|he(l),r=0,i=o.length;r<i;r++)Fe(o[r],a[r]);else Fe(e,l);return 0<(a=he(l,"script")).length&&ge(a,!f&&he(e,"script")),l},cleanData:function(e){for(var t,n,r,i=T.event.special,o=0;void 0!==(n=e[o]);o++)if
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 54 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 54 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 54 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 54 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 62 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 54 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 74 29 3a 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 28 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 6e 2b 22 22 29 2c 6e 29 3a 21 28 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 Data Ascii: =e.getAttribute?T.prop(e,t,n):(1===o&&T.isXMLDoc(e)\|\|(i=T.attrHooks[t.toLowerCase()]\|\|(T.expr.match.bool.test(t)?bt:void 0)),void 0!==n?null===n?void T.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setAttribute(t,n+""),n):!(i&&"get"in i&&nu
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 52 65 71 75 65 73 74 48 65 61 64 65 72 28 6e 2c 65 5b 6e 5d 29 3b 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 26 26 28 6f 3d 61 3d 72 2e 6f 6e 6c 6f 61 64 3d 72 2e 6f 6e 65 72 72 6f 72 3d 72 2e 6f 6e 61 62 6f 72 74 3d 72 2e 6f 6e 74 69 6d 65 6f 75 74 3d 72 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 22 61 62 6f 72 74 22 3d 3d 3d 65 3f 72 2e 61 62 6f 72 74 28 29 3a 22 65 72 72 6f 72 22 3d 3d 3d 65 3f 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 72 2e 73 74 61 74 75 73 3f 74 28 30 2c 22 65 72 72 6f 72 22 29 3a 74 28 72 2e 73 74 61 74 75 73 2c 72 2e 73 74 61 74 75 73 54 65 78 74 29 3a 74 28 58 74 5b 72 2e 73 74 61 74 75 73 5d 7c 7c 72 2e 73 74 61 74 75 73 2c 72 2e 73 Data Ascii: RequestHeader(n,e[n]);o=function(e){return function(){o&&(o=a=r.onload=r.onerror=r.onabort=r.ontimeout=r.onreadystatechange=null,"abort"===e?r.abort():"error"===e?"number"!=typeof r.status?t(0,"error"):t(r.status,r.statusText):t(Xt[r.status]\|\|r.status,r.s
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 6e 2b 2b 29 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 41 2e 6f 61 28 65 5b 6e 5d 29 29 3b 72 65 74 75 72 6e 20 74 7d 2c 43 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 2c 69 3d 5b 5d 3b 6e 3c 72 3b 6e 2b 2b 29 7b 76 61 72 20 6f 3d 65 5b 6e 5d 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 3b 69 2e 70 75 73 68 28 74 3f 41 2e 6f 61 28 6f 29 3a 6f 29 7d 72 65 74 75 72 6e 20 69 7d 2c 76 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 41 2e 61 2e 54 62 28 65 29 2c 74 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 5b 6e 5d 29 7d 2c 58 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e Data Ascii: n++)t.appendChild(A.oa(e[n]));return t},Ca:function(e,t){for(var n=0,r=e.length,i=[];n<r;n++){var o=e[n].cloneNode(!0);i.push(t?A.oa(o):o)}return i},va:function(e,t){if(A.a.Tb(e),t)for(var n=0,r=t.length;n<r;n++)e.appendChild(t[n])},Xc:function(e,t){var n
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 2c 64 65 73 74 72 6f 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 76 28 29 2c 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 41 2e 4f 28 74 29 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 7d 3a 74 3b 74 68 69 73 2e 79 61 28 29 3b 66 6f 72 28 76 61 72 20 72 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 30 3c 3d 72 3b 72 2d 2d 29 7b 76 61 72 20 69 3d 65 5b 72 5d 3b 6e 28 69 29 26 26 28 69 2e 5f 64 65 73 74 72 6f 79 3d 21 30 29 7d 74 68 69 73 2e 78 61 28 29 7d 2c 64 65 73 74 72 6f 79 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 54 65 3f 74 68 69 73 2e 64 65 73 74 72 6f 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 29 3a 74 3f 74 Data Ascii: ,destroy:function(t){var e=this.v(),n="function"!=typeof t\|\|A.O(t)?function(e){return e===t}:t;this.ya();for(var r=e.length-1;0<=r;r--){var i=e[r];n(i)&&(i._destroy=!0)}this.xa()},destroyAll:function(t){return t===Te?this.destroy(function(){return!0}):t?t
2024-10-10 18:35:46 UTC	16384	IN	Data Raw: 29 3a 6f 2c 76 29 7d 2c 66 3d 61 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 28 61 28 29 5b 65 5d 29 7d 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 5b 65 5d 7d 2c 6c 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 5b 65 5d 26 26 66 28 65 29 28 29 7d 2c 6c 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 20 6f 7d 2c 41 2e 69 2e 48 20 69 6e 20 6f 26 26 41 2e 69 2e 73 75 62 73 63 72 69 62 65 28 69 2c 41 2e 69 2e 48 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 28 30 2c 6f 5b 41 2e 69 2e 48 5d 29 28 29 3b 21 74 7c 7c 28 65 3d 41 2e 68 2e 63 68 69 6c 64 4e 6f 64 65 73 28 69 29 29 2e 6c 65 6e Data Ascii: ):o,v)},f=a?function(e){return function(){return v(a()[e])}}:function(e){return o[e]},l.get=function(e){return o[e]&&f(e)()},l.has=function(e){return e in o},A.i.H in o&&A.i.subscribe(i,A.i.H,function(){var e,t=(0,o[A.i.H])();!t\|\|(e=A.h.childNodes(i)).len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49724	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 18:35:46 UTC	515	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=166186 Date: Thu, 10 Oct 2024 18:35:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49727	162.247.243.39	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:47 UTC	534	OUT	GET /nr-632.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.huddle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:47 UTC	549	IN	HTTP/1.1 200 OK Connection: close Content-Length: 22469 Last-Modified: Wed, 18 Oct 2023 21:00:22 GMT ETag: "f9cdcb1e4b2be3825b6dfcbd33deff25" Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 Content-Type: application/javascript Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 10 Oct 2024 18:35:47 GMT X-Served-By: cache-ewr-kewr1740032-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 69 29 7b 69 66 28 21 6e 5b 74 5d 29 7b 69 66 28 21 65 5b 74 5d 29 7b 76 61 72 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 6e 72 5f 72 65 71 75 69 72 65 26 26 5f 5f 6e 72 5f 72 65 71 75 69 72 65 3b 69 66 28 21 69 26 26 61 29 72 65 74 75 72 6e 20 61 28 74 2c 21 30 29 3b 69 66 28 6f 29 72 65 74 75 72 6e 20 6f 28 74 2c 21 30 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 74 2b 22 27 22 29 7d 76 61 72 20 75 3d 6e 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 74 5d 5b 30 5d 2e 63 61 6c 6c 28 75 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 Data Ascii: !function(e,n,t){function r(t,i){if(!n[t]){if(!e[t]){var a="function"==typeof __nr_require&&__nr_require;if(!i&&a)return a(t,!0);if(o)return o(t,!0);throw new Error("Cannot find module '"+t+"'")}var u=n[t]={exports:{}};e[t][0].call(u.exports,function(n){v
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 6f 7d 29 7d 76 61 72 20 63 3d 65 28 31 29 2c 64 3d 65 28 22 68 61 6e 64 6c 65 22 29 2c 6c 3d 65 28 32 29 2c 6d 3d 7b 7d 2c 70 3d 7b 7d 3b 6e 2e 65 78 70 6f 72 74 73 3d 7b 73 74 6f 72 65 3a 74 2c 74 61 6b 65 3a 61 2c 67 65 74 3a 69 2c 6d 61 72 6b 3a 73 2c 6d 65 61 73 75 72 65 3a 66 7d 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 22 62 73 74 41 67 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 7d 2c 31 65 34 29 7d 2c 7b 31 3a 32 35 2c 32 3a 31 30 2c 68 61 6e 64 6c 65 3a 21 31 7d 5d 2c 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 2c 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 22 2f 22 21 3d 3d 6e 2e 63 68 61 72 41 74 28 30 29 26 26 28 6e 3d 22 2f 22 2b 6e 29 Data Ascii: o})}var c=e(1),d=e("handle"),l=e(2),m={},p={};n.exports={store:t,take:a,get:i,mark:s,measure:f},setTimeout(function(){l("bstAgg",function(){})},1e4)},{1:25,2:10,handle:!1}],3:[function(e){function n(e,n,t){"string"==typeof n&&("/"!==n.charAt(0)&&(n="/"+n)
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 69 66 28 74 2b 3d 65 5b 72 5d 2e 6c 65 6e 67 74 68 2c 74 3e 6e 29 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 30 2c 72 29 2e 6a 6f 69 6e 28 22 22 29 3b 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 6e 29 7b 76 61 72 20 74 3d 30 2c 6f 3d 22 22 3b 72 65 74 75 72 6e 20 75 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 61 2c 75 2c 66 3d 5b 5d 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 29 61 3d 22 26 22 2b 65 2b 22 3d 22 2b 72 28 69 29 2c 74 2b 3d 61 2e 6c 65 6e 67 74 68 2c 6f 2b 3d 61 3b 65 6c 73 65 20 69 66 28 69 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 74 2b 3d 39 2c 75 3d 30 3b Data Ascii: {for(var t=0,r=0;r<e.length;r++)if(t+=e[r].length,t>n)return e.slice(0,r).join("");return e.join("")}function i(e,n){var t=0,o="";return u(e,function(e,i){var a,u,f=[];if("string"==typeof i)a="&"+e+"="+r(i),t+=a.length,o+=a;else if(i.length){for(t+=9,u=0;
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 72 74 74 69 6d 65 22 2c 22 66 69 72 73 74 62 79 74 65 22 29 2c 6e 2e 6d 65 61 73 75 72 65 28 22 66 65 22 2c 22 66 69 72 73 74 62 79 74 65 22 2c 22 6f 6e 6c 6f 61 64 22 29 2c 6e 2e 6d 65 61 73 75 72 65 28 22 64 63 22 2c 22 66 69 72 73 74 62 79 74 65 22 2c 22 64 6f 6d 43 6f 6e 74 65 6e 74 22 29 3b 76 61 72 20 74 3d 6e 2e 67 65 74 28 22 6d 65 61 73 75 72 65 73 22 29 2c 72 3d 6d 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 22 26 22 2b 65 2b 22 3d 22 2b 6e 2e 70 61 72 61 6d 73 2e 76 61 6c 75 65 7d 29 2e 6a 6f 69 6e 28 22 22 29 3b 69 66 28 72 29 7b 76 61 72 20 6f 3d 22 31 22 2c 69 3d 5b 63 28 65 29 5d 3b 69 66 28 69 2e 70 75 73 68 28 72 29 2c 69 2e 70 75 73 68 28 76 28 22 74 74 22 2c 65 2e 69 6e 66 6f 2e 74 74 47 75 69 64 29 29 2c 69 2e Data Ascii: rttime","firstbyte"),n.measure("fe","firstbyte","onload"),n.measure("dc","firstbyte","domContent");var t=n.get("measures"),r=m(t,function(e,n){return"&"+e+"="+n.params.value}).join("");if(r){var o="1",i=[c(e)];if(i.push(r),i.push(v("tt",e.info.ttGuid)),i.
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3b 72 65 74 75 72 6e 20 61 2b 3d 63 28 65 29 2c 72 26 26 28 61 2b 3d 68 2e 6f 62 6a 28 72 2c 65 2e 6d 61 78 42 79 74 65 73 29 29 2c 75 3f 69 3d 67 28 74 29 3a 61 2b 3d 68 2e 6f 62 6a 28 74 2c 65 2e 6d 61 78 42 79 74 65 73 29 2c 74 2e 65 72 72 26 26 74 2e 65 72 72 2e 6c 65 6e 67 74 68 26 26 21 78 26 26 28 61 2b 3d 76 28 22 70 76 65 22 2c 22 31 22 29 2c 78 3d 21 30 29 2c 77 28 7b 75 72 6c 3a 61 2c 62 6f 64 79 3a 69 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 69 66 28 65 26 26 65 2e 69 6e 66 6f 26 26 65 2e 69 6e 66 6f 2e 65 72 72 6f 72 42 65 61 63 6f 6e 26 26 65 2e 69 65 56 65 72 73 69 6f 6e 29 7b 76 61 72 20 6e 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 65 2e 69 6e 66 6f 2e 65 72 72 6f 72 42 65 61 63 6f Data Ascii: e.addEventListener;return a+=c(e),r&&(a+=h.obj(r,e.maxBytes)),u?i=g(t):a+=h.obj(t,e.maxBytes),t.err&&t.err.length&&!x&&(a+=v("pve","1"),x=!0),w({url:a,body:i})}function u(e){if(e&&e.info&&e.info.errorBeacon&&e.ieVersion){var n="https://"+e.info.errorBeaco
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 74 28 65 29 7b 76 61 72 20 6e 3d 22 73 22 3b 22 70 61 67 65 68 69 64 65 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 3d 22 68 22 29 2c 69 2e 6e 61 76 43 6f 6f 6b 69 65 26 26 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 4e 52 45 55 4d 3d 22 2b 6e 2b 22 3d 22 2b 4e 75 6d 62 65 72 28 6e 65 77 20 44 61 74 65 29 2b 22 26 72 3d 22 2b 72 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 70 3d 22 2b 72 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 2b 22 3b 20 70 61 74 68 3d 2f 22 29 7d 76 61 72 20 72 3d 65 28 31 29 2c 6f 3d 65 28 32 29 2c 69 3d 65 28 36 29 2c 61 3d 65 28 37 29 2c 75 3d 65 28 31 30 29 2c 73 3d 28 65 28 33 29 2c 65 28 39 29 29 2c 66 3d 65 28 34 29 2c 63 3d 28 65 28 38 29 2c 65 28 22 6c 6f 61 64 65 72 Data Ascii: t(e){var n="s";"pagehide"===e.type&&(n="h"),i.navCookie&&(document.cookie="NREUM="+n+"="+Number(new Date)+"&r="+r(document.location.href)+"&p="+r(document.referrer)+"; path=/")}var r=e(1),o=e(2),i=e(6),a=e(7),u=e(10),s=(e(3),e(9)),f=e(4),c=(e(8),e("loader
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 3d 74 79 70 65 6f 66 20 65 26 26 65 3e 30 26 26 28 74 5b 72 5d 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2d 6e 29 29 7d 6e 2e 65 78 70 6f 72 74 73 3d 7b 61 64 64 50 54 3a 74 2c 61 64 64 50 4e 3a 72 7d 7d 2c 7b 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 29 7b 69 66 28 72 2e 6c 69 73 74 65 6e 65 72 73 28 65 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 72 2e 6f 6e 28 65 2c 6e 29 3b 76 61 72 20 74 3d 72 2e 71 5b 65 5d 3b 69 66 28 74 29 7b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 2e 65 6d 69 74 28 65 2c 74 5b 6f 5d 29 3b 64 65 6c 65 74 65 20 72 2e 71 5b 65 5d 7d 72 65 74 75 72 6e 21 30 7d 76 61 72 20 72 3d 65 28 22 68 61 6e 64 6c 65 22 29 2e 65 65 3b Data Ascii: =typeof e&&e>0&&(t[r]=Math.round(e-n))}n.exports={addPT:t,addPN:r}},{}],10:[function(e,n){function t(e,n){if(r.listeners(e).length)return!1;r.on(e,n);var t=r.q[e];if(t){for(var o=0;o<t.length;o++)r.emit(e,t[o]);delete r.q[e]}return!0}var r=e("handle").ee;
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 5d 2e 73 75 62 73 74 72 69 6e 67 28 32 29 2c 22 3b 22 3d 3d 3d 74 2e 63 68 61 72 41 74 28 74 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 74 3d 74 2e 73 75 62 73 74 72 28 30 2c 74 2e 6c 65 6e 67 74 68 2d 31 29 29 29 3b 69 66 28 74 29 7b 76 61 72 20 63 3d 69 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 75 3d 63 3d 3d 74 2c 75 7c 7c 28 75 3d 69 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3d 3d 74 26 26 63 3d 3d 72 29 7d 69 66 28 75 26 26 6f 29 7b 76 61 72 20 64 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 69 66 28 64 2d 6f 3e 36 65 34 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 6f 7d 7d 7d 76 61 72 20 69 3d 65 28 31 29 2c 61 3d 65 28 32 29 2c 75 3d 65 28 22 6c 6f 61 64 65 72 22 29 3b 6e 2e 65 78 70 Data Ascii: ].substring(2),";"===t.charAt(t.length-1)&&(t=t.substr(0,t.length-1)));if(t){var c=i(document.referrer);u=c==t,u\|\|(u=i(document.location.href)==t&&c==r)}if(u&&o){var d=(new Date).getTime();if(d-o>6e4)return;return o}}}var i=e(1),a=e(2),u=e("loader");n.exp
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 7a 30 2d 39 5d 2b 29 24 2f 69 3b 6e 2e 65 78 70 6f 72 74 73 3d 74 7d 2c 7b 7d 5d 2c 31 36 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6d 61 74 63 68 28 72 29 3b 72 65 74 75 72 6e 20 6e 3f 6e 5b 33 5d 3f 6e 5b 31 5d 2b 6e 5b 33 5d 3a 6e 5b 31 5d 3a 6e 75 6c 6c 7d 6e 2e 65 78 70 6f 72 74 73 3d 74 3b 76 61 72 20 72 3d 2f 5e 28 5b 5e 3f 5d 2b 29 28 5c 3f 5b 5e 23 5d 2a 29 3f 28 23 2e 2a 29 3f 24 2f 7d 2c 7b 7d 5d 2c 31 37 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3b 74 72 79 7b 69 66 28 6e 3d 64 28 65 29 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 74 29 7b 69 66 28 68 29 74 68 72 6f 77 20 74 7d 74 72 79 7b 69 Data Ascii: z0-9]+)$/i;n.exports=t},{}],16:[function(e,n){function t(e){var n=e.match(r);return n?n[3]?n[1]+n[3]:n[1]:null}n.exports=t;var r=/^([^?]+)(\?[^#])?(#.)?$/},{}],17:[function(e,n){function t(e){var n=null;try{if(n=d(e))return n}catch(t){if(h)throw t}try{i
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 69 6e 65 2c 65 2e 63 6f 6c 75 6d 6e 26 26 28 74 2b 3d 22 3a 22 2b 65 2e 63 6f 6c 75 6d 6e 29 29 2c 7b 6d 6f 64 65 3a 22 73 6f 75 72 63 65 6c 69 6e 65 22 2c 6e 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 3a 65 2e 6d 65 73 73 61 67 65 2c 73 74 61 63 6b 53 74 72 69 6e 67 3a 74 2c 66 72 61 6d 65 73 3a 5b 7b 75 72 6c 3a 65 2e 73 6f 75 72 63 65 55 52 4c 2c 6c 69 6e 65 3a 65 2e 6c 69 6e 65 2c 63 6f 6c 75 6d 6e 3a 65 2e 63 6f 6c 75 6d 6e 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6e 61 6d 65 7c 7c 73 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 7b 6d 6f 64 65 3a 22 6e 61 6d 65 6f 6e 6c 79 22 2c 6e 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 3a 65 2e 6d 65 73 73 61 67 65 2c 73 74 61 63 6b 53 74 72 69 6e 67 3a 6e 2b 22 3a 20 22 2b 65 2e 6d 65 73 Data Ascii: ine,e.column&&(t+=":"+e.column)),{mode:"sourceline",name:n,message:e.message,stackString:t,frames:[{url:e.sourceURL,line:e.line,column:e.column}]}}function u(e){var n=e.name\|\|s(e);return n?{mode:"nameonly",name:n,message:e.message,stackString:n+": "+e.mes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49725	3.93.32.136	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:47 UTC	363	OUT	GET /user/js/app.min.1452.js HTTP/1.1 Host: login.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:47 UTC	367	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:47 GMT Content-Type: application/javascript Content-Length: 113730 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:56 GMT Accept-Ranges: bytes ETag: "088957f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:47 UTC	16017	IN	Data Raw: 2f 2a 21 20 48 75 64 64 6c 65 2d 49 64 65 6e 74 69 74 79 55 49 20 76 30 2e 30 2e 30 20 32 30 32 34 2d 30 37 2d 30 34 20 2a 2f 0a 0a 24 73 65 73 73 69 6f 6e 54 69 6d 65 6f 75 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6e 29 7b 76 61 72 20 6f 3d 7b 7d 3b 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 21 3d 3d 74 2e 64 6f 63 75 6d 65 6e 74 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 26 26 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3b 74 3d 74 7c 7c 72 2e 73 65 61 72 63 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f Data Ascii: /! Huddle-IdentityUI v0.0.0 2024-07-04 /$sessionTimeout=function(t,r,n){var o={};n(function(){!function(){try{return t.top.document!==t.document}catch(t){return!1}}()&&(o=function(t){var e;t=t\|\|r.search.substring(1);function n(t){return decodeURICompo
2024-10-10 18:35:47 UTC	16384	IN	Data Raw: 2c 65 2c 6e 2c 6f 2c 69 29 7b 65 3d 6c 2e 67 65 74 53 65 74 74 69 6e 67 73 28 65 29 3b 6c 2e 63 6f 6d 70 6f 73 65 28 74 2c 65 2c 69 29 7d 7d 2c 6b 6f 2e 76 69 72 74 75 61 6c 45 6c 65 6d 65 6e 74 73 2e 61 6c 6c 6f 77 65 64 42 69 6e 64 69 6e 67 73 2e 63 6f 6d 70 6f 73 65 3d 21 30 2c 6c 7d 29 2c 74 28 22 64 75 72 61 6e 64 61 6c 2f 77 69 64 67 65 74 22 2c 5b 22 2e 2f 73 79 73 74 65 6d 22 2c 22 2e 2f 63 6f 6d 70 6f 73 69 74 69 6f 6e 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 6f 29 7b 76 61 72 20 75 3d 22 64 61 74 61 2d 70 61 72 74 22 2c 69 3d 7b 7d 2c 72 3d 7b 7d 2c 61 3d 5b 22 6d 6f 64 65 6c 22 2c 22 76 69 65 77 22 2c 22 6b 69 6e 64 22 5d 2c 73 3d 7b 67 65 74 50 61 72 74 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 63 2e 69 73 41 72 72 Data Ascii: ,e,n,o,i){e=l.getSettings(e);l.compose(t,e,i)}},ko.virtualElements.allowedBindings.compose=!0,l}),t("durandal/widget",["./system","./composition"],function(c,o){var u="data-part",i={},r={},a=["model","view","kind"],s={getParts:function(t){var e={};c.isArr
2024-10-10 18:35:47 UTC	19	IN	Data Raw: 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 3c 31 Data Ascii: ment.documentMode<1
2024-10-10 18:35:47 UTC	16384	IN	Data Raw: 30 3f 28 73 2e 73 65 74 43 75 73 74 6f 6d 41 74 74 72 69 62 75 74 65 28 22 69 73 45 76 65 72 67 72 65 65 6e 42 72 6f 77 73 65 72 22 2c 22 66 61 6c 73 65 22 29 2c 73 2e 73 65 74 43 75 73 74 6f 6d 41 74 74 72 69 62 75 74 65 28 22 69 65 42 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 2c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 29 29 3a 28 73 2e 73 65 74 43 75 73 74 6f 6d 41 74 74 72 69 62 75 74 65 28 22 69 73 45 76 65 72 67 72 65 65 6e 42 72 6f 77 73 65 72 22 2c 22 74 72 75 65 22 29 2c 73 2e 73 65 74 43 75 73 74 6f 6d 41 74 74 72 69 62 75 74 65 28 22 69 65 42 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 2c 30 29 29 29 3b 69 3d 7b 7d 2c 72 3d 7b 7d 2c 74 2e 6f 6e 28 22 70 65 72 66 3a 61 6a 61 78 43 61 6c 6c 53 74 61 72 74 22 2c 66 75 6e 63 74 Data Ascii: 0?(s.setCustomAttribute("isEvergreenBrowser","false"),s.setCustomAttribute("ieBrowserVersion",document.documentMode)):(s.setCustomAttribute("isEvergreenBrowser","true"),s.setCustomAttribute("ieBrowserVersion",0)));i={},r={},t.on("perf:ajaxCallStart",funct
2024-10-10 18:35:47 UTC	16384	IN	Data Raw: 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 22 69 6e 76 69 74 61 74 69 6f 6e 22 2c 5b 74 5d 29 3b 65 6c 73 65 20 73 2e 64 66 64 26 26 22 72 65 73 6f 6c 76 65 64 22 21 3d 3d 73 2e 64 66 64 2e 73 74 61 74 65 28 29 3f 73 2e 64 66 64 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 22 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 52 65 71 75 69 72 65 64 22 2c 5b 74 5d 29 3a 69 2e 74 72 69 67 67 65 72 28 22 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2d 72 65 71 75 69 72 65 64 22 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 29 7b 76 61 72 20 65 3d 67 28 74 29 2c 74 3d 24 28 27 3c 66 6f 72 6d 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 20 69 64 3d 22 73 73 6f 46 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 27 2b 65 2e 5f 61 63 74 69 6f 6e 2b 27 22 20 6d 65 74 68 6f Data Ascii: .resolveWith("invitation",[t]);else s.dfd&&"resolved"!==s.dfd.state()?s.dfd.resolveWith("authorizationRequired",[t]):i.trigger("authorization-required",t)}}function v(t){var e=g(t),t=$('<form style="display: none" id="ssoForm" action="'+e._action+'" metho
2024-10-10 18:35:47 UTC	16384	IN	Data Raw: 5f 72 65 71 75 65 73 74 3d 22 2b 74 68 69 73 2e 69 6e 76 69 74 61 74 69 6f 6e 46 6f 72 6d 2e 41 63 63 65 73 73 52 65 71 75 65 73 74 2c 65 3d 74 68 69 73 2c 6e 3d 24 2e 70 6f 73 74 28 74 68 69 73 2e 69 6e 76 69 74 61 74 69 6f 6e 46 6f 72 6d 2e 41 63 74 69 6f 6e 2c 6e 29 2c 24 2e 77 68 65 6e 28 6e 2c 74 29 2e 64 6f 6e 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 6e 3d 73 2e 70 61 72 73 65 4c 69 6e 6b 46 72 6f 6d 52 65 73 70 6f 6e 73 65 28 6e 29 3b 69 66 28 6e 2e 6c 6f 63 61 74 69 6f 6e 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 63 68 61 6e 67 65 4c 6f 63 61 74 69 6f 6e 28 6e 2e 6c 6f 63 61 74 69 6f 6e 29 2c 21 30 3b 72 65 74 75 72 6e 22 2f 6c 6f 67 69 6e 2f 74 77 6f 2d 66 61 63 74 6f 72 2d 61 75 74 68 2d 73 Data Ascii: _request="+this.invitationForm.AccessRequest,e=this,n=$.post(this.invitationForm.Action,n),$.when(n,t).done(function(t){!function(t,e,n){n=s.parseLinkFromResponse(n);if(n.location)return window.changeLocation(n.location),!0;return"/login/two-factor-auth-s
2024-10-10 18:35:47 UTC	16384	IN	Data Raw: 73 2e 6d 61 78 56 65 72 69 66 69 63 61 74 69 6f 6e 43 6f 64 65 4c 65 6e 67 74 68 28 29 26 26 21 74 68 69 73 2e 73 75 62 6d 69 74 74 69 6e 67 28 29 7d 2c 6f 2e 73 75 62 6d 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 74 2c 72 3d 74 68 69 73 3b 72 2e 63 61 6e 53 75 62 6d 69 74 28 29 26 26 28 72 2e 73 75 62 6d 69 74 74 69 6e 67 28 21 30 29 2c 74 3d 22 61 63 63 65 73 73 5f 72 65 71 75 65 73 74 3d 22 2b 72 2e 66 6f 72 6d 44 61 74 61 2e 41 63 63 65 73 73 52 65 71 75 65 73 74 2b 22 26 63 6c 69 65 6e 74 5f 69 64 3d 22 2b 72 2e 66 6f 72 6d 44 61 74 61 2e 43 6c 69 65 6e 74 49 64 2b 22 26 74 77 6f 5f 66 61 63 74 6f 72 5f 61 75 74 68 5f 63 6f 64 65 3d 22 2b 72 2e 76 65 72 69 66 69 63 61 74 69 6f 6e 43 6f 64 65 28 29 2c 28 74 3d 24 2e 70 6f 73 74 28 72 Data Ascii: s.maxVerificationCodeLength()&&!this.submitting()},o.submit=function(){var i,t,r=this;r.canSubmit()&&(r.submitting(!0),t="access_request="+r.formData.AccessRequest+"&client_id="+r.formData.ClientId+"&two_factor_auth_code="+r.verificationCode(),(t=$.post(r
2024-10-10 18:35:47 UTC	15774	IN	Data Raw: 64 3d 22 76 69 73 69 62 6c 65 3a 20 74 72 75 65 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 5c 6e 20 20 20 20 20 20 20 20 5c 78 33 63 21 2d 2d 20 6b 6f 20 69 66 3a 20 24 72 6f 6f 74 2e 73 68 6f 77 69 6e 67 53 65 74 75 70 46 6f 72 6d 20 2d 2d 5c 78 33 65 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 64 61 74 61 2d 62 69 6e 64 3d 22 76 69 73 69 62 6c 65 3a 20 24 72 6f 6f 74 2e 73 68 6f 77 47 65 6e 65 72 69 63 45 72 72 6f 72 4d 65 73 73 61 67 65 22 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 62 6f 78 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 72 72 6f 72 2d 62 6f 78 2d 69 63 6f 6e 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 22 20 68 Data Ascii: d="visible: true" style="display: none">\n \x3c!-- ko if: $root.showingSetupForm --\x3e\n <div data-bind="visible: $root.showGenericErrorMessage" class="error-box">\n <div class="error-box-icon">\n <svg width="14" h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49726	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:47 UTC	707	OUT	GET /favicon.ico HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:47 UTC	356	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:47 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close Cache-Control: private, no-store Last-Modified: Fri, 05 Jul 2024 10:13:36 GMT Accept-Ranges: bytes ETag: "086bffc3ceda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:47 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 76 11 2b 78 6d 06 d0 79 6e 06 cf 82 76 11 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89 89 27 0d 7a 6f 05 8e 79 6e 05 ff 7e 73 05 ff 7e 73 05 ff 79 6e 05 ff 78 6f 05 8e 94 94 15 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7d 71 07 6a 78 6e 05 f6 86 79 06 ff 7c 70 05 ff 78 6d 05 fe 78 6d 05 fe 7c 70 05 ff 86 79 06 ff 78 6e 05 f6 78 71 07 6a 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( @v+xmynv+'zoyn~s~synxo}qjxny\|pxmxm\|pyxnxqj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49729	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:47 UTC	580	OUT	GET /customisation/logo?subdomain=avp100&callback=_jqjsp&_1728585345266= HTTP/1.1 Host: api.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.huddle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:47 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:47 GMT Content-Type: application/javascript Content-Length: 302 Connection: close Cache-Control: public, max-age=604800 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:47 UTC	302	IN	Data Raw: 5f 6a 71 6a 73 70 28 7b 20 0d 0a 20 20 20 20 22 6c 69 6e 6b 73 22 3a 20 5b 20 7b 20 0d 0a 20 20 20 20 20 20 20 20 22 72 65 6c 22 3a 20 22 73 65 6c 66 22 2c 0d 0a 20 20 20 20 20 20 20 20 22 68 72 65 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 68 75 64 64 6c 65 2e 63 6f 6d 2f 72 65 73 74 2f 63 75 73 74 6f 6d 69 73 61 74 69 6f 6e 2f 6c 6f 67 6f 3f 73 75 62 64 6f 6d 61 69 6e 3d 61 76 70 31 30 30 22 0d 0a 20 20 20 20 7d 2c 20 7b 20 0d 0a 20 20 20 20 20 20 20 20 22 72 65 6c 22 3a 20 22 6c 6f 67 69 6e 2d 6c 6f 67 6f 22 2c 0d 0a 20 20 20 20 20 20 20 20 22 68 72 65 66 22 3a 20 22 2f 72 65 73 2f 39 38 32 34 66 61 62 39 2d 33 36 30 35 2d 34 33 62 39 2d 61 36 33 35 2d 63 36 66 63 32 33 66 62 66 62 34 35 2e 61 73 68 78 3f 6c 6f 67 69 6e 2d 6c 6f 67 6f 2e 6a 70 Data Ascii: _jqjsp({ "links": [ { "rel": "self", "href": "https://api.huddle.com/rest/customisation/logo?subdomain=avp100" }, { "rel": "login-logo", "href": "/res/9824fab9-3605-43b9-a635-c6fc23fbfb45.ashx?login-logo.jp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49728	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:47 UTC	572	OUT	GET /localisation/cultures/categories/identityui?callback=_jqjsp HTTP/1.1 Host: api.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.huddle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:47 UTC	395	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:47 GMT Content-Type: application/javascript Content-Length: 10689 Connection: close Cache-Control: public, must-revalidate, max-age=0 Content-Language: en-US Last-Modified: Wed, 18 Sep 2024 02:48:54 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:47 UTC	10689	IN	Data Raw: 5f 6a 71 6a 73 70 28 7b 0d 0a 20 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 69 64 65 6e 74 69 74 79 75 69 22 2c 0d 0a 20 20 22 72 65 73 6f 75 72 63 65 73 22 3a 20 7b 0d 0a 20 20 20 20 22 66 69 65 6c 64 4c 61 62 65 6c 5f 65 6d 61 69 6c 22 3a 20 22 45 6d 61 69 6c 20 6f 72 20 75 73 65 72 6e 61 6d 65 22 2c 0d 0a 20 20 20 20 22 66 69 65 6c 64 4c 61 62 65 6c 5f 65 6d 61 69 6c 32 22 3a 20 22 45 6d 61 69 6c 22 2c 0d 0a 20 20 20 20 22 66 69 65 6c 64 4c 61 62 65 6c 5f 70 61 73 73 77 6f 72 64 22 3a 20 22 50 61 73 73 77 6f 72 64 22 2c 0d 0a 20 20 20 20 22 66 69 65 6c 64 4c 61 62 65 6c 5f 74 77 6f 46 61 63 74 6f 72 22 3a 20 22 54 77 6f 20 46 61 63 74 6f 72 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 43 6f 64 65 22 2c 0d 0a 20 20 20 20 22 66 69 65 6c 64 4c 61 62 65 Data Ascii: _jqjsp({ "category": "identityui", "resources": { "fieldLabel_email": "Email or username", "fieldLabel_email2": "Email", "fieldLabel_password": "Password", "fieldLabel_twoFactor": "Two Factor Authentication Code", "fieldLabe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49730	95.100.63.156	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:47 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 18:35:47 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=166185 Date: Thu, 10 Oct 2024 18:35:47 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-10 18:35:47 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49732	162.247.243.39	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:47 UTC	358	OUT	GET /nr-632.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:47 UTC	549	IN	HTTP/1.1 200 OK Connection: close Content-Length: 22469 Last-Modified: Wed, 18 Oct 2023 21:00:22 GMT ETag: "f9cdcb1e4b2be3825b6dfcbd33deff25" Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 Content-Type: application/javascript Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 10 Oct 2024 18:35:47 GMT X-Served-By: cache-ewr-kewr1740031-EWR X-Cache: HIT X-Cache-Hits: 1 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 69 29 7b 69 66 28 21 6e 5b 74 5d 29 7b 69 66 28 21 65 5b 74 5d 29 7b 76 61 72 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 5f 5f 6e 72 5f 72 65 71 75 69 72 65 26 26 5f 5f 6e 72 5f 72 65 71 75 69 72 65 3b 69 66 28 21 69 26 26 61 29 72 65 74 75 72 6e 20 61 28 74 2c 21 30 29 3b 69 66 28 6f 29 72 65 74 75 72 6e 20 6f 28 74 2c 21 30 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 74 2b 22 27 22 29 7d 76 61 72 20 75 3d 6e 5b 74 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 74 5d 5b 30 5d 2e 63 61 6c 6c 28 75 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 Data Ascii: !function(e,n,t){function r(t,i){if(!n[t]){if(!e[t]){var a="function"==typeof __nr_require&&__nr_require;if(!i&&a)return a(t,!0);if(o)return o(t,!0);throw new Error("Cannot find module '"+t+"'")}var u=n[t]={exports:{}};e[t][0].call(u.exports,function(n){v
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 6f 7d 29 7d 76 61 72 20 63 3d 65 28 31 29 2c 64 3d 65 28 22 68 61 6e 64 6c 65 22 29 2c 6c 3d 65 28 32 29 2c 6d 3d 7b 7d 2c 70 3d 7b 7d 3b 6e 2e 65 78 70 6f 72 74 73 3d 7b 73 74 6f 72 65 3a 74 2c 74 61 6b 65 3a 61 2c 67 65 74 3a 69 2c 6d 61 72 6b 3a 73 2c 6d 65 61 73 75 72 65 3a 66 7d 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 28 22 62 73 74 41 67 67 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 7d 2c 31 65 34 29 7d 2c 7b 31 3a 32 35 2c 32 3a 31 30 2c 68 61 6e 64 6c 65 3a 21 31 7d 5d 2c 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 6e 2c 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 28 22 2f 22 21 3d 3d 6e 2e 63 68 61 72 41 74 28 30 29 26 26 28 6e 3d 22 2f 22 2b 6e 29 Data Ascii: o})}var c=e(1),d=e("handle"),l=e(2),m={},p={};n.exports={store:t,take:a,get:i,mark:s,measure:f},setTimeout(function(){l("bstAgg",function(){})},1e4)},{1:25,2:10,handle:!1}],3:[function(e){function n(e,n,t){"string"==typeof n&&("/"!==n.charAt(0)&&(n="/"+n)
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 30 2c 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 69 66 28 74 2b 3d 65 5b 72 5d 2e 6c 65 6e 67 74 68 2c 74 3e 6e 29 72 65 74 75 72 6e 20 65 2e 73 6c 69 63 65 28 30 2c 72 29 2e 6a 6f 69 6e 28 22 22 29 3b 72 65 74 75 72 6e 20 65 2e 6a 6f 69 6e 28 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 6e 29 7b 76 61 72 20 74 3d 30 2c 6f 3d 22 22 3b 72 65 74 75 72 6e 20 75 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 76 61 72 20 61 2c 75 2c 66 3d 5b 5d 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 29 61 3d 22 26 22 2b 65 2b 22 3d 22 2b 72 28 69 29 2c 74 2b 3d 61 2e 6c 65 6e 67 74 68 2c 6f 2b 3d 61 3b 65 6c 73 65 20 69 66 28 69 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 74 2b 3d 39 2c 75 3d 30 3b Data Ascii: {for(var t=0,r=0;r<e.length;r++)if(t+=e[r].length,t>n)return e.slice(0,r).join("");return e.join("")}function i(e,n){var t=0,o="";return u(e,function(e,i){var a,u,f=[];if("string"==typeof i)a="&"+e+"="+r(i),t+=a.length,o+=a;else if(i.length){for(t+=9,u=0;
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 72 74 74 69 6d 65 22 2c 22 66 69 72 73 74 62 79 74 65 22 29 2c 6e 2e 6d 65 61 73 75 72 65 28 22 66 65 22 2c 22 66 69 72 73 74 62 79 74 65 22 2c 22 6f 6e 6c 6f 61 64 22 29 2c 6e 2e 6d 65 61 73 75 72 65 28 22 64 63 22 2c 22 66 69 72 73 74 62 79 74 65 22 2c 22 64 6f 6d 43 6f 6e 74 65 6e 74 22 29 3b 76 61 72 20 74 3d 6e 2e 67 65 74 28 22 6d 65 61 73 75 72 65 73 22 29 2c 72 3d 6d 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 22 26 22 2b 65 2b 22 3d 22 2b 6e 2e 70 61 72 61 6d 73 2e 76 61 6c 75 65 7d 29 2e 6a 6f 69 6e 28 22 22 29 3b 69 66 28 72 29 7b 76 61 72 20 6f 3d 22 31 22 2c 69 3d 5b 63 28 65 29 5d 3b 69 66 28 69 2e 70 75 73 68 28 72 29 2c 69 2e 70 75 73 68 28 76 28 22 74 74 22 2c 65 2e 69 6e 66 6f 2e 74 74 47 75 69 64 29 29 2c 69 2e Data Ascii: rttime","firstbyte"),n.measure("fe","firstbyte","onload"),n.measure("dc","firstbyte","domContent");var t=n.get("measures"),r=m(t,function(e,n){return"&"+e+"="+n.params.value}).join("");if(r){var o="1",i=[c(e)];if(i.push(r),i.push(v("tt",e.info.ttGuid)),i.
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3b 72 65 74 75 72 6e 20 61 2b 3d 63 28 65 29 2c 72 26 26 28 61 2b 3d 68 2e 6f 62 6a 28 72 2c 65 2e 6d 61 78 42 79 74 65 73 29 29 2c 75 3f 69 3d 67 28 74 29 3a 61 2b 3d 68 2e 6f 62 6a 28 74 2c 65 2e 6d 61 78 42 79 74 65 73 29 2c 74 2e 65 72 72 26 26 74 2e 65 72 72 2e 6c 65 6e 67 74 68 26 26 21 78 26 26 28 61 2b 3d 76 28 22 70 76 65 22 2c 22 31 22 29 2c 78 3d 21 30 29 2c 77 28 7b 75 72 6c 3a 61 2c 62 6f 64 79 3a 69 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 69 66 28 65 26 26 65 2e 69 6e 66 6f 26 26 65 2e 69 6e 66 6f 2e 65 72 72 6f 72 42 65 61 63 6f 6e 26 26 65 2e 69 65 56 65 72 73 69 6f 6e 29 7b 76 61 72 20 6e 3d 22 68 74 74 70 73 3a 2f 2f 22 2b 65 2e 69 6e 66 6f 2e 65 72 72 6f 72 42 65 61 63 6f Data Ascii: e.addEventListener;return a+=c(e),r&&(a+=h.obj(r,e.maxBytes)),u?i=g(t):a+=h.obj(t,e.maxBytes),t.err&&t.err.length&&!x&&(a+=v("pve","1"),x=!0),w({url:a,body:i})}function u(e){if(e&&e.info&&e.info.errorBeacon&&e.ieVersion){var n="https://"+e.info.errorBeaco
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 74 28 65 29 7b 76 61 72 20 6e 3d 22 73 22 3b 22 70 61 67 65 68 69 64 65 22 3d 3d 3d 65 2e 74 79 70 65 26 26 28 6e 3d 22 68 22 29 2c 69 2e 6e 61 76 43 6f 6f 6b 69 65 26 26 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 22 4e 52 45 55 4d 3d 22 2b 6e 2b 22 3d 22 2b 4e 75 6d 62 65 72 28 6e 65 77 20 44 61 74 65 29 2b 22 26 72 3d 22 2b 72 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 70 3d 22 2b 72 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 2b 22 3b 20 70 61 74 68 3d 2f 22 29 7d 76 61 72 20 72 3d 65 28 31 29 2c 6f 3d 65 28 32 29 2c 69 3d 65 28 36 29 2c 61 3d 65 28 37 29 2c 75 3d 65 28 31 30 29 2c 73 3d 28 65 28 33 29 2c 65 28 39 29 29 2c 66 3d 65 28 34 29 2c 63 3d 28 65 28 38 29 2c 65 28 22 6c 6f 61 64 65 72 Data Ascii: t(e){var n="s";"pagehide"===e.type&&(n="h"),i.navCookie&&(document.cookie="NREUM="+n+"="+Number(new Date)+"&r="+r(document.location.href)+"&p="+r(document.referrer)+"; path=/")}var r=e(1),o=e(2),i=e(6),a=e(7),u=e(10),s=(e(3),e(9)),f=e(4),c=(e(8),e("loader
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 3d 74 79 70 65 6f 66 20 65 26 26 65 3e 30 26 26 28 74 5b 72 5d 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2d 6e 29 29 7d 6e 2e 65 78 70 6f 72 74 73 3d 7b 61 64 64 50 54 3a 74 2c 61 64 64 50 4e 3a 72 7d 7d 2c 7b 7d 5d 2c 31 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 29 7b 69 66 28 72 2e 6c 69 73 74 65 6e 65 72 73 28 65 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 72 2e 6f 6e 28 65 2c 6e 29 3b 76 61 72 20 74 3d 72 2e 71 5b 65 5d 3b 69 66 28 74 29 7b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 2e 65 6d 69 74 28 65 2c 74 5b 6f 5d 29 3b 64 65 6c 65 74 65 20 72 2e 71 5b 65 5d 7d 72 65 74 75 72 6e 21 30 7d 76 61 72 20 72 3d 65 28 22 68 61 6e 64 6c 65 22 29 2e 65 65 3b Data Ascii: =typeof e&&e>0&&(t[r]=Math.round(e-n))}n.exports={addPT:t,addPN:r}},{}],10:[function(e,n){function t(e,n){if(r.listeners(e).length)return!1;r.on(e,n);var t=r.q[e];if(t){for(var o=0;o<t.length;o++)r.emit(e,t[o]);delete r.q[e]}return!0}var r=e("handle").ee;
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 5d 2e 73 75 62 73 74 72 69 6e 67 28 32 29 2c 22 3b 22 3d 3d 3d 74 2e 63 68 61 72 41 74 28 74 2e 6c 65 6e 67 74 68 2d 31 29 26 26 28 74 3d 74 2e 73 75 62 73 74 72 28 30 2c 74 2e 6c 65 6e 67 74 68 2d 31 29 29 29 3b 69 66 28 74 29 7b 76 61 72 20 63 3d 69 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 75 3d 63 3d 3d 74 2c 75 7c 7c 28 75 3d 69 28 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3d 3d 74 26 26 63 3d 3d 72 29 7d 69 66 28 75 26 26 6f 29 7b 76 61 72 20 64 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 69 66 28 64 2d 6f 3e 36 65 34 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 6f 7d 7d 7d 76 61 72 20 69 3d 65 28 31 29 2c 61 3d 65 28 32 29 2c 75 3d 65 28 22 6c 6f 61 64 65 72 22 29 3b 6e 2e 65 78 70 Data Ascii: ].substring(2),";"===t.charAt(t.length-1)&&(t=t.substr(0,t.length-1)));if(t){var c=i(document.referrer);u=c==t,u\|\|(u=i(document.location.href)==t&&c==r)}if(u&&o){var d=(new Date).getTime();if(d-o>6e4)return;return o}}}var i=e(1),a=e(2),u=e("loader");n.exp
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 7a 30 2d 39 5d 2b 29 24 2f 69 3b 6e 2e 65 78 70 6f 72 74 73 3d 74 7d 2c 7b 7d 5d 2c 31 36 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6d 61 74 63 68 28 72 29 3b 72 65 74 75 72 6e 20 6e 3f 6e 5b 33 5d 3f 6e 5b 31 5d 2b 6e 5b 33 5d 3a 6e 5b 31 5d 3a 6e 75 6c 6c 7d 6e 2e 65 78 70 6f 72 74 73 3d 74 3b 76 61 72 20 72 3d 2f 5e 28 5b 5e 3f 5d 2b 29 28 5c 3f 5b 5e 23 5d 2a 29 3f 28 23 2e 2a 29 3f 24 2f 7d 2c 7b 7d 5d 2c 31 37 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3b 74 72 79 7b 69 66 28 6e 3d 64 28 65 29 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 74 29 7b 69 66 28 68 29 74 68 72 6f 77 20 74 7d 74 72 79 7b 69 Data Ascii: z0-9]+)$/i;n.exports=t},{}],16:[function(e,n){function t(e){var n=e.match(r);return n?n[3]?n[1]+n[3]:n[1]:null}n.exports=t;var r=/^([^?]+)(\?[^#])?(#.)?$/},{}],17:[function(e,n){function t(e){var n=null;try{if(n=d(e))return n}catch(t){if(h)throw t}try{i
2024-10-10 18:35:47 UTC	1378	IN	Data Raw: 69 6e 65 2c 65 2e 63 6f 6c 75 6d 6e 26 26 28 74 2b 3d 22 3a 22 2b 65 2e 63 6f 6c 75 6d 6e 29 29 2c 7b 6d 6f 64 65 3a 22 73 6f 75 72 63 65 6c 69 6e 65 22 2c 6e 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 3a 65 2e 6d 65 73 73 61 67 65 2c 73 74 61 63 6b 53 74 72 69 6e 67 3a 74 2c 66 72 61 6d 65 73 3a 5b 7b 75 72 6c 3a 65 2e 73 6f 75 72 63 65 55 52 4c 2c 6c 69 6e 65 3a 65 2e 6c 69 6e 65 2c 63 6f 6c 75 6d 6e 3a 65 2e 63 6f 6c 75 6d 6e 7d 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 76 61 72 20 6e 3d 65 2e 6e 61 6d 65 7c 7c 73 28 65 29 3b 72 65 74 75 72 6e 20 6e 3f 7b 6d 6f 64 65 3a 22 6e 61 6d 65 6f 6e 6c 79 22 2c 6e 61 6d 65 3a 6e 2c 6d 65 73 73 61 67 65 3a 65 2e 6d 65 73 73 61 67 65 2c 73 74 61 63 6b 53 74 72 69 6e 67 3a 6e 2b 22 3a 20 22 2b 65 2e 6d 65 73 Data Ascii: ine,e.column&&(t+=":"+e.column)),{mode:"sourceline",name:n,message:e.message,stackString:t,frames:[{url:e.sourceURL,line:e.line,column:e.column}]}}function u(e){var n=e.name\|\|s(e);return n?{mode:"nameonly",name:n,message:e.message,stackString:n+": "+e.mes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49733	3.93.32.136	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:48 UTC	351	OUT	GET /favicon.ico HTTP/1.1 Host: login.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:48 UTC	356	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:48 GMT Content-Type: image/x-icon Content-Length: 1150 Connection: close Cache-Control: private, no-store Last-Modified: Fri, 05 Jul 2024 10:13:36 GMT Accept-Ranges: bytes ETag: "086bffc3ceda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:48 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 76 11 2b 78 6d 06 d0 79 6e 06 cf 82 76 11 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 89 89 27 0d 7a 6f 05 8e 79 6e 05 ff 7e 73 05 ff 7e 73 05 ff 79 6e 05 ff 78 6f 05 8e 94 94 15 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 7d 71 07 6a 78 6e 05 f6 86 79 06 ff 7c 70 05 ff 78 6d 05 fe 78 6d 05 fe 7c 70 05 ff 86 79 06 ff 78 6e 05 f6 78 71 07 6a 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h( @v+xmynv+'zoyn~s~synxo}qjxny\|pxmxm\|pyxnxqj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49735	18.210.252.197	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:48 UTC	405	OUT	GET /customisation/logo?subdomain=avp100&callback=_jqjsp&_1728585345266= HTTP/1.1 Host: api.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:48 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:48 GMT Content-Type: application/javascript Content-Length: 302 Connection: close Cache-Control: public, max-age=604800 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:48 UTC	302	IN	Data Raw: 5f 6a 71 6a 73 70 28 7b 20 0d 0a 20 20 20 20 22 6c 69 6e 6b 73 22 3a 20 5b 20 7b 20 0d 0a 20 20 20 20 20 20 20 20 22 72 65 6c 22 3a 20 22 73 65 6c 66 22 2c 0d 0a 20 20 20 20 20 20 20 20 22 68 72 65 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 70 69 2e 68 75 64 64 6c 65 2e 63 6f 6d 2f 72 65 73 74 2f 63 75 73 74 6f 6d 69 73 61 74 69 6f 6e 2f 6c 6f 67 6f 3f 73 75 62 64 6f 6d 61 69 6e 3d 61 76 70 31 30 30 22 0d 0a 20 20 20 20 7d 2c 20 7b 20 0d 0a 20 20 20 20 20 20 20 20 22 72 65 6c 22 3a 20 22 6c 6f 67 69 6e 2d 6c 6f 67 6f 22 2c 0d 0a 20 20 20 20 20 20 20 20 22 68 72 65 66 22 3a 20 22 2f 72 65 73 2f 39 38 32 34 66 61 62 39 2d 33 36 30 35 2d 34 33 62 39 2d 61 36 33 35 2d 63 36 66 63 32 33 66 62 66 62 34 35 2e 61 73 68 78 3f 6c 6f 67 69 6e 2d 6c 6f 67 6f 2e 6a 70 Data Ascii: _jqjsp({ "links": [ { "rel": "self", "href": "https://api.huddle.com/rest/customisation/logo?subdomain=avp100" }, { "rel": "login-logo", "href": "/res/9824fab9-3605-43b9-a635-c6fc23fbfb45.ashx?login-logo.jp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49736	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:48 UTC	688	OUT	GET /login?accessRequestId= HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:48 UTC	388	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:48 GMT Content-Type: text/html Content-Length: 338 Connection: close Cache-Control: no-cache, no-store Pragma: no-cache Set-Cookie: sectok="6bea2439-19a3-4fca-8445-72a634b8fd71"; Domain=login.huddle.com; Path=/; Secure; HttpOnly X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:48 UTC	338	IN	Data Raw: 0d 0a 0d 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 6c 6f 67 69 6e 22 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 3e 0d 0a 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 63 6c 69 65 6e 74 5f 73 74 61 74 65 22 3e 43 6c 69 65 6e 74 20 53 74 61 74 65 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 63 6c 69 65 6e 74 5f 73 74 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 2f 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 69 6e 76 69 74 61 74 69 6f 6e 5f 63 6f 64 65 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 76 61 6c 75 65 3d 22 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 2f 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 73 65 63 74 6f 6b 22 20 76 61 6c 75 65 3d 22 36 62 65 61 32 34 33 39 2d Data Ascii: <form action="/login" method="POST"> <label for="client_state">Client State</label> <input name="client_state" type="text" /> <input name="invitation_code" type="text" value="" type="hidden" /> <input name="sectok" value="6bea2439-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49734	18.210.252.197	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:48 UTC	397	OUT	GET /localisation/cultures/categories/identityui?callback=_jqjsp HTTP/1.1 Host: api.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:48 UTC	395	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:48 GMT Content-Type: application/javascript Content-Length: 10689 Connection: close Cache-Control: public, must-revalidate, max-age=0 Content-Language: en-US Last-Modified: Wed, 18 Sep 2024 02:48:54 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:48 UTC	10689	IN	Data Raw: 5f 6a 71 6a 73 70 28 7b 0d 0a 20 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 69 64 65 6e 74 69 74 79 75 69 22 2c 0d 0a 20 20 22 72 65 73 6f 75 72 63 65 73 22 3a 20 7b 0d 0a 20 20 20 20 22 66 69 65 6c 64 4c 61 62 65 6c 5f 65 6d 61 69 6c 22 3a 20 22 45 6d 61 69 6c 20 6f 72 20 75 73 65 72 6e 61 6d 65 22 2c 0d 0a 20 20 20 20 22 66 69 65 6c 64 4c 61 62 65 6c 5f 65 6d 61 69 6c 32 22 3a 20 22 45 6d 61 69 6c 22 2c 0d 0a 20 20 20 20 22 66 69 65 6c 64 4c 61 62 65 6c 5f 70 61 73 73 77 6f 72 64 22 3a 20 22 50 61 73 73 77 6f 72 64 22 2c 0d 0a 20 20 20 20 22 66 69 65 6c 64 4c 61 62 65 6c 5f 74 77 6f 46 61 63 74 6f 72 22 3a 20 22 54 77 6f 20 46 61 63 74 6f 72 20 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 43 6f 64 65 22 2c 0d 0a 20 20 20 20 22 66 69 65 6c 64 4c 61 62 65 Data Ascii: _jqjsp({ "category": "identityui", "resources": { "fieldLabel_email": "Email or username", "fieldLabel_email2": "Email", "fieldLabel_password": "Password", "fieldLabel_twoFactor": "Two Factor Authentication Code", "fieldLabe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49738	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:49 UTC	846	OUT	POST /login HTTP/1.1 Host: login.huddle.com Connection: keep-alive Content-Length: 143 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://login.huddle.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="6bea2439-19a3-4fca-8445-72a634b8fd71"
2024-10-10 18:35:49 UTC	143	OUT	Data Raw: 63 6c 69 65 6e 74 5f 73 74 61 74 65 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 61 76 70 31 30 30 2e 68 75 64 64 6c 65 2e 63 6f 6d 25 32 46 77 6f 72 6b 73 70 61 63 65 25 32 46 31 31 38 39 34 35 39 25 32 46 66 69 6c 65 73 25 32 46 25 32 33 25 32 46 66 6f 6c 64 65 72 25 32 46 34 33 31 39 39 35 35 26 73 65 63 74 6f 6b 3d 36 62 65 61 32 34 33 39 2d 31 39 61 33 2d 34 66 63 61 2d 38 34 34 35 2d 37 32 61 36 33 34 62 38 66 64 37 31 Data Ascii: client_state=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955&sectok=6bea2439-19a3-4fca-8445-72a634b8fd71
2024-10-10 18:35:49 UTC	403	IN	HTTP/1.1 302 Found Date: Thu, 10 Oct 2024 18:35:49 GMT Content-Type: application/vnd.huddle.data+json Content-Length: 88 Connection: close Cache-Control: no-cache, no-store Pragma: no-cache Location: https://login.huddle.com/login/entry?access_request=93921932-863b-4ff1-adf8-ebd1dab6991b X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:49 UTC	88	IN	Data Raw: 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 68 75 64 64 6c 65 2e 63 6f 6d 2f 6c 6f 67 69 6e 2f 65 6e 74 72 79 3f 61 63 63 65 73 73 5f 72 65 71 75 65 73 74 3d 39 33 39 32 31 39 33 32 2d 38 36 33 62 2d 34 66 66 31 2d 61 64 66 38 2d 65 62 64 31 64 61 62 36 39 39 31 62 Data Ascii: https://login.huddle.com/login/entry?access_request=93921932-863b-4ff1-adf8-ebd1dab6991b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49737	3.93.32.136	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:49 UTC	417	OUT	GET /login?accessRequestId= HTTP/1.1 Host: login.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="6bea2439-19a3-4fca-8445-72a634b8fd71"
2024-10-10 18:35:49 UTC	388	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:49 GMT Content-Type: text/html Content-Length: 338 Connection: close Cache-Control: no-cache, no-store Pragma: no-cache Set-Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"; Domain=login.huddle.com; Path=/; Secure; HttpOnly X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:49 UTC	338	IN	Data Raw: 0d 0a 0d 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 6c 6f 67 69 6e 22 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 3e 0d 0a 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 63 6c 69 65 6e 74 5f 73 74 61 74 65 22 3e 43 6c 69 65 6e 74 20 53 74 61 74 65 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 63 6c 69 65 6e 74 5f 73 74 61 74 65 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 2f 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 69 6e 76 69 74 61 74 69 6f 6e 5f 63 6f 64 65 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 76 61 6c 75 65 3d 22 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 2f 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 73 65 63 74 6f 6b 22 20 76 61 6c 75 65 3d 22 61 35 36 35 38 64 35 63 2d Data Ascii: <form action="/login" method="POST"> <label for="client_state">Client State</label> <input name="client_state" type="text" /> <input name="invitation_code" type="text" value="" type="hidden" /> <input name="sectok" value="a5658d5c-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49739	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:50 UTC	784	OUT	GET /login/entry?access_request=93921932-863b-4ff1-adf8-ebd1dab6991b HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
2024-10-10 18:35:50 UTC	278	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:50 GMT Content-Type: text/html Content-Length: 527 Connection: close Cache-Control: no-cache, no-store Pragma: no-cache X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:50 UTC	527	IN	Data Raw: 0d 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 6c 6f 67 69 6e 2f 65 6e 74 72 79 22 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 20 64 61 74 61 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 73 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 75 73 65 72 5f 69 64 65 6e 74 69 66 69 65 72 22 3e 55 73 65 72 20 49 64 65 6e 74 69 66 69 65 72 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 75 73 65 72 5f 69 64 65 6e 74 69 66 69 65 72 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 2f 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 61 63 63 65 73 73 5f 72 65 71 75 65 73 74 22 20 76 61 6c 75 65 3d 22 39 33 39 32 31 39 33 32 2d 38 36 33 62 2d 34 66 66 31 2d 61 64 66 38 2d 65 62 Data Ascii: <form action="/login/entry" method="POST" data-external-links-enabled="true"> <label for="user_identifier">User Identifier</label> <input name="user_identifier" type="text" /> <input name="access_request" value="93921932-863b-4ff1-adf8-eb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49741	104.18.70.113	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:51 UTC	546	OUT	GET /embeddable_framework/main.js HTTP/1.1 Host: assets.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.huddle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:51 UTC	685	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 10 Oct 2024 18:35:51 GMT Content-Type: text/html Content-Length: 167 Connection: close Cache-Control: max-age=3600 Expires: Thu, 10 Oct 2024 19:35:51 GMT Location: https://static.zdassets.com/ekr/asset_composer.js Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JI%2FVg5NbO0Nl2CLs89GKqwSkyPTPQxugWvub3mU2ArgzE260IFUfc46MBpWAhd2jLX7N3NYPhu8%2BrxfrfhlhChLFtLBAH9MhiOYXRAwa6vegRw7PjlInes1GVIkdK%2BI9oO6xoA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 8d08b66cebde0f4f-EWR
2024-10-10 18:35:51 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49740	3.93.32.136	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:51 UTC	458	OUT	GET /login/entry?access_request=93921932-863b-4ff1-adf8-ebd1dab6991b HTTP/1.1 Host: login.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
2024-10-10 18:35:51 UTC	278	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:51 GMT Content-Type: text/html Content-Length: 527 Connection: close Cache-Control: no-cache, no-store Pragma: no-cache X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:51 UTC	527	IN	Data Raw: 0d 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 6c 6f 67 69 6e 2f 65 6e 74 72 79 22 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 20 64 61 74 61 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 73 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 75 73 65 72 5f 69 64 65 6e 74 69 66 69 65 72 22 3e 55 73 65 72 20 49 64 65 6e 74 69 66 69 65 72 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 75 73 65 72 5f 69 64 65 6e 74 69 66 69 65 72 22 20 74 79 70 65 3d 22 74 65 78 74 22 20 2f 3e 0d 0a 20 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 61 63 63 65 73 73 5f 72 65 71 75 65 73 74 22 20 76 61 6c 75 65 3d 22 39 33 39 32 31 39 33 32 2d 38 36 33 62 2d 34 66 66 31 2d 61 64 66 38 2d 65 62 Data Ascii: <form action="/login/entry" method="POST" data-external-links-enabled="true"> <label for="user_identifier">User Identifier</label> <input name="user_identifier" type="text" /> <input name="access_request" value="93921932-863b-4ff1-adf8-eb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49742	18.210.252.197	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:51 UTC	636	OUT	GET /res/9824fab9-3605-43b9-a635-c6fc23fbfb45.ashx?login-logo.jpg HTTP/1.1 Host: avp100.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.huddle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:51 UTC	369	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:51 GMT Content-Type: image/jpeg Content-Length: 45764 Connection: close Cache-Control: public Expires: Fri, 31 Dec 2038 11:59:59 GMT ETag: 6821b945 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:51 UTC	16015	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 5a 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFxxCCZ"}!1AQa"q2
2024-10-10 18:35:51 UTC	16384	IN	Data Raw: 56 93 63 02 d9 58 da db da ae da fa 7a 5e 31 e0 71 35 32 2c 66 6b c3 94 96 37 2c c0 67 99 4c e5 95 54 78 4a 58 8c 1e 74 a0 a1 18 bc 4c b1 75 63 57 05 15 3f 67 cf 56 a2 4e 75 5d b9 79 a9 cb 9a 79 1a 54 b1 f8 7a 75 9f b3 cc b2 ac 3e 07 13 7d 6d 2c 3d 7a 12 a0 e9 59 e9 4a 14 95 4a 6f 45 7f b8 fe 33 fe 2e f8 b6 df fe 0b 35 ff 00 05 cc f8 41 e2 7f d9 43 4b d7 75 ff 00 83 1f 08 ee fe 0b c3 ab fc 50 ba d0 b5 dd 27 4f 1f 0e be 12 f8 92 e3 e2 07 8a 3c 75 aa d8 eb 36 1a 5e a3 e1 78 75 5d 63 56 d5 7c 2d e0 dd 37 5f b6 b5 bc d6 6f 7f b1 5d ac ed 2f b5 73 69 67 ce 7c 6b fd 9f 93 f6 91 fd bf bf e0 bc 7e 05 b7 b1 4b bf 10 78 77 e0 6f c4 7f 8a fe 0f 0b 6d 2d e5 e4 7e 23 f8 4d f1 27 e0 bf 8f 96 df 49 82 02 2e 7f b4 35 fd 2b 42 d4 fc 2c 36 f5 3a e5 c2 8e b8 af ee c7 e1 67 Data Ascii: VcXz^1q52,fk7,gLTxJXtLucW?gVNu]yyTzu>}m,=zYJJoE3.5ACKuP'O<u6^xu]cV\|-7_o]/sig\|k~Kxwom-~#M'I.5+B,6:g
2024-10-10 18:35:51 UTC	19	IN	Data Raw: 00 85 2f e0 df 84 da ad b7 ec f9 fb 36 4c 9a 95 b4 bf 0c Data Ascii: /6L
2024-10-10 18:35:51 UTC	13346	IN	Data Raw: be 02 43 f1 26 e3 e1 2e a1 e3 8f 88 fe 15 d4 3c 25 77 e0 0f 1c dd 78 af c6 30 9d 33 e2 87 81 7c 31 e3 7f 0d fc 55 f0 25 a5 c6 89 7f e1 3b eb d3 e1 4d 1e d0 fc db fb 2a fe ca 7e 2c f8 89 e1 bf 1b 78 b7 c1 5e 07 1f 0f 1b e2 2e bd 16 b9 e1 bf 0f dd 1f 11 ea 5e 0c f0 f6 8f 01 9f 53 f0 7f c2 39 be 24 6b ff 00 6c bc d2 75 6b 9d 23 55 9f c4 f6 57 5e 39 b9 26 f6 d6 7f 09 69 fa e5 ed a6 a3 8b ba fe 98 cf b3 bc 93 81 bc 31 ce 32 dc 56 11 ac 74 63 5b 2f c3 66 15 95 05 87 79 b6 6f 42 a6 07 1d 87 a0 a3 fb e7 5b 05 96 d6 aa eb 57 f6 4e 8b 9e a9 fb 3a b4 f9 ff 00 d3 ff 00 a1 bf 85 b4 b1 be 2b 78 65 97 62 31 f4 30 7c 2d c1 f8 dc 93 38 e2 5c 5e 26 f4 b0 d8 6c af 22 c7 61 f1 b1 ab 5d f5 96 6b 99 c6 95 18 c7 49 41 62 9d 4a 97 85 2a 9c 9d e7 ec f1 e0 fb af 1e 7c 5d f0 9f 85 Data Ascii: C&.<%wx03\|1U%;M~,x^.^S9$kluk#UW^9&i12Vtc[/fyoB[WN:+xeb10\|-8\^&l"a]kIAbJ\|]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49745	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:51 UTC	798	OUT	GET /user/css/assets/marketing-buttons/badge-ios.svg HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
2024-10-10 18:35:51 UTC	357	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:51 GMT Content-Type: image/svg+xml Content-Length: 6151 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:26 GMT Accept-Ranges: bytes ETag: "065a745f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:51 UTC	6151	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 6b 65 74 63 68 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d 2f 73 6b 65 74 63 68 2f 6e 73 22 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49747	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:51 UTC	802	OUT	GET /user/css/assets/marketing-buttons/badge-android.svg HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
2024-10-10 18:35:51 UTC	357	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:51 GMT Content-Type: image/svg+xml Content-Length: 9379 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:26 GMT Accept-Ranges: bytes ETag: "065a745f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:51 UTC	9379	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 6b 65 74 63 68 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d 2f 73 6b 65 74 63 68 2f 6e 73 22 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49744	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:51 UTC	802	OUT	GET /user/css/assets/marketing-buttons/badge-windows.svg HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
2024-10-10 18:35:51 UTC	357	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:51 GMT Content-Type: image/svg+xml Content-Length: 8987 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:26 GMT Accept-Ranges: bytes ETag: "065a745f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:51 UTC	8987	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 6b 65 74 63 68 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d 2f 73 6b 65 74 63 68 2f 6e 73 22 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49746	52.23.1.4	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:51 UTC	798	OUT	GET /user/css/assets/marketing-buttons/badge-mac.svg HTTP/1.1 Host: login.huddle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.huddle.com/user/?subdomain=avp100&ReturnUrl=https%3A%2F%2Favp100.huddle.com%2Fworkspace%2F1189459%2Ffiles%2F%23%2Ffolder%2F4319955 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
2024-10-10 18:35:51 UTC	357	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:51 GMT Content-Type: image/svg+xml Content-Length: 6817 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:26 GMT Accept-Ranges: bytes ETag: "065a745f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:51 UTC	6817	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 6b 65 74 63 68 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d 2f 73 6b 65 74 63 68 2f 6e 73 22 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49748	104.18.72.113	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:51 UTC	540	OUT	GET /ekr/asset_composer.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.huddle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:52 UTC	1146	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:51 GMT Content-Type: application/javascript Content-Length: 10215 Connection: close x-amz-id-2: OInh/yZS/FgWpADJbQVI6EpSvIc2bbO7zI8CceI8HPWE2Pp2La6So+2lF0WVMIbQWhqRxWuwiGPbfAxZfTWiUx74ROEkpxme x-amz-request-id: DR9KSTJHEFKV57K0 x-amz-replication-status: PENDING Last-Modified: Tue, 10 Sep 2024 11:42:28 GMT ETag: "d90dbb2a9f98c3c53cd0f1d480381e2e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600, s-maxage=60 x-amz-version-id: iW4uEmBNelY9A2ZpEPMF_EvT6Og.No1w CF-Cache-Status: HIT Age: 34 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=76lTtGTNECwWp0Qq3a5VFindbp7xQb%2B1YmYoY4kMlJ5YVl3cbXglIU7HuBZkw3F26RXsLtxdoQhacYQuwg3LNPy3vM%2FbIkfm8ecFDdOb3kl38cVLX24mdw7cijzwDbFNq7FMPtM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8d08b671da960fa0-EWR
2024-10-10 18:35:52 UTC	223	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 32 37 31 3a 65 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 74 2e 68 72 65 66 3d 65 2c 74 2e 73 65 61 72 63 68 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 7c 7c 22 22 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 51 75 65 72 79 50 61 72 61 6d 73 53 74 72 69 6e 67 3a 74 2c 70 61 72 73 65 55 72 6c 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 72 3d 74 28 65 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 72 3f 7b 7d 3a 72 2e 73 70 6c 69 74 28 22 26 22 29 2e 72 65 Data Ascii: (()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("&").re
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 20 65 5b 72 5b 30 5d 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 5b 31 5d 29 2c 65 7d 29 2c 7b 7d 29 7d 2c 6c 6f 61 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 22 53 63 72 69 70 74 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 22 29 29 7d 2c 72 2e 72 65 61 Data Ascii: duce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))},r.rea
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 61 6b 7d 7d 61 7c 7c 28 63 3d 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 73 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 74 2b 6f 29 2c 61 2e 73 72 63 3d 72 29 2c 65 5b 72 5d 3d 5b 6e 5d 3b 76 61 72 20 6c 3d 28 74 2c 6e 29 3d 3e 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 3b 76 61 72 20 73 3d 65 5b 72 5d 3b 69 66 28 64 65 6c 65 74 65 20 65 5b 72 5d 2c 61 2e 70 61 72 65 6e Data Ascii: ak}}a\|\|(c=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack",t+o),a.src=r),e[r]=[n];var l=(t,n)=>{a.onerror=a.onload=null,clearTimeout(h);var s=e[r];if(delete e[r],a.paren
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 66 6f 72 45 61 63 68 28 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 30 29 29 2c 72 2e 70 75 73 68 3d 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 2e 70 75 73 68 2e 62 69 6e 64 28 72 29 29 7d 29 28 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 22 22 2c 74 3d 7b 7d 2c 72 3d 21 31 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 2c 74 68 69 73 2e 70 72 6f 70 73 3d 74 2c 74 68 69 73 2e 65 72 72 6f 72 3d 45 72 72 6f 72 28 74 68 69 73 2e 6d 65 73 73 61 67 65 29 2c 74 68 69 73 2e 69 73 55 73 65 72 45 72 72 6f 72 3d 72 2c 74 68 69 73 2e 66 69 6e 67 65 72 70 72 69 6e 74 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 7d 7d 63 6f 6e 73 74 20 74 3d 7b 7d 2c 72 3d 7b 7d 2c 6e 3d 7b 7d 3b 63 6c 61 73 73 20 6f Data Ascii: forEach(t.bind(null,0)),r.push=t.bind(null,r.push.bind(r))})(),(()=>{"use strict";class e{constructor(e="",t={},r=!1){this.message=e,this.props=t,this.error=Error(this.message),this.isUserError=r,this.fingerprint=this.message}}const t={},r={},n={};class o
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 22 29 29 7d 29 29 7d 29 29 7d 63 72 65 61 74 65 49 66 72 61 6d 65 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 63 75 6d 65 6e 74 52 65 61 64 79 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 64 6f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 64 61 74 61 73 65 74 2e 70 72 6f 64 75 63 74 3d 74 68 69 73 2e 6e 61 6d 65 2c 65 2e 74 69 74 6c 65 3d 22 4e 6f 20 63 6f 6e 74 65 6e 74 22 2c 65 2e 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2c 65 2e 74 61 62 49 6e 64 65 78 3d 2d 31 2c 65 2e 61 6c 6c 6f 77 3d 22 6d 69 63 72 6f 70 68 6f 6e 65 20 2a 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 68 Data Ascii: "))}))}))}createIframeElement(){return this.parentDocumentReady().then((()=>{const e=this.doc.createElement("iframe");return e.dataset.product=this.name,e.title="No content",e.role="presentation",e.tabIndex=-1,e.allow="microphone *",e.setAttribute("aria-h
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 73 73 20 75 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 67 65 74 56 65 72 73 69 6f 6e 28 65 29 2c 74 68 69 73 2e 62 61 73 65 55 72 6c 3d 60 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 63 6f 6d 70 6f 73 65 2f 24 7b 74 7d 60 2c 74 68 69 73 2e 73 6e 69 70 70 65 74 4b 65 79 3d 74 7d 72 65 73 6f 6c 76 65 43 6f 6d 70 6f 73 65 55 72 6c 28 65 3d 21 31 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 62 61 73 65 55 72 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 26 26 28 74 2b 3d 60 3f 24 7b 74 68 69 73 2e 67 65 74 53 65 72 69 61 6c 69 7a 65 64 56 65 72 73 69 6f 6e 51 75 65 72 79 50 61 72 61 6d 28 29 7d 60 2c 74 68 69 73 2e 64 69 73 70 6c 61 79 57 61 72 6e 69 6e Data Ascii: ss u{constructor(e,t){this.version=this.getVersion(e),this.baseUrl=`https://ekr.zdassets.com/compose/${t}`,this.snippetKey=t}resolveComposeUrl(e=!1){let t=this.baseUrl;return this.version&&(t+=`?${this.getSerializedVersionQueryParam()}`,this.displayWarnin
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 2e 6e 61 6d 65 3f 6e 65 77 20 63 28 65 2e 69 64 2c 74 29 3a 6e 65 77 20 69 28 65 2c 74 29 29 29 7d 65 72 72 6f 72 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 22 63 6f 6d 70 6f 73 65 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 22 2c 7b 6b 65 79 3a 74 7d 29 7d 7d 63 6c 61 73 73 20 6c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 77 69 6e 3d 65 2c 74 68 69 73 2e 64 6f 63 3d 65 2e 64 6f 63 75 6d 65 6e 74 7d 67 65 74 4b 65 79 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 72 29 3d 3e 72 28 6e 65 77 20 65 28 22 4b 65 79 20 69 73 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 73 6e 69 70 70 65 74 22 2c 7b 7d 2c 21 30 29 29 29 29 7d 67 65 74 5a 45 51 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 67 65 Data Ascii: .name?new c(e.id,t):new i(e,t)))}error(t){return new e("compose request failed",{key:t})}}class l{constructor(e){this.win=e,this.doc=e.document}getKey(){return new Promise(((t,r)=>r(new e("Key is missing from snippet",{},!0))))}getZEQueue(){return null}ge
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 28 67 2e 67 65 74 53 63 72 69 70 74 53 72 63 28 74 68 69 73 2e 77 69 6e 29 29 7d 60 29 29 29 7d 73 74 61 74 69 63 20 67 65 74 53 63 72 69 70 74 53 72 63 28 65 29 7b 69 66 28 65 2e 24 7a 6f 70 69 6d 26 26 65 2e 24 7a 6f 70 69 6d 2e 73 29 72 65 74 75 72 6e 20 65 2e 24 7a 6f 70 69 6d 2e 73 2e 73 72 63 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 72 3d 2f 2e 2a 7a 6f 70 69 6d 2e 28 63 6f 6d 7c 6e 65 74 7c 6f 72 67 29 5c 2f 2f 3b 6c 65 74 20 6e 3b 66 6f 72 28 6c 65 74 20 65 3d 30 2c 73 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 73 3b 65 2b 2b 29 69 66 28 6e 3d 74 5b 65 5d 2e 73 72 63 7c 7c 22 22 2c 72 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6e 7d 73 74 61 74 Data Ascii: (g.getScriptSrc(this.win))}`)))}static getScriptSrc(e){if(e.$zopim&&e.$zopim.s)return e.$zopim.s.src;const t=document.getElementsByTagName("script"),r=/.*zopim.(com\|net\|org)\//;let n;for(let e=0,s=t.length;e<s;e++)if(n=t[e].src\|\|"",r.test(n))return n}stat
2024-10-10 18:35:52 UTC	409	IN	Data Raw: 74 7d 28 29 3b 77 69 6e 64 6f 77 2e 7a 45 3d 65 2c 77 69 6e 64 6f 77 2e 7a 45 6d 62 65 64 3d 65 7d 69 66 28 77 69 6e 64 6f 77 2e 7a 45 41 43 4c 6f 61 64 65 64 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 6d 28 65 29 3a 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 65 6e 64 65 73 6b 48 6f 73 74 26 26 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 45 51 75 65 75 65 3f 6e 65 77 20 68 28 65 29 3a 67 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 67 28 65 29 3a 6e 65 77 20 6d 28 65 29 7d 28 77 69 6e 64 6f 77 29 2c 74 3d 6e 65 77 20 70 28 65 29 2c 72 3d 21 31 3b 65 2e 67 65 74 4b 65 79 28 29 2e 74 68 65 6e 28 28 65 3d Data Ascii: t}();window.zE=e,window.zEmbed=e}if(window.zEACLoaded)return;const e=function(e){return m.isSnippetPresent(e)?new m(e):e.document.zendeskHost&&e.document.zEQueue?new h(e):g.isSnippetPresent(e)?new g(e):new m(e)}(window),t=new p(e),r=!1;e.getKey().then((e=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49750	3.93.32.136	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:52 UTC	442	OUT	GET /user/css/assets/marketing-buttons/badge-ios.svg HTTP/1.1 Host: login.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
2024-10-10 18:35:52 UTC	357	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:52 GMT Content-Type: image/svg+xml Content-Length: 6151 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:26 GMT Accept-Ranges: bytes ETag: "065a745f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:52 UTC	6151	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 6b 65 74 63 68 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d 2f 73 6b 65 74 63 68 2f 6e 73 22 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49749	3.93.32.136	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:52 UTC	446	OUT	GET /user/css/assets/marketing-buttons/badge-android.svg HTTP/1.1 Host: login.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
2024-10-10 18:35:52 UTC	357	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:52 GMT Content-Type: image/svg+xml Content-Length: 9379 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:26 GMT Accept-Ranges: bytes ETag: "065a745f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:52 UTC	9379	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 6b 65 74 63 68 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d 2f 73 6b 65 74 63 68 2f 6e 73 22 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49754	104.18.72.113	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:52 UTC	364	OUT	GET /ekr/asset_composer.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:52 UTC	1152	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:52 GMT Content-Type: application/javascript Content-Length: 10215 Connection: close x-amz-id-2: OInh/yZS/FgWpADJbQVI6EpSvIc2bbO7zI8CceI8HPWE2Pp2La6So+2lF0WVMIbQWhqRxWuwiGPbfAxZfTWiUx74ROEkpxme x-amz-request-id: DR9KSTJHEFKV57K0 x-amz-replication-status: PENDING Last-Modified: Tue, 10 Sep 2024 11:42:28 GMT ETag: "d90dbb2a9f98c3c53cd0f1d480381e2e" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=3600, s-maxage=60 x-amz-version-id: iW4uEmBNelY9A2ZpEPMF_EvT6Og.No1w CF-Cache-Status: HIT Age: 35 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lWHcMeUo8Hf344oNk7zRxg5EjQQ2I%2BAFSaLACX%2Fgz21SLYvs56p1vZ%2BsBAZF2SUufadTsbzSNODB%2FtmxL9DWuev3qE6X9FMWSjiR81HApehTClZBCp5EyHNAX%2FszgNygm9SF6h4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8d08b675bb02424b-EWR
2024-10-10 18:35:52 UTC	217	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 72 3d 7b 32 37 31 3a 65 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 74 2e 68 72 65 66 3d 65 2c 74 2e 73 65 61 72 63 68 2e 73 70 6c 69 74 28 22 3f 22 29 5b 31 5d 7c 7c 22 22 7d 65 2e 65 78 70 6f 72 74 73 3d 7b 67 65 74 51 75 65 72 79 50 61 72 61 6d 73 53 74 72 69 6e 67 3a 74 2c 70 61 72 73 65 55 72 6c 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 20 72 3d 74 28 65 29 3b 72 65 74 75 72 6e 22 22 3d 3d 3d 72 3f 7b 7d 3a 72 2e 73 70 6c 69 74 28 22 Data Ascii: (()=>{var e,t,r={271:e=>{function t(e){const t=document.createElement("a");return t.href=e,t.search.split("?")[1]\|\|""}e.exports={getQueryParamsString:t,parseUrlParams:function(e){const r=t(e);return""===r?{}:r.split("
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 26 22 29 2e 72 65 64 75 63 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 72 3d 74 2e 73 70 6c 69 74 28 22 3d 22 29 3b 72 65 74 75 72 6e 20 65 5b 72 5b 30 5d 5d 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 5b 31 5d 29 2c 65 7d 29 2c 7b 7d 29 7d 2c 6c 6f 61 64 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 3d 28 28 29 3d 3e 7b 7d 29 29 7b 63 6f 6e 73 74 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 72 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 6e 65 77 20 45 72 72 6f 72 28 22 53 63 72 69 70 74 20 66 61 69 6c 65 64 20 74 6f 20 6c 6f 61 64 22 29 29 7d Data Ascii: &").reduce((function(e,t){const r=t.split("=");return e[r[0]]=decodeURIComponent(r[1]),e}),{})},loadScript:function(e,t=(()=>{})){const r=document.createElement("script");r.type="text/javascript",r.onerror=function(){t(new Error("Script failed to load"))}
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 3d 70 3b 62 72 65 61 6b 7d 7d 61 7c 7c 28 63 3d 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 73 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 74 2b 6f 29 2c 61 2e 73 72 63 3d 72 29 2c 65 5b 72 5d 3d 5b 6e 5d 3b 76 61 72 20 6c 3d 28 74 2c 6e 29 3d 3e 7b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 68 29 3b 76 61 72 20 73 3d 65 5b 72 5d 3b 69 66 28 64 65 6c 65 74 65 20 65 5b 72 5d 2c 61 Data Ascii: =p;break}}a\|\|(c=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack",t+o),a.src=r),e[r]=[n];var l=(t,n)=>{a.onerror=a.onload=null,clearTimeout(h);var s=e[r];if(delete e[r],a
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 7c 5b 5d 3b 72 2e 66 6f 72 45 61 63 68 28 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 30 29 29 2c 72 2e 70 75 73 68 3d 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 2e 70 75 73 68 2e 62 69 6e 64 28 72 29 29 7d 29 28 29 2c 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6c 61 73 73 20 65 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 3d 22 22 2c 74 3d 7b 7d 2c 72 3d 21 31 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 65 2c 74 68 69 73 2e 70 72 6f 70 73 3d 74 2c 74 68 69 73 2e 65 72 72 6f 72 3d 45 72 72 6f 72 28 74 68 69 73 2e 6d 65 73 73 61 67 65 29 2c 74 68 69 73 2e 69 73 55 73 65 72 45 72 72 6f 72 3d 72 2c 74 68 69 73 2e 66 69 6e 67 65 72 70 72 69 6e 74 3d 74 68 69 73 2e 6d 65 73 73 61 67 65 7d 7d 63 6f 6e 73 74 20 74 3d 7b 7d 2c 72 3d 7b 7d 2c 6e 3d 7b 7d 3b 63 Data Ascii: \|[];r.forEach(t.bind(null,0)),r.push=t.bind(null,r.push.bind(r))})(),(()=>{"use strict";class e{constructor(e="",t={},r=!1){this.message=e,this.props=t,this.error=Error(this.message),this.isUserError=r,this.fingerprint=this.message}}const t={},r={},n={};c
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 69 6c 61 62 6c 65 22 29 29 7d 29 29 7d 29 29 7d 63 72 65 61 74 65 49 66 72 61 6d 65 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 44 6f 63 75 6d 65 6e 74 52 65 61 64 79 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 64 6f 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 72 65 74 75 72 6e 20 65 2e 64 61 74 61 73 65 74 2e 70 72 6f 64 75 63 74 3d 74 68 69 73 2e 6e 61 6d 65 2c 65 2e 74 69 74 6c 65 3d 22 4e 6f 20 63 6f 6e 74 65 6e 74 22 2c 65 2e 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 2c 65 2e 74 61 62 49 6e 64 65 78 3d 2d 31 2c 65 2e 61 6c 6c 6f 77 3d 22 6d 69 63 72 6f 70 68 6f 6e 65 20 2a 22 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 Data Ascii: ilable"))}))}))}createIframeElement(){return this.parentDocumentReady().then((()=>{const e=this.doc.createElement("iframe");return e.dataset.product=this.name,e.title="No content",e.role="presentation",e.tabIndex=-1,e.allow="microphone *",e.setAttribute("
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 6e 22 3b 63 6c 61 73 73 20 75 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 29 7b 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 67 65 74 56 65 72 73 69 6f 6e 28 65 29 2c 74 68 69 73 2e 62 61 73 65 55 72 6c 3d 60 68 74 74 70 73 3a 2f 2f 65 6b 72 2e 7a 64 61 73 73 65 74 73 2e 63 6f 6d 2f 63 6f 6d 70 6f 73 65 2f 24 7b 74 7d 60 2c 74 68 69 73 2e 73 6e 69 70 70 65 74 4b 65 79 3d 74 7d 72 65 73 6f 6c 76 65 43 6f 6d 70 6f 73 65 55 72 6c 28 65 3d 21 31 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 62 61 73 65 55 72 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 65 72 73 69 6f 6e 26 26 28 74 2b 3d 60 3f 24 7b 74 68 69 73 2e 67 65 74 53 65 72 69 61 6c 69 7a 65 64 56 65 72 73 69 6f 6e 51 75 65 72 79 50 61 72 61 6d 28 29 7d 60 2c 74 68 69 73 2e 64 69 73 70 6c 61 79 Data Ascii: n";class u{constructor(e,t){this.version=this.getVersion(e),this.baseUrl=`https://ekr.zdassets.com/compose/${t}`,this.snippetKey=t}resolveComposeUrl(e=!1){let t=this.baseUrl;return this.version&&(t+=`?${this.getSerializedVersionQueryParam()}`,this.display
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 74 22 3d 3d 3d 65 2e 6e 61 6d 65 3f 6e 65 77 20 63 28 65 2e 69 64 2c 74 29 3a 6e 65 77 20 69 28 65 2c 74 29 29 29 7d 65 72 72 6f 72 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 22 63 6f 6d 70 6f 73 65 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 22 2c 7b 6b 65 79 3a 74 7d 29 7d 7d 63 6c 61 73 73 20 6c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 77 69 6e 3d 65 2c 74 68 69 73 2e 64 6f 63 3d 65 2e 64 6f 63 75 6d 65 6e 74 7d 67 65 74 4b 65 79 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 74 2c 72 29 3d 3e 72 28 6e 65 77 20 65 28 22 4b 65 79 20 69 73 20 6d 69 73 73 69 6e 67 20 66 72 6f 6d 20 73 6e 69 70 70 65 74 22 2c 7b 7d 2c 21 30 29 29 29 29 7d 67 65 74 5a 45 51 75 65 75 65 28 29 7b 72 65 74 75 72 6e 20 6e Data Ascii: t"===e.name?new c(e.id,t):new i(e,t)))}error(t){return new e("compose request failed",{key:t})}}class l{constructor(e){this.win=e,this.doc=e.document}getKey(){return new Promise(((t,r)=>r(new e("Key is missing from snippet",{},!0))))}getZEQueue(){return n
2024-10-10 18:35:52 UTC	1369	IN	Data Raw: 74 72 69 6e 67 29 28 67 2e 67 65 74 53 63 72 69 70 74 53 72 63 28 74 68 69 73 2e 77 69 6e 29 29 7d 60 29 29 29 7d 73 74 61 74 69 63 20 67 65 74 53 63 72 69 70 74 53 72 63 28 65 29 7b 69 66 28 65 2e 24 7a 6f 70 69 6d 26 26 65 2e 24 7a 6f 70 69 6d 2e 73 29 72 65 74 75 72 6e 20 65 2e 24 7a 6f 70 69 6d 2e 73 2e 73 72 63 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 72 3d 2f 2e 2a 7a 6f 70 69 6d 2e 28 63 6f 6d 7c 6e 65 74 7c 6f 72 67 29 5c 2f 2f 3b 6c 65 74 20 6e 3b 66 6f 72 28 6c 65 74 20 65 3d 30 2c 73 3d 74 2e 6c 65 6e 67 74 68 3b 65 3c 73 3b 65 2b 2b 29 69 66 28 6e 3d 74 5b 65 5d 2e 73 72 63 7c 7c 22 22 2c 72 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 Data Ascii: tring)(g.getScriptSrc(this.win))}`)))}static getScriptSrc(e){if(e.$zopim&&e.$zopim.s)return e.$zopim.s.src;const t=document.getElementsByTagName("script"),r=/.*zopim.(com\|net\|org)\//;let n;for(let e=0,s=t.length;e<s;e++)if(n=t[e].src\|\|"",r.test(n))return
2024-10-10 18:35:52 UTC	415	IN	Data Raw: 6e 6f 77 28 29 2c 74 7d 28 29 3b 77 69 6e 64 6f 77 2e 7a 45 3d 65 2c 77 69 6e 64 6f 77 2e 7a 45 6d 62 65 64 3d 65 7d 69 66 28 77 69 6e 64 6f 77 2e 7a 45 41 43 4c 6f 61 64 65 64 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6d 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 6d 28 65 29 3a 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 65 6e 64 65 73 6b 48 6f 73 74 26 26 65 2e 64 6f 63 75 6d 65 6e 74 2e 7a 45 51 75 65 75 65 3f 6e 65 77 20 68 28 65 29 3a 67 2e 69 73 53 6e 69 70 70 65 74 50 72 65 73 65 6e 74 28 65 29 3f 6e 65 77 20 67 28 65 29 3a 6e 65 77 20 6d 28 65 29 7d 28 77 69 6e 64 6f 77 29 2c 74 3d 6e 65 77 20 70 28 65 29 2c 72 3d 21 31 3b 65 2e 67 65 74 4b 65 79 28 29 2e 74 68 Data Ascii: now(),t}();window.zE=e,window.zEmbed=e}if(window.zEACLoaded)return;const e=function(e){return m.isSnippetPresent(e)?new m(e):e.document.zendeskHost&&e.document.zEQueue?new h(e):g.isSnippetPresent(e)?new g(e):new m(e)}(window),t=new p(e),r=!1;e.getKey().th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49755	104.18.70.113	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:52 UTC	583	OUT	GET /compose/web_widget/huddle.zendesk.com HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.huddle.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://login.huddle.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:52 UTC	1308	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:52 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET, POST, OPTIONS access-control-expose-headers: access-control-max-age: 7200 x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"76b8b6f046e8ba2e8094da7cba39d689" x-request-id: 8ced7ccb79c46402-SEA X-Request-ID: 8ced7ccb79c46402-SEA X-Request-ID: 8ced7ccb79c46402-SEA x-runtime: 0.004991 X-Zendesk-Zorg: yes X-Zendesk-Zorg: yes CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AutnYLHG%2BJKeGxKRF%2Bj4bpXIPtTYzzoO0LkgNFNy32wuGmBVNXerKKfGCiwactsooyf77avdw0N%2B9Vhtl10PqIhy25Z9JteQiChfKfCgCFutH3Pgr0qhfC%2BScDV1Mzmkvl8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 8d08b675d86f41f8-EWR
2024-10-10 18:35:52 UTC	61	IN	Data Raw: 32 64 65 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 68 75 64 64 6c 65 2e 7a 65 6e 64 65 73 6b 2e 63 Data Ascii: 2de{"products":[{"name":"web_widget","id":"huddle.zendesk.c
2024-10-10 18:35:52 UTC	680	IN	Data Raw: 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 2c 22 63 6f 6c 6f 72 22 3a 22 23 30 35 36 64 37 38 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 32 2e 30 2c 22 68 69 64 65 5a 65 6e 64 65 73 6b 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 62 72 61 6e 64 22 3a 22 48 75 64 64 6c 65 22 2c 22 74 65 78 74 43 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 68 65 6c 70 43 65 6e 74 65 72 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 68 65 6c 70 43 65 6e 74 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 30 35 36 64 37 38 22 2c 22 63 6f 6e 74 65 78 74 75 61 6c 48 65 6c 70 45 6e 61 62 6c 65 64 22 3a 74 72 Data Ascii: om","bootstrap":{"config":{"features":{"fastLoad":true},"color":"#056d78","brandCount":2.0,"hideZendeskLogo":true,"brand":"Huddle","textColor":"#ffffff","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#056d78","contextualHelpEnabled":tr
2024-10-10 18:35:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49751	3.93.32.136	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:52 UTC	446	OUT	GET /user/css/assets/marketing-buttons/badge-windows.svg HTTP/1.1 Host: login.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
2024-10-10 18:35:52 UTC	357	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:52 GMT Content-Type: image/svg+xml Content-Length: 8987 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:26 GMT Accept-Ranges: bytes ETag: "065a745f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:52 UTC	8987	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 6b 65 74 63 68 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d 2f 73 6b 65 74 63 68 2f 6e 73 22 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49752	3.93.32.136	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:52 UTC	442	OUT	GET /user/css/assets/marketing-buttons/badge-mac.svg HTTP/1.1 Host: login.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sectok="a5658d5c-8933-4416-896c-7963877a79df"
2024-10-10 18:35:52 UTC	357	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:52 GMT Content-Type: image/svg+xml Content-Length: 6817 Connection: close Cache-Control: max-age=31536000 Last-Modified: Thu, 04 Jul 2024 10:02:26 GMT Accept-Ranges: bytes ETag: "065a745f9cdda1:0" X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:52 UTC	6817	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 20 73 74 61 6e 64 61 6c 6f 6e 65 3d 22 6e 6f 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 32 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 33 32 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 6d 6c 6e 73 3a 73 6b 65 74 63 68 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 6f 68 65 6d 69 61 6e 63 6f 64 69 6e 67 2e 63 6f 6d 2f 73 6b 65 74 63 68 2f 6e 73 22 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8" standalone="no"?><svg width="80px" height="32px" viewBox="0 0 80 32" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" xmlns:sketch="http://www.bohemiancoding.com/sketch/ns">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49753	3.93.32.136	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:52 UTC	401	OUT	GET /res/9824fab9-3605-43b9-a635-c6fc23fbfb45.ashx?login-logo.jpg HTTP/1.1 Host: avp100.huddle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:52 UTC	369	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:52 GMT Content-Type: image/jpeg Content-Length: 45764 Connection: close Cache-Control: public Expires: Fri, 31 Dec 2038 11:59:59 GMT ETag: 6821b945 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000;includeSubDomains;preload
2024-10-10 18:35:52 UTC	16015	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 5a 01 f4 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFxxCCZ"}!1AQa"q2
2024-10-10 18:35:52 UTC	19	IN	Data Raw: 56 93 63 02 d9 58 da db da ae da fa 7a 5e 31 e0 71 35 32 Data Ascii: VcXz^1q52
2024-10-10 18:35:52 UTC	16384	IN	Data Raw: 2c 66 6b c3 94 96 37 2c c0 67 99 4c e5 95 54 78 4a 58 8c 1e 74 a0 a1 18 bc 4c b1 75 63 57 05 15 3f 67 cf 56 a2 4e 75 5d b9 79 a9 cb 9a 79 1a 54 b1 f8 7a 75 9f b3 cc b2 ac 3e 07 13 7d 6d 2c 3d 7a 12 a0 e9 59 e9 4a 14 95 4a 6f 45 7f b8 fe 33 fe 2e f8 b6 df fe 0b 35 ff 00 05 cc f8 41 e2 7f d9 43 4b d7 75 ff 00 83 1f 08 ee fe 0b c3 ab fc 50 ba d0 b5 dd 27 4f 1f 0e be 12 f8 92 e3 e2 07 8a 3c 75 aa d8 eb 36 1a 5e a3 e1 78 75 5d 63 56 d5 7c 2d e0 dd 37 5f b6 b5 bc d6 6f 7f b1 5d ac ed 2f b5 73 69 67 ce 7c 6b fd 9f 93 f6 91 fd bf bf e0 bc 7e 05 b7 b1 4b bf 10 78 77 e0 6f c4 7f 8a fe 0f 0b 6d 2d e5 e4 7e 23 f8 4d f1 27 e0 bf 8f 96 df 49 82 02 2e 7f b4 35 fd 2b 42 d4 fc 2c 36 f5 3a e5 c2 8e b8 af ee c7 e1 67 c1 3f 83 5f 02 f4 1b af 0b fc 14 f8 4b f0 db e0 ff 00 86 Data Ascii: ,fk7,gLTxJXtLucW?gVNu]yyTzu>}m,=zYJJoE3.5ACKuP'O<u6^xu]cV\|-7_o]/sig\|k~Kxwom-~#M'I.5+B,6:g?_K
2024-10-10 18:35:52 UTC	13346	IN	Data Raw: be 02 43 f1 26 e3 e1 2e a1 e3 8f 88 fe 15 d4 3c 25 77 e0 0f 1c dd 78 af c6 30 9d 33 e2 87 81 7c 31 e3 7f 0d fc 55 f0 25 a5 c6 89 7f e1 3b eb d3 e1 4d 1e d0 fc db fb 2a fe ca 7e 2c f8 89 e1 bf 1b 78 b7 c1 5e 07 1f 0f 1b e2 2e bd 16 b9 e1 bf 0f dd 1f 11 ea 5e 0c f0 f6 8f 01 9f 53 f0 7f c2 39 be 24 6b ff 00 6c bc d2 75 6b 9d 23 55 9f c4 f6 57 5e 39 b9 26 f6 d6 7f 09 69 fa e5 ed a6 a3 8b ba fe 98 cf b3 bc 93 81 bc 31 ce 32 dc 56 11 ac 74 63 5b 2f c3 66 15 95 05 87 79 b6 6f 42 a6 07 1d 87 a0 a3 fb e7 5b 05 96 d6 aa eb 57 f6 4e 8b 9e a9 fb 3a b4 f9 ff 00 d3 ff 00 a1 bf 85 b4 b1 be 2b 78 65 97 62 31 f4 30 7c 2d c1 f8 dc 93 38 e2 5c 5e 26 f4 b0 d8 6c af 22 c7 61 f1 b1 ab 5d f5 96 6b 99 c6 95 18 c7 49 41 62 9d 4a 97 85 2a 9c 9d e7 ec f1 e0 fb af 1e 7c 5d f0 9f 85 Data Ascii: C&.<%wx03\|1U%;M~,x^.^S9$kluk#UW^9&i12Vtc[/fyoB[WN:+xeb10\|-8\^&l"a]kIAbJ\|]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49762	104.18.70.113	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:53 UTC	377	OUT	GET /compose/web_widget/huddle.zendesk.com HTTP/1.1 Host: ekr.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:53 UTC	1157	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:53 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff x-download-options: noopen x-permitted-cross-domain-policies: none referrer-policy: strict-origin-when-cross-origin cdn-cache-control: max-age=60 vary: Accept, Origin cache-control: max-age=300, public, stale-while-revalidate=300, stale-if-error=21600 etag: W/"76b8b6f046e8ba2e8094da7cba39d689" x-request-id: 8ced8a7bdccd1692-SEA X-Request-ID: 8ced8a7bdccd1692-SEA X-Request-ID: 8ced8a7bdccd1692-SEA x-runtime: 0.003677 X-Zendesk-Zorg: yes X-Zendesk-Zorg: yes CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2PJTe3K16g8QONDYVaL%2BxpNKk0A7c0AWwpPUIWrSy3Dg3pdHIiXOU9hWF2V9iV37%2FpO%2F%2Bhhskfl0R7RsPdKtlXHhKBNUNUhkQ1%2FjwlHC7ItrRxLBoqQbr8qYY0XSzej9nCA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Server: cloudflare CF-RAY: 8d08b67a6a570f3d-EWR
2024-10-10 18:35:53 UTC	212	IN	Data Raw: 32 64 65 0d 0a 7b 22 70 72 6f 64 75 63 74 73 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 77 65 62 5f 77 69 64 67 65 74 22 2c 22 69 64 22 3a 22 68 75 64 64 6c 65 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 22 2c 22 62 6f 6f 74 73 74 72 61 70 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 66 65 61 74 75 72 65 73 22 3a 7b 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 65 7d 2c 22 63 6f 6c 6f 72 22 3a 22 23 30 35 36 64 37 38 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 32 2e 30 2c 22 68 69 64 65 5a 65 6e 64 65 73 6b 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 62 72 61 6e 64 22 3a 22 48 75 64 64 6c 65 22 2c 22 74 65 78 74 43 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 Data Ascii: 2de{"products":[{"name":"web_widget","id":"huddle.zendesk.com","bootstrap":{"config":{"features":{"fastLoad":true},"color":"#056d78","brandCount":2.0,"hideZendeskLogo":true,"brand":"Huddle","textColor":"#ffffff
2024-10-10 18:35:53 UTC	529	IN	Data Raw: 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 68 65 6c 70 43 65 6e 74 65 72 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 68 65 6c 70 43 65 6e 74 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 30 35 36 64 37 38 22 2c 22 63 6f 6e 74 65 78 74 75 61 6c 48 65 6c 70 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 62 75 74 74 6f 6e 4c 61 62 65 6c 4b 65 79 22 3a 22 63 6f 6e 74 61 63 74 22 7d 7d 2c 22 6c 61 75 6e 63 68 65 72 22 3a 7b 22 65 6d 62 65 64 22 3a 22 6c 61 75 6e 63 68 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 30 35 36 64 37 38 22 7d 7d 7d 7d 7d 2c 22 66 65 61 74 75 72 65 73 22 3a 5b 22 68 65 6c 70 5f 63 65 6e 74 65 72 22 2c 22 74 69 63 6b 65 74 5f 73 75 62 6d 69 73 73 69 6f 6e 22 5d 2c 22 75 72 6c 22 3a 22 68 74 Data Ascii: ","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#056d78","contextualHelpEnabled":true,"buttonLabelKey":"contact"}},"launcher":{"embed":"launcher","props":{"color":"#056d78"}}}}},"features":["help_center","ticket_submission"],"url":"ht
2024-10-10 18:35:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49761	104.18.72.113	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:53 UTC	535	OUT	GET /web_widget/classic/latest/web-widget-main-cbf609b.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:53 UTC	1179	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:53 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 849271 Connection: close x-amz-id-2: BzlDuapBx/DoG2r1PLsFxfwz6QcXuiw8g1IBTKe7BdW7pUrH5yFLnxnkCUMM0rzl6b3QNDqiErQ= x-amz-request-id: HAMZH0FRYR94FVNS x-amz-replication-status: COMPLETED Last-Modified: Mon, 07 Oct 2024 10:12:04 GMT ETag: "07aec65eb3477704556f6cf3f106f8fb" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 07 Oct 2025 10:12:03 GMT x-amz-version-id: _NoEm8vRBN2TNsj3j1jx6qm06EBIXcJh CF-Cache-Status: HIT Age: 74 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yIcsXXhy767GuAvDIEWi2LVednPPZ0DuvWsLOOrGqmsXWn%2FxWtpkM4QI0Vgl1NkwlsIMu%2BxgJYJLQWYhBpQGd1e%2FLFyuPtmHY1oraDUJkOH2xhkt0ZD%2BvwLKtvxbSjqjI9EsBhU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8d08b67a8ef1429b-EWR
2024-10-10 18:35:53 UTC	1369	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 62 2d 77 69 64 67 65 74 2d 73 64 6b 73 2f 77 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 36 34 37 30 3a Data Ascii: /! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/web-widget/getting-started/legal/ /(()=>{var e,t,n,r,o={6470:
2024-10-10 18:35:53 UTC	1369	IN	Data Raw: 3a 74 7d 2c 6e 29 2c 65 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 74 7d 2c 65 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 64 3a 22 4d 37 20 30 43 33 2e 31 33 20 30 20 30 20 33 2e 31 33 20 30 20 37 73 33 2e 31 33 20 37 20 37 20 37 20 37 2d 33 2e 31 33 20 37 2d 37 2d 33 2e 31 33 2d 37 2d 37 2d 37 7a 6d 33 2e 30 39 20 35 2e 33 36 33 6c 2d 33 2e 33 20 34 2e 32 61 2e 37 35 2e 37 35 20 30 20 30 20 31 2d 2e 35 34 35 2e 32 38 36 48 36 2e 32 61 2e 37 34 38 2e 37 34 38 20 30 20 30 20 31 2d 2e 35 33 2d 2e 32 32 4c 33 2e 39 37 20 37 2e 39 33 61 2e 37 35 2e 37 35 20 30 20 31 20 31 20 31 2e 30 36 2d Data Ascii: :t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("path",{fill:"currentColor",d:"M7 0C3.13 0 0 3.13 0 7s3.13 7 7 7 7-3.13 7-7-3.13-7-7-7zm3.09 5.363l-3.3 4.2a.75.75 0 0 1-.545.286H6.2a.748.748 0 0 1-.53-.22L3.97 7.93a.75.75 0 1 1 1.06-
2024-10-10 18:35:53 UTC	1369	IN	Data Raw: 74 73 29 7d 63 6f 6e 73 74 20 69 3d 28 7b 74 69 74 6c 65 3a 65 2c 74 69 74 6c 65 49 64 3a 74 2c 2e 2e 2e 6e 7d 29 3d 3e 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 76 67 22 2c 61 28 7b 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 77 69 64 74 68 3a 31 34 2c 68 65 69 67 68 74 3a 31 34 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 34 20 31 34 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 74 7d 2c 6e 29 2c 65 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 74 7d 2c 65 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c Data Ascii: ts)}const i=({title:e,titleId:t,...n})=>o.createElement("svg",a({xmlns:"http://www.w3.org/2000/svg",width:14,height:14,focusable:"false",viewBox:"0 0 14 14","aria-labelledby":t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("path",{fil
2024-10-10 18:35:53 UTC	1369	IN	Data Raw: 64 74 68 3a 31 36 2c 68 65 69 67 68 74 3a 31 36 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 74 7d 2c 6e 29 2c 65 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 74 7d 2c 65 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 32 2c 64 3a 22 4d 31 31 20 31 2e 35 4c 34 2e 39 20 37 2e 36 63 2d 2e 32 2e 32 2d 2e 32 2e 35 20 30 20 2e 37 6c Data Ascii: dth:16,height:16,focusable:"false",viewBox:"0 0 16 16","aria-labelledby":t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeWidth:2,d:"M11 1.5L4.9 7.6c-.2.2-.2.5 0 .7l
2024-10-10 18:35:53 UTC	1369	IN	Data Raw: 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 74 7d 2c 6e 29 2c 65 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 74 7d 2c 65 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 69 72 63 6c 65 22 2c 7b 63 78 3a 38 2c 63 79 3a 38 2c 72 3a 37 2e 35 7d 29 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a 22 72 6f 75 6e 64 22 2c 64 3a 22 4d 37 2e 35 20 33 76 35 2e 35 Data Ascii: ","aria-labelledby":t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("g",{fill:"none",stroke:"currentColor"},o.createElement("circle",{cx:8,cy:8,r:7.5}),o.createElement("path",{strokeLinecap:"round",strokeLinejoin:"round",d:"M7.5 3v5.5
2024-10-10 18:35:53 UTC	1369	IN	Data Raw: 74 7d 2c 65 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 72 65 63 74 22 2c 7b 77 69 64 74 68 3a 31 35 2c 68 65 69 67 68 74 3a 31 33 2c 78 3a 2e 35 2c 79 3a 31 2e 35 2c 72 78 3a 2e 35 2c 72 79 3a 2e 35 7d 29 2c 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 2e 35 20 31 34 6c 35 2e 31 35 2d 35 2e 31 35 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 31 20 30 6c 33 2e 32 39 20 33 2e 32 39 61 2e 35 2e 35 20 30 20 30 20 30 20 2e 37 31 20 30 6c 31 2e 32 39 2d 31 2e 32 39 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 31 20 30 Data Ascii: t},e):null,r\|\|(r=a.createElement("g",{fill:"none",stroke:"currentColor"},a.createElement("rect",{width:15,height:13,x:.5,y:1.5,rx:.5,ry:.5}),a.createElement("path",{d:"M.5 14l5.15-5.15a.5.5 0 0 1 .71 0l3.29 3.29a.5.5 0 0 0 .71 0l1.29-1.29a.5.5 0 0 1 .71 0
2024-10-10 18:35:53 UTC	1369	IN	Data Raw: 72 28 76 61 72 20 72 20 69 6e 20 6e 29 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 6f 6e 73 74 20 69 3d 28 7b 74 69 74 6c 65 3a 65 2c 74 69 74 6c 65 49 64 3a 74 2c 2e 2e 2e 6e 7d 29 3d 3e 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 76 67 22 2c 61 28 7b 78 6d 6c 6e 73 3a 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 77 69 64 74 68 3a 31 36 2c 68 65 69 67 68 74 3a 31 36 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c Data Ascii: r(var r in n)({}).hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(null,arguments)}const i=({title:e,titleId:t,...n})=>o.createElement("svg",a({xmlns:"http://www.w3.org/2000/svg",width:16,height:16,focusable:"false",viewBox:"0 0 16 16","aria-labell
2024-10-10 18:35:53 UTC	1369	IN	Data Raw: 2e 35 76 2d 37 63 30 2d 2e 32 38 2e 32 32 2d 2e 35 2e 35 2d 2e 35 73 2e 35 2e 32 32 2e 35 2e 35 76 37 7a 6d 33 20 30 63 30 20 2e 32 38 2d 2e 32 32 2e 35 2d 2e 35 2e 35 73 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 76 2d 37 63 30 2d 2e 32 38 2e 32 32 2d 2e 35 2e 35 2d 2e 35 73 2e 35 2e 32 32 2e 35 2e 35 76 37 7a 4d 31 30 20 33 48 36 56 31 63 30 2d 2e 35 35 2e 34 35 2d 31 20 31 2d 31 68 32 63 2e 35 35 20 30 20 31 20 2e 34 35 20 31 20 31 76 32 7a 22 7d 29 29 29 7d 2c 35 33 33 39 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 Data Ascii: .5v-7c0-.28.22-.5.5-.5s.5.22.5.5v7zm3 0c0 .28-.22.5-.5.5s-.5-.22-.5-.5v-7c0-.28.22-.5.5-.5s.5.22.5.5v7zM10 3H6V1c0-.55.45-1 1-1h2c.55 0 1 .45 1 1v2z"})))},53397:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Ob
2024-10-10 18:35:53 UTC	1369	IN	Data Raw: 20 32 68 31 36 63 31 2e 31 20 30 20 32 2d 2e 39 20 32 2d 32 56 36 2e 35 38 4c 31 33 2e 34 31 20 30 7a 6d 32 2e 30 39 20 32 30 68 2d 31 31 63 2d 2e 32 38 20 30 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 73 2e 32 32 2d 2e 35 2e 35 2d 2e 35 68 31 31 63 2e 32 38 20 30 20 2e 35 2e 32 32 2e 35 2e 35 73 2d 2e 32 32 2e 35 2d 2e 35 2e 35 7a 6d 30 2d 33 68 2d 31 31 63 2d 2e 32 38 20 30 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 73 2e 32 32 2d 2e 35 2e 35 2d 2e 35 68 31 31 63 2e 32 38 20 30 20 2e 35 2e 32 32 2e 35 2e 35 73 2d 2e 32 32 2e 35 2d 2e 35 2e 35 7a 6d 30 2d 33 68 2d 31 31 63 2d 2e 32 38 20 30 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 73 2e 32 32 2d 2e 35 2e 35 2d 2e 35 68 31 31 63 2e 32 38 20 30 20 2e 35 2e 32 32 2e 35 2e 35 73 2d 2e 32 32 2e 35 2d 2e 35 2e 35 7a 6d Data Ascii: 2h16c1.1 0 2-.9 2-2V6.58L13.41 0zm2.09 20h-11c-.28 0-.5-.22-.5-.5s.22-.5.5-.5h11c.28 0 .5.22.5.5s-.22.5-.5.5zm0-3h-11c-.28 0-.5-.22-.5-.5s.22-.5.5-.5h11c.28 0 .5.22.5.5s-.22.5-.5.5zm0-3h-11c-.28 0-.5-.22-.5-.5s.22-.5.5-.5h11c.28 0 .5.22.5.5s-.22.5-.5.5zm
2024-10-10 18:35:53 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 6f 6e 73 74 20 69 3d 28 7b 74 69 74 6c 65 3a 65 2c 74 69 74 6c 65 49 64 3a 74 2c 2e 2e 2e 6e 7d 29 3d 3e 6f 2e 63 Data Ascii: function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)({}).hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(null,arguments)}const i=({title:e,titleId:t,...n})=>o.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49763	104.18.72.113	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:54 UTC	395	OUT	GET /web_widget/classic/latest/web-widget-main-cbf609b.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:54 UTC	1176	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:54 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 849271 Connection: close x-amz-id-2: BzlDuapBx/DoG2r1PLsFxfwz6QcXuiw8g1IBTKe7BdW7pUrH5yFLnxnkCUMM0rzl6b3QNDqiErQ= x-amz-request-id: HAMZH0FRYR94FVNS x-amz-replication-status: COMPLETED Last-Modified: Mon, 07 Oct 2024 10:12:04 GMT ETag: "07aec65eb3477704556f6cf3f106f8fb" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 07 Oct 2025 10:12:03 GMT x-amz-version-id: _NoEm8vRBN2TNsj3j1jx6qm06EBIXcJh CF-Cache-Status: HIT Age: 121 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fNpEX5lXcI0h00mIlvJSOP4lHuHnj5kH%2BnUcXFZk0js5Yco3F4pzLEUM9JCfYpo%2BRU6DsWSkVwoOB1h9ZZG6IvZIAwlCKqlFAIiIaK8JS2GH6QzHvns3mBHJKJT7xRR9enIo0pM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8d08b682ed7c43c2-EWR
2024-10-10 18:35:54 UTC	193	IN	Data Raw: 2f 2a 21 20 4f 75 72 20 65 6d 62 65 64 64 61 62 6c 65 20 63 6f 6e 74 61 69 6e 73 20 74 68 69 72 64 2d 70 61 72 74 79 2c 20 6f 70 65 6e 20 73 6f 75 72 63 65 20 73 6f 66 74 77 61 72 65 20 61 6e 64 2f 6f 72 20 6c 69 62 72 61 72 69 65 73 2e 20 54 6f 20 76 69 65 77 20 74 68 65 6d 20 61 6e 64 20 74 68 65 69 72 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 2c 20 67 6f 20 74 6f 20 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 2e 7a 65 6e 64 65 73 6b 2e 63 6f 6d 2f 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 2f 63 6c 61 73 73 69 63 2d 77 65 62 2d 77 69 64 67 65 74 2d 73 64 6b 73 2f 77 Data Ascii: /*! Our embeddable contains third-party, open source software and/or libraries. To view them and their license terms, go to https://developer.zendesk.com/documentation/classic-web-widget-sdks/w
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 65 62 2d 77 69 64 67 65 74 2f 67 65 74 74 69 6e 67 2d 73 74 61 72 74 65 64 2f 6c 65 67 61 6c 2f 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 3d 7b 36 34 37 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d Data Ascii: eb-widget/getting-started/legal/ */(()=>{var e,t,n,r,o={6470:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t]
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 34 35 2e 32 38 36 48 36 2e 32 61 2e 37 34 38 2e 37 34 38 20 30 20 30 20 31 2d 2e 35 33 2d 2e 32 32 4c 33 2e 39 37 20 37 2e 39 33 61 2e 37 35 2e 37 35 20 30 20 31 20 31 20 31 2e 30 36 2d 31 2e 30 36 6c 31 2e 31 30 33 20 31 2e 31 30 32 4c 38 2e 39 31 20 34 2e 34 33 37 61 2e 37 35 2e 37 35 20 30 20 30 20 31 20 31 2e 31 38 2e 39 32 36 7a 22 7d 29 29 29 7d 2c 33 31 34 39 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e Data Ascii: 45.286H6.2a.748.748 0 0 1-.53-.22L3.97 7.93a.75.75 0 1 1 1.06-1.06l1.103 1.102L8.91 4.437a.75.75 0 0 1 1.18.926z"})))},31498:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():fun
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 74 7d 2c 65 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 32 2c 64 3a 22 4d 39 20 31 31 4c 35 20 37 6c 34 2d 34 22 7d 29 29 29 7d 2c 35 38 34 37 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 Data Ascii: ement("title",{id:t},e):null,r\|\|(r=o.createElement("path",{fill:"none",stroke:"currentColor",strokeLinecap:"round",strokeLinejoin:"round",strokeWidth:2,d:"M9 11L5 7l4-4"})))},58478:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);func
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 57 69 64 74 68 3a 32 2c 64 3a 22 4d 31 31 20 31 2e 35 4c 34 2e 39 20 37 2e 36 63 2d 2e 32 2e 32 2d 2e 32 2e 35 20 30 20 2e 37 6c 36 2e 31 20 36 2e 31 22 7d 29 29 29 7d 2c 33 34 38 39 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b Data Ascii: ecap:"round",strokeWidth:2,d:"M11 1.5L4.9 7.6c-.2.2-.2.5 0 .7l6.1 6.1"})))},34890:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 68 22 2c 7b 73 74 72 6f 6b 65 4c 69 6e 65 63 61 70 3a 22 72 6f 75 6e 64 22 2c 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a 22 72 6f 75 6e 64 22 2c 64 3a 22 4d 37 2e 35 20 33 76 35 2e 35 48 31 31 22 7d 29 29 29 29 7d 2c 37 33 36 30 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 Data Ascii: h",{strokeLinecap:"round",strokeLinejoin:"round",d:"M7.5 3v5.5H11"}))))},73606:(e,t,n)=>{"use strict";n.d(t,{A:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=argument
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 20 31 20 2e 37 31 20 30 6c 33 2e 32 39 20 33 2e 32 39 61 2e 35 2e 35 20 30 20 30 20 30 20 2e 37 31 20 30 6c 31 2e 32 39 2d 31 2e 32 39 61 2e 35 2e 35 20 30 20 30 20 31 20 2e 37 31 20 30 4c 31 35 2e 35 20 31 34 22 7d 29 29 29 2c 6f 7c 7c 28 6f 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 69 72 63 6c 65 22 2c 7b 63 78 3a 31 31 2e 35 2c 63 79 3a 35 2e 35 2c 72 3a 31 2e 35 2c 66 69 6c 6c 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 29 29 29 7d 2c 31 38 37 30 39 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a Data Ascii: 1 .71 0l3.29 3.29a.5.5 0 0 0 .71 0l1.29-1.29a.5.5 0 0 1 .71 0L15.5 14"}))),o\|\|(o=a.createElement("circle",{cx:11.5,cy:5.5,r:1.5,fill:"currentColor"})))},18709:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Obj
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 36 2c 68 65 69 67 68 74 3a 31 36 2c 66 6f 63 75 73 61 62 6c 65 3a 22 66 61 6c 73 65 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 36 20 31 36 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 22 3a 74 7d 2c 6e 29 2c 65 3f 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 7b 69 64 3a 74 7d 2c 65 29 3a 6e 75 6c 6c 2c 72 7c 7c 28 72 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 73 74 72 6f 6b 65 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 7d 2c 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 73 74 72 6f 6b 65 4c 69 6e 65 6a 6f 69 6e 3a 22 72 6f 75 6e 64 22 2c 64 3a 22 4d 31 34 2e 35 20 36 2e 35 61 31 20 31 20 30 20 30 20 31 20 31 20 31 63 2d 2e 31 20 Data Ascii: 6,height:16,focusable:"false",viewBox:"0 0 16 16","aria-labelledby":t},n),e?o.createElement("title",{id:t},e):null,r\|\|(r=o.createElement("g",{fill:"none",stroke:"currentColor"},o.createElement("path",{strokeLinejoin:"round",d:"M14.5 6.5a1 1 0 0 1 1 1c-.1
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 72 65 74 75 72 6e 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 7d 72 65 74 75 72 6e 20 65 7d 2c 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 63 Data Ascii: d(t,{default:()=>i});var r,o=n(88910);function a(){return a=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)({}).hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e},a.apply(null,arguments)}c
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 32 38 20 30 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 73 2e 32 32 2d 2e 35 2e 35 2d 2e 35 68 31 31 63 2e 32 38 20 30 20 2e 35 2e 32 32 2e 35 2e 35 73 2d 2e 32 32 2e 35 2d 2e 35 2e 35 7a 6d 30 2d 33 68 2d 31 31 63 2d 2e 32 38 20 30 2d 2e 35 2d 2e 32 32 2d 2e 35 2d 2e 35 73 2e 32 32 2d 2e 35 2e 35 2d 2e 35 68 31 31 63 2e 32 38 20 30 20 2e 35 2e 32 32 2e 35 2e 35 73 2d 2e 32 32 2e 35 2d 2e 35 2e 35 7a 4d 31 35 20 37 61 32 20 32 20 30 20 30 20 31 2d 32 2d 32 56 31 6c 36 20 36 68 2d 34 7a 22 7d 29 29 29 7d 2c 39 30 36 30 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 2c 6f 3d 6e 28 38 38 39 31 30 29 3b 66 75 6e 63 74 69 6f 6e 20 61 Data Ascii: 28 0-.5-.22-.5-.5s.22-.5.5-.5h11c.28 0 .5.22.5.5s-.22.5-.5.5zm0-3h-11c-.28 0-.5-.22-.5-.5s.22-.5.5-.5h11c.28 0 .5.22.5.5s-.22.5-.5.5zM15 7a2 2 0 0 1-2-2V1l6 6h-4z"})))},90604:(e,t,n)=>{"use strict";n.r(t),n.d(t,{default:()=>i});var r,o=n(88910);function a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49764	104.18.72.113	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:54 UTC	557	OUT	GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-cbf609b.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:54 UTC	1188	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:54 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 25703 Connection: close x-amz-id-2: +iLZcSX7TFF0Ox8FfkxqsQaGugriIuCtRAiYyL5xvPmueFl5IG5qBEIkEhAAd/IJK3lJGawadvM= x-amz-request-id: ZCT1V8THJP9JCSGS x-amz-replication-status: COMPLETED Last-Modified: Mon, 07 Oct 2024 10:12:05 GMT ETag: "ef48436bf7997a9fed0856cd3df28c0f" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 07 Oct 2025 10:12:04 GMT x-amz-version-id: 84wSEKA_FfeBTDyf9gL6ljF5UYM.Hy4g CF-Cache-Status: HIT Age: 285529 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q%2F5kOUTmrFNGptoaTshWcEORZDItqJALJs3TvVon4oLG%2BBPph1ScvSm93C4JxM13post25%2FbBI95iyfNPX7%2Fsh%2FChRvdWGz6a%2BuE98D2EZKS6A7%2BkxdgqCw8stYMMhjxCgkWmd8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8d08b6837b5a7c9f-EWR
2024-10-10 18:35:54 UTC	181	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 33 39 33 5d 2c 7b 34 36 39 33 33 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 6c 6f 63 61 6c 65 22 3a 7b 22 6c 6f Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9393],{46933:e=>{e.exports=JSON.parse('{"locale":{"lo
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 63 61 6c 65 22 3a 22 65 6e 2d 75 73 22 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 6e 65 65 64 5f 68 65 6c 70 22 3a 22 4e 6f 2c 20 49 20 6e 65 65 64 20 68 65 6c 70 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 72 65 61 73 6f 6e 2e 72 65 6c 61 74 65 64 22 3a 22 49 74 5c 27 73 20 72 65 6c 61 74 65 64 2c 20 62 75 74 20 69 74 20 64 69 64 6e 5c 27 74 20 61 6e 73 77 65 72 20 6d 79 20 71 75 65 73 74 69 6f 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 Data Ascii: cale":"en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_f
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 68 6f 69 63 65 2e 67 65 74 5f 69 6e 5f 74 6f 75 63 68 22 3a 22 48 6f 77 20 64 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 67 65 74 20 69 6e 20 74 6f 75 63 68 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 72 65 71 75 65 73 74 5f 63 61 6c 6c 62 61 63 6b 5f 6f 6e 6c 79 2e 74 69 74 6c 65 22 3a 22 57 6f 75 6c 64 20 79 6f 75 20 6c 69 6b 65 20 74 68 65 20 74 65 61 6d 20 74 6f 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 72 65 67 61 72 64 69 6e 67 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 73 75 62 Data Ascii: hoice.get_in_touch":"How do you want to get in touch?","embeddable_framework.answerBot.msg.channel_choice.request_callback_only.title":"Would you like the team to contact you regarding your question?","embeddable_framework.answerBot.msg.channel_choice.sub
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 6e 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 70 72 6f 6d 70 74 5f 61 67 61 69 6e 5f 6e 6f 5f 63 68 61 6e 6e 65 6c 73 5f 61 76 61 69 6c 61 62 6c 65 22 3a 22 59 6f 75 20 63 61 6e 20 61 73 6b 20 61 6e 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 79 65 73 5f 61 63 6b 6e 6f 77 6c 65 64 67 65 6d 65 6e 74 22 3a 22 4e 69 63 65 2e 20 4b 6e 6f 77 6c 65 64 67 65 20 69 73 20 70 6f 77 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 72 65 73 75 6c 74 73 2e 6d 61 6e 79 5f 61 72 74 Data Ascii: nother question.","embeddable_framework.answerBot.msg.prompt_again_no_channels_available":"You can ask another question.","embeddable_framework.answerBot.msg.yes_acknowledgement":"Nice. Knowledge is power.","embeddable_framework.answerBot.results.many_art
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 22 3a 22 44 69 73 61 62 6c 65 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 64 69 73 61 62 6c 65 5f 63 68 61 74 5f 6e 6f 74 65 22 3a 22 59 6f 75 20 6d 61 79 20 64 69 73 61 62 6c 65 20 74 68 65 20 63 68 61 74 20 61 6e 79 74 69 6d 65 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 65 6e 61 62 6c 65 22 3a 22 45 6e 61 62 6c 65 20 43 6f 6f 6b 69 65 73 20 61 6e 64 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 72 65 65 6e 61 62 6c 65 5f 63 68 61 74 5f Data Ascii: ":"Disable Chat","embeddable_framework.chat.agreement.cookies.disable_chat_note":"You may disable the chat anytime.","embeddable_framework.chat.agreement.cookies.enable":"Enable Cookies and Chat","embeddable_framework.chat.agreement.cookies.reenable_chat_
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 46 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 75 6e 6b 6e 6f 77 6e 5f 65 72 72 6f 72 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 50 6c 65 61 Data Ascii: ile sending is not allowed.","embeddable_framework.chat.attachments.error.not_supported":"Upload failed. File sending is not supported on this browser.","embeddable_framework.chat.attachments.error.unknown_error":"Upload failed. Something went wrong. Plea
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 20 61 72 65 20 74 79 70 69 6e 67 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 61 64 69 6e 67 49 6d 61 67 65 22 3a 22 4c 6f 61 64 69 6e 67 20 69 6d 61 67 65 20 28 25 28 61 74 74 61 63 68 6d 65 6e 74 53 69 7a 65 29 73 29 2e 2e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 67 69 6e 2e 75 70 64 61 74 65 49 6e 66 6f 22 3a 22 50 6c 65 61 73 65 20 75 70 64 61 74 65 20 79 6f 75 72 20 69 6e 66 6f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 71 75 65 75 65 50 6f 73 69 74 69 6f 6e 22 3a 22 51 75 65 75 65 20 70 6f 73 69 74 69 6f 6e 3a 20 25 28 76 61 6c 75 65 Data Ascii: are typing","embeddable_framework.chat.chatLog.loadingImage":"Loading image (%(attachmentSize)s)...","embeddable_framework.chat.chatLog.login.updateInfo":"Please update your info","embeddable_framework.chat.chatLog.queuePosition":"Queue position: %(value
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 25 28 65 6d 61 69 6c 29 73 20 77 68 65 6e 20 74 68 65 20 63 68 61 74 20 65 6e 64 73 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 69 74 6c 65 22 3a 22 45 6d 61 69 6c 20 63 68 61 74 20 74 72 61 6e 73 63 72 69 70 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 72 79 5f 61 67 61 69 6e 22 3a 22 54 72 79 20 61 67 61 69 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 66 65 74 63 68 69 6e 67 5f 68 69 73 74 6f 72 79 22 3a 22 4c 6f 61 64 69 6e 67 20 6d 65 73 73 61 67 65 73 2e 2e 2e 22 2c 22 65 6d Data Ascii: ll be sent to %(email)s when the chat ends.","embeddable_framework.chat.emailtranscript.title":"Email chat transcript","embeddable_framework.chat.emailtranscript.try_again":"Try again","embeddable_framework.chat.fetching_history":"Loading messages...","em
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 6c 61 62 65 6c 22 3a 22 41 74 74 61 63 68 20 66 69 6c 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 65 6e 64 43 68 61 74 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 45 6e 64 20 63 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 6d 65 6e 75 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 4f 70 74 69 6f 6e 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 73 73 61 67 65 66 61 69 6c 65 64 2e 66 61 69 6c 65 64 5f 74 77 69 63 65 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 73 73 61 67 65 66 61 69 6c Data Ascii: label":"Attach file","embeddable_framework.chat.icon.endChat.hover.label":"End chat","embeddable_framework.chat.icon.menu.hover.label":"Options","embeddable_framework.chat.messagefailed.failed_twice":"Failed to send","embeddable_framework.chat.messagefail
2024-10-10 18:35:54 UTC	1369	IN	Data Raw: 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 65 70 61 72 61 74 6f 72 2e 72 61 6e 67 65 22 3a 22 20 e2 80 94 20 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 75 6e 64 61 79 22 3a 22 53 75 6e 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 68 75 72 73 64 61 79 22 3a 22 54 68 75 72 73 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 69 6d 65 52 61 6e 67 65 22 3a 22 25 28 6f 70 65 6e 69 6e 67 54 69 6d 65 29 73 Data Ascii: operatingHours.label.separator.range":" ","embeddable_framework.chat.operatingHours.label.sunday":"Sunday","embeddable_framework.chat.operatingHours.label.thursday":"Thursday","embeddable_framework.chat.operatingHours.label.timeRange":"%(openingTime)s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49765	216.198.54.1	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:54 UTC	529	OUT	GET /embeddable/config HTTP/1.1 Host: huddle.zendesk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://login.huddle.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:54 UTC	1302	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:54 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-6697f8c775-swqbk x-runtime: 0.001431 vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 8d08b3d65f2ac99c-IAD X-Cached: STALE Last-Modified: Thu, 10 Oct 2024 18:34:05 GMT CF-Cache-Status: HIT Age: 53 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WPaGAgGOa8BWeznHD8o8VJChwfHB2uxn7qAtHVX86GrDLla8zuHd8SNTGbevvx8GT4EVGpyMO30tEi73oflN54ctZpOv5zEkG8uZywSTCOQwkVWvjzVcPfxx4i2uhRltdml77A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=531260d8687040875139a4a8425180371b4212d5-1728585354; path=/; domain=.huddle.zendesk.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=xLq4SclDIY3iHj_eeIyROZRTWP3PwyKL2ugzO3.7b0s-1728585354846-0.0.1.1-604800000; path=/; domain=.huddle.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8d08b683afa78c9b-EWR
2024-10-10 18:35:54 UTC	67	IN	Data Raw: 31 34 30 0d 0a 7b 22 68 69 64 65 5a 65 6e 64 65 73 6b 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 62 72 61 6e 64 22 3a 22 48 75 64 64 6c 65 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a 32 2c 22 63 6f 6c 6f 72 Data Ascii: 140{"hideZendeskLogo":true,"brand":"Huddle","brandCount":2,"color
2024-10-10 18:35:54 UTC	260	IN	Data Raw: 22 3a 22 23 30 35 36 64 37 38 22 2c 22 74 65 78 74 43 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 68 65 6c 70 43 65 6e 74 65 72 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 68 65 6c 70 43 65 6e 74 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 30 35 36 64 37 38 22 2c 22 62 75 74 74 6f 6e 4c 61 62 65 6c 4b 65 79 22 3a 22 63 6f 6e 74 61 63 74 22 2c 22 63 6f 6e 74 65 78 74 75 61 6c 48 65 6c 70 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 6c 61 75 6e 63 68 65 72 22 3a 7b 22 65 6d 62 65 64 22 3a 22 6c 61 75 6e 63 68 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 30 35 36 64 37 38 22 7d 7d 7d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 66 61 73 74 4c 6f 61 64 22 3a 74 72 75 Data Ascii: ":"#056d78","textColor":"#ffffff","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#056d78","buttonLabelKey":"contact","contextualHelpEnabled":true}},"launcher":{"embed":"launcher","props":{"color":"#056d78"}}},"features":{"fastLoad":tru
2024-10-10 18:35:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.17	49766	216.198.53.1	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:55 UTC	359	OUT	GET /embeddable/config HTTP/1.1 Host: huddle.zendesk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:55 UTC	1310	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:55 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-expose-headers: access-control-max-age: 7200 cache-control: public, max-age=60, stale-while-revalidate=600, stale-if-error=3600 x-zendesk-origin-server: embeddable-app-server-6697f8c775-swqbk x-runtime: 0.001431 vary: Origin X-Zendesk-Zorg: yes X-Request-ID: 8d08b3d65f2ac99c-IAD X-Cached: STALE Last-Modified: Thu, 10 Oct 2024 18:34:05 GMT CF-Cache-Status: HIT Age: 54 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tLCwC7p78kCpS1aYnGyShz06n4SJZa4uk%2FCYlfb4gcWbzRYQHqs0abXhC0KbBIpjRFZ%2BAVtoo3SzC1OW3MFxqAxUm1lqWbthxRMO%2ByzNregBYHJOxNMWie9xYX9QMmBtbvaL%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=7e2e8e7f8bd821cac8e76676b03bea49b86c6cec-1728585355; path=/; domain=.huddle.zendesk.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=bBECLJVkXZ1Ln4NFfQ39UFFSmOV9aBdrzznfJRr5was-1728585355524-0.0.1.1-604800000; path=/; domain=.huddle.zendesk.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8d08b687ed6ec3fd-EWR
2024-10-10 18:35:55 UTC	59	IN	Data Raw: 31 34 30 0d 0a 7b 22 68 69 64 65 5a 65 6e 64 65 73 6b 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 62 72 61 6e 64 22 3a 22 48 75 64 64 6c 65 22 2c 22 62 72 61 6e 64 43 6f 75 6e 74 22 3a Data Ascii: 140{"hideZendeskLogo":true,"brand":"Huddle","brandCount":
2024-10-10 18:35:55 UTC	268	IN	Data Raw: 32 2c 22 63 6f 6c 6f 72 22 3a 22 23 30 35 36 64 37 38 22 2c 22 74 65 78 74 43 6f 6c 6f 72 22 3a 22 23 66 66 66 66 66 66 22 2c 22 65 6d 62 65 64 73 22 3a 7b 22 68 65 6c 70 43 65 6e 74 65 72 46 6f 72 6d 22 3a 7b 22 65 6d 62 65 64 22 3a 22 68 65 6c 70 43 65 6e 74 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 30 35 36 64 37 38 22 2c 22 62 75 74 74 6f 6e 4c 61 62 65 6c 4b 65 79 22 3a 22 63 6f 6e 74 61 63 74 22 2c 22 63 6f 6e 74 65 78 74 75 61 6c 48 65 6c 70 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 2c 22 6c 61 75 6e 63 68 65 72 22 3a 7b 22 65 6d 62 65 64 22 3a 22 6c 61 75 6e 63 68 65 72 22 2c 22 70 72 6f 70 73 22 3a 7b 22 63 6f 6c 6f 72 22 3a 22 23 30 35 36 64 37 38 22 7d 7d 7d 2c 22 66 65 61 74 75 72 65 73 22 3a 7b 22 66 61 73 74 4c Data Ascii: 2,"color":"#056d78","textColor":"#ffffff","embeds":{"helpCenterForm":{"embed":"helpCenter","props":{"color":"#056d78","buttonLabelKey":"contact","contextualHelpEnabled":true}},"launcher":{"embed":"launcher","props":{"color":"#056d78"}}},"features":{"fastL
2024-10-10 18:35:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.17	49767	104.18.72.113	443	6152	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:35:55 UTC	417	OUT	GET /web_widget/classic/latest/web-widget-locales/classic/en-us-json-cbf609b.js HTTP/1.1 Host: static.zdassets.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 18:35:55 UTC	1182	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 18:35:55 GMT Content-Type: application/javascript; charset=utf-8 Content-Length: 25703 Connection: close x-amz-id-2: +iLZcSX7TFF0Ox8FfkxqsQaGugriIuCtRAiYyL5xvPmueFl5IG5qBEIkEhAAd/IJK3lJGawadvM= x-amz-request-id: ZCT1V8THJP9JCSGS x-amz-replication-status: COMPLETED Last-Modified: Mon, 07 Oct 2024 10:12:05 GMT ETag: "ef48436bf7997a9fed0856cd3df28c0f" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=31536000 Expires: Tue, 07 Oct 2025 10:12:04 GMT x-amz-version-id: 84wSEKA_FfeBTDyf9gL6ljF5UYM.Hy4g CF-Cache-Status: HIT Age: 285530 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=shNvs0WDn%2BvZqncVgWR%2BLcD%2BJr0xTGWMfjYBo2LXQRia%2BiH8IW2j1WZCScn0Y7klWkqI97HGmilJcJluIO4bhTbDGvrMuWV3ba7FC0akBojB5awcH5ow0LnMnKKd4e1wBUc9ljg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0 Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 0 Server: cloudflare CF-RAY: 8d08b687eb8a41e9-EWR
2024-10-10 18:35:55 UTC	187	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 3d 67 6c 6f 62 61 6c 54 68 69 73 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 7a 65 6e 64 65 73 6b 5f 77 65 62 5f 77 69 64 67 65 74 5f 63 6c 61 73 73 69 63 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 33 39 33 5d 2c 7b 34 36 39 33 33 3a 65 3d 3e 7b 65 2e 65 78 70 6f 72 74 73 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 27 7b 22 6c 6f 63 61 6c 65 22 3a 7b 22 6c 6f 63 61 6c 65 22 3a Data Ascii: "use strict";(globalThis.webpackChunk_zendesk_web_widget_classic=globalThis.webpackChunk_zendesk_web_widget_classic\|\|[]).push([[9393],{46933:e=>{e.exports=JSON.parse('{"locale":{"locale":
2024-10-10 18:35:55 UTC	1369	IN	Data Raw: 22 65 6e 2d 75 73 22 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 6e 65 65 64 5f 68 65 6c 70 22 3a 22 4e 6f 2c 20 49 20 6e 65 65 64 20 68 65 6c 70 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 61 72 74 69 63 6c 65 2e 66 65 65 64 62 61 63 6b 2e 6e 6f 2e 72 65 61 73 6f 6e 2e 72 65 6c 61 74 65 64 22 3a 22 49 74 5c 27 73 20 72 65 6c 61 74 65 64 2c 20 62 75 74 20 69 74 20 64 69 64 6e 5c 27 74 20 61 6e 73 77 65 72 20 6d 79 20 71 75 65 73 74 69 6f 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f Data Ascii: "en-us","rtl":false,"translations":{"embeddable_framework.answerBot.article.feedback.no.need_help":"No, I need help","embeddable_framework.answerBot.article.feedback.no.reason.related":"It\'s related, but it didn\'t answer my question","embeddable_framewo
2024-10-10 18:35:55 UTC	1369	IN	Data Raw: 67 65 74 5f 69 6e 5f 74 6f 75 63 68 22 3a 22 48 6f 77 20 64 6f 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 67 65 74 20 69 6e 20 74 6f 75 63 68 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 72 65 71 75 65 73 74 5f 63 61 6c 6c 62 61 63 6b 5f 6f 6e 6c 79 2e 74 69 74 6c 65 22 3a 22 57 6f 75 6c 64 20 79 6f 75 20 6c 69 6b 65 20 74 68 65 20 74 65 61 6d 20 74 6f 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 72 65 67 61 72 64 69 6e 67 20 79 6f 75 72 20 71 75 65 73 74 69 6f 6e 3f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 63 68 61 6e 6e 65 6c 5f 63 68 6f 69 63 65 2e 73 75 62 6d 69 74 5f 74 69 Data Ascii: get_in_touch":"How do you want to get in touch?","embeddable_framework.answerBot.msg.channel_choice.request_callback_only.title":"Would you like the team to contact you regarding your question?","embeddable_framework.answerBot.msg.channel_choice.submit_ti
2024-10-10 18:35:55 UTC	1369	IN	Data Raw: 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 70 72 6f 6d 70 74 5f 61 67 61 69 6e 5f 6e 6f 5f 63 68 61 6e 6e 65 6c 73 5f 61 76 61 69 6c 61 62 6c 65 22 3a 22 59 6f 75 20 63 61 6e 20 61 73 6b 20 61 6e 6f 74 68 65 72 20 71 75 65 73 74 69 6f 6e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 6d 73 67 2e 79 65 73 5f 61 63 6b 6e 6f 77 6c 65 64 67 65 6d 65 6e 74 22 3a 22 4e 69 63 65 2e 20 4b 6e 6f 77 6c 65 64 67 65 20 69 73 20 70 6f 77 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 61 6e 73 77 65 72 42 6f 74 2e 72 65 73 75 6c 74 73 2e 6d 61 6e 79 5f 61 72 74 69 63 6c 65 22 3a Data Ascii: question.","embeddable_framework.answerBot.msg.prompt_again_no_channels_available":"You can ask another question.","embeddable_framework.answerBot.msg.yes_acknowledgement":"Nice. Knowledge is power.","embeddable_framework.answerBot.results.many_article":
2024-10-10 18:35:55 UTC	1369	IN	Data Raw: 61 62 6c 65 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 64 69 73 61 62 6c 65 5f 63 68 61 74 5f 6e 6f 74 65 22 3a 22 59 6f 75 20 6d 61 79 20 64 69 73 61 62 6c 65 20 74 68 65 20 63 68 61 74 20 61 6e 79 74 69 6d 65 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 65 6e 61 62 6c 65 22 3a 22 45 6e 61 62 6c 65 20 43 6f 6f 6b 69 65 73 20 61 6e 64 20 43 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 67 72 65 65 6d 65 6e 74 2e 63 6f 6f 6b 69 65 73 2e 72 65 65 6e 61 62 6c 65 5f 63 68 61 74 5f 6e 6f 74 65 22 3a Data Ascii: able Chat","embeddable_framework.chat.agreement.cookies.disable_chat_note":"You may disable the chat anytime.","embeddable_framework.chat.agreement.cookies.enable":"Enable Cookies and Chat","embeddable_framework.chat.agreement.cookies.reenable_chat_note":
2024-10-10 18:35:55 UTC	1369	IN	Data Raw: 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 6e 6f 74 5f 73 75 70 70 6f 72 74 65 64 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 46 69 6c 65 20 73 65 6e 64 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 6f 6e 20 74 68 69 73 20 62 72 6f 77 73 65 72 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 61 74 74 61 63 68 6d 65 6e 74 73 2e 65 72 72 6f 72 2e 75 6e 6b 6e 6f 77 6e 5f 65 72 72 6f 72 22 3a 22 55 70 6c 6f 61 64 20 66 61 69 6c 65 64 2e 20 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 50 6c 65 61 73 65 20 74 72 79 Data Ascii: nding is not allowed.","embeddable_framework.chat.attachments.error.not_supported":"Upload failed. File sending is not supported on this browser.","embeddable_framework.chat.attachments.error.unknown_error":"Upload failed. Something went wrong. Please try
2024-10-10 18:35:55 UTC	1369	IN	Data Raw: 79 70 69 6e 67 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 61 64 69 6e 67 49 6d 61 67 65 22 3a 22 4c 6f 61 64 69 6e 67 20 69 6d 61 67 65 20 28 25 28 61 74 74 61 63 68 6d 65 6e 74 53 69 7a 65 29 73 29 2e 2e 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 6c 6f 67 69 6e 2e 75 70 64 61 74 65 49 6e 66 6f 22 3a 22 50 6c 65 61 73 65 20 75 70 64 61 74 65 20 79 6f 75 72 20 69 6e 66 6f 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 63 68 61 74 4c 6f 67 2e 71 75 65 75 65 50 6f 73 69 74 69 6f 6e 22 3a 22 51 75 65 75 65 20 70 6f 73 69 74 69 6f 6e 3a 20 25 28 76 61 6c 75 65 29 73 22 2c 22 65 Data Ascii: yping","embeddable_framework.chat.chatLog.loadingImage":"Loading image (%(attachmentSize)s)...","embeddable_framework.chat.chatLog.login.updateInfo":"Please update your info","embeddable_framework.chat.chatLog.queuePosition":"Queue position: %(value)s","e
2024-10-10 18:35:55 UTC	1369	IN	Data Raw: 73 65 6e 74 20 74 6f 20 25 28 65 6d 61 69 6c 29 73 20 77 68 65 6e 20 74 68 65 20 63 68 61 74 20 65 6e 64 73 2e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 69 74 6c 65 22 3a 22 45 6d 61 69 6c 20 63 68 61 74 20 74 72 61 6e 73 63 72 69 70 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 65 6d 61 69 6c 74 72 61 6e 73 63 72 69 70 74 2e 74 72 79 5f 61 67 61 69 6e 22 3a 22 54 72 79 20 61 67 61 69 6e 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 66 65 74 63 68 69 6e 67 5f 68 69 73 74 6f 72 79 22 3a 22 4c 6f 61 64 69 6e 67 20 6d 65 73 73 61 67 65 73 2e 2e 2e 22 2c 22 65 6d 62 65 64 64 61 62 Data Ascii: sent to %(email)s when the chat ends.","embeddable_framework.chat.emailtranscript.title":"Email chat transcript","embeddable_framework.chat.emailtranscript.try_again":"Try again","embeddable_framework.chat.fetching_history":"Loading messages...","embeddab
2024-10-10 18:35:55 UTC	1369	IN	Data Raw: 3a 22 41 74 74 61 63 68 20 66 69 6c 65 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 65 6e 64 43 68 61 74 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 45 6e 64 20 63 68 61 74 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 69 63 6f 6e 2e 6d 65 6e 75 2e 68 6f 76 65 72 2e 6c 61 62 65 6c 22 3a 22 4f 70 74 69 6f 6e 73 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 73 73 61 67 65 66 61 69 6c 65 64 2e 66 61 69 6c 65 64 5f 74 77 69 63 65 22 3a 22 46 61 69 6c 65 64 20 74 6f 20 73 65 6e 64 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6d 65 73 73 61 67 65 66 61 69 6c 65 64 2e 72 65 73 Data Ascii: :"Attach file","embeddable_framework.chat.icon.endChat.hover.label":"End chat","embeddable_framework.chat.icon.menu.hover.label":"Options","embeddable_framework.chat.messagefailed.failed_twice":"Failed to send","embeddable_framework.chat.messagefailed.res
2024-10-10 18:35:55 UTC	1369	IN	Data Raw: 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 65 70 61 72 61 74 6f 72 2e 72 61 6e 67 65 22 3a 22 20 e2 80 94 20 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 73 75 6e 64 61 79 22 3a 22 53 75 6e 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 68 75 72 73 64 61 79 22 3a 22 54 68 75 72 73 64 61 79 22 2c 22 65 6d 62 65 64 64 61 62 6c 65 5f 66 72 61 6d 65 77 6f 72 6b 2e 63 68 61 74 2e 6f 70 65 72 61 74 69 6e 67 48 6f 75 72 73 2e 6c 61 62 65 6c 2e 74 69 6d 65 52 61 6e 67 65 22 3a 22 25 28 6f 70 65 6e 69 6e 67 54 69 6d 65 29 73 20 74 6f 20 25 28 Data Ascii: ingHours.label.separator.range":" ","embeddable_framework.chat.operatingHours.label.sunday":"Sunday","embeddable_framework.chat.operatingHours.label.thursday":"Thursday","embeddable_framework.chat.operatingHours.label.timeRange":"%(openingTime)s to %(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.17	49768	52.149.20.212	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:36:22 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=MgFfPwO4RwD58wp&MD=7N1b1yk3 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-10 18:36:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 007f5d02-e941-41be-a567-6eb78c1c322a MS-RequestId: d18f1bba-b862-4f86-895d-3fc5931f04a7 MS-CV: ElNt5bCFSkeeg93u.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 10 Oct 2024 18:36:22 GMT Connection: close Content-Length: 30005
2024-10-10 18:36:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-10 18:36:22 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.17	49769	20.190.159.73	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:36:28 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4808 Host: login.live.com
2024-10-10 18:36:28 UTC	4808	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-10-10 18:36:28 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 10 Oct 2024 18:35:28 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: d753ad27-d384-4b08-82cc-b3b7ee0f2095 PPServer: PPV: 30 H: PH1PEPF000183BE V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 10 Oct 2024 18:36:28 GMT Connection: close Content-Length: 11177
2024-10-10 18:36:28 UTC	11177	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.17	49770	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:36:28 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-10-10 18:36:28 UTC	209	IN	HTTP/1.1 400 Bad Request X-MSEdge-Ref: Ref A: B451017F75464B44BCA24082B976569C Ref B: EWR311000105011 Ref C: 2024-10-10T18:36:28Z Date: Thu, 10 Oct 2024 18:36:27 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.17	49771	23.11.206.59	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 18:36:29 UTC	2581	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: -240 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAASFycsIWHYJTbTZ4bfq6JUV/89wEHeuqoueePJYoLl1OwI5L3cqee%2BLEpbOBTPGZDOVL3I4Xz8/RcBJwaQzXzYUAcqE0AHvWMFJUAUlnAArXDPmKqBQTscKz/8gOsiCLB0KhY42TOkuGgT6FWGkF62tlge1z1avv9LdWkM/PA7xjgQXHVkhaMr/VOeKyy%2B8FWGY7HnGTXmf5ooatHZoVM5tWG3ZSmX4v/WEwjVnRwFxNSk92vJ4lIPz8YMcMSlszfM0%2BSrU4LktE3vpC8BcvJq/mhWGBQkbPd1i5w7OM0z1kIQyovv3LLFoboxm4dhXpHTCYIE4Ads6Y0KItCB413B4QZgAAECgkJFNYMOxy4wEsOcHNhZ2wAddKGrWRuajsHBlLMEXMzvwRSf9JqB8LET1uO9N0qwrfdI80H7oV6R9cAH%2B5tqhC%2Btv5bTVeCKTh8sENrbvEEWNTvP1Brcevr%2BuYS2GdeMlZmZ97nVnnxnsi5j8uKlIi6OtZxm3gu51bLnhpmxNVjO3006J/WoIKCsdrz7zLK4qTq6WCaJFuao8yRO4T%2B4p8lsMHubzwGx9Z9CWEAJNeDAw3rr5b%2BrIhU7oKJ2HAuzF50C57/94Ixe/QPhWgWh8fgptHB971vv5Ou4LpM%2BT30FHrwKFpu37/TXPEU4RLrOBjq1RRTGgyM86Fu6JR2PQ7S7D4lRMVJ3L/eT0ZZ4JvJWntFj58o6nB/alRN3uePf0NZWZd0t6oH2bTTapqPQ05XfR8/WoW7AdKEiSlDwOnJBmgOz6nJUda9qJl%2B4fW7ZC74iqk%2BrgTgcQBuOR0VM%2B4nG5ipQWSmXc7h0ckGx9LsGUYAUUReJfBBdmXaFsLb6HbCLqW//WU7oXZAQm3v1J1drZoSWfIKFLnSnCYORyGEAclNlqUihlTo8iYbeMNzcIuwMM81/Btj [TRUNCATED] X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1728585385 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 13379A1CC5D2439BA17891CA39F51146 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-10-10 18:36:29 UTC	1147	IN	HTTP/1.1 200 OK Content-Length: 2215 Content-Type: application/json; charset=utf-8 Cache-Control: private X-EventID: 67081ead050448468978563ca141a48c X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Thu, 10 Oct 2024 18:36:29 GMT Connection: close Set-Cookie: _EDGE_S=SID=18E15BE0D70B66841A364EF4D6A1672A&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Tue, 04-Nov-2025 18:36:29 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=18E15BE0D70B66841A364EF4D6A1672A; domain=.bing.com; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.1fce0b17.1728585389.f3b57da
2024-10-10 18:36:29 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Target ID:	0
Start time:	14:35:33
Start date:	10/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg"
Imagebase:	0x9b0000
File size:	34'446'744 bytes
MD5 hash:	91A5292942864110ED734005B7E005C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	14:35:34
Start date:	10/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "4AE037F2-F682-43BD-B677-F9DD98FD1808" "838F29C9-1758-47F6-976A-97D89964306D" "6944" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Imagebase:	0x7ff7d94d0000
File size:	710'048 bytes
MD5 hash:	EC652BEDD90E089D9406AFED89A8A8BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	14:35:40
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://avp100.huddle.com/workspace/1189459/files/#/folder/4319955
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	14:35:40
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2080,i,2313067344593807637,7431847318301714659,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to hide configuration information within Registry keys, remove information as part of cleaning up, or as part of other techniques to aid in persistence and execution.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\57C8EDB95DF3F0AD4EE2DC2B8CFD4157

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntities.bin

C:\Users\user\AppData\Local\Microsoft\Office\16.0\AddInClassifierCache\OfficeSharedEntitiesUpdated.bin

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-journal

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\089d66ba04a8cec4bdc5267f42f39cf84278bb67.tbres

C:\Users\user\AppData\Local\Microsoft\TokenBroker\Cache\5475cb191e478c39370a215b2da98a37e9dc813d.tbres

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\8573189E.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{91DDFA33-440A-44BA-8DB5-0140BC4A5508}.tmp

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728585333934607200_13D7860A-7640-4B78-A10B-3D2000F80CF5.log

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1728585333935677900_13D7860A-7640-4B78-A10B-3D2000F80CF5.log

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241010T1435330661-6944.etl

C:\Users\user\AppData\Local\Temp\~DF33FEA0AC0848533B.TMP

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

C:\Users\user\AppData\Roaming\Microsoft\Outlook\NoEmail.srs

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Windows Analysis Report
Kevin Burrell shared 'Team A Pictures and Presentation' in 'Eric Meyn's Workspace' with you.msg