Edit tour

Windows Analysis Report
https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9

Overview

General Information

Sample URL:	https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9
Analysis ID:	1540490
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Submit button contains javascript call

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 3636 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1948,i,11637739563851034214,2270769472258100713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9	HTTP Parser: Title: Sharing Link Validation does not match URL
Source: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9

HTTP Parser: On click: javascript:WebForm_DoPostBackWithOptions(new WebForm_PostBackOptions("btnSubmitEmail", "", true, "", "", false, true))

Source: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8&sso_reload=true

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.17:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.17:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.187:443 -> 192.168.2.17:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49753 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: independentsgroup-my.sharepoint.com to https://login.microsoftonline.com:443/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5fid=00000003%2d0000%2d0ff1%2dce00%2d000000000000&response%5fmode=form%5fpost&response%5ftype=code%20id%5ftoken&resource=00000003%2d0000%2d0ff1%2dce00%2d000000000000&scope=openid&nonce=cfa0f387c5388d24910be87468367f31fcb04412b4e56eef%2dd9f1d3fc9387452229ced770460e23f9ea9601a7825edbf66f17762374945c76&redirect%5furi=https%3a%2f%2findependentsgroup%2dmy%2esharepoint%2ecom%2f%5fforms%2fdefault%2easpx&state=od0w&claims=%7b%22id%5ftoken%22%3a%7b%22xms%5fcc%22%3a%7b%22values%22%3a%5b%22cp1%22%5d%7d%7d%7d&wsucxt=1&cobrandid=11bd8083%2d87e0%2d41b5%2dbb78%2d0bc43c8a8e8a&client%2drequest%2did=85cd5ca1%2d60ef%2da000%2d1e46%2de352e28dcfe8

Source: global traffic

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 52.137.106.217
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9 HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=HCSL-E7_A1_FeBBMmGwtpizh0yIMX6PsPtv0h-aDGwRVPg5LoBaOdHaK4FrwnxhUozZTcWa6TXAqeo4eSNRRXUdgZLhcMEkzESinNZvsWWs1&t=638637567397700854 HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=b3JioE5tZaq_9kBjs4RUmRHI00rRfwVS1WIxOEecMyunbbQwGtT920PESG742YeFoZ_48A6prKsTz0ApZ1j-hpnxRYLl1rUa78apnoEaTRJ4JFgEqYO8tl-05CdckY2tEZSlO96Khi6d_SfnQaih0jzlqlSvuo7AczeexLJMBnU1&t=64bd211b HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=AoO_Zpn0QjxuBwM64iz_IKcG1LD2Q4te1Uuxqfe4ZkCiVFZaI2XQu6tkKgtQXafF9ZadOF-iFVriAjKAbDKFQmtujEm7daW_2kLFKyKDYd3A2CoISJOQSGiiPa_yCufVUAWWRyhOB5zJqZ4hhDFCzd9ECcfTihD-WUfd1As5msUG1XTWmcnYVnpckjjqCUVs0&t=ffffffffb201fd3f HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=VD59jzzntrD9czf7Vv-dVyvHKJS_6Box7OvgCtP6DfZ_r0mKhiVQHBtnieAUHwNMJNDZlGL2qBFUxguOjgn_kyWFWeD_wRd-ApQFE52bC-a3lvJml3XV_QsG_IVlcOfKJpHlqBbRgyBulBX9k1GCvy8jnz2S1ee5lwrMgCSozXtsUftoM5sLZhcqUOqjHBgW0&t=ffffffffb201fd3f HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=HCSL-E7_A1_FeBBMmGwtpizh0yIMX6PsPtv0h-aDGwRVPg5LoBaOdHaK4FrwnxhUozZTcWa6TXAqeo4eSNRRXUdgZLhcMEkzESinNZvsWWs1&t=638637567397700854 HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/microsoft-logo.png HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=b3JioE5tZaq_9kBjs4RUmRHI00rRfwVS1WIxOEecMyunbbQwGtT920PESG742YeFoZ_48A6prKsTz0ApZ1j-hpnxRYLl1rUa78apnoEaTRJ4JFgEqYO8tl-05CdckY2tEZSlO96Khi6d_SfnQaih0jzlqlSvuo7AczeexLJMBnU1&t=64bd211b HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=VD59jzzntrD9czf7Vv-dVyvHKJS_6Box7OvgCtP6DfZ_r0mKhiVQHBtnieAUHwNMJNDZlGL2qBFUxguOjgn_kyWFWeD_wRd-ApQFE52bC-a3lvJml3XV_QsG_IVlcOfKJpHlqBbRgyBulBX9k1GCvy8jnz2S1ee5lwrMgCSozXtsUftoM5sLZhcqUOqjHBgW0&t=ffffffffb201fd3f HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=AoO_Zpn0QjxuBwM64iz_IKcG1LD2Q4te1Uuxqfe4ZkCiVFZaI2XQu6tkKgtQXafF9ZadOF-iFVriAjKAbDKFQmtujEm7daW_2kLFKyKDYd3A2CoISJOQSGiiPa_yCufVUAWWRyhOB5zJqZ4hhDFCzd9ECcfTihD-WUfd1As5msUG1XTWmcnYVnpckjjqCUVs0&t=ffffffffb201fd3f HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kWR8Zym5yZKfL9A&MD=HsB53M7E HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kWR8Zym5yZKfL9A&MD=HsB53M7E HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: -240X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAeKlD4m2Q%2BFusMXhY/IRCAfYJrjZnYxx5/mIax7C2uCgLRr5Rnbp8HS0EGOPxpZsTRwF7kwMKrBqacs/h8u0sWoRTh1fz793HDFqCAs/BM67WHnWfXaAHr2unUwQM%2BNdnZAaJPDpXIysSNdI0F8unEAEk9Mw5hMlj0REsf0wAHDRzkufXx8EAI6Am8tSh2VdPI7I2Gcj9lKBsjxTHk2%2Bktviph0VQOC7nXEVSjyv6W1lHi9WfLmNoPw1fPO5ZCAv4lsIqSV%2B9o2eUdlhtXvEPjVmV4NzbB4wi74kVLcL80tmJGPPBqtymCeus0QztzNKqP%2B45a4Z%2BzJU6pT3fxNg4FoQZgAAEOM9Ohp%2Bo//1RUdJWza1cD2wAd2qsWghKVzQ95ZMpkG%2BxJvONeRF4CkLb9PqGBQGUIFG8aghp0IztAHWmBBXWvFW%2BMjOw85w6MvsVjiO5uqVUdEUcT20POSe7AXMCHWO6DCO%2BTwiCXrA1gkcu8ZnNeilC4usqBw1AuRrK8QixrcQgK2/%2BBloXrk6BPRD6whLUvPfQWtV3fMVGjwzymjo9QbkfWSyXZS5Vf7%2BupKuzobQxdQpYrlySP/9VoB7kT9P%2B0kCkz03eGGoyj1ZSCYxcocVuJgzq8KAvu/g/LjNym55wOaI2Fm%2BCwyv8m0khiv9oEAQNpw8F4ZJDdUKOHUBnWn4UGO5VjKTM6mo1rgxFykCW%2BNtrvZ%2BzhnKD6SyAxHr5Bxd2Zji2NEM%2B9zecVphVXVCM85i7IR2UT4p6Ibq4WxJsGEE4SMvhlYx6yQnlOMTjaNauvCLGVitjc1B8rTX6iXWxhBsg9icGv%2B8sgzcz1NlQrccDVDlJ2HS3K9qkb70vMh2cOqpTZON0wIcmTWyBST/jq2JVA9BRjqyCD3HRKmXVL0fz%2B5T5TBXN5rOHEEDVr9cUp3sF3I1jyc9R9WE0DNkptoB%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1729708599User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 709D926D63CF46AA98B51A3BCDC3B832X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /personal/rogawskia_karlaotto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Frogawskia%5Fkarlaotto%5Fcom%2F%5Flayouts%2F15%2Fguestaccess%2Easpx%3Fe%3D5%253aQjOX6J%26at%3D9%26share%3DEmZI2ojsTbZCvWUk1z%2DjCWkBMDec1bTFXOixjJwJN7fCLw HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2frogawskia_karlaotto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Frogawskia%255Fkarlaotto%255Fcom%252F%255Flayouts%252F15%252Fguestaccess%252Easpx%253Fe%253D5%25253aQjOX6J%2526at%253D9%2526share%253DEmZI2ojsTbZCvWUk1z%252DjCWkBMDec1bTFXOixjJwJN7fCLw&Source=cookie HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGcm9nYXdza2lhJTVGa2FybGFvdHRvJTVGY29tJTJGJTVGbGF5b3V0cyUyRjE1JTJGZ3Vlc3RhY2Nlc3MlMkVhc3B4JTNGZSUzRDUlMjUzYVFqT1g2SiUyNmF0JTNEOSUyNnNoYXJlJTNERW1aSTJvanNUYlpDdldVazF6JTJEakNXa0JNRGVjMWJURlhPaXhqSndKTjdmQ0x3
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: independentsgroup-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: autologon.microsoftazuread-sso.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net

Source: unknown

HTTP traffic detected: POST /personal/rogawskia_karlaotto_com/_layouts/15/guestaccess.aspx?e=5%3aQjOX6J&at=9&share=EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw HTTP/1.1Host: independentsgroup-my.sharepoint.comConnection: keep-aliveContent-Length: 1623Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://independentsgroup-my.sharepoint.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_128.1.dr, chromecache_132.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_102.1.dr, chromecache_101.1.dr	String found in binary or memory: http://github.com/jrburke/requirejs
Source: chromecache_105.1.dr, chromecache_117.1.dr, chromecache_140.1.dr, chromecache_129.1.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_105.1.dr, chromecache_117.1.dr, chromecache_140.1.dr, chromecache_129.1.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_105.1.dr, chromecache_117.1.dr, chromecache_118.1.dr, chromecache_141.1.dr, chromecache_113.1.dr, chromecache_133.1.dr, chromecache_140.1.dr, chromecache_128.1.dr, chromecache_129.1.dr, chromecache_132.1.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_106.1.dr	String found in binary or memory: https://independentsgroup-my.sharepoint.com/personal/rogawskia_karlaotto_com/_layouts/15/images/256_
Source: chromecache_96.1.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_96.1.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_114.1.dr, chromecache_116.1.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_106.1.dr	String found in binary or memory: https://res-1.cdn.office.net
Source: chromecache_106.1.dr	String found in binary or memory: https://res-1.cdn.office.net/bld/_layouts/15/16.0.25402.12009/require.js
Source: chromecache_106.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.009/
Source: chromecache_106.1.dr	String found in binary or memory: https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.009/spoguestaccesswebpack/spoguestaccess
Source: chromecache_106.1.dr	String found in binary or memory: https://res-2.cdn.office.net/files/odsp-web-prod_2024-10-11.009/
Source: chromecache_106.1.dr	String found in binary or memory: https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.17:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.137.106.217:443 -> 192.168.2.17:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.17:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.17:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.209.187:443 -> 192.168.2.17:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49753 version: TLS 1.2

Source: classification engine

Classification label: clean3.win@18/78@28/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1948,i,11637739563851034214,2270769472258100713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1948,i,11637739563851034214,2270769472258100713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Scripting	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://reactjs.org/docs/error-decoder.html?invariant=	0%	URL Reputation	safe
http://knockoutjs.com/	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
autologon.microsoftazuread-sso.com	40.126.32.133	true	false	unknown
independentsgroup-my.sharepoint.com	unknown	unknown	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8	false	unknown
https://independentsgroup-my.sharepoint.com/WebResource.axd?d=HCSL-E7_A1_FeBBMmGwtpizh0yIMX6PsPtv0h-aDGwRVPg5LoBaOdHaK4FrwnxhUozZTcWa6TXAqeo4eSNRRXUdgZLhcMEkzESinNZvsWWs1&t=638637567397700854	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	unknown
https://independentsgroup-my.sharepoint.com/ScriptResource.axd?d=VD59jzzntrD9czf7Vv-dVyvHKJS_6Box7OvgCtP6DfZ_r0mKhiVQHBtnieAUHwNMJNDZlGL2qBFUxguOjgn_kyWFWeD_wRd-ApQFE52bC-a3lvJml3XV_QsG_IVlcOfKJpHlqBbRgyBulBX9k1GCvy8jnz2S1ee5lwrMgCSozXtsUftoM5sLZhcqUOqjHBgW0&t=ffffffffb201fd3f	false	unknown
https://independentsgroup-my.sharepoint.com/ScriptResource.axd?d=b3JioE5tZaq_9kBjs4RUmRHI00rRfwVS1WIxOEecMyunbbQwGtT920PESG742YeFoZ_48A6prKsTz0ApZ1j-hpnxRYLl1rUa78apnoEaTRJ4JFgEqYO8tl-05CdckY2tEZSlO96Khi6d_SfnQaih0jzlqlSvuo7AczeexLJMBnU1&t=64bd211b	false	unknown
https://independentsgroup-my.sharepoint.com/personal/rogawskia_karlaotto_com/_layouts/15/guestaccess.aspx?e=5%3aQjOX6J&at=9&share=EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw	false	unknown
https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9	false	unknown
https://independentsgroup-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fpersonal%2frogawskia_karlaotto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Frogawskia%255Fkarlaotto%255Fcom%252F%255Flayouts%252F15%252Fguestaccess%252Easpx%253Fe%253D5%25253aQjOX6J%2526at%253D9%2526share%253DEmZI2ojsTbZCvWUk1z%252DjCWkBMDec1bTFXOixjJwJN7fCLw&Source=cookie	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	unknown
https://independentsgroup-my.sharepoint.com/ScriptResource.axd?d=AoO_Zpn0QjxuBwM64iz_IKcG1LD2Q4te1Uuxqfe4ZkCiVFZaI2XQu6tkKgtQXafF9ZadOF-iFVriAjKAbDKFQmtujEm7daW_2kLFKyKDYd3A2CoISJOQSGiiPa_yCufVUAWWRyhOB5zJqZ4hhDFCzd9ECcfTihD-WUfd1As5msUG1XTWmcnYVnpckjjqCUVs0&t=ffffffffb201fd3f	false	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	unknown
https://independentsgroup-my.sharepoint.com/_layouts/15/images/microsoft-logo.png	false	unknown
https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8&sso_reload=true	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	unknown
https://independentsgroup-my.sharepoint.com/personal/rogawskia_karlaotto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Frogawskia%5Fkarlaotto%5Fcom%2F%5Flayouts%2F15%2Fguestaccess%2Easpx%3Fe%3D5%253aQjOX6J%26at%3D9%26share%3DEmZI2ojsTbZCvWUk1z%2DjCWkBMDec1bTFXOixjJwJN7fCLw	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js	false	unknown
https://independentsgroup-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47	false	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	false	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://independentsgroup-my.sharepoint.com/personal/rogawskia_karlaotto_com/_layouts/15/images/256_	chromecache_106.1.dr	false		unknown
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_114.1.dr, chromecache_116.1.dr	false	URL Reputation: safe	unknown
http://knockoutjs.com/	chromecache_105.1.dr, chromecache_117.1.dr, chromecache_140.1.dr, chromecache_129.1.dr	false	URL Reputation: safe	unknown
https://github.com/douglascrockford/JSON-js	chromecache_105.1.dr, chromecache_117.1.dr, chromecache_118.1.dr, chromecache_141.1.dr, chromecache_113.1.dr, chromecache_133.1.dr, chromecache_140.1.dr, chromecache_128.1.dr, chromecache_129.1.dr, chromecache_132.1.dr	false		unknown
https://login.windows-ppe.net	chromecache_96.1.dr	false		unknown
https://spoprod-a.akamaihd.net/files/odsp-common-library-prod_2019-02-15_20190219.002/require.js	chromecache_106.1.dr	false		unknown
http://github.com/jrburke/requirejs	chromecache_102.1.dr, chromecache_101.1.dr	false		unknown
https://login.microsoftonline.com	chromecache_96.1.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_105.1.dr, chromecache_117.1.dr, chromecache_140.1.dr, chromecache_129.1.dr	false	URL Reputation: safe	unknown
http://feross.org	chromecache_128.1.dr, chromecache_132.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.17
192.168.2.8
192.168.2.7
192.168.2.18
192.168.2.6
192.168.2.23

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1540490
Start date and time:	2024-10-23 20:35:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@18/78@28/11

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.185.238, 64.233.166.84, 34.104.35.123, 2.23.209.40, 2.23.209.39, 2.23.209.22, 2.23.209.23, 2.23.209.33, 2.23.209.15, 2.23.209.32, 2.23.209.13, 2.23.209.16, 2.23.209.49, 2.23.209.52, 2.23.209.42, 142.250.181.234, 216.58.212.170, 142.250.185.202, 142.250.186.42, 142.250.186.170, 216.58.212.138, 142.250.185.106, 172.217.18.10, 216.58.206.42, 142.250.186.74, 142.250.185.138, 142.250.184.234, 142.250.185.170, 142.250.185.74, 142.250.185.234, 142.250.186.138, 2.19.126.146, 2.19.126.143, 192.229.221.95, 142.250.186.163, 95.101.54.225, 95.101.54.226, 142.250.184.206, 142.250.185.78, 142.250.186.78, 40.126.32.74, 20.190.160.14, 20.190.160.17, 40.126.32.140, 40.126.32.68, 40.126.32.136, 20.190.160.20, 40.126.32.133, 172.217.16.202, 142.250.184.202, 216.58.206.74, 172.217.23.106, 172.217.18.106, 172.217.16.138, 142.250.186.106, 40.126.31.73, 20.190.159.71, 20.190.159.68, 20.190.159.64, 20.190.159.2, 40.126.31.69, 20.190.159.0, 40.126.31.67, 2.16.238.149,
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, e40491.dscd.akamaiedge.net, clientservices.googleapis.com, res-1.cdn.office.net, 189905-ipv4v6e.farm.dprodmgd104.sharepointonline.com.akadns.net, a1894.dscb.akamai.net, ak.privatelink.msidentity.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, login.live.com, update.googleapis.com, login.mso.msidentity.com, res-1.cdn.office.net-c.edgekey.net.globalredir.akadns.net, www.bing.com, clients1.google.com, www.tm.ak.prd.aadg.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.ak.prd.aadg.akadns.net, settings-win.data.microsoft.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, evoke-windowsservices-tas.msedge.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, res-1.cdn.office.net-c.edgekey.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9

Input	Output
URL: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone, or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://login.microsoftonline.com/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: claude-3-haiku-20240307	```json { "brands": [ "Microsoft" ] }
	```json { "brands": [ "Microsoft" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 17:35:54 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9890499732007103
Encrypted:	false
SSDEEP:	48:8HtdWcTRM7jKHqidAKZdA1JehwiZUklqehLy+3:8HNgDky
MD5:	91F2021D1B62307CB619852FD2C0C16D
SHA1:	FA89D56D3ABE136F38C8488FFA3E04272BD91CB5
SHA-256:	151C1878C5BF4E9C482977CDA0E2D15D742EF63B5F8DA273B08175EA74775E29
SHA-512:	298E07E730C4F57073AFA1AD8D1CF1DA1DD7E2142B498FFA87BD52368350E865DEA3FA2308EC38ABAFB2BD830F52E76C116C9B90E788C033DEEC5174A72E1E1C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....H.dz%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IWYo.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYz.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VWYz.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VWYz............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWY{............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 17:35:54 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.004976921769751
Encrypted:	false
SSDEEP:	48:8etdWcTRM7jKHqidAKZdA10eh/iZUkAQkqehUy+2:8eNgB9QBy
MD5:	51D5CD16997756EEE76625E52651B3BC
SHA1:	23309855E6F2F31344BCB8458D9446A7B4F30504
SHA-256:	96ED23938DF9CB9486267D4E9A8F1E9F65FB70B45EFE20A99653DE528163563F
SHA-512:	41511F740962BDB97F6738EB6D925BB64A2FBA415E3EE4A9CEF35C09A6CD81F8796579F412DD520810B12A099E740DBC7083491E0C00AFB17F998A73DCBD055B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......dz%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IWYo.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYz.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VWYz.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VWYz............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWY{............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.014236614358461
Encrypted:	false
SSDEEP:	48:8etdWcTRM7jjHqidAKZdA14tIeh7sFiZUkmgqeh7sSy+BX:8eNgKnoy
MD5:	C7792860D75884B6E60B10FEB34A7F33
SHA1:	E06DED1FD71C608251A08E4C5C9C0F8EEB0E5EC2
SHA-256:	B636EBD905E8290D5A006B41237A6CF06A4A634A54B71F07099A58041A13D499
SHA-512:	516E47CAB6F0E546EDCD57B26DA6C7A643BD1F1DE0F3F3B3592EE1D12D9F3FE43933508C01A134AFDF56951AC7C1EEB2921F6EAE44A2810FFCE4C0A50980DE80
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IWYo.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYz.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VWYz.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VWYz............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 17:35:54 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.001981466164586
Encrypted:	false
SSDEEP:	48:8VbtdWcTRM7jKHqidAKZdA1behDiZUkwqehAy+R:8VNgyKy
MD5:	7F2BC2FA13B7A0BA1B31A0614B605851
SHA1:	6DBD99637391B93B32754CE763D3533CA6DF4510
SHA-256:	F2622B9170388BAB4B037C9DF78A7D9F68E917A561F5B0E4200E4DAF99756C6D
SHA-512:	BE204DFE7CF55BC2D97E12440D8D1B1142720F89BBDF879C4C6FA090397C407B31EF4272D78817918F3C78060884FE4E8CE61D9CBDF22015438D3E59DD341CE0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....U$.dz%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IWYo.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYz.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VWYz.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VWYz............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWY{............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 17:35:54 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.993161300925375
Encrypted:	false
SSDEEP:	48:89tdWcTRM7jKHqidAKZdA1VehBiZUk1W1qehWy+C:89Ngi92y
MD5:	4DB2F9112405D7592DDD1AEAEE058F99
SHA1:	FDD59441E31CC8FA66E8D43AA8C9EC950FEE7A33
SHA-256:	9F6BC1E3A64D7AF20CD66608456211E746EB44B4B623252AC29FC2BBEA305C7F
SHA-512:	B1E65A1044B255DDE089D64BD90468FEA80E0480E85AF89E323603A97D5D205511A872FED1011A6F6AEBFE9F84816BBCFC5CC516CF98EBBD08AC8B0E19CC5D46
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......dz%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IWYo.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYz.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VWYz.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VWYz............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWY{............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 17:35:53 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.0015444591718765
Encrypted:	false
SSDEEP:	48:8ktdWcTRM7jKHqidAKZdA1duT6ehOuTbbiZUk5OjqehOuTboy+yT+:8kNggTTTbxWOvTboy7T
MD5:	730C73F846938762157188E698FD2F33
SHA1:	0A8C437266F32AAE525885E38A55FB463C5EAB06
SHA-256:	7B3B1BAFBCDF1F1C0CC443F1E085BAFE10C16CA9A1B04F8FC02A894662165298
SHA-512:	D3E76EBE8118D5B42BF9F9DC5EC485B29DBD70FC45D877E098D37A981A41C0A9100BF68E55D3FBE1097432EE9BB5C5F5AA3F3E53FAACAE260A81A67702BA14ED
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....I.dz%......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.IWYo.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VWYz.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.VWYz.....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.VWYz............................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VWY{............................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17444)
Category:	dropped
Size (bytes):	17672
Entropy (8bit):	5.233316811547578
Encrypted:	false
SSDEEP:	384:lpLsOooX8uvFBiRh+HnEDuvvy1pqvuvDX/0ohHK9mm+tMHvVOPoQeOMmuI:QnoX8uNB2YHnEDsvy1pqvub/0iq4NMHM
MD5:	6EFDDF589864D2E146A55C01C6764A35
SHA1:	EFA8BBA46CB97877EEC5430C43F0AC32585B6B2F
SHA-256:	2D92F0CE8491D2F9A27EA16D261A15089C4A9BE879D1EEDCB6F4A3859E7F1999
SHA-512:	1AFC735660AAE010C04EF89C732D08EBA1B87BE6048164F273BEAEBECA3F30062812B4CD141DDF0291A6AB54F730875D597678A3564C0EED2AAC11E5400F951A
Malicious:	false
Reputation:	low
Preview:	/** vim: et:ts=4:sw=4:sts=4. * @license RequireJS 2.1.22 Copyright (c) 2010-2015, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/requirejs for details. */.var requirejs,require,define;!function(global){function isFunction(e){return"[object Function]"===ostring.call(e)}function isArray(e){return"[object Array]"===ostring.call(e)}function each(e,t){if(e){var r;for(r=0;r<e.length&&(!e[r]\|\|!t(e[r],r,e));r+=1);}}function eachReverse(e,t){if(e){var r;for(r=e.length-1;r>-1&&(!e[r]\|\|!t(e[r],r,e));r-=1);}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var r;for(r in e)if(hasProp(e,r)&&t(e[r],r))break}function mixin(e,t,r,i){return t&&eachProp(t,function(t,n){(r\|\|!hasProp(e,n))&&(!i\|\|"object"!=typeof t\|\|!t\|\|isArray(t)\|\|isFunction(t)\|\|t instanceof RegExp?e[n]=t:(e[n]\|\|(e[n]={}),mixin(e[n],t,r,i)))}),e}function bind(e,t){return function(){return t.apply(e,ar

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17444)
Category:	downloaded
Size (bytes):	17672
Entropy (8bit):	5.233316811547578
Encrypted:	false
SSDEEP:	384:lpLsOooX8uvFBiRh+HnEDuvvy1pqvuvDX/0ohHK9mm+tMHvVOPoQeOMmuI:QnoX8uNB2YHnEDsvy1pqvub/0iq4NMHM
MD5:	6EFDDF589864D2E146A55C01C6764A35
SHA1:	EFA8BBA46CB97877EEC5430C43F0AC32585B6B2F
SHA-256:	2D92F0CE8491D2F9A27EA16D261A15089C4A9BE879D1EEDCB6F4A3859E7F1999
SHA-512:	1AFC735660AAE010C04EF89C732D08EBA1B87BE6048164F273BEAEBECA3F30062812B4CD141DDF0291A6AB54F730875D597678A3564C0EED2AAC11E5400F951A
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/bld/_layouts/15/16.0.25402.12009/require.js
Preview:	/** vim: et:ts=4:sw=4:sts=4. * @license RequireJS 2.1.22 Copyright (c) 2010-2015, The Dojo Foundation All Rights Reserved.. * Available via the MIT or new BSD license.. * see: http://github.com/jrburke/requirejs for details. */.var requirejs,require,define;!function(global){function isFunction(e){return"[object Function]"===ostring.call(e)}function isArray(e){return"[object Array]"===ostring.call(e)}function each(e,t){if(e){var r;for(r=0;r<e.length&&(!e[r]\|\|!t(e[r],r,e));r+=1);}}function eachReverse(e,t){if(e){var r;for(r=e.length-1;r>-1&&(!e[r]\|\|!t(e[r],r,e));r-=1);}}function hasProp(e,t){return hasOwn.call(e,t)}function getOwn(e,t){return hasProp(e,t)&&e[t]}function eachProp(e,t){var r;for(r in e)if(hasProp(e,r)&&t(e[r],r))break}function mixin(e,t,r,i){return t&&eachProp(t,function(t,n){(r\|\|!hasProp(e,n))&&(!i\|\|"object"!=typeof t\|\|!t\|\|isArray(t)\|\|isFunction(t)\|\|t instanceof RegExp?e[n]=t:(e[n]\|\|(e[n]={}),mixin(e[n],t,r,i)))}),e}function bind(e,t){return function(){return t.apply(e,ar

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	downloaded
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Reputation:	low
URL:	https://independentsgroup-my.sharepoint.com/ScriptResource.axd?d=VD59jzzntrD9czf7Vv-dVyvHKJS_6Box7OvgCtP6DfZ_r0mKhiVQHBtnieAUHwNMJNDZlGL2qBFUxguOjgn_kyWFWeD_wRd-ApQFE52bC-a3lvJml3XV_QsG_IVlcOfKJpHlqBbRgyBulBX9k1GCvy8jnz2S1ee5lwrMgCSozXtsUftoM5sLZhcqUOqjHBgW0&t=ffffffffb201fd3f
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	downloaded
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (30522), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	69387
Entropy (8bit):	5.665472422115377
Encrypted:	false
SSDEEP:	1536:Plgguf2ChQ5WXBOxSPSW8N6fGNNK7w+gJs2wVXW6H3A:PLuRCGeTK7wiVXWb
MD5:	6D1BE4CC6A31217E4BED639887A86647
SHA1:	5904C0A9EEF3A63554AF0B1B2B42180ABA268942
SHA-256:	C6B56E2820A7B3C8DD93BF6F109C2BE7E8782EC60243F90803EDA535CEA60012
SHA-512:	380E6535E2481C52E24957B249DEEB7A28DAF504464EAEAF4380F2A8B26CFC6FE996568598CB76B12F405B612AB05FF89232E4716E5A9AC0C61FBF03BF7458E3
Malicious:	false
Reputation:	low
URL:	https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">..<head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="Robots" content="NOHTMLINDEX" /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1" /><meta http-equiv="X-UA-Compatible" content="IE=edge" /><link id="favicon" rel="shortcut icon" href="/_layouts/15/images/favicon.ico?rev=47" type="image/vnd.microsoft.icon" /><title>...Sharing Link Validation..</title>...<style type="text/css" media="screen, print, projection">....html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,ma

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://independentsgroup-my.sharepoint.com/WebResource.axd?d=HCSL-E7_A1_FeBBMmGwtpizh0yIMX6PsPtv0h-aDGwRVPg5LoBaOdHaK4FrwnxhUozZTcWa6TXAqeo4eSNRRXUdgZLhcMEkzESinNZvsWWs1&t=638637567397700854
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	dropped
Size (bytes):	113769
Entropy (8bit):	5.492540089333064
Encrypted:	false
SSDEEP:	1536:RS8gIRPY0+r5qnWisLTfM6tQSqLXCIIgbgZ1uXt1EN5eAfGqOD:vgDTMnWRwvDIgb0q7Eb9u
MD5:	C6C029BA88D52E5312FEC69603A00340
SHA1:	079011F6F0662C11AE907C773EFE8E0C9338EAD0
SHA-256:	DDD0BB1C19B3D2D045BFCDE85D2020BBA57854C887A6691B66DBA3DA1BB3AFBE
SHA-512:	7DF09CD949A43D53D62D9013718158966508DEC2338491FFB38DC33D2EB85FF5C699792AE578975DA0E4F03CC7EA03774624208D06924EEA4C2EAC92E6E22C60
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1373:function(e,t,

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37337)
Category:	downloaded
Size (bytes):	40328
Entropy (8bit):	5.385482969292045
Encrypted:	false
SSDEEP:	768:Tkv8WTY/BbI5VVQYxHtGEWGjaKEKlvgVv9yc1F:TW05bs1tGe4dZ
MD5:	B4E27A4D39B598172647E0C174AAF21D
SHA1:	9B63229B34814F26075818D55061867B6C794CE9
SHA-256:	3CDE5E08B570B55AF3C82C6A9D089376373A9E094AF594ECB6DA5E05EB48DC8E
SHA-512:	DEB28E8505E4D1A7E6C6659DF09C83D142A94CA0DA1CEBA0A06843E8E933AA625D4CD6413FF4F5A521AC5C005D7A9AF2191AD8A40D71448318CAC20A4ABBB79E
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.009/spoguestaccesswebpack/spoguestaccess.js
Preview:	/! For license information please see spoguestaccess.js.LICENSE.txt /.document.currentScript,define("@fluentui/react-file-type-icons",[],()=>{var e;return(()=>{"use strict";var t=[e=>{var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.call(o,l)&&(c[l]

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37337)
Category:	dropped
Size (bytes):	40328
Entropy (8bit):	5.385482969292045
Encrypted:	false
SSDEEP:	768:Tkv8WTY/BbI5VVQYxHtGEWGjaKEKlvgVv9yc1F:TW05bs1tGe4dZ
MD5:	B4E27A4D39B598172647E0C174AAF21D
SHA1:	9B63229B34814F26075818D55061867B6C794CE9
SHA-256:	3CDE5E08B570B55AF3C82C6A9D089376373A9E094AF594ECB6DA5E05EB48DC8E
SHA-512:	DEB28E8505E4D1A7E6C6659DF09C83D142A94CA0DA1CEBA0A06843E8E933AA625D4CD6413FF4F5A521AC5C005D7A9AF2191AD8A40D71448318CAC20A4ABBB79E
Malicious:	false
Reputation:	low
Preview:	/! For license information please see spoguestaccess.js.LICENSE.txt /.document.currentScript,define("@fluentui/react-file-type-icons",[],()=>{var e;return(()=>{"use strict";var t=[e=>{var t=Object.getOwnPropertySymbols,n=Object.prototype.hasOwnProperty,a=Object.prototype.propertyIsEnumerable;function i(e){if(null==e)throw new TypeError("Object.assign cannot be called with null or undefined");return Object(e)}e.exports=function(){try{if(!Object.assign)return!1;var e=new String("abc");if(e[5]="de","5"===Object.getOwnPropertyNames(e)[0])return!1;for(var t={},n=0;n<10;n++)t["_"+String.fromCharCode(n)]=n;if("0123456789"!==Object.getOwnPropertyNames(t).map(function(e){return t[e]}).join(""))return!1;var a={};return"abcdefghijklmnopqrst".split("").forEach(function(e){a[e]=e}),"abcdefghijklmnopqrst"===Object.keys(Object.assign({},a)).join("")}catch(e){return!1}}()?Object.assign:function(e,r){for(var o,s,c=i(e),d=1;d<arguments.length;d++){for(var l in o=Object(arguments[d]))n.call(o,l)&&(c[l]

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	449028
Entropy (8bit):	5.448567122786254
Encrypted:	false
SSDEEP:	6144:a7LuGB2XlRK2d/ZkpZYRs5A2pmBe9OpRUS4cEHKE0H3NX44M:a73uZkp6u5hpsUSu3
MD5:	0D04E619F3843263D447E55E85CF14E9
SHA1:	2FCB499E93BCD0BE38355F6957E0FDFFF3D8B004
SHA-256:	A286901D020DBB97BDED75B5150D495AB28566B21735000058B598E0E6667E23
SHA-512:	22744EB9ECA78B4EC6086292B267F171B14AE53D14CFA449C3E565AE249ABC8EECC4750FADDFC4EAA24EA9211FB1C9DE75597DEC70832F3C2F43B9C40D46AD9B
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113769
Entropy (8bit):	5.492540089333064
Encrypted:	false
SSDEEP:	1536:RS8gIRPY0+r5qnWisLTfM6tQSqLXCIIgbgZ1uXt1EN5eAfGqOD:vgDTMnWRwvDIgb0q7Eb9u
MD5:	C6C029BA88D52E5312FEC69603A00340
SHA1:	079011F6F0662C11AE907C773EFE8E0C9338EAD0
SHA-256:	DDD0BB1C19B3D2D045BFCDE85D2020BBA57854C887A6691B66DBA3DA1BB3AFBE
SHA-512:	7DF09CD949A43D53D62D9013718158966508DEC2338491FFB38DC33D2EB85FF5C699792AE578975DA0E4F03CC7EA03774624208D06924EEA4C2EAC92E6E22C60
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1373:function(e,t,

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	215
Entropy (8bit):	5.310770367548041
Encrypted:	false
SSDEEP:	6:JiMVBdgqZjZWtMfgRTH1GSSUnVezXVcRIMDw2g6n:MMHdVBZWyUTZIzFKo6
MD5:	741EF1E2D73489BC11AD68C3E370309E
SHA1:	79C323C3DDE24FB87C11629BC0249EDC4F57F76F
SHA-256:	0DC0C5713D216D9BA04C9928B589669424A899EC92AC2238588FA9DCE016DCB8
SHA-512:	1F88C689075BC4B6809AD2D0910A3A101C26D48E1A30F1D105741E647F8140A23C3177B335B9E43CD5EFF823F513801F20528491E9AAC5753AA8CFFF3F9902DC
Malicious:	false
Reputation:	low
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.009/@uifabric/file-type-icons/lib/initializeFileTypeIcons.js
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>BlobNotFound</Code><Message>The specified blob does not exist..RequestId:cade511e-701e-0029-567a-25c1e3000000.Time:2024-10-23T18:35:57.1433214Z</Message></Error>

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
URL:	https://independentsgroup-my.sharepoint.com/_layouts/15/images/favicon.ico?rev=47
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.702819531114783
Encrypted:	false
SSDEEP:	3:H6xhkY:aQY
MD5:	858372DD32511CB4DD08E48A93B4F175
SHA1:	CE4555B7B2EFBBD644D8E34CF3453A0E8CAA3C43
SHA-256:	3D18F3E1469C83D62CF3A39BA93F8EAA5B22447FE630E59F39DC1B7747635359
SHA-512:	6A57E0D4A1C23CB693AA9312F6FDAA1FC4309B5BC91D1B2279B5792BEE3534749FD3693C19AA95E0768800472D11D438EC3116F337679A249C28BE0E038E6DE0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAmlvG_FKhOB3hIFDfSCVyI=?alt=proto
Preview:	CgkKBw30glciGgA=

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3331
Entropy (8bit):	7.927896166439245
Encrypted:	false
SSDEEP:	96:zHjOKn3csE3x5liVsCo4GcPIZpV6x5cge8oo9:zDOK3zE3x5TCwcP4LQNeq
MD5:	EF884BDEDEF280DF97A4C5604058D8DB
SHA1:	6F04244B51AD2409659E267D308B97E09CE9062B
SHA-256:	825DE044D5AC6442A094FF95099F9F67E9249A8110A2FBD57128285776632ADB
SHA-512:	A083381C53070B65B3B8A7A7293D5D2674D2F6EC69C0E19748823D3FDD6F527E8D3D31D311CCEF8E26FC531770F101CDAF95F23ECC990DB405B5EF48B0C91BA2
Malicious:	false
Reputation:	low
URL:	https://independentsgroup-my.sharepoint.com/_layouts/15/images/microsoft-logo.png
Preview:	.PNG........IHDR.......0............sRGB.........IDATx..=w....G.z..L.4fN.k\dS..._`..........r...~.F..e._.RZ.0.K.\..CB...1.{qq/..^\|.G..o.......?....Or.......y~....]..V.a.mM...M.\kH..@B`s.$"n...)!.@"b#4. !.9...7.u...hD ....T.........:EJ.4"..X........<\|.pgkk+....>~.....pju1i"b.J.&!.!...=T....k..D7.....O.<.?}......./..(.`0..!.C..'.?..e..~.....l6...._.x1rmR...$\|E...l.WKDH...f..... ...Y.0R....>...{...-..o........,...E../......_....eM.Q....@Q...w sp5.9..l.W)...Pq... .]..B..).../M.G.g....].V...5$<......Eb.9.....>LYAk.Z.k..b..]N%>}4a....4!S...t..d..<.8AH+.../r...._...!qt.:q..fR.:..KW.._...T...5..>.0!.hq.rbND\...XR.,2.uX..Q.b...wQ......g..X...F...~.....ikZE...UA....V.I!..]..Mm..R.....~k.VC.n..V.B#W...\..yI.3.....2........6c....2J....,g..5O1.s.4V2.....f..K..Obf\....;.w...\|.F>F>6_z..P.dU<.wVV......?.q.?&........O.>....l.S.upp....59.C_.......fJ.M.={v,......]Y_....n.?UF....v<.$..AD...p.....:$r =p...C.k.3....n.v..~.TGd!...l.W...s..

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	449028
Entropy (8bit):	5.448567122786254
Encrypted:	false
SSDEEP:	6144:a7LuGB2XlRK2d/ZkpZYRs5A2pmBe9OpRUS4cEHKE0H3NX44M:a73uZkp6u5hpsUSu3
MD5:	0D04E619F3843263D447E55E85CF14E9
SHA1:	2FCB499E93BCD0BE38355F6957E0FDFFF3D8B004
SHA-256:	A286901D020DBB97BDED75B5150D495AB28566B21735000058B598E0E6667E23
SHA-512:	22744EB9ECA78B4EC6086292B267F171B14AE53D14CFA449C3E565AE249ABC8EECC4750FADDFC4EAA24EA9211FB1C9DE75597DEC70832F3C2F43B9C40D46AD9B
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (39257), with CRLF line terminators
Category:	dropped
Size (bytes):	40326
Entropy (8bit):	5.245555585297941
Encrypted:	false
SSDEEP:	384:bvrc3TrJ1vMZCKZ4pLRy6DkfDLcbTzcXanT2rxb64aKQr1vySAwBaPUge6ydE:bTaYB4Hy7mTzcaTKStrwSAwBaPUTdE
MD5:	DA9DC1C32E89C02FC1E9EEB7E5AAB91E
SHA1:	3EFB110EFA6068CE6B586A67F87DA5125310BC30
SHA-256:	398CDF1B27EF247E5BC77805F266BB441E60355463FC3D1776F41AAE58B08CF1
SHA-512:	D4730EBC4CA62624B8300E292F27FD79D42A9277E409545DF7DC916189ED9DF13E46FAA37E3924B85A7C7EA8C76BF65A05ECA69B4029B550430536EC6DF8552A
Malicious:	false
Reputation:	low
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjaxWebForms.js..Type._registerScript("MicrosoftAjaxWebForms.js",["MicrosoftAjaxCore.js","MicrosoftAjaxSerialization.js","MicrosoftAjaxNetwork.js","MicrosoftAjaxComponentModel.js"]);Type.registerNamespace("Sys.WebForms");Sys.WebForms.BeginRequestEventArgs=function(c,b,a){Sys.WebForms.BeginRequestEventArgs.initializeBase(this);this._request=c;this._postBackElement=b;this._updatePanelsToUpdate=a};Sys.WebForms.BeginRequestEventArgs.prototype={get_postBackElement:function(){return this._postBackElement},get_request:function(){return this._request},get_updatePanelsToUpdate:function(){return this._updatePanelsToUpdate?Array.clone(this._updatePanelsToUpdate):[]}};Sys.WebForms.BeginRequestEventArgs.registerClass("Sys.WebForms.BeginRequestEventArgs",Sys.EventArgs);Sys.WebForms.EndRequestEventArgs=fun

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	dropped
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	downloaded
Size (bytes):	15755
Entropy (8bit):	5.366543080044668
Encrypted:	false
SSDEEP:	384:DveX/4OSgcn2ZU2ZfeXOh+rF3X1qDZD4zfXdv79HU:q/9i57hU
MD5:	630831903F4BA9060856520624E34CFC
SHA1:	36DC15B9CCC3FC8EF627354BF55EF44EBD10E203
SHA-256:	BC6804D058D5BD5B24FC04E479FC8973BEF5D3EFEAFAA9C19C60A009BF0FAC0B
SHA-512:	1B0759972BBAB0B1A11D54849051E6782600B74FADB1CAF1BD58D214F484E35154907CA7F396EDB1C81A7CDC6F264D138267FB58FD89E1BA3A4D67366EE7E8B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{519:function(e,n,s

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	26951
Entropy (8bit):	4.514992390210281
Encrypted:	false
SSDEEP:	384:jMgviMjM4if38GmhXeC1QRwweTkBE9wbOY4Jf/JhRZ5h+73hNVt8oC4veONhLYVi:CLEiJSdo11vIYHqb5Klo8v
MD5:	B3D7A123BE5203A1A3F0F10233ED373F
SHA1:	F4C61F321D8F79A805B356C6EC94090C0D96215C
SHA-256:	EF9453F74B2617D43DCEF4242CF5845101FCFB57289C81BCEB20042B0023A192
SHA-512:	A01BFE8546E59C8AF83280A795B3F56DFA23D556B992813A4EB70089E80621686C7B51EE87B3109502667CAF1F95CBCA074BF607E543A0390BF6F8BB3ECD992B
Malicious:	false
Reputation:	low
URL:	https://independentsgroup-my.sharepoint.com/ScriptResource.axd?d=b3JioE5tZaq_9kBjs4RUmRHI00rRfwVS1WIxOEecMyunbbQwGtT920PESG742YeFoZ_48A6prKsTz0ApZ1j-hpnxRYLl1rUa78apnoEaTRJ4JFgEqYO8tl-05CdckY2tEZSlO96Khi6d_SfnQaih0jzlqlSvuo7AczeexLJMBnU1&t=64bd211b
Preview:	var Page_ValidationVer = "125";..var Page_IsValid = true;..var Page_BlockSubmit = false;..var Page_InvalidControlToBeFocused = null;..var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime-local)$/i;..function ValidatorUpdateDisplay(val) {.. if (typeof(val.display) == "string") {.. if (val.display == "None") {.. return;.. }.. if (val.display == "Dynamic") {.. val.style.display = val.isvalid ? "none" : "inline";.. return;.. }.. }.. if ((navigator.userAgent.indexOf("Mac") > -1) &&.. (navigator.userAgent.indexOf("MSIE") > -1)) {.. val.style.display = "inline";.. }.. val.style.visibility = val.isvalid ? "hidden" : "visible";..}..function ValidatorUpdateIsValid() {.. Page_IsValid = AllValidatorsValid(Page_Validators);..}..function AllValidatorsValid(validators) {.. if ((typeof(validators) != "undefined") && (validators != null)) {

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 226 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3331
Entropy (8bit):	7.927896166439245
Encrypted:	false
SSDEEP:	96:zHjOKn3csE3x5liVsCo4GcPIZpV6x5cge8oo9:zDOK3zE3x5TCwcP4LQNeq
MD5:	EF884BDEDEF280DF97A4C5604058D8DB
SHA1:	6F04244B51AD2409659E267D308B97E09CE9062B
SHA-256:	825DE044D5AC6442A094FF95099F9F67E9249A8110A2FBD57128285776632ADB
SHA-512:	A083381C53070B65B3B8A7A7293D5D2674D2F6EC69C0E19748823D3FDD6F527E8D3D31D311CCEF8E26FC531770F101CDAF95F23ECC990DB405B5EF48B0C91BA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......0............sRGB.........IDATx..=w....G.z..L.4fN.k\dS..._`..........r...~.F..e._.RZ.0.K.\..CB...1.{qq/..^\|.G..o.......?....Or.......y~....]..V.a.mM...M.\kH..@B`s.$"n...)!.@"b#4. !.9...7.u...hD ....T.........:EJ.4"..X........<\|.pgkk+....>~.....pju1i"b.J.&!.!...=T....k..D7.....O.<.?}......./..(.`0..!.C..'.?..e..~.....l6...._.x1rmR...$\|E...l.WKDH...f..... ...Y.0R....>...{...-..o........,...E../......_....eM.Q....@Q...w sp5.9..l.W)...Pq... .]..B..).../M.G.g....].V...5$<......Eb.9.....>LYAk.Z.k..b..]N%>}4a....4!S...t..d..<.8AH+.../r...._...!qt.:q..fR.:..KW.._...T...5..>.0!.hq.rbND\...XR.,2.uX..Q.b...wQ......g..X...F...~.....ikZE...UA....V.I!..]..Mm..R.....~k.VC.n..V.B#W...\..yI.3.....2........6c....2J....,g..5O1.s.4V2.....f..K..Obf\....;.w...\|.F>F>6_z..P.dU<.wVV......?.q.?&........O.>....l.S.upp....59.C_.......fJ.M.={v,......]Y_....n.?UF....v<.$..AD...p.....:$r =p...C.k.3....n.v..~.TGd!...l.W...s..

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32009)
Category:	downloaded
Size (bytes):	57443
Entropy (8bit):	5.372940573746363
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3D7ym+d/Px25+1wtvGixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJz7ym+d/Po5+1wtvGiJig/Ml
MD5:	D580777BB3A28B94F6F1D18EE17AEDA3
SHA1:	E78833A2DB1AA97DA3F4A1994E6AF1F0D74D7CC7
SHA-256:	81188E8A76162C79DB4A5C10AC933C9E874C5B9EAE10E47956AD9DF704E01B28
SHA-512:	E3F5FFE3E7E54A7D640DF3BC06D336C9F936635D2594159B3EA5EDAEFBA6D6774060A532E0CBE0664FDC65806BD53E9BFC19C11F7946A5E157A9EC935C564378
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	dropped
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46591)
Category:	dropped
Size (bytes):	142367
Entropy (8bit):	5.430597817875451
Encrypted:	false
SSDEEP:	1536:PyeDWgSr6fTPRUbx3XCg/MJA5NOii5WLeVdgWLDY2Js0VgtWyTJmxyAXP3onrGGK:IgD1g/Mq5L9EveUynbBwsIccp
MD5:	CCAA31FD031C4C856EB7B986FD9F447B
SHA1:	0A809EABCDB95FA04DE5F8409B3BC994ED65CBD1
SHA-256:	3D40B4129B8B4C284908636AE46D72EA053F286FB5FE45DB78351B5B2CFC1EB9
SHA-512:	4B5B2271DB5F640FEBF13A7C0BDBD630C73530000F1593046D090585D1752E239D894614E23E801BE4C6A379406B6EF521423FA27C3865C3CD4ABB0A64823780
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function t(t){for(var n,r,i=t[0],a=t[1],s=0,u=[];s<i.length;s++)

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14782)
Category:	dropped
Size (bytes):	15755
Entropy (8bit):	5.366543080044668
Encrypted:	false
SSDEEP:	384:DveX/4OSgcn2ZU2ZfeXOh+rF3X1qDZD4zfXdv79HU:q/9i57hU
MD5:	630831903F4BA9060856520624E34CFC
SHA1:	36DC15B9CCC3FC8EF627354BF55EF44EBD10E203
SHA-256:	BC6804D058D5BD5B24FC04E479FC8973BEF5D3EFEAFAA9C19C60A009BF0FAC0B
SHA-512:	1B0759972BBAB0B1A11D54849051E6782600B74FADB1CAF1BD58D214F484E35154907CA7F396EDB1C81A7CDC6F264D138267FB58FD89E1BA3A4D67366EE7E8B0
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{519:function(e,n,s

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329), with CRLF line terminators
Category:	downloaded
Size (bytes):	102801
Entropy (8bit):	5.336080509196147
Encrypted:	false
SSDEEP:	1536:MGLiogSomRYvoGtT+KHsVS0bT79DSsi46j/LPyR7kbE:MGLXGFKT79DSs6WCE
MD5:	C89EAA5B28DF1E17376BE71D71649173
SHA1:	2B34DF4C66BB57DE5A24A2EF0896271DFCA4F4CD
SHA-256:	66B804E7A96A87C11E1DD74EA04AC2285DF5AD9043F48046C3E5000114D39B1C
SHA-512:	B73D56304986CD587DA17BEBF21341B450D41861824102CC53885D863B118F6FDF2456B20791B9A7AE56DF91403F342550AF9E46F7401429FBA1D4A15A6BD3C0
Malicious:	false
Reputation:	low
URL:	https://independentsgroup-my.sharepoint.com/ScriptResource.axd?d=AoO_Zpn0QjxuBwM64iz_IKcG1LD2Q4te1Uuxqfe4ZkCiVFZaI2XQu6tkKgtQXafF9ZadOF-iFVriAjKAbDKFQmtujEm7daW_2kLFKyKDYd3A2CoISJOQSGiiPa_yCufVUAWWRyhOB5zJqZ4hhDFCzd9ECcfTihD-WUfd1As5msUG1XTWmcnYVnpckjjqCUVs0&t=ffffffffb201fd3f
Preview:	//----------------------------------------------------------..// Copyright (C) Microsoft Corporation. All rights reserved...//----------------------------------------------------------..// MicrosoftAjax.js..Function.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var d=[];for(var c=0;c<e;c++)d[c]=arguments[c];d[e]=a;return b.apply(this,d)}return b.call(this,a)}};Function.createDelegate=function(a,b){return function(){return b.apply(a,arguments)}};Function.emptyFunction=Function.emptyMethod=function(){};Function.validateParameters=function(c,b,a){return Function._validateParams(c,b,a)};Function._validateParams=function(g,e,c){var a,d=e.length;c=c\|\|typeof c==="undefined";a=Function._validateParameterCount(g,e,c);if(a){a.popStackFrame();return a}for(var b=0,i=g.length;b<i;b++){var f=e[Math.min(b,d-1)],h=f.name;if(f.parameterArray)h+="["+(b-d+1)+"]";else if(!c&&b>=d)break;a=Function._validateParameter(g[b],f

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113378
Entropy (8bit):	5.285066693137765
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmQhSeC1Jzc6VUW3:xkXhp6VU0
MD5:	9C837C2B6C9C441656C3C64BE6FC6401
SHA1:	D44AA83093C4109DDD8FFAEA60755F05D1BFE7D3
SHA-256:	68C2994E21A564345EB3B4091DD2334C9CBDDB0AECDA45EE963C6DE2E1629B93
SHA-512:	AF04835BCC621FE1793C4661FDB03EDEA16219BAA77F1198AA419F771B6B3DCDAC3DA92676568C207022251483AB79C75AB6DF2CE94924748FF9CEBF64AFF5A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 20:35:49.778247118 CEST	49678	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:35:49.778352976 CEST	49677	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:35:49.779944897 CEST	49676	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:35:50.638438940 CEST	49709	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:50.638473988 CEST	443	49709	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:50.638684034 CEST	49709	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:50.638807058 CEST	49709	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:50.638816118 CEST	443	49709	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:51.547451019 CEST	443	49709	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:51.547686100 CEST	49709	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:51.550112963 CEST	49709	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:51.550143003 CEST	443	49709	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:51.550584078 CEST	443	49709	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:51.556880951 CEST	49709	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:51.557010889 CEST	443	49709	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:51.557540894 CEST	443	49709	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:51.557638884 CEST	49709	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:51.557692051 CEST	49709	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:53.106123924 CEST	49714	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:53.106185913 CEST	443	49714	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:53.106278896 CEST	49714	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:53.106540918 CEST	49714	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:53.106559992 CEST	443	49714	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:53.292732000 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:53.292779922 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:53.292850018 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:53.293118000 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:53.293132067 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:53.293726921 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:53.293785095 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:53.293844938 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:53.294044018 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:53.294060946 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.022191048 CEST	443	49714	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:54.022339106 CEST	49714	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:54.031652927 CEST	49714	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:54.031711102 CEST	443	49714	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:54.031995058 CEST	443	49714	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:54.033711910 CEST	49714	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:54.033775091 CEST	443	49714	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:54.033920050 CEST	443	49714	52.137.106.217	192.168.2.17
Oct 23, 2024 20:35:54.033958912 CEST	49714	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:54.034048080 CEST	49714	443	192.168.2.17	52.137.106.217
Oct 23, 2024 20:35:54.038971901 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.039231062 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.039432049 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.039455891 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.040667057 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.040719032 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.040734053 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.040777922 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.041893005 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.041898012 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.041966915 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.041970968 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.042288065 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.042356014 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.042433977 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.042442083 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.091224909 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.091260910 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.093071938 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.139333010 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.437346935 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.437427998 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.437659025 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.437688112 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.437747002 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.437784910 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.437788010 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.437815905 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.437820911 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.437870979 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.437958002 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.437964916 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.484241009 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.554305077 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.554495096 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.555069923 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.555092096 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.555268049 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.555283070 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.555406094 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.556261063 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.556288958 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.556349039 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.556386948 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.556396961 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.557054996 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.557154894 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.557178974 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.611118078 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.672045946 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.672081947 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.672158957 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.672209024 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.672271967 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.672574043 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.672595024 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.672709942 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.672722101 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.673378944 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.673398972 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.673480988 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.673501968 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.673521996 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.673530102 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.673542976 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.673559904 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.674251080 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.674385071 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.674767017 CEST	49716	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.674779892 CEST	443	49716	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.684520960 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.688142061 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.688188076 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.688594103 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.688658953 CEST	49726	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.688695908 CEST	443	49726	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.688808918 CEST	49726	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.688910007 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.688924074 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.689650059 CEST	49726	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.689690113 CEST	443	49726	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.691225052 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.691240072 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.691340923 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.691874981 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.691886902 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.692081928 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.692090034 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.692186117 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.692504883 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.692511082 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.727353096 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.958426952 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.958453894 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.958523035 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.958547115 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.959321022 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.959331036 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.959358931 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.959403992 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:54.959409952 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:54.959469080 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.073376894 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.073390961 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.073484898 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.074645996 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.074652910 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.074709892 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.074718952 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.074743986 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.074769020 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.074799061 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.074902058 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.074915886 CEST	443	49715	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.074929953 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.074961901 CEST	49715	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.143089056 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.143146038 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.143234015 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.143476963 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.143493891 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.417395115 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.417768955 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.417800903 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.419481039 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.419569969 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.420061111 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.420165062 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.420274973 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.420284986 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.421648026 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.421895981 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.421905041 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.422348022 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.422858000 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.422923088 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.423348904 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.425889969 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.426091909 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.426104069 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.427162886 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.427231073 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.427615881 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.427670956 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.427798986 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.427805901 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.434664011 CEST	443	49726	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.434902906 CEST	49726	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.434921980 CEST	443	49726	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.435270071 CEST	443	49726	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.435596943 CEST	49726	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.435667038 CEST	443	49726	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.435729027 CEST	49726	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.467330933 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.471231937 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.471231937 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.479342937 CEST	443	49726	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.697052002 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.697489023 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.697510958 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.697560072 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.697590113 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.697618008 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.697639942 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.706060886 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.706702948 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.706769943 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.706780910 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.713848114 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.713865042 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.713927031 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.713933945 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.713975906 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.714700937 CEST	443	49726	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.715106964 CEST	443	49726	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.715182066 CEST	49726	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.715214968 CEST	443	49726	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.715223074 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.715230942 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.715282917 CEST	49726	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.715287924 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.715317011 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.715321064 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.715677977 CEST	49726	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.715724945 CEST	443	49726	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.715781927 CEST	49726	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.719562054 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.719609022 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.719810963 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.720206976 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.720222950 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.758196115 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.758229017 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.812082052 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.812187910 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.812464952 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.812536001 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.812549114 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.812588930 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.813129902 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.813210964 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.813369989 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.813425064 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.813647032 CEST	443	49727	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.813699961 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.813718081 CEST	49727	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.816339016 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.816386938 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.816509008 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.816812992 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.816831112 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.827109098 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.827126026 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.827203989 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.827212095 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.827234983 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.827244997 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.827265024 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.827282906 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.827524900 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.827595949 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.827603102 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.833045959 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.833108902 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.839670897 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.839682102 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.839739084 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.839749098 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.839901924 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.840728998 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.840740919 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.840795994 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.840807915 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.842170000 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.842236996 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.842245102 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.842875004 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.842931032 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.843194008 CEST	49728	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.843208075 CEST	443	49728	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.846208096 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.846252918 CEST	443	49734	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.846524954 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.846524954 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.846556902 CEST	443	49734	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.868438005 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.868525028 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.868546963 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.918180943 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.920455933 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.920684099 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.920705080 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.921761036 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.921818972 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.922131062 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.922183037 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.922347069 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.922355890 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.940532923 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.940545082 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.940608025 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.940628052 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.941442013 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.941450119 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.941520929 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.941535950 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.942018986 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.942056894 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.942085028 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.942095995 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.942116022 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.942981005 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.943042994 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.943056107 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.944717884 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.944786072 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.944799900 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.945674896 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.945736885 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.945749044 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.966197968 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.985507011 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:55.985578060 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:55.985605001 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.030190945 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.057509899 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.057524920 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.057898998 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.057898998 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.057966948 CEST	443	49725	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.058039904 CEST	49725	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.063266993 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.063359022 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.063441992 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.063886881 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.063918114 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.153939962 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.154027939 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.154207945 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.154488087 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.154524088 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.205688000 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.206195116 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.206204891 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.206440926 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.206485033 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.251230955 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.505770922 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 23, 2024 20:35:56.558823109 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.558837891 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.558897972 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.558922052 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.558923960 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.558948994 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.558978081 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.558999062 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.559011936 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.559053898 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.559272051 CEST	49731	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.559290886 CEST	443	49731	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.692477942 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.693655014 CEST	443	49734	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.693999052 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.694019079 CEST	443	49734	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.694111109 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.694118023 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.695086956 CEST	443	49734	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.695144892 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.695183039 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.695235968 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.695461988 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.695557117 CEST	443	49734	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.695736885 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.695884943 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.695894003 CEST	443	49734	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.695938110 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.695941925 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.696023941 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.697092056 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.698669910 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.698697090 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.700635910 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.700714111 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.701025009 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.701109886 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.701148033 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.745206118 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.745206118 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.745228052 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.745276928 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.745304108 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.793229103 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.793231010 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.809228897 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 23, 2024 20:35:56.815073013 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.815385103 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.815424919 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.815817118 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.816124916 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.816206932 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.816272974 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.859355927 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.886148930 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.886627913 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.886655092 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.888165951 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.888263941 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.888556004 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.888631105 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.888715982 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.888722897 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.937253952 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.975955963 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.976022005 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.976255894 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.976285934 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.976341009 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.977123022 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.977144957 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.977164984 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.977205038 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.977258921 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.977263927 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.977854967 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.977906942 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.977958918 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.977987051 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.978029013 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.979165077 CEST	443	49734	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.979193926 CEST	443	49734	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.979259968 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.979269028 CEST	443	49734	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.979295015 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.979320049 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.979403019 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.979409933 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.979420900 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.979448080 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.979474068 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.979479074 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.980103016 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:56.980148077 CEST	443	49734	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:56.980207920 CEST	49734	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.032213926 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.032224894 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.093538046 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.093568087 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.093755960 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.094615936 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.094635963 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.094667912 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.094752073 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.094775915 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.095530033 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.095550060 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.095581055 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.095630884 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.095645905 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.095849037 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.095871925 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.095940113 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.095963955 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.096014977 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.096371889 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.096385956 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.096445084 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.097064972 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.097074032 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.097095966 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.097110987 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.097122908 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.097129107 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.097183943 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.097224951 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.097224951 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.097237110 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.097285986 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.097290039 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.097443104 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.097501040 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.097583055 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.097598076 CEST	443	49733	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.097609997 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.097647905 CEST	49733	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.097928047 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.097935915 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.097991943 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.097999096 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.098010063 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.098043919 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.099133968 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.099154949 CEST	443	49732	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.099165916 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.099210978 CEST	49732	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.105411053 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.105442047 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.105532885 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.105556011 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.152296066 CEST	49742	443	192.168.2.17	142.250.185.196
Oct 23, 2024 20:35:57.152329922 CEST	443	49742	142.250.185.196	192.168.2.17
Oct 23, 2024 20:35:57.152425051 CEST	49742	443	192.168.2.17	142.250.185.196
Oct 23, 2024 20:35:57.152631044 CEST	49742	443	192.168.2.17	142.250.185.196
Oct 23, 2024 20:35:57.152645111 CEST	443	49742	142.250.185.196	192.168.2.17
Oct 23, 2024 20:35:57.157238007 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.162544012 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.162611961 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.162679911 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.162693977 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.162755013 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.163105011 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.163187981 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.163407087 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.163475037 CEST	443	49739	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.163539886 CEST	49739	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.166409969 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.166435957 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.166538954 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.166790962 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.166805983 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.215738058 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.215859890 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.219949007 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.219960928 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.220151901 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.220163107 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.220227957 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.220866919 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.220959902 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.220964909 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.224639893 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.224746943 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.224751949 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.268225908 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.334315062 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.334330082 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.334472895 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.334497929 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.338752031 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.338813066 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.338855982 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.338876963 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.338891983 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.339406013 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.339435101 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.339476109 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.339492083 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.344593048 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.344690084 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.344702959 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.345323086 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.345487118 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.345498085 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.346482038 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.346548080 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.346555948 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.347378969 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.347441912 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.347451925 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.347461939 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.347481966 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.347652912 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.347686052 CEST	443	49737	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.347740889 CEST	49737	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.411247015 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 23, 2024 20:35:57.918821096 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.919203997 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.919224977 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.920449018 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.920521975 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.920957088 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.921027899 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.921245098 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:57.921258926 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:57.967201948 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:58.005096912 CEST	443	49742	142.250.185.196	192.168.2.17
Oct 23, 2024 20:35:58.005623102 CEST	49742	443	192.168.2.17	142.250.185.196
Oct 23, 2024 20:35:58.005636930 CEST	443	49742	142.250.185.196	192.168.2.17
Oct 23, 2024 20:35:58.006736994 CEST	443	49742	142.250.185.196	192.168.2.17
Oct 23, 2024 20:35:58.006800890 CEST	49742	443	192.168.2.17	142.250.185.196
Oct 23, 2024 20:35:58.008275032 CEST	49742	443	192.168.2.17	142.250.185.196
Oct 23, 2024 20:35:58.008373976 CEST	443	49742	142.250.185.196	192.168.2.17
Oct 23, 2024 20:35:58.063226938 CEST	49742	443	192.168.2.17	142.250.185.196
Oct 23, 2024 20:35:58.063234091 CEST	443	49742	142.250.185.196	192.168.2.17
Oct 23, 2024 20:35:58.084024906 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:58.084064007 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:58.084148884 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:58.086684942 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:58.086708069 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:58.111222982 CEST	49742	443	192.168.2.17	142.250.185.196
Oct 23, 2024 20:35:58.205281973 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:58.205708981 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:58.205732107 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:58.205781937 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:58.205799103 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:58.205821991 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:58.206377983 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:58.206453085 CEST	443	49743	13.107.136.10	192.168.2.17
Oct 23, 2024 20:35:58.206522942 CEST	49743	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:35:58.620282888 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 23, 2024 20:35:58.660054922 CEST	49747	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:58.660113096 CEST	443	49747	184.28.90.27	192.168.2.17
Oct 23, 2024 20:35:58.660223961 CEST	49747	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:58.661253929 CEST	49747	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:58.661268950 CEST	443	49747	184.28.90.27	192.168.2.17
Oct 23, 2024 20:35:58.906296015 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:58.906378984 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:58.914315939 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:58.914324045 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:58.914611101 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:58.968297005 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:58.988276958 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:59.031337976 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.258900881 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.258938074 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.258949041 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.258975029 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.258985043 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.259000063 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.259108067 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:59.259124994 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.259202003 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:59.259562016 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.259638071 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:59.259644985 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.260186911 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.260257959 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:59.273459911 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:59.273483992 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.273499966 CEST	49745	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:35:59.273507118 CEST	443	49745	20.109.210.53	192.168.2.17
Oct 23, 2024 20:35:59.513617992 CEST	443	49747	184.28.90.27	192.168.2.17
Oct 23, 2024 20:35:59.513906002 CEST	49747	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:59.515577078 CEST	49747	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:59.515604973 CEST	443	49747	184.28.90.27	192.168.2.17
Oct 23, 2024 20:35:59.515872002 CEST	443	49747	184.28.90.27	192.168.2.17
Oct 23, 2024 20:35:59.558615923 CEST	49747	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:59.599370956 CEST	443	49747	184.28.90.27	192.168.2.17
Oct 23, 2024 20:35:59.802833080 CEST	443	49747	184.28.90.27	192.168.2.17
Oct 23, 2024 20:35:59.802997112 CEST	443	49747	184.28.90.27	192.168.2.17
Oct 23, 2024 20:35:59.803102970 CEST	49747	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:59.803103924 CEST	49747	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:59.803728104 CEST	49747	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:59.803745985 CEST	443	49747	184.28.90.27	192.168.2.17
Oct 23, 2024 20:35:59.847388983 CEST	49748	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:59.847446918 CEST	443	49748	184.28.90.27	192.168.2.17
Oct 23, 2024 20:35:59.847548962 CEST	49748	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:59.847939014 CEST	49748	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:35:59.847954035 CEST	443	49748	184.28.90.27	192.168.2.17
Oct 23, 2024 20:36:00.672679901 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 23, 2024 20:36:00.701703072 CEST	443	49748	184.28.90.27	192.168.2.17
Oct 23, 2024 20:36:00.701792002 CEST	49748	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:36:00.703453064 CEST	49748	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:36:00.703469038 CEST	443	49748	184.28.90.27	192.168.2.17
Oct 23, 2024 20:36:00.703706026 CEST	443	49748	184.28.90.27	192.168.2.17
Oct 23, 2024 20:36:00.705131054 CEST	49748	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:36:00.747330904 CEST	443	49748	184.28.90.27	192.168.2.17
Oct 23, 2024 20:36:00.948363066 CEST	443	49748	184.28.90.27	192.168.2.17
Oct 23, 2024 20:36:00.948436022 CEST	443	49748	184.28.90.27	192.168.2.17
Oct 23, 2024 20:36:00.948570013 CEST	49748	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:36:00.949295998 CEST	49748	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:36:00.949320078 CEST	443	49748	184.28.90.27	192.168.2.17
Oct 23, 2024 20:36:00.949326038 CEST	49748	443	192.168.2.17	184.28.90.27
Oct 23, 2024 20:36:00.949331999 CEST	443	49748	184.28.90.27	192.168.2.17
Oct 23, 2024 20:36:00.973253012 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 23, 2024 20:36:01.035353899 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 23, 2024 20:36:01.575242043 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 23, 2024 20:36:02.789243937 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 23, 2024 20:36:05.198250055 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 23, 2024 20:36:05.837315083 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 23, 2024 20:36:07.998680115 CEST	443	49742	142.250.185.196	192.168.2.17
Oct 23, 2024 20:36:07.998763084 CEST	443	49742	142.250.185.196	192.168.2.17
Oct 23, 2024 20:36:07.998936892 CEST	49742	443	192.168.2.17	142.250.185.196
Oct 23, 2024 20:36:08.552988052 CEST	49742	443	192.168.2.17	142.250.185.196
Oct 23, 2024 20:36:08.553009987 CEST	443	49742	142.250.185.196	192.168.2.17
Oct 23, 2024 20:36:09.111547947 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 23, 2024 20:36:09.414411068 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 23, 2024 20:36:10.004314899 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 23, 2024 20:36:10.020330906 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 23, 2024 20:36:11.232321978 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 23, 2024 20:36:13.641309977 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 23, 2024 20:36:15.447331905 CEST	49675	443	192.168.2.17	204.79.197.203
Oct 23, 2024 20:36:18.447355032 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 23, 2024 20:36:19.613307953 CEST	49680	443	192.168.2.17	20.189.173.13
Oct 23, 2024 20:36:28.061389923 CEST	49682	80	192.168.2.17	192.229.211.108
Oct 23, 2024 20:36:35.554176092 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:35.554229975 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:35.554332972 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:35.554766893 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:35.554776907 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.365989923 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.366113901 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:36.367855072 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:36.367875099 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.368158102 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.369425058 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:36.411335945 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.547614098 CEST	49704	80	192.168.2.17	199.232.210.172
Oct 23, 2024 20:36:36.547945976 CEST	49705	80	192.168.2.17	199.232.210.172
Oct 23, 2024 20:36:36.553467035 CEST	80	49704	199.232.210.172	192.168.2.17
Oct 23, 2024 20:36:36.553554058 CEST	49704	80	192.168.2.17	199.232.210.172
Oct 23, 2024 20:36:36.554189920 CEST	80	49705	199.232.210.172	192.168.2.17
Oct 23, 2024 20:36:36.554641008 CEST	49705	80	192.168.2.17	199.232.210.172
Oct 23, 2024 20:36:36.638286114 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.638314009 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.638375044 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.638468027 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:36.638468027 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:36.638483047 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.638587952 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:36.640331030 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.640374899 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.640433073 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.640444994 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:36.640444994 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:36.640572071 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:36.647510052 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:36.647525072 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:36.647932053 CEST	49750	443	192.168.2.17	20.109.210.53
Oct 23, 2024 20:36:36.647938013 CEST	443	49750	20.109.210.53	192.168.2.17
Oct 23, 2024 20:36:39.622292042 CEST	49697	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:36:39.627764940 CEST	443	49697	204.79.197.200	192.168.2.17
Oct 23, 2024 20:36:39.750011921 CEST	443	49697	204.79.197.200	192.168.2.17
Oct 23, 2024 20:36:39.750161886 CEST	49697	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:36:39.752274990 CEST	49697	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:36:39.752312899 CEST	49697	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:36:39.752429008 CEST	49697	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:36:39.752729893 CEST	49697	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:36:39.752785921 CEST	49697	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:36:39.757745028 CEST	443	49697	204.79.197.200	192.168.2.17
Oct 23, 2024 20:36:39.757792950 CEST	443	49697	204.79.197.200	192.168.2.17
Oct 23, 2024 20:36:39.757850885 CEST	443	49697	204.79.197.200	192.168.2.17
Oct 23, 2024 20:36:39.758238077 CEST	443	49697	204.79.197.200	192.168.2.17
Oct 23, 2024 20:36:39.758263111 CEST	443	49697	204.79.197.200	192.168.2.17
Oct 23, 2024 20:36:39.758502960 CEST	443	49697	204.79.197.200	192.168.2.17
Oct 23, 2024 20:36:39.878474951 CEST	443	49697	204.79.197.200	192.168.2.17
Oct 23, 2024 20:36:39.878612041 CEST	49697	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:36:39.913451910 CEST	443	49697	204.79.197.200	192.168.2.17
Oct 23, 2024 20:36:39.913572073 CEST	49697	443	192.168.2.17	204.79.197.200
Oct 23, 2024 20:36:42.007858038 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:42.007898092 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:42.008006096 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:42.010081053 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:42.010106087 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:42.453824043 CEST	49753	443	192.168.2.17	13.107.5.88
Oct 23, 2024 20:36:42.453860044 CEST	443	49753	13.107.5.88	192.168.2.17
Oct 23, 2024 20:36:42.454005957 CEST	49753	443	192.168.2.17	13.107.5.88
Oct 23, 2024 20:36:42.627341032 CEST	49753	443	192.168.2.17	13.107.5.88
Oct 23, 2024 20:36:42.627368927 CEST	443	49753	13.107.5.88	192.168.2.17
Oct 23, 2024 20:36:42.859364986 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:42.859482050 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:42.914318085 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:42.914340019 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:42.915307045 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:42.915452003 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:42.917617083 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:42.917680979 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:43.200483084 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:43.200535059 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:43.200573921 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:43.200592995 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:43.200628996 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:43.200812101 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:43.200963020 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:43.201024055 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:43.201087952 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:43.203346968 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:43.203382015 CEST	443	49752	2.23.209.187	192.168.2.17
Oct 23, 2024 20:36:43.203397036 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:43.203445911 CEST	49752	443	192.168.2.17	2.23.209.187
Oct 23, 2024 20:36:43.405631065 CEST	443	49753	13.107.5.88	192.168.2.17
Oct 23, 2024 20:36:43.405711889 CEST	49753	443	192.168.2.17	13.107.5.88
Oct 23, 2024 20:36:43.408924103 CEST	49753	443	192.168.2.17	13.107.5.88
Oct 23, 2024 20:36:43.408937931 CEST	443	49753	13.107.5.88	192.168.2.17
Oct 23, 2024 20:36:43.409348011 CEST	443	49753	13.107.5.88	192.168.2.17
Oct 23, 2024 20:36:43.461472034 CEST	49753	443	192.168.2.17	13.107.5.88
Oct 23, 2024 20:36:43.574815989 CEST	49753	443	192.168.2.17	13.107.5.88
Oct 23, 2024 20:36:43.619347095 CEST	443	49753	13.107.5.88	192.168.2.17
Oct 23, 2024 20:36:43.700869083 CEST	443	49753	13.107.5.88	192.168.2.17
Oct 23, 2024 20:36:43.703954935 CEST	443	49753	13.107.5.88	192.168.2.17
Oct 23, 2024 20:36:43.704026937 CEST	49753	443	192.168.2.17	13.107.5.88
Oct 23, 2024 20:36:43.710918903 CEST	49753	443	192.168.2.17	13.107.5.88
Oct 23, 2024 20:36:57.205471039 CEST	49755	443	192.168.2.17	142.250.184.196
Oct 23, 2024 20:36:57.205534935 CEST	443	49755	142.250.184.196	192.168.2.17
Oct 23, 2024 20:36:57.205631018 CEST	49755	443	192.168.2.17	142.250.184.196
Oct 23, 2024 20:36:57.205928087 CEST	49755	443	192.168.2.17	142.250.184.196
Oct 23, 2024 20:36:57.205950022 CEST	443	49755	142.250.184.196	192.168.2.17
Oct 23, 2024 20:36:58.067842007 CEST	443	49755	142.250.184.196	192.168.2.17
Oct 23, 2024 20:36:58.068257093 CEST	49755	443	192.168.2.17	142.250.184.196
Oct 23, 2024 20:36:58.068267107 CEST	443	49755	142.250.184.196	192.168.2.17
Oct 23, 2024 20:36:58.068609953 CEST	443	49755	142.250.184.196	192.168.2.17
Oct 23, 2024 20:36:58.068927050 CEST	49755	443	192.168.2.17	142.250.184.196
Oct 23, 2024 20:36:58.068990946 CEST	443	49755	142.250.184.196	192.168.2.17
Oct 23, 2024 20:36:58.121540070 CEST	49755	443	192.168.2.17	142.250.184.196
Oct 23, 2024 20:37:08.064033985 CEST	443	49755	142.250.184.196	192.168.2.17
Oct 23, 2024 20:37:08.064101934 CEST	443	49755	142.250.184.196	192.168.2.17
Oct 23, 2024 20:37:08.064173937 CEST	49755	443	192.168.2.17	142.250.184.196
Oct 23, 2024 20:37:08.558352947 CEST	49755	443	192.168.2.17	142.250.184.196
Oct 23, 2024 20:37:08.558378935 CEST	443	49755	142.250.184.196	192.168.2.17
Oct 23, 2024 20:37:33.791361094 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:33.791419983 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:33.791532993 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:33.792125940 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:33.792129993 CEST	49760	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:33.792148113 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:33.792176008 CEST	443	49760	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:33.792583942 CEST	49760	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:33.792583942 CEST	49760	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:33.792637110 CEST	443	49760	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:34.530447006 CEST	443	49760	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:34.530807018 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:34.531022072 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:34.531042099 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:34.531372070 CEST	49760	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:34.531392097 CEST	443	49760	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:34.531785011 CEST	443	49760	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:34.532103062 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:34.532433033 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:34.532433033 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:34.532490015 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:34.532552004 CEST	49760	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:34.532552958 CEST	49760	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:34.532566071 CEST	443	49760	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:34.532593012 CEST	49760	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:34.532623053 CEST	443	49760	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:34.584036112 CEST	49760	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:34.584049940 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:34.584076881 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:34.631774902 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:35.157403946 CEST	443	49760	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:35.159630060 CEST	443	49760	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:35.159776926 CEST	49760	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:35.160353899 CEST	49760	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:35.160379887 CEST	443	49760	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:35.163147926 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:35.207330942 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:35.477686882 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:35.477740049 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:35.477797985 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:35.477814913 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:35.478699923 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:35.478751898 CEST	443	49759	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:35.478818893 CEST	49759	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:35.481482029 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:35.481502056 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:35.481842995 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:35.481842995 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:35.481869936 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.231966019 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.232260942 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:36.232273102 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.233299971 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.233374119 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:36.234129906 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:36.234180927 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.234563112 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:36.234575033 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.284882069 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:36.550395012 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.550436974 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.550456047 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.550534010 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:36.550559998 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.550667048 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:36.552227020 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.552325964 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.552381992 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:36.552889109 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:36.552905083 CEST	443	49761	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:36.552923918 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:36.553004026 CEST	49761	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:38.116319895 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:38.116353989 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:38.116436958 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:38.116632938 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:38.116648912 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.161585093 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.161962032 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.161983013 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.163032055 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.163101912 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.164140940 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.164207935 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.164319038 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.164328098 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.219800949 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.394011974 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.442796946 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.501326084 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.501339912 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.501384974 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.501413107 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.501425028 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.501451969 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.501476049 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.501504898 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.501537085 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.513215065 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.513238907 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.513359070 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.513364077 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.513377905 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.513417006 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.618642092 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.618665934 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.618809938 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.618845940 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.618899107 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.629571915 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.629589081 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.629694939 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.629726887 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.629776001 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.631421089 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.631437063 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.631494999 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.631505966 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.631551981 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.735619068 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.735652924 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.735728979 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.735765934 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.735821009 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.735841036 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.735866070 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.746391058 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.746423006 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.746551037 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.746579885 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.746881008 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.746922970 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.746983051 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.747082949 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.747082949 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.747082949 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.747399092 CEST	49763	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.747417927 CEST	443	49763	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.763005018 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.763044119 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.763302088 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.763344049 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.763350010 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.785429955 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.785460949 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.785547972 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.785778046 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:39.785789967 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:39.864010096 CEST	49768	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:39.864048004 CEST	443	49768	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:39.864168882 CEST	49768	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:39.864512920 CEST	49768	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:39.864533901 CEST	443	49768	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:40.612476110 CEST	443	49768	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:40.612919092 CEST	49768	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:40.612937927 CEST	443	49768	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:40.613998890 CEST	443	49768	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:40.614087105 CEST	49768	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:40.614389896 CEST	49768	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:40.614465952 CEST	443	49768	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:40.667799950 CEST	49768	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:40.667817116 CEST	443	49768	13.107.136.10	192.168.2.17
Oct 23, 2024 20:37:40.715831041 CEST	49768	443	192.168.2.17	13.107.136.10
Oct 23, 2024 20:37:40.797054052 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:40.797415972 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:40.797430038 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:40.798490047 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:40.798583984 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:40.799005985 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:40.799086094 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:40.799187899 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:40.799201965 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:40.825804949 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:40.826296091 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:40.826325893 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:40.827439070 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:40.827559948 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:40.828336000 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:40.828423977 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:40.844110966 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:40.875854969 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:40.875879049 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:40.923816919 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.028199911 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.082225084 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.145406008 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.145425081 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.145474911 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.145493031 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.145510912 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.145562887 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.145597935 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.145626068 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.145643950 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.147821903 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.147833109 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.147869110 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.147948980 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.147948980 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.147978067 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.148030043 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.262326002 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.262340069 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.262490988 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.262511015 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.262604952 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.264341116 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.264367104 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.264446974 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.264465094 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.264570951 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.265393019 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.265424013 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.265507936 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.265507936 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.265522957 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.265571117 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.306263924 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.306313992 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.306382895 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.306680918 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.306698084 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.308706999 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.308743000 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.308850050 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.308850050 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.308872938 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.308944941 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.379723072 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.379750967 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.379842043 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.379863024 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.380023003 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.380181074 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.380203009 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.380242109 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.380249977 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.380289078 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.380289078 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.380299091 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.380543947 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.380615950 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.380626917 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.380645037 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.380661011 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.380703926 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.380748987 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.380866051 CEST	49764	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.380884886 CEST	443	49764	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.422998905 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.423032045 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.423149109 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.423389912 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.423438072 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.423485041 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.424510956 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.424516916 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:41.424527884 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:41.424530983 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.359772921 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.360158920 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.360188007 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.360568047 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.360903978 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.360968113 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.361113071 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.403342009 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.469702959 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.470175028 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.470218897 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.471570015 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.471671104 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.471965075 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.472044945 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.472119093 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.472126961 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.483037949 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.483553886 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.483568907 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.483947039 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.484412909 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.484478951 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.484509945 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.525830030 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.525830030 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.525852919 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.594229937 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.637830019 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.702402115 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.706492901 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.706506968 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.706568003 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.706593037 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.706625938 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.706639051 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.706646919 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.706667900 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.706684113 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.715169907 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.715198994 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.715327024 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.715361118 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.715406895 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.718501091 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.748838902 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.764796019 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.811860085 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.811885118 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.811924934 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.811933041 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.811969042 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.812031984 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.812063932 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.812083006 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.821288109 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.821374893 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.821383953 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.821393013 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.821417093 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.821433067 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.821481943 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.826556921 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.826586008 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.826625109 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.826659918 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.826668978 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.826710939 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.834161043 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.834194899 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.834253073 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.834268093 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.834297895 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.836153984 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.836184978 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.836234093 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.836245060 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.836271048 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.837466955 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.837476969 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.837531090 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.837579012 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.837589025 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.837640047 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.837641001 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.837641001 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.837666035 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.837759018 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.839901924 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.839934111 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.840018988 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.840018988 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.840032101 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.840677977 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.876802921 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.929294109 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.929307938 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.929359913 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.929444075 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.929486036 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.929507017 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.929527998 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.937524080 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.937547922 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.937671900 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.937700987 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.937753916 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.939277887 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.939301968 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.939362049 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.939368963 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.939414978 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.945003986 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.945030928 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.945117950 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.945127964 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.945173025 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.945738077 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.945782900 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.945805073 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.945813894 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.945835114 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.945841074 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.945885897 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.946130037 CEST	49769	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.946146965 CEST	443	49769	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.956794977 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.956825018 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.956909895 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.956926107 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.956948996 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.956990957 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.957700968 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.957798958 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.957801104 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.957868099 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.959104061 CEST	49770	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.959119081 CEST	443	49770	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.961921930 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.961977005 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:42.962059975 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.962443113 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:42.962460995 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.045902014 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.045942068 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.046029091 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.046051979 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.046106100 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.046768904 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.046794891 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.046838999 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.046847105 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.046871901 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.046891928 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.053706884 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.053726912 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.053829908 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.053849936 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.053890944 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.054768085 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.054785967 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.054855108 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.054862976 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.054902077 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.055746078 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.055763960 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.055825949 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.055835009 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.055879116 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.057396889 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.057424068 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.057477951 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.057486057 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.057508945 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.057528019 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.058305025 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.058326006 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.058377028 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.058397055 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.058418989 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.058444023 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.059226990 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.059250116 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.059309959 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.059328079 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.059369087 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.163003922 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.163050890 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.163167953 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.163184881 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.163199902 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.163230896 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.163427114 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.163446903 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.163480043 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.163486958 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.163520098 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.163537025 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.170397043 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.170419931 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.170531034 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.170550108 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.170594931 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.170684099 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.170747042 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.170752048 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.170805931 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.171108961 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.171128035 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.171170950 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.171176910 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.171195030 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.171216965 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.171477079 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.171494961 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.171549082 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.171555042 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.171596050 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.176162004 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.176186085 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.176259041 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.176265001 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.176282883 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.176306009 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.177109003 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177134037 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177222967 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.177239895 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177448034 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177464008 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177520037 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.177526951 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177593946 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177613020 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177642107 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.177647114 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177674055 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.177861929 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177876949 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177915096 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.177932024 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.177958012 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.177983046 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.178002119 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.178039074 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.178044081 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.178075075 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.178585052 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.178601980 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.178644896 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.178654909 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.178668976 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.178747892 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.178769112 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.178805113 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.178809881 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.178829908 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.226802111 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.282597065 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.282701969 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.282768965 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.282815933 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.283150911 CEST	49771	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.283169985 CEST	443	49771	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.291775942 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.291815042 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.291882038 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.292200089 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.292215109 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.317217112 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.344625950 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.344685078 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.344798088 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.345129967 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.345143080 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.359335899 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.545650005 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.594778061 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.691158056 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.691179991 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.691215992 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.691231012 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.691273928 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.691282034 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.691306114 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.691330910 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.691330910 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.693372965 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.693381071 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.693396091 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.693404913 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.693449020 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.693458080 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.693499088 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.737823963 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.781088114 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.781101942 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.781135082 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.781147957 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.781230927 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.781248093 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.781281948 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.781299114 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.782777071 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.782784939 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.782812119 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.782849073 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.782860041 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.782887936 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.782908916 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.784662008 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.784681082 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.784753084 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.784763098 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.784811020 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.899180889 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.899288893 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.899360895 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.899386883 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.899422884 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.899451017 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.899477959 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.899497986 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.899554968 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.899568081 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.899610996 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.900866985 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.900891066 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.900981903 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.900990009 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.901040077 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.901849031 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.901865005 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.901969910 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.901976109 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.902020931 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.902915955 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.902931929 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.903018951 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.903024912 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.903070927 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.904587030 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.904603958 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.904695034 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:43.904704094 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:43.904772043 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.002346992 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.002707005 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.002723932 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.003082037 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.003397942 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.003463984 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.003534079 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.016381979 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.016416073 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.016510963 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.016546965 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.016599894 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.017339945 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.017358065 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.017432928 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.017441034 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.017483950 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.017795086 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.017813921 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.017868042 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.017874956 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.017925978 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.018143892 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.018162966 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.018203020 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.018209934 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.018239021 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.018263102 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.022104025 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.022124052 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.022201061 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.022224903 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.022236109 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.022272110 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.022605896 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.022627115 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.022672892 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.022682905 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.022697926 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.022737026 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.023072004 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.023087978 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.023154020 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.023163080 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.023210049 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.023742914 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.023762941 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.023813963 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.023822069 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.023864985 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.024583101 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.024600029 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.024672985 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.024681091 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.024708986 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.024733067 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.024755001 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.024761915 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.024791002 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.024815083 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.025747061 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.025764942 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.025832891 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.025840044 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.025851965 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.025882959 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.026581049 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.026598930 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.026654959 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.026663065 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.026702881 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.026721001 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.026738882 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.026778936 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.026784897 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.026808977 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.026828051 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.047353983 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.055803061 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.133781910 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.133868933 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.133889914 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.133903980 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.133955002 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.134001970 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.134052038 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.134059906 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.134110928 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.134244919 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.134258032 CEST	443	49767	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.134289980 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.134335995 CEST	49767	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.138844013 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.138884068 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.139055967 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.139282942 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.139305115 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.153460026 CEST	49777	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.153503895 CEST	443	49777	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.153595924 CEST	49777	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.153829098 CEST	49777	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.153842926 CEST	443	49777	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.154845953 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.154897928 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.154954910 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.155134916 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.155145884 CEST	443	49779	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.155206919 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.155339956 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.155359030 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.155474901 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.155503988 CEST	443	49779	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.236589909 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.278810978 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.348808050 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.348825932 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.348859072 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.348887920 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.348896027 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.348944902 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.348969936 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.348985910 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.349977970 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.350390911 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.350409031 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.350765944 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.351325035 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.351394892 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.351501942 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.355489016 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.355542898 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.355550051 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.355595112 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.355592966 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.355616093 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.355628967 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.355648041 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.384202957 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.384649992 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.384670019 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.385020018 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.385432005 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.385492086 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.385627985 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.395328999 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.406815052 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.431334972 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.466417074 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.466428041 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.466475010 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.466509104 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.466548920 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.466562986 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.466603041 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.466619015 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.471667051 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.471755028 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.471777916 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.471823931 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.472091913 CEST	49773	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.472104073 CEST	443	49773	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.580516100 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.617568016 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.629812956 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.661832094 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.695507050 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.695518970 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.695641041 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.695708990 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.695708990 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.695720911 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.695730925 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.695914030 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.697781086 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.697798967 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.697877884 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.697885990 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.697983980 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.734848022 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.734860897 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.734929085 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.734971046 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.735007048 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.735038042 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.735052109 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.735054970 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.735093117 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.735100985 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.735584974 CEST	49775	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.735601902 CEST	443	49775	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.739403009 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.739414930 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.739499092 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.739725113 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.739738941 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.811121941 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.811146021 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.811323881 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.811345100 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.811405897 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.812558889 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.812578917 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.812653065 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.812678099 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.812783003 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.814255953 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.814274073 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.814367056 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.814383030 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.814465046 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.815916061 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.815936089 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.815980911 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.815993071 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.816076040 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.816076994 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.927016973 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.927042007 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.927339077 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.927357912 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.927418947 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.927517891 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.927537918 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.927618980 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.927618980 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.927627087 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.927681923 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.929233074 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.929254055 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.929363012 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.929372072 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.929423094 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.929423094 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.930181026 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.930200100 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.930268049 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.930277109 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.930352926 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.931103945 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.931122065 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.931200981 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.931207895 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.931334972 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.931986094 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.932014942 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.932112932 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.932112932 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.932121992 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.932312965 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.932857037 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.932873964 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.932964087 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:44.932970047 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:44.933094025 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.044888020 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.044914007 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045027018 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.045044899 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045073986 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045089960 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.045099974 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045118093 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045121908 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.045396090 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.045463085 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045483112 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045520067 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.045536995 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045547962 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.045583010 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045598984 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.045608997 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045622110 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045644045 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.045681000 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.045845985 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045867920 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045924902 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.045933962 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045952082 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.045965910 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.045986891 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.046021938 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.046021938 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.046030998 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.046053886 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.046098948 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.046188116 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.046206951 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.046283007 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.046283007 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.046291113 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.046374083 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.046581984 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.046602011 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.046639919 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.046646118 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.046696901 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.046696901 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.047029018 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.047050953 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.047101974 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.047112942 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.047120094 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.047157049 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.047157049 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.047166109 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.047193050 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.047199011 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.047209024 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.047241926 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.050587893 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.050611019 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.050688982 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.050695896 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.050798893 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.050863028 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.050884008 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.050955057 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.050964117 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.050987959 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.051038980 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.051080942 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.051100016 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.051139116 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.051153898 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.051163912 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.051197052 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.051218987 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.051237106 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.051290035 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.051309109 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.051337957 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.051373959 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.157360077 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.157452106 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.157516003 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.157573938 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.157876015 CEST	49774	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.157895088 CEST	443	49774	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.176551104 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.176839113 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.176853895 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.177915096 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.177987099 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.178354025 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.178431988 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.178513050 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.178520918 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.179306984 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.179519892 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.179527998 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.179863930 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.180136919 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.180197001 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.180224895 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.184710979 CEST	443	49777	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.185025930 CEST	49777	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.185040951 CEST	443	49777	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.185447931 CEST	443	49777	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.185817957 CEST	49777	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.185893059 CEST	443	49777	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.185959101 CEST	49777	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.201435089 CEST	443	49779	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.201843977 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.201860905 CEST	443	49779	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.202923059 CEST	443	49779	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.203062057 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.203353882 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.203418016 CEST	443	49779	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.203555107 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.223340988 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.227350950 CEST	443	49777	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.229777098 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.229798079 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.247091055 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.247108936 CEST	443	49779	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.292835951 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.407733917 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.412779093 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.416470051 CEST	443	49777	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.416537046 CEST	443	49777	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.416608095 CEST	443	49777	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.416654110 CEST	49777	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.416676044 CEST	49777	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.417340040 CEST	49777	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.417357922 CEST	443	49777	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.419703960 CEST	49781	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.419764042 CEST	443	49781	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.419871092 CEST	49781	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.420101881 CEST	49781	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.420115948 CEST	443	49781	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.437479973 CEST	443	49779	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.437513113 CEST	443	49779	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.437642097 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.437649965 CEST	443	49779	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.437746048 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.438499928 CEST	49779	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.438519001 CEST	443	49779	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.440829992 CEST	49782	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.440874100 CEST	443	49782	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.440958023 CEST	49782	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.441194057 CEST	49782	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.441210032 CEST	443	49782	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.451848984 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.467801094 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.515966892 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.515989065 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.516016006 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.516032934 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.516043901 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.516062975 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.516091108 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.516117096 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.516187906 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.516232014 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.516577005 CEST	49778	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.516596079 CEST	443	49778	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.519867897 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.519917965 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.520031929 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.520323038 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.520347118 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.528955936 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.528964043 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.529063940 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.529069901 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.529082060 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.529118061 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.529123068 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.529149055 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.529170990 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.534043074 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.534053087 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.534096956 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.534138918 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.534154892 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.534171104 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.534176111 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.534214020 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.543756962 CEST	49784	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.543818951 CEST	443	49784	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.543947935 CEST	49784	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.544352055 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.544405937 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.544470072 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.544667006 CEST	49784	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.544686079 CEST	443	49784	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.544869900 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.544883013 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.675744057 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.675760031 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.675842047 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.675858974 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.675905943 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.677557945 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.677582979 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.677633047 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.677644014 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.677675009 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.677690029 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.680212975 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.680233955 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.680303097 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:45.680314064 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:45.680365086 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.024830103 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.024858952 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.024960041 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.024974108 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.024995089 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025007963 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025028944 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025070906 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025070906 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025110960 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025118113 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025167942 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025191069 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025233030 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025233030 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025242090 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025295019 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025295019 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025374889 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025391102 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025469065 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025477886 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025505066 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025537968 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025544882 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025580883 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025646925 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025902033 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025927067 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025965929 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.025974035 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.025984049 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.026043892 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.026607037 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.030581951 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.030601978 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.030682087 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.030699968 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.030759096 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.031451941 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.031466007 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.031487942 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.031526089 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.031533003 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.031577110 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.031585932 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.031620979 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.033384085 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.033412933 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.033463955 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.033472061 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.033502102 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.033525944 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.033756971 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.034238100 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.034261942 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.034288883 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.034301043 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.034306049 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.034312963 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.034334898 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.034379959 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.034809113 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.035711050 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.035722971 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.035788059 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.035795927 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.035810947 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.035837889 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.037607908 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.037626028 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.037674904 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.037683010 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.037708044 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.037743092 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.038528919 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.038655043 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.038705111 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.038732052 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.038805962 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.038814068 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.038836956 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.038861036 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.039591074 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.039618015 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.039685011 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.039685011 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.039693117 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.039750099 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.041662931 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.041691065 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.041734934 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.041742086 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.041790009 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.041796923 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.042901039 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.042963982 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.042987108 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.042994976 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.043028116 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.044083118 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.044111013 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.044166088 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.044174910 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.044197083 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.045701981 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.045737028 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.045773029 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.045814991 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.045823097 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.045838118 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.045893908 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.046715021 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.046739101 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.046813965 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.046821117 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.046854019 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.046919107 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.046952009 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.046972990 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.046978951 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.047000885 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.047008038 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.047008038 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.047082901 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.048100948 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.048100948 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.049638033 CEST	49776	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.049649954 CEST	443	49776	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.087326050 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.274569988 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.326833010 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.371516943 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.371531963 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.371582031 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.371601105 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.371608019 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.371653080 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.371673107 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.371700048 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.371747017 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.379188061 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.379280090 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.379355907 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.379555941 CEST	49780	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.379570961 CEST	443	49780	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.470213890 CEST	443	49781	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.470716953 CEST	49781	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.470731020 CEST	443	49781	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.471182108 CEST	443	49781	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.471581936 CEST	49781	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.471659899 CEST	443	49781	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.471702099 CEST	49781	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.484597921 CEST	443	49782	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.484877110 CEST	49782	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.484898090 CEST	443	49782	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.485984087 CEST	443	49782	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.486063957 CEST	49782	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.486449957 CEST	49782	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.486510038 CEST	443	49782	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.486709118 CEST	49782	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.486717939 CEST	443	49782	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.515347004 CEST	443	49781	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.517836094 CEST	49781	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.533818960 CEST	49782	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.588798046 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.589118958 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.589134932 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.590179920 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.590729952 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.590729952 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.590729952 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.590814114 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.600130081 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.600132942 CEST	443	49784	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.600399017 CEST	49784	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.600419044 CEST	443	49784	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.600600958 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.600630999 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.601006031 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.601016045 CEST	443	49784	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.601357937 CEST	49784	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.601439953 CEST	443	49784	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.601610899 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.601680040 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.601762056 CEST	49784	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.601809978 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.643341064 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.644788027 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.644812107 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.647329092 CEST	443	49784	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.692825079 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.702027082 CEST	443	49781	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.702074051 CEST	443	49781	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.702136040 CEST	443	49781	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.702189922 CEST	49781	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.702203989 CEST	49781	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.703016043 CEST	49781	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.703031063 CEST	443	49781	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.717076063 CEST	443	49782	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.717137098 CEST	443	49782	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.717202902 CEST	443	49782	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.717204094 CEST	49782	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.717376947 CEST	49782	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.717767000 CEST	49782	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.717787981 CEST	443	49782	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.821479082 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.838241100 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.838282108 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.838361025 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.838376999 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.838421106 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.838521004 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.838579893 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.838634968 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.839169025 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.839183092 CEST	443	49785	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.839194059 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.839227915 CEST	49785	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.839791059 CEST	443	49784	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.839829922 CEST	443	49784	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.839891911 CEST	49784	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.839895010 CEST	443	49784	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.839950085 CEST	49784	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.841427088 CEST	49784	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.841448069 CEST	443	49784	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.843384981 CEST	49787	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.843414068 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.843488932 CEST	49787	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.843734026 CEST	49787	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.843744993 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.844422102 CEST	49788	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.844461918 CEST	443	49788	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.844523907 CEST	49788	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.844747066 CEST	49788	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.844760895 CEST	443	49788	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.866802931 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.940469027 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.940481901 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.940520048 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.940531015 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.940546036 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.940567017 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:46.940681934 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.940759897 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.941179037 CEST	49783	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:46.941195965 CEST	443	49783	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.323405027 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.323457003 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.323585987 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.323828936 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.323847055 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.345633030 CEST	49791	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.345675945 CEST	443	49791	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.345947027 CEST	49791	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.346113920 CEST	49791	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.346138000 CEST	443	49791	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.906037092 CEST	443	49788	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.906266928 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.906346083 CEST	49788	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.906371117 CEST	443	49788	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.906485081 CEST	49787	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.906501055 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.906760931 CEST	443	49788	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.906899929 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.907948017 CEST	49788	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.908025980 CEST	443	49788	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.908277035 CEST	49787	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.908351898 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.908477068 CEST	49788	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.908488989 CEST	49787	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:47.951330900 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:47.951343060 CEST	443	49788	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.140674114 CEST	443	49788	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.140723944 CEST	443	49788	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.140744925 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.140794992 CEST	443	49788	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.140805006 CEST	49788	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.140868902 CEST	49788	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.140882015 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.140940905 CEST	49787	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.140954018 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.141035080 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.141081095 CEST	49787	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.141956091 CEST	49787	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.141963959 CEST	443	49787	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.142247915 CEST	49788	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.142261028 CEST	443	49788	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.353269100 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.381259918 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.381278038 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.381804943 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.382128954 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.382195950 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.382296085 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.387680054 CEST	443	49791	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.387998104 CEST	49791	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.388020992 CEST	443	49791	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.388386965 CEST	443	49791	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.388676882 CEST	49791	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.388745070 CEST	443	49791	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.388830900 CEST	49791	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.423336029 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.431341887 CEST	443	49791	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.609985113 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.620742083 CEST	443	49791	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.620801926 CEST	443	49791	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.620872021 CEST	443	49791	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.620879889 CEST	49791	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.620933056 CEST	49791	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.621469975 CEST	49791	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.621501923 CEST	443	49791	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.624433041 CEST	49794	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.624475956 CEST	443	49794	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.624547005 CEST	49794	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.624928951 CEST	49794	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.624946117 CEST	443	49794	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.655805111 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.726274967 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.726291895 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.726320028 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.726327896 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.726356983 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.726402044 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.726432085 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.726449966 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.726490021 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.731254101 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.731276035 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.731359959 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.731375933 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.731435061 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.841084003 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.841109037 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.841244936 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.841279030 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.841329098 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.842896938 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.842917919 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.843028069 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.843029022 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.843061924 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.843105078 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.844722986 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.844742060 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.844824076 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.844832897 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.844875097 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.886204958 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.886226892 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.886318922 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.886332035 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.886377096 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.957014084 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.957051039 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.957123995 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.957158089 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.957202911 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.957474947 CEST	49790	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.957488060 CEST	443	49790	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.960628033 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.960661888 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:48.960736990 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.960980892 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:48.960993052 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:49.684679985 CEST	443	49794	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:49.685039043 CEST	49794	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:49.685050964 CEST	443	49794	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:49.685416937 CEST	443	49794	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:49.685726881 CEST	49794	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:49.685790062 CEST	443	49794	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:49.685836077 CEST	49794	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:49.731331110 CEST	443	49794	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:49.739872932 CEST	49794	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.283915997 CEST	443	49794	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.283993959 CEST	443	49794	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.284049988 CEST	443	49794	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.284094095 CEST	49794	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.284130096 CEST	49794	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.285170078 CEST	49794	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.285181999 CEST	443	49794	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.287906885 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.288181067 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.288193941 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.288594007 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.288912058 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.289010048 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.289513111 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.335329056 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.523389101 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.569891930 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.633223057 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.633239985 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.633302927 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.633357048 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.633404016 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.633414984 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.633434057 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.633476019 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.642055988 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.642081976 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.642147064 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.642178059 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.642185926 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.642285109 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.750751972 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.750796080 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.750912905 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.750947952 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.750958920 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.750999928 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.759218931 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.759253025 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.759308100 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.759327888 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.759340048 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.759377003 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.760598898 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.760624886 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.760684013 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.760694027 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.760713100 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.760745049 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.867257118 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.867285967 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.867366076 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.867398977 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.867413044 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.867454052 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.867803097 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.867872000 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.867878914 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.867908001 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:50.867933035 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.867991924 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.868072987 CEST	49795	443	192.168.2.17	152.199.21.175
Oct 23, 2024 20:37:50.868089914 CEST	443	49795	152.199.21.175	192.168.2.17
Oct 23, 2024 20:37:57.255248070 CEST	49796	443	192.168.2.17	142.250.184.196
Oct 23, 2024 20:37:57.255290031 CEST	443	49796	142.250.184.196	192.168.2.17
Oct 23, 2024 20:37:57.255428076 CEST	49796	443	192.168.2.17	142.250.184.196
Oct 23, 2024 20:37:57.255722046 CEST	49796	443	192.168.2.17	142.250.184.196
Oct 23, 2024 20:37:57.255747080 CEST	443	49796	142.250.184.196	192.168.2.17
Oct 23, 2024 20:37:58.317250967 CEST	443	49796	142.250.184.196	192.168.2.17
Oct 23, 2024 20:37:58.370953083 CEST	49796	443	192.168.2.17	142.250.184.196

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 23, 2024 20:35:52.318295002 CEST	53	52788	1.1.1.1	192.168.2.17
Oct 23, 2024 20:35:52.351516962 CEST	53	61828	1.1.1.1	192.168.2.17
Oct 23, 2024 20:35:53.233022928 CEST	53856	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:35:53.233412027 CEST	52831	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:35:53.617322922 CEST	53	56123	1.1.1.1	192.168.2.17
Oct 23, 2024 20:35:55.080140114 CEST	61664	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:35:55.080538034 CEST	57939	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:35:56.147264957 CEST	53	56294	1.1.1.1	192.168.2.17
Oct 23, 2024 20:35:57.143074036 CEST	54274	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:35:57.143301010 CEST	60381	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:35:57.150918961 CEST	53	54274	1.1.1.1	192.168.2.17
Oct 23, 2024 20:35:57.151523113 CEST	53	60381	1.1.1.1	192.168.2.17
Oct 23, 2024 20:35:57.286664963 CEST	61992	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:35:57.286828995 CEST	55718	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:36:11.231991053 CEST	53	63942	1.1.1.1	192.168.2.17
Oct 23, 2024 20:36:29.651228905 CEST	53	54174	1.1.1.1	192.168.2.17
Oct 23, 2024 20:36:52.304421902 CEST	53	59676	1.1.1.1	192.168.2.17
Oct 23, 2024 20:36:52.318674088 CEST	53	51064	1.1.1.1	192.168.2.17
Oct 23, 2024 20:36:57.195816994 CEST	59945	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:36:57.195889950 CEST	59933	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:36:57.203609943 CEST	53	59945	1.1.1.1	192.168.2.17
Oct 23, 2024 20:36:57.204668045 CEST	53	59933	1.1.1.1	192.168.2.17
Oct 23, 2024 20:36:57.888983965 CEST	138	138	192.168.2.17	192.168.2.255
Oct 23, 2024 20:36:58.412013054 CEST	62344	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:36:58.412148952 CEST	53993	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:20.504838943 CEST	53	52293	1.1.1.1	192.168.2.17
Oct 23, 2024 20:37:23.477396011 CEST	53	51820	1.1.1.1	192.168.2.17
Oct 23, 2024 20:37:33.735497952 CEST	62686	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:33.735634089 CEST	64915	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:36.554125071 CEST	50528	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:36.554379940 CEST	49250	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:38.107737064 CEST	56733	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:38.107932091 CEST	54706	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:38.115569115 CEST	53	54706	1.1.1.1	192.168.2.17
Oct 23, 2024 20:37:38.115852118 CEST	53	56733	1.1.1.1	192.168.2.17
Oct 23, 2024 20:37:39.750969887 CEST	64871	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:39.751108885 CEST	51534	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:39.761745930 CEST	53	64871	1.1.1.1	192.168.2.17
Oct 23, 2024 20:37:39.762490988 CEST	53	51534	1.1.1.1	192.168.2.17
Oct 23, 2024 20:37:39.782902002 CEST	56358	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:39.783049107 CEST	55570	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:45.596338987 CEST	61372	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:45.596575975 CEST	63141	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:45.603893995 CEST	53	61372	1.1.1.1	192.168.2.17
Oct 23, 2024 20:37:45.604474068 CEST	53	63141	1.1.1.1	192.168.2.17
Oct 23, 2024 20:37:47.443702936 CEST	53	54682	1.1.1.1	192.168.2.17
Oct 23, 2024 20:37:48.512044907 CEST	52366	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:48.512649059 CEST	64264	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:57.302818060 CEST	54432	53	192.168.2.17	1.1.1.1
Oct 23, 2024 20:37:57.302994967 CEST	55078	53	192.168.2.17	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 23, 2024 20:35:53.233022928 CEST	192.168.2.17	1.1.1.1	0x9ffc	Standard query (0)	independentsgroup-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:35:53.233412027 CEST	192.168.2.17	1.1.1.1	0x9faf	Standard query (0)	independentsgroup-my.sharepoint.com	65	IN (0x0001)	false
Oct 23, 2024 20:35:55.080140114 CEST	192.168.2.17	1.1.1.1	0x85c7	Standard query (0)	independentsgroup-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:35:55.080538034 CEST	192.168.2.17	1.1.1.1	0xc10f	Standard query (0)	independentsgroup-my.sharepoint.com	65	IN (0x0001)	false
Oct 23, 2024 20:35:57.143074036 CEST	192.168.2.17	1.1.1.1	0xe757	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:35:57.143301010 CEST	192.168.2.17	1.1.1.1	0x71c4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 23, 2024 20:35:57.286664963 CEST	192.168.2.17	1.1.1.1	0xfd8	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:35:57.286828995 CEST	192.168.2.17	1.1.1.1	0x42e0	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Oct 23, 2024 20:36:57.195816994 CEST	192.168.2.17	1.1.1.1	0x8d1c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:36:57.195889950 CEST	192.168.2.17	1.1.1.1	0xf187	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 23, 2024 20:36:58.412013054 CEST	192.168.2.17	1.1.1.1	0x854e	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:36:58.412148952 CEST	192.168.2.17	1.1.1.1	0xd3b8	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Oct 23, 2024 20:37:33.735497952 CEST	192.168.2.17	1.1.1.1	0x981e	Standard query (0)	independentsgroup-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:33.735634089 CEST	192.168.2.17	1.1.1.1	0x9ca2	Standard query (0)	independentsgroup-my.sharepoint.com	65	IN (0x0001)	false
Oct 23, 2024 20:37:36.554125071 CEST	192.168.2.17	1.1.1.1	0xaf9e	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:36.554379940 CEST	192.168.2.17	1.1.1.1	0x2762	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 23, 2024 20:37:38.107737064 CEST	192.168.2.17	1.1.1.1	0x7d9f	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:38.107932091 CEST	192.168.2.17	1.1.1.1	0x8da9	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 23, 2024 20:37:39.750969887 CEST	192.168.2.17	1.1.1.1	0x45db	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:39.751108885 CEST	192.168.2.17	1.1.1.1	0xe5d9	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Oct 23, 2024 20:37:39.782902002 CEST	192.168.2.17	1.1.1.1	0x1c40	Standard query (0)	independentsgroup-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:39.783049107 CEST	192.168.2.17	1.1.1.1	0x3f16	Standard query (0)	independentsgroup-my.sharepoint.com	65	IN (0x0001)	false
Oct 23, 2024 20:37:45.596338987 CEST	192.168.2.17	1.1.1.1	0xdbd3	Standard query (0)	autologon.microsoftazuread-sso.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:45.596575975 CEST	192.168.2.17	1.1.1.1	0x925a	Standard query (0)	autologon.microsoftazuread-sso.com	65	IN (0x0001)	false
Oct 23, 2024 20:37:48.512044907 CEST	192.168.2.17	1.1.1.1	0x3919	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:48.512649059 CEST	192.168.2.17	1.1.1.1	0xe39e	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 23, 2024 20:37:57.302818060 CEST	192.168.2.17	1.1.1.1	0xbea5	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:57.302994967 CEST	192.168.2.17	1.1.1.1	0x73eb	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 23, 2024 20:35:53.278727055 CEST	1.1.1.1	192.168.2.17	0x9faf	No error (0)	independentsgroup-my.sharepoint.com	independentsgroup.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:53.278727055 CEST	1.1.1.1	192.168.2.17	0x9faf	No error (0)	independentsgroup.sharepoint.com	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:53.278727055 CEST	1.1.1.1	192.168.2.17	0x9faf	No error (0)	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:53.278727055 CEST	1.1.1.1	192.168.2.17	0x9faf	No error (0)	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:53.291939020 CEST	1.1.1.1	192.168.2.17	0x9ffc	No error (0)	independentsgroup-my.sharepoint.com	independentsgroup.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:53.291939020 CEST	1.1.1.1	192.168.2.17	0x9ffc	No error (0)	independentsgroup.sharepoint.com	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:53.291939020 CEST	1.1.1.1	192.168.2.17	0x9ffc	No error (0)	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:53.291939020 CEST	1.1.1.1	192.168.2.17	0x9ffc	No error (0)	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:53.291939020 CEST	1.1.1.1	192.168.2.17	0x9ffc	No error (0)	189905-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:53.291939020 CEST	1.1.1.1	192.168.2.17	0x9ffc	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:35:53.291939020 CEST	1.1.1.1	192.168.2.17	0x9ffc	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:35:55.142184019 CEST	1.1.1.1	192.168.2.17	0x85c7	No error (0)	independentsgroup-my.sharepoint.com	independentsgroup.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:55.142184019 CEST	1.1.1.1	192.168.2.17	0x85c7	No error (0)	independentsgroup.sharepoint.com	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:55.142184019 CEST	1.1.1.1	192.168.2.17	0x85c7	No error (0)	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:55.142184019 CEST	1.1.1.1	192.168.2.17	0x85c7	No error (0)	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:55.142184019 CEST	1.1.1.1	192.168.2.17	0x85c7	No error (0)	189905-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:55.142184019 CEST	1.1.1.1	192.168.2.17	0x85c7	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:35:55.142184019 CEST	1.1.1.1	192.168.2.17	0x85c7	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:35:55.142213106 CEST	1.1.1.1	192.168.2.17	0xc10f	No error (0)	independentsgroup-my.sharepoint.com	independentsgroup.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:55.142213106 CEST	1.1.1.1	192.168.2.17	0xc10f	No error (0)	independentsgroup.sharepoint.com	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:55.142213106 CEST	1.1.1.1	192.168.2.17	0xc10f	No error (0)	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:55.142213106 CEST	1.1.1.1	192.168.2.17	0xc10f	No error (0)	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:57.150918961 CEST	1.1.1.1	192.168.2.17	0xe757	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:35:57.151523113 CEST	1.1.1.1	192.168.2.17	0x71c4	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 23, 2024 20:35:57.294500113 CEST	1.1.1.1	192.168.2.17	0xfd8	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:35:57.294891119 CEST	1.1.1.1	192.168.2.17	0x42e0	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:36:57.203609943 CEST	1.1.1.1	192.168.2.17	0x8d1c	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:36:57.204668045 CEST	1.1.1.1	192.168.2.17	0xf187	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 23, 2024 20:36:58.421531916 CEST	1.1.1.1	192.168.2.17	0xd3b8	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:36:58.421940088 CEST	1.1.1.1	192.168.2.17	0x854e	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:33.778747082 CEST	1.1.1.1	192.168.2.17	0x981e	No error (0)	independentsgroup-my.sharepoint.com	independentsgroup.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:33.778747082 CEST	1.1.1.1	192.168.2.17	0x981e	No error (0)	independentsgroup.sharepoint.com	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:33.778747082 CEST	1.1.1.1	192.168.2.17	0x981e	No error (0)	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:33.778747082 CEST	1.1.1.1	192.168.2.17	0x981e	No error (0)	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:33.778747082 CEST	1.1.1.1	192.168.2.17	0x981e	No error (0)	189905-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:33.778747082 CEST	1.1.1.1	192.168.2.17	0x981e	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:33.778747082 CEST	1.1.1.1	192.168.2.17	0x981e	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:33.790334940 CEST	1.1.1.1	192.168.2.17	0x9ca2	No error (0)	independentsgroup-my.sharepoint.com	independentsgroup.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:33.790334940 CEST	1.1.1.1	192.168.2.17	0x9ca2	No error (0)	independentsgroup.sharepoint.com	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:33.790334940 CEST	1.1.1.1	192.168.2.17	0x9ca2	No error (0)	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:33.790334940 CEST	1.1.1.1	192.168.2.17	0x9ca2	No error (0)	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:36.561471939 CEST	1.1.1.1	192.168.2.17	0xaf9e	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:36.563294888 CEST	1.1.1.1	192.168.2.17	0x2762	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:38.115569115 CEST	1.1.1.1	192.168.2.17	0x8da9	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:38.115569115 CEST	1.1.1.1	192.168.2.17	0x8da9	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:38.115852118 CEST	1.1.1.1	192.168.2.17	0x7d9f	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:38.115852118 CEST	1.1.1.1	192.168.2.17	0x7d9f	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:38.115852118 CEST	1.1.1.1	192.168.2.17	0x7d9f	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:39.761745930 CEST	1.1.1.1	192.168.2.17	0x45db	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.761745930 CEST	1.1.1.1	192.168.2.17	0x45db	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.761745930 CEST	1.1.1.1	192.168.2.17	0x45db	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:39.762490988 CEST	1.1.1.1	192.168.2.17	0xe5d9	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.762490988 CEST	1.1.1.1	192.168.2.17	0xe5d9	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.834564924 CEST	1.1.1.1	192.168.2.17	0x3f16	No error (0)	independentsgroup-my.sharepoint.com	independentsgroup.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.834564924 CEST	1.1.1.1	192.168.2.17	0x3f16	No error (0)	independentsgroup.sharepoint.com	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.834564924 CEST	1.1.1.1	192.168.2.17	0x3f16	No error (0)	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.834564924 CEST	1.1.1.1	192.168.2.17	0x3f16	No error (0)	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.860275030 CEST	1.1.1.1	192.168.2.17	0x1c40	No error (0)	independentsgroup-my.sharepoint.com	independentsgroup.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.860275030 CEST	1.1.1.1	192.168.2.17	0x1c40	No error (0)	independentsgroup.sharepoint.com	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.860275030 CEST	1.1.1.1	192.168.2.17	0x1c40	No error (0)	5233-ipv4v6e.clump.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.860275030 CEST	1.1.1.1	192.168.2.17	0x1c40	No error (0)	189905-ipv4v6e.farm.dprodmgd104.aa-rt.sharepoint.com	189905-ipv4v6e.farm.dprodmgd104.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.860275030 CEST	1.1.1.1	192.168.2.17	0x1c40	No error (0)	189905-ipv4v6.farm.dprodmgd104.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:39.860275030 CEST	1.1.1.1	192.168.2.17	0x1c40	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:39.860275030 CEST	1.1.1.1	192.168.2.17	0x1c40	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:41.314577103 CEST	1.1.1.1	192.168.2.17	0x49f6	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:41.314577103 CEST	1.1.1.1	192.168.2.17	0x49f6	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:45.603893995 CEST	1.1.1.1	192.168.2.17	0xdbd3	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.133	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:45.603893995 CEST	1.1.1.1	192.168.2.17	0xdbd3	No error (0)	autologon.microsoftazuread-sso.com		20.190.160.14	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:45.603893995 CEST	1.1.1.1	192.168.2.17	0xdbd3	No error (0)	autologon.microsoftazuread-sso.com		20.190.160.17	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:45.603893995 CEST	1.1.1.1	192.168.2.17	0xdbd3	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.72	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:45.603893995 CEST	1.1.1.1	192.168.2.17	0xdbd3	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.74	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:45.603893995 CEST	1.1.1.1	192.168.2.17	0xdbd3	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.140	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:45.603893995 CEST	1.1.1.1	192.168.2.17	0xdbd3	No error (0)	autologon.microsoftazuread-sso.com		40.126.32.136	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:45.603893995 CEST	1.1.1.1	192.168.2.17	0xdbd3	No error (0)	autologon.microsoftazuread-sso.com		20.190.160.20	A (IP address)	IN (0x0001)	false
Oct 23, 2024 20:37:48.519365072 CEST	1.1.1.1	192.168.2.17	0x3919	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:48.521048069 CEST	1.1.1.1	192.168.2.17	0xe39e	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:57.451291084 CEST	1.1.1.1	192.168.2.17	0x73eb	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 23, 2024 20:37:57.451931000 CEST	1.1.1.1	192.168.2.17	0xbea5	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

independentsgroup-my.sharepoint.com

https:

aadcdn.msftauth.net

slscr.update.microsoft.com

fs.microsoft.com

www.bing.com

evoke-windowsservices-tas.msedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49716	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:54 UTC	781	OUT	GET /:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9 HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:54 UTC	2018	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 69387 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,249,541930,0,136681,121 X-SharePointHealthScore: 0 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 6ccd5ca1-00fc-a000-2eed-f62156a02078 request-id: 6ccd5ca1-00fc-a000-2eed-f62156a02078 MS-CV: oVzNbPwAAKAu7fYhVqAgeA.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=f984c75b-f487-415d-aaca-d8b1ab8e8708&destinationEndpoint=Edge-Prod-DFW31r5b&frontEnd=AFD&RemoteIP=173.254.250.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 119 SPIisLatency: 3 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 58C95267084A4910A0FAA69E14C2F3F9 Ref B: DFW311000104051 Ref C: 2024-10-23T18:35:54Z Date: Wed, 23 Oct 2024 18:35:54 GMT Connection: close
2024-10-23 18:35:54 UTC	2152	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 20 2f Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"><head><meta name="GENERATOR" content="Microsoft SharePoint" /
2024-10-23 18:35:54 UTC	8192	IN	Data Raw: 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 72 65 73 65 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 2c 62 75 74 74 6f 6e 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 72 69 6e 67 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 42 75 74 74 6f 6e 54 65 78 74 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 2e 33 35 65 6d 20 2e 37 35 65 6d 20 2e 36 32 35 65 6d 7d 6c 65 67 65 6e 64 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 7d 70 72 Data Ascii: usring,[type=reset]:-moz-focusring,[type=submit]:-moz-focusring,button:-moz-focusring{outline:1px dotted ButtonText}fieldset{padding:.35em .75em .625em}legend{box-sizing:border-box;color:inherit;display:table;max-width:100%;padding:0;white-space:normal}pr
2024-10-23 18:35:54 UTC	4144	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 69 6e 6e 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 6f 75 74 65 72 2d 73 70 69 6e 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 7b 2d 6d 6f 7a 2d 61 70 70 65 61 72 61 6e 63 65 3a 74 65 78 74 66 69 65 6c 64 7d 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 3a 3a 2d 6d 73 2d 63 6c 65 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 65 73 6b 74 6f 70 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 35 37 70 78 20 30 20 32 30 70 78 7d 2e 6d 6f 62 69 6c 65 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 34 70 78 7d 2e 6d 69 63 72 6f 73 6f 66 74 2d 6c 6f Data Ascii: -webkit-inner-spin-button,input::-webkit-outer-spin-button{margin:0;-webkit-appearance:none}input[type=number]{-moz-appearance:textfield}input[type=number]::-ms-clear{display:none}.desktop-logo{margin:57px 0 20px}.mobile-logo{margin-top:24px}.microsoft-lo
2024-10-23 18:35:54 UTC	8192	IN	Data Raw: 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2d 31 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 66 69 6c 65 73 2f 6f 64 73 70 2d 77 65 62 2d 70 72 6f 64 5f 32 30 32 34 2d 31 30 2d 31 31 2e 30 30 39 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 77 65 62 70 61 63 6b 2f 73 70 6f 67 75 65 73 74 61 63 63 65 73 73 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 50 4e 35 65 43 4c 56 77 74 56 72 7a 79 43 78 71 6e 51 69 54 64 6a 63 36 6e 67 6c 4b 39 5a 54 73 74 74 70 65 42 65 74 49 33 49 34 3d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 Data Ascii: l="preload" href="https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.009/spoguestaccesswebpack/spoguestaccess.js" as="script" integrity="sha256-PN5eCLVwtVrzyCxqnQiTdjc6nglK9ZTsttpeBetI3I4=" crossorigin="anonymous" /><script type="text/javascript"
2024-10-23 18:35:54 UTC	8192	IN	Data Raw: 63 61 6c 6c 28 65 2c 74 29 7d 2c 69 2e 70 3d 22 22 2c 69 28 69 2e 73 3d 32 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 72 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 6c 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 72 2c 6e 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 Data Ascii: call(e,t)},i.p="",i(i.s=2);function i(e){if(n[e])return n[e].exports;var t=n[e]={i:e,l:!1,exports:{}};return r[e].call(t.exports,t,t.exports,i),t.l=!0,t.exports}var r,n});!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t
2024-10-23 18:35:54 UTC	8192	IN	Data Raw: 65 29 3b 69 2e 72 65 71 75 69 72 65 54 79 70 65 3d 65 3b 69 2e 72 65 71 75 69 72 65 4d 6f 64 75 6c 65 73 3d 6e 3b 72 26 26 28 69 2e 6f 72 69 67 69 6e 61 6c 45 72 72 6f 72 3d 72 29 3b 72 65 74 75 72 6e 20 69 7d 69 66 28 76 6f 69 64 20 30 3d 3d 3d 64 65 66 69 6e 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 6a 73 29 7b 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 6a 73 29 29 72 65 74 75 72 6e 3b 63 66 67 3d 72 65 71 75 69 72 65 6a 73 3b 72 65 71 75 69 72 65 6a 73 3d 76 6f 69 64 20 30 7d 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 65 71 75 69 72 65 26 26 21 69 73 46 75 6e 63 74 69 6f 6e 28 72 65 71 75 69 72 65 29 29 7b 63 66 67 3d 72 65 71 75 69 72 65 3b 72 65 71 75 69 72 65 3d 76 6f 69 64 20 30 7d 72 65 71 3d 72 65 71 75 69 Data Ascii: e);i.requireType=e;i.requireModules=n;r&&(i.originalError=r);return i}if(void 0===define){if(void 0!==requirejs){if(isFunction(requirejs))return;cfg=requirejs;requirejs=void 0}if(void 0!==require&&!isFunction(require)){cfg=require;require=void 0}req=requi
2024-10-23 18:35:54 UTC	8192	IN	Data Raw: 73 44 65 66 69 6e 65 7c 7c 72 65 71 2e 6f 6e 45 72 72 6f 72 21 3d 3d 64 65 66 61 75 6c 74 4f 6e 45 72 72 6f 72 29 74 72 79 7b 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 65 7d 65 6c 73 65 20 69 3d 64 2e 65 78 65 63 43 62 28 72 2c 6f 2c 6e 2c 69 29 3b 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 28 65 3d 74 68 69 73 2e 6d 6f 64 75 6c 65 29 3f 69 3d 65 2e 65 78 70 6f 72 74 73 3a 74 68 69 73 2e 75 73 69 6e 67 45 78 70 6f 72 74 73 26 26 28 69 3d 74 68 69 73 2e 65 78 70 6f 72 74 73 29 29 3b 69 66 28 74 29 7b 74 2e 72 65 71 75 69 72 65 4d 61 70 3d 74 68 69 73 2e 6d 61 70 3b 74 2e 72 65 71 75 69 72 65 4d 6f 64 75 6c 65 73 3d 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 Data Ascii: sDefine\|\|req.onError!==defaultOnError)try{i=d.execCb(r,o,n,i)}catch(e){t=e}else i=d.execCb(r,o,n,i);this.map.isDefine&&void 0===i&&((e=this.module)?i=e.exports:this.usingExports&&(i=this.exports));if(t){t.requireMap=this.map;t.requireModules=this.map.isDe
2024-10-23 18:35:54 UTC	8192	IN	Data Raw: 67 65 74 4f 72 69 67 69 6e 29 3b 0d 0a 20 20 77 69 6e 64 6f 77 2e 5f 5f 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 62 61 63 6b 75 70 42 61 73 65 55 72 6c 20 3d 20 62 61 73 65 55 72 6c 73 5b 31 5d 3b 0d 0a 20 20 76 61 72 20 66 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 28 77 69 6e 64 6f 77 2e 5f 5f 63 64 6e 46 61 69 6c 4f 76 65 72 53 74 61 74 65 20 3d 20 7b 0d 0a 20 20 20 20 62 61 73 65 55 72 6c 46 61 69 6c 65 64 4f 76 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 6d 6f 64 75 6c 65 73 46 61 6c 6c 65 64 42 61 63 6b 3a 20 5b 5d 2c 0d 0a 20 20 20 20 6f 6e 50 61 74 68 46 61 6c 6c 62 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 20 28 6d 6f 64 75 6c 65 49 64 2c 20 70 61 74 68 73 29 20 7b 0d 0a 20 20 Data Ascii: getOrigin); window.__backupBaseUrl = baseUrls[1]; var backupBaseUrl = baseUrls[1]; var failOverState = (window.__cdnFailOverState = { baseUrlFailedOver: false, modulesFalledBack: [], onPathFallback: function (moduleId, paths) {
2024-10-23 18:35:54 UTC	8192	IN	Data Raw: 69 70 74 20 73 72 63 3d 22 2f 53 63 72 69 70 74 52 65 73 6f 75 72 63 65 2e 61 78 64 3f 64 3d 56 44 35 39 6a 7a 7a 6e 74 72 44 39 63 7a 66 37 56 76 2d 64 56 79 76 48 4b 4a 53 5f 36 42 6f 78 37 4f 76 67 43 74 50 36 44 66 5a 5f 72 30 6d 4b 68 69 56 51 48 42 74 6e 69 65 41 55 48 77 4e 4d 4a 4e 44 5a 6c 47 4c 32 71 42 46 55 78 67 75 4f 6a 67 6e 5f 6b 79 57 46 57 65 44 5f 77 52 64 2d 41 70 51 46 45 35 32 62 43 2d 61 33 6c 76 4a 6d 6c 33 58 56 5f 51 73 47 5f 49 56 6c 63 4f 66 4b 4a 70 48 6c 71 42 62 52 67 79 42 75 6c 42 58 39 6b 31 47 43 76 79 38 6a 6e 7a 32 53 31 65 65 35 6c 77 72 4d 67 43 53 6f 7a 58 74 73 55 66 74 6f 4d 35 73 4c 5a 68 63 71 55 4f 71 6a 48 42 67 57 30 26 61 6d 70 3b 74 3d 66 66 66 66 66 66 66 66 62 32 30 31 66 64 33 66 22 20 74 79 70 65 3d 22 Data Ascii: ipt src="/ScriptResource.axd?d=VD59jzzntrD9czf7Vv-dVyvHKJS_6Box7OvgCtP6DfZ_r0mKhiVQHBtnieAUHwNMJNDZlGL2qBFUxguOjgn_kyWFWeD_wRd-ApQFE52bC-a3lvJml3XV_QsG_IVlcOfKJpHlqBbRgyBulBX9k1GCvy8jnz2S1ee5lwrMgCSozXtsUftoM5sLZhcqUOqjHBgW0&t=ffffffffb201fd3f" type="
2024-10-23 18:35:54 UTC	5747	IN	Data Raw: 54 4f 41 41 45 4d 61 69 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 20 3d 20 22 74 78 74 54 4f 41 41 45 6d 61 69 6c 22 3b 0d 0a 09 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 2e 66 6f 63 75 73 4f 6e 45 72 72 6f 72 20 3d 20 22 74 22 3b 0d 0a 09 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 2e 65 72 72 6f 72 6d 65 73 73 61 67 65 20 3d 20 22 59 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 6d 75 73 74 20 62 65 20 69 6e 20 74 68 65 20 63 6f 72 72 65 63 74 20 65 6d 61 69 6c 20 66 6f 72 6d 61 74 20 28 65 2e 67 2e 20 5c 22 75 73 65 72 40 63 6f 6e 74 6f 73 6f 2e 63 6f 6d 5c 22 29 22 3b 0d 0a 09 56 61 6c 69 64 61 74 65 54 4f 41 41 45 4d 61 69 6c 2e 64 69 73 70 6c 61 79 20 3d 20 22 44 79 6e 61 6d 69 63 22 3b 0d 0a 09 56 61 6c 69 64 Data Ascii: TOAAEMail.controltovalidate = "txtTOAAEmail";ValidateTOAAEMail.focusOnError = "t";ValidateTOAAEMail.errormessage = "Your email address must be in the correct email format (e.g. \"user@contoso.com\")";ValidateTOAAEMail.display = "Dynamic";Valid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49715	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:54 UTC	805	OUT	GET /WebResource.axd?d=HCSL-E7_A1_FeBBMmGwtpizh0yIMX6PsPtv0h-aDGwRVPg5LoBaOdHaK4FrwnxhUozZTcWa6TXAqeo4eSNRRXUdgZLhcMEkzESinNZvsWWs1&t=638637567397700854 HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:54 UTC	752	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Thu, 23 Oct 2025 06:00:15 GMT Last-Modified: Wed, 04 Sep 2024 22:53:16 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,262656,0,0,244,0,26879,22 X-AspNet-Version: 4.0.30319 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D2607DE56C5C4F66B31B2A307AB38929 Ref B: DFW311000103047 Ref C: 2024-10-23T18:35:54Z Date: Wed, 23 Oct 2024 18:35:54 GMT Connection: close
2024-10-23 18:35:54 UTC	1447	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c Data Ascii: function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.val
2024-10-23 18:35:54 UTC	8192	IN	Data Raw: 6e 75 6c 6c 29 20 26 26 20 28 61 63 74 69 76 65 2e 69 64 2e 6c 65 6e 67 74 68 20 3e 20 30 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 73 74 46 6f 63 75 73 2e 76 61 6c 75 65 20 3d 20 61 63 74 69 76 65 2e 69 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 74 79 70 65 6f 66 28 61 63 74 69 76 65 2e 6e 61 6d 65 29 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 61 73 74 46 6f 63 75 73 2e 76 61 6c 75 65 20 3d 20 61 63 74 69 76 65 2e 6e 61 6d 65 3b 0d 0a 20 20 Data Ascii: null) && (active.id.length > 0)) { lastFocus.value = active.id; } else if (typeof(active.name) != "undefined") { lastFocus.value = active.name;
2024-10-23 18:35:55 UTC	6115	IN	Data Raw: 65 2e 63 68 61 72 41 74 28 30 29 20 3d 3d 20 22 73 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 65 76 65 6e 74 43 61 6c 6c 62 61 63 6b 29 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 26 26 20 28 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 65 76 65 6e 74 43 61 6c 6c 62 61 63 6b 20 21 3d 20 6e 75 6c 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 65 76 65 6e 74 43 61 6c 6c 62 61 63 6b 28 72 65 73 70 6f 6e 73 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 20 63 61 6c 6c 62 61 63 6b 4f 62 6a 65 63 74 2e 63 6f 6e 74 65 78 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 69 66 20 Data Ascii: e.charAt(0) == "s") { if ((typeof(callbackObject.eventCallback) != "undefined") && (callbackObject.eventCallback != null)) { callbackObject.eventCallback(response.substring(1), callbackObject.context); } } else if
2024-10-23 18:35:55 UTC	7309	IN	Data Raw: 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 73 65 72 29 20 7b 0d 0a Data Ascii: defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__nonMSDOMBrowser) {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49727	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:55 UTC	862	OUT	GET /ScriptResource.axd?d=b3JioE5tZaq_9kBjs4RUmRHI00rRfwVS1WIxOEecMyunbbQwGtT920PESG742YeFoZ_48A6prKsTz0ApZ1j-hpnxRYLl1rUa78apnoEaTRJ4JFgEqYO8tl-05CdckY2tEZSlO96Khi6d_SfnQaih0jzlqlSvuo7AczeexLJMBnU1&t=64bd211b HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:55 UTC	770	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 26951 Content-Type: application/x-javascript; charset=utf-8 Expires: Thu, 23 Oct 2025 18:35:55 GMT Last-Modified: Wed, 23 Oct 2024 18:35:55 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,91520,0,28427,121 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 27ED5D1688884EBEB6A8A185DD397DE2 Ref B: DFW311000106009 Ref C: 2024-10-23T18:35:55Z Date: Wed, 23 Oct 2024 18:35:55 GMT Connection: close
2024-10-23 18:35:55 UTC	1430	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 20 20 20 20 20 20 56 61 6c 69 64 61 74 6f 72 48 6f 6f 6b 75 70 43 6f 6e 74 72 6f 6c 28 63 74 72 6c 2c 20 76 61 6c 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 2e 69 73 76 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 2e 65 6e 61 62 6c 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 56 61 6c 69 64 61 74 6f 72 48 6f 6f 6b 75 70 43 6f 6e 74 72 6f 6c 28 63 6f 6e 74 72 6f 6c 2c 20 76 61 6c 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 28 63 6f 6e 74 72 6f 6c 2e 74 61 67 4e 61 6d 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 3b 20 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 Data Ascii: ValidatorHookupControl(ctrl, val); } else { val.isvalid = true; val.enabled = false; }}function ValidatorHookupControl(control, val) { if (typeof(control.tagName) != "string") { return; }
2024-10-23 18:35:55 UTC	6114	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 49 73 49 6e 56 69 73 69 62 6c 65 43 6f 6e 74 61 69 6e 65 72 28 63 74 72 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 49 73 56 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 4d 61 74 63 68 28 63 6f 6e 74 72 6f 6c 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 20 28 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 20 3d 3d 20 6e 75 6c 6c 29 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 7d 0d Data Ascii: return IsInVisibleContainer(ctrl.parentNode); } return true;}function IsValidationGroupMatch(control, validationGroup) { if ((typeof(validationGroup) == "undefined") \|\| (validationGroup == null)) { return true; }
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 56 61 6c 69 64 61 74 6f 72 54 72 69 6d 28 76 61 6c 75 65 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 76 61 72 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 22 22 3b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 74 79 70 65 6f 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 0d 0a 20 20 Data Ascii: val.controltovalidate); if (ValidatorTrim(value).length == 0) return true; var compareTo = ""; if ((typeof(val.controltocompare) != "string") \|\| (typeof(document.getElementById(val.controltocompare)) == "undefined") \|\|
2024-10-23 18:35:55 UTC	3023	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 6e 67 74 68 20 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 6f 72 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 6e 67 74 68 20 2b 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 79 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 69 65 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a Data Ascii: var length = parseSpecificAttribute(selector, dataValidationAttribute, Page_Validators); length += parseSpecificAttribute(selector, dataValidationSummaryAttribute, Page_ValidationSummaries); return length; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49725	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:55 UTC	891	OUT	GET /ScriptResource.axd?d=AoO_Zpn0QjxuBwM64iz_IKcG1LD2Q4te1Uuxqfe4ZkCiVFZaI2XQu6tkKgtQXafF9ZadOF-iFVriAjKAbDKFQmtujEm7daW_2kLFKyKDYd3A2CoISJOQSGiiPa_yCufVUAWWRyhOB5zJqZ4hhDFCzd9ECcfTihD-WUfd1As5msUG1XTWmcnYVnpckjjqCUVs0&t=ffffffffb201fd3f HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:55 UTC	774	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 102801 Content-Type: application/x-javascript; charset=utf-8 Expires: Thu, 23 Oct 2025 18:35:55 GMT Last-Modified: Wed, 23 Oct 2024 18:35:55 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,1413758,0,100465,122 X-AspNet-Version: 4.0.30319 SPRequestDuration: 5 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 62C6AB2F7EC24F7F8EAAA8ADC01716D6 Ref B: DFW311000106047 Ref C: 2024-10-23T18:35:55Z Date: Wed, 23 Oct 2024 18:35:55 GMT Connection: close
2024-10-23 18:35:55 UTC	95	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corpor
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d 65 3d 22 46 75 6e 63 74 69 6f 6e 22 3b 46 75 6e 63 74 69 6f 6e 2e 5f 5f 63 6c 61 73 73 3d 74 72 75 65 3b 46 75 6e 63 74 69 6f 6e 2e 63 72 65 61 74 65 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 66 28 65 3e 30 29 7b 76 61 72 Data Ascii: ation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeName="Function";Function.__class=true;Function.createCallback=function(b,a){return function(){var e=arguments.length;if(e>0){var
2024-10-23 18:35:55 UTC	7445	IN	Data Raw: 65 28 62 29 7b 76 61 72 20 66 3d 62 2e 5f 5f 69 6e 74 65 72 66 61 63 65 73 3b 69 66 28 66 29 69 66 28 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 28 66 2c 64 29 21 3d 3d 2d 31 29 72 65 74 75 72 6e 20 61 5b 63 5d 3d 74 72 75 65 3b 62 3d 62 2e 5f 5f 62 61 73 65 54 79 70 65 7d 72 65 74 75 72 6e 20 61 5b 63 5d 3d 66 61 6c 73 65 7d 3b 54 79 70 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 68 65 72 69 74 73 46 72 6f 6d 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 49 6e 68 65 72 69 74 61 6e 63 65 28 29 3b 76 61 72 20 61 3d 74 68 69 73 2e 5f 5f 62 61 73 65 54 79 70 65 3b 77 68 69 6c 65 28 61 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 74 72 75 65 3b 61 3d 61 2e 5f 5f 62 61 73 65 54 79 70 65 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d Data Ascii: e(b){var f=b.__interfaces;if(f)if(Array.indexOf(f,d)!==-1)return a[c]=true;b=b.__baseType}return a[c]=false};Type.prototype.inheritsFrom=function(b){this.resolveInheritance();var a=this.__baseType;while(a){if(a===b)return true;a=a.__baseType}return false}
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 73 2e 45 76 65 6e 74 41 72 67 73 29 3b 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 3b 53 79 73 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 53 79 73 2e 5f 44 65 62 75 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 29 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6f 70 65 72 Data Ascii: s.EventArgs);Type.registerNamespace("Sys.UI");Sys._Debug=function(){};Sys._Debug.prototype={_appendConsole:function(a){if(typeof Debug!=="undefined"&&Debug.writeln)Debug.writeln(a);if(window.console&&window.console.log)window.console.log(a);if(window.oper
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 2c 6e 75 6c 6c 2c 2d 31 2c 5b 62 5d 2c 63 29 29 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 65 6d 6f 76 65 41 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 61 3e 2d 31 26 26 61 3c 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 62 5b 61 5d 3b 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 62 2c 61 29 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 62 2c 6e 65 77 20 53 79 73 2e 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 53 79 73 2e 4e 6f 74 69 66 79 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 41 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 63 5d 2c 61 29 29 7d 7d 3b 53 79 73 2e 4f 62 73 Data Ascii: ,null,-1,[b],c));return true}return false};Sys.Observer.removeAt=function(b,a){if(a>-1&&a<b.length){var c=b[a];Array.removeAt(b,a);Sys.Observer._collectionChange(b,new Sys.CollectionChange(Sys.NotifyCollectionChangedAction.remove,null,-1,[c],a))}};Sys.Obs
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 69 66 28 61 3c 31 30 29 72 65 74 75 72 6e 20 22 30 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 29 72 65 74 75 72 6e 20 22 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 30 29 72 65 74 75 72 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 68 2c 70 2c 74 3d 2f 28 5b 5e 64 5d 7c 5e 29 28 64 7c 64 64 29 28 5b 5e 64 5d 7c 24 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 68 7c 7c 70 29 72 65 74 75 72 6e 20 68 3b 68 3d 74 2e 74 65 73 74 28 65 29 3b 70 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 68 7d 76 61 72 20 71 3d 30 2c 6f 3d 44 61 74 65 2e 5f 67 65 74 54 6f 6b 65 6e 52 65 67 45 78 70 28 29 2c 66 3b 69 66 Data Ascii: toString()}function v(a){if(a<10)return "000"+a;else if(a<100)return "00"+a;else if(a<1000)return "0"+a;return a.toString()}var h,p,t=/([^d]\|^)(d\|dd)([^d]\|$)/g;function s(){if(h\|\|p)return h;h=t.test(e);p=true;return h}var q=0,o=Date._getTokenRegExp(),f;if
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 29 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 41 72 72 61 79 28 74 68 69 73 2e 64 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 2e 41 62 62 72 65 76 69 61 74 65 64 44 61 79 4e 61 6d 65 73 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 2c 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 61 29 29 7d 2c 5f 74 6f 55 70 70 65 72 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 61 3c 64 3b 61 2b 2b 29 62 5b 61 5d 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 63 5b 61 5d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 74 6f 55 70 70 65 72 3a 66 75 6e 63 Data Ascii: )this._upperAbbrDays=this._toUpperArray(this.dateTimeFormat.AbbreviatedDayNames);return Array.indexOf(this._upperAbbrDays,this._toUpper(a))},_toUpperArray:function(c){var b=[];for(var a=0,d=c.length;a<d;a++)b[a]=this._toUpper(c[a]);return b},_toUpper:func
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 29 21 3d 3d 2d 31 29 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 4f 70 65 72 61 7c 7c 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 46 69 72 65 46 6f 78 29 61 3d 61 2e 73 70 6c 69 74 28 62 29 2e 6a 6f 69 6e 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 3b 65 6c 73 65 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 52 65 67 45 78 73 5b 62 5d 2c 53 79 73 2e 53 65 72 69 61 6c 69 7a Data Ascii: )!==-1)if(Sys.Browser.agent===Sys.Browser.Opera\|\|Sys.Browser.agent===Sys.Browser.FireFox)a=a.split(b).join(Sys.Serialization.JavaScriptSerializer._escapeChars[b]);else a=a.replace(Sys.Serialization.JavaScriptSerializer._charsToEscapeRegExs[b],Sys.Serializ
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 29 69 66 28 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 58 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 59 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 61 2e 6f 66 66 73 65 74 58 3b 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 61 2e 6f 66 66 73 65 74 59 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 74 61 72 67 65 74 26 26 74 68 69 73 2e 74 61 72 67 65 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 33 26 26 74 79 70 65 6f 66 20 61 2e 63 6c 69 65 6e 74 58 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 63 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 74 68 69 73 2e 74 61 72 67 65 74 29 2c 64 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d Data Ascii: )if(typeof a.offsetX!=="undefined"&&typeof a.offsetY!=="undefined"){this.offsetX=a.offsetX;this.offsetY=a.offsetY}else if(this.target&&this.target.nodeType!==3&&typeof a.clientX==="number"){var c=Sys.UI.DomElement.getLocation(this.target),d=Sys.UI.DomElem
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7c 7c 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 74 43 75 72 72 65 6e 74 53 74 79 6c 65 28 61 29 3b 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 62 3f 62 2e 64 69 73 70 6c 61 79 3a 6e 75 6c 6c 3b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 7c 7c 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 3d 3d 22 6e 6f 6e 65 22 29 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 20 22 44 49 56 22 3a 63 61 73 65 20 22 50 22 3a 63 61 73 65 20 22 41 44 44 52 45 53 53 22 3a 63 61 73 65 20 22 42 4c 4f 43 4b Data Ascii: ction(a){if(!a._oldDisplayMode){var b=a.currentStyle\|\|Sys.UI.DomElement._getCurrentStyle(a);a._oldDisplayMode=b?b.display:null;if(!a._oldDisplayMode\|\|a._oldDisplayMode==="none")switch(a.tagName.toUpperCase()){case "DIV":case "P":case "ADDRESS":case "BLOCK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49728	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:55 UTC	891	OUT	GET /ScriptResource.axd?d=VD59jzzntrD9czf7Vv-dVyvHKJS_6Box7OvgCtP6DfZ_r0mKhiVQHBtnieAUHwNMJNDZlGL2qBFUxguOjgn_kyWFWeD_wRd-ApQFE52bC-a3lvJml3XV_QsG_IVlcOfKJpHlqBbRgyBulBX9k1GCvy8jnz2S1ee5lwrMgCSozXtsUftoM5sLZhcqUOqjHBgW0&t=ffffffffb201fd3f HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:55 UTC	767	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 40326 Content-Type: application/x-javascript; charset=utf-8 Expires: Thu, 23 Oct 2025 09:28:31 GMT Last-Modified: Wed, 23 Oct 2024 09:28:31 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,262656,0,0,768,0,26879,15 X-AspNet-Version: 4.0.30319 SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 41AF2D380F4F40239D4CFC8004A0A6FD Ref B: DFW311000105029 Ref C: 2024-10-23T18:35:55Z Date: Wed, 23 Oct 2024 18:35:54 GMT Connection: close
2024-10-23 18:35:55 UTC	3508	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f 72 6d 73 2e 6a 73 0d 0a 54 79 70 65 2e 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 22 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjaxWebForms.jsType._registerScript("MicrosoftAjaxWebFo
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 75 6c 6c 7d 2c 6c 6f 61 64 53 63 72 69 70 74 73 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 62 2c 63 2c 61 29 7b 76 61 72 20 65 3d 7b 61 6c 6c 53 63 72 69 70 74 73 4c 6f 61 64 65 64 43 61 6c 6c 62 61 63 6b 3a 62 2c 73 63 72 69 70 74 4c 6f 61 64 46 61 69 6c 65 64 43 61 6c 6c 62 61 63 6b 3a 63 2c 73 63 72 69 70 74 4c 6f 61 64 54 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 3a 61 2c 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 3a 74 68 69 73 2e 5f 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 2c 73 63 72 69 70 74 54 69 6d 65 6f 75 74 3a 64 7d 3b 74 68 69 73 2e 5f 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 73 65 73 73 69 6f 6e 73 5b 74 68 69 73 2e 5f 73 65 73 73 69 6f 6e 73 2e 6c 65 6e 67 74 68 5d 3d 65 3b 69 66 28 21 74 68 69 73 2e 5f 6c 6f 61 64 69 Data Ascii: ull},loadScripts:function(d,b,c,a){var e={allScriptsLoadedCallback:b,scriptLoadFailedCallback:c,scriptLoadTimeoutCallback:a,scriptsToLoad:this._scriptsToLoad,scriptTimeout:d};this._scriptsToLoad=null;this._sessions[this._sessions.length]=e;if(!this._loadi
2024-10-23 18:35:55 UTC	4039	IN	Data Raw: 72 6f 72 2e 63 72 65 61 74 65 28 63 2c 7b 6e 61 6d 65 3a 22 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 53 65 72 76 65 72 45 72 72 6f 72 45 78 63 65 70 74 69 6f 6e 22 2c 68 74 74 70 53 74 61 74 75 73 43 6f 64 65 3a 61 7d 29 3b 62 2e 70 6f 70 53 74 61 63 6b 46 72 61 6d 65 28 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 63 72 65 61 74 65 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 50 61 72 73 65 72 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 22 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 50 61 72 73 65 72 45 72 72 6f 72 45 78 63 65 70 74 69 6f 6e 3a 20 22 2b 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 57 65 62 46 6f 72 Data Ascii: ror.create(c,{name:"Sys.WebForms.PageRequestManagerServerErrorException",httpStatusCode:a});b.popStackFrame();return b},_createPageRequestManagerParserError:function(b){var c="Sys.WebForms.PageRequestManagerParserErrorException: "+String.format(Sys.WebFor
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 64 61 74 65 28 61 2e 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 3b 69 66 28 64 29 7b 69 66 28 74 79 70 65 6f 66 20 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 6e 75 6c 6c 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 2e 6c 65 6e 67 74 68 3e 30 29 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 3d 61 2e 61 63 74 69 6f 6e 55 72 6c 3b 69 66 28 61 2e 74 72 61 63 6b 46 6f 63 75 73 29 7b 76 61 72 20 63 3d 74 68 65 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 22 5f 5f 4c 41 53 54 46 4f 43 55 53 22 5d 3b 69 66 28 74 79 70 65 6f 66 20 63 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 63 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d Data Ascii: date(a.validationGroup);if(d){if(typeof a.actionUrl!="undefined"&&a.actionUrl!=null&&a.actionUrl.length>0)theForm.action=a.actionUrl;if(a.trackFocus){var c=theForm.elements["__LASTFOCUS"];if(typeof c!="undefined"&&c!=null)if(typeof document.activeElement=
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 7b 62 2e 61 70 70 65 6e 64 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 3b 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 3d 6e 75 6c 6c 7d 76 61 72 20 63 3d 6e 65 77 20 53 79 73 2e 4e 65 74 2e 57 65 62 52 65 71 75 65 73 74 2c 61 3d 77 2e 61 63 74 69 6f 6e 3b 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 29 7b 76 61 72 20 72 3d 61 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 69 66 28 72 21 3d 3d 2d 31 29 61 3d 61 2e 73 75 62 73 74 72 28 30 2c 72 29 3b 76 61 72 20 6f 3d 22 22 2c 76 3d 22 22 2c 6d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 69 66 28 6d 21 3d 3d 2d 31 Data Ascii: dditionalInput){b.append(this._additionalInput);this._additionalInput=null}var c=new Sys.Net.WebRequest,a=w.action;if(Sys.Browser.agent===Sys.Browser.InternetExplorer){var r=a.indexOf("#");if(r!==-1)a=a.substr(0,r);var o="",v="",m=a.indexOf("?");if(m!==-1
2024-10-23 18:35:55 UTC	8192	IN	Data Raw: 73 65 73 5b 61 5d 2c 62 29 7d 2c 5f 73 63 72 69 70 74 49 6e 63 6c 75 64 65 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 62 29 7b 69 66 28 62 2e 65 78 65 63 75 74 6f 72 2e 67 65 74 5f 77 65 62 52 65 71 75 65 73 74 28 29 21 3d 3d 74 68 69 73 2e 5f 72 65 71 75 65 73 74 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 5f 63 6f 6d 6d 69 74 43 6f 6e 74 72 6f 6c 73 28 62 2e 75 70 64 61 74 65 50 61 6e 65 6c 44 61 74 61 2c 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 3f 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 2e 63 6f 6e 74 65 6e 74 3a 6e 75 6c 6c 29 3b 69 66 28 62 2e 66 6f 72 6d 41 63 74 69 6f 6e 4e 6f 64 65 29 74 68 69 73 2e 5f 66 6f 72 6d 2e 61 63 74 69 6f 6e 3d 62 2e 66 Data Ascii: ses[a],b)},_scriptIncludesLoadComplete:function(e,b){if(b.executor.get_webRequest()!==this._request)return;this._commitControls(b.updatePanelData,b.asyncPostBackTimeoutNode?b.asyncPostBackTimeoutNode.content:null);if(b.formActionNode)this._form.action=b.f
2024-10-23 18:35:55 UTC	11	IN	Data Raw: 61 6e 20 6f 6e 63 65 2e 22 7d 3b Data Ascii: an once."};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49726	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:55 UTC	755	OUT	GET /_layouts/15/images/microsoft-logo.png HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:55 UTC	730	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 3331 Content-Type: image/png Last-Modified: Sat, 19 Oct 2024 03:12:16 GMT Accept-Ranges: bytes ETag: "cb7a7ab3d421db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,784013,0,83736,121 SPRequestDuration: 5 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 3EDE282CEB6F4862AADFBD7C05DE8A2D Ref B: DFW311000103045 Ref C: 2024-10-23T18:35:55Z Date: Wed, 23 Oct 2024 18:35:55 GMT Connection: close
2024-10-23 18:35:55 UTC	1424	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 30 08 06 00 00 00 0c e6 a6 f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c bd 49 44 41 54 78 01 ed 9c 3d 77 1b b9 15 86 47 b6 7a d3 bf c0 4c ca 34 66 4e d2 6b 5c 64 53 9a ee b3 c7 a3 5f 60 fa ab 8d a8 da 1f d2 fe 02 8f 72 d2 9b ee b2 95 c9 7e cf 46 aa dc 65 a9 5f b0 52 5a 7f 30 cf 4b 03 5c 0c 06 43 42 12 87 de 8d 31 e7 8c 81 7b 71 71 2f e6 05 5e 7c 0c 47 de fa 6f ff f7 b3 ac 85 0b a7 3f de 18 fd e7 4f 72 fd f7 ef b3 1f b6 b6 b2 79 7e dd a1 f6 ff 92 5d cb b6 b2 56 9e 61 dd 6d 4d fe 12 02 4d 08 5c 6b 2a 48 fa 84 40 42 60 73 08 24 22 6e 0e eb 14 29 21 d0 88 40 22 62 23 34 a9 20 21 b0 39 04 12 11 37 87 75 8a 94 10 68 44 20 11 b1 11 9a 54 90 10 d8 1c 02 89 88 9b c3 3a 45 4a 08 34 22 b0 dd Data Ascii: PNGIHDR0sRGBIDATx=wGzL4fNk\dS_`r~Fe_RZ0K\CB1{qq/^\|Go?Ory~]VamMM\k*H@B`s$"n)!@"b#4 !97uhD T:EJ4"
2024-10-23 18:35:55 UTC	1907	IN	Data Raw: fc 3f 6b 5b 56 5e 6b da c2 ff e0 46 a7 1f 32 30 2a e7 3d da dc e7 1e 85 da ce 36 c8 76 9c 2d 3e 6d e3 83 6d 43 f8 d0 40 3b 67 10 f7 89 39 b6 0d 70 d2 81 59 25 3a 8e 6e 59 56 04 1c b8 e7 49 0d f0 f7 ef df 9f 89 3c c4 d9 f3 2b 6b 70 b1 0d ef 07 ce 7f 43 33 81 95 d4 b9 61 eb 89 70 22 1e 72 61 75 f8 e8 a1 b7 e2 3c c5 a6 70 5e a4 9c a1 9c 72 8f 84 03 98 f7 e7 46 ce 3f b4 e1 40 be 1d d5 3c 8b ef ca f9 d8 96 eb 79 f0 33 a2 ce 6d ab 33 e9 1e 65 a5 c1 a0 b4 65 3c 0b 74 a9 5e cb ce a9 e0 3e c6 b7 3b b9 65 1a 2b a1 ef 87 b7 ed 7f 79 58 75 bf 5e 69 ff 9b ec db f5 7a 6c d7 9b 06 14 20 4e 3c 10 ef d3 39 03 ca 34 20 fc eb be ab a0 e3 4b 57 5e 57 5e 9d 48 9b fc 81 76 ce c4 d1 53 9b 9b e2 b8 a4 6a b2 71 f4 05 f6 23 47 ce 2c 19 c0 64 e8 ea 4d 5e 5f 00 e5 0d b8 64 9a 90 18 Data Ascii: ?k[V^kF20*=6v->mmC@;g9pY%:nYVI<+kpC3ap"rau<p^rF?@<y3m3ee<t^>;e+yXu^izl N<94 KW^W^HvSjq#G,dM^_d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49731	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:55 UTC	506	OUT	GET /WebResource.axd?d=HCSL-E7_A1_FeBBMmGwtpizh0yIMX6PsPtv0h-aDGwRVPg5LoBaOdHaK4FrwnxhUozZTcWa6TXAqeo4eSNRRXUdgZLhcMEkzESinNZvsWWs1&t=638637567397700854 HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:56 UTC	760	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 23063 Content-Type: application/x-javascript Expires: Thu, 23 Oct 2025 04:27:27 GMT Last-Modified: Sun, 06 Oct 2024 03:25:39 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,0,66,7196235,0,1051136,17 X-AspNet-Version: 4.0.30319 SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 6B1C02FB2FD940B49D4BFEAC3417AF8C Ref B: DFW311000102045 Ref C: 2024-10-23T18:35:55Z Date: Wed, 23 Oct 2024 18:35:56 GMT Connection: close
2024-10-23 18:35:56 UTC	21	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 50 6f 73 74 Data Ascii: function WebForm_Post
2024-10-23 18:35:56 UTC	8192	IN	Data Raw: 42 61 63 6b 4f 70 74 69 6f 6e 73 28 65 76 65 6e 74 54 61 72 67 65 74 2c 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 2c 20 76 61 6c 69 64 61 74 69 6f 6e 2c 20 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 2c 20 61 63 74 69 6f 6e 55 72 6c 2c 20 74 72 61 63 6b 46 6f 63 75 73 2c 20 63 6c 69 65 6e 74 53 75 62 6d 69 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 54 61 72 67 65 74 20 3d 20 65 76 65 6e 74 54 61 72 67 65 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 20 3d 20 65 76 65 6e 74 41 72 67 75 6d 65 6e 74 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 20 3d 20 76 61 6c 69 64 61 74 69 6f 6e 3b 0d 0a 20 20 20 20 74 68 69 73 2e 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 20 3d 20 76 61 6c 69 64 61 Data Ascii: BackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) { this.eventTarget = eventTarget; this.eventArgument = eventArgument; this.validation = validation; this.validationGroup = valida
2024-10-23 18:35:56 UTC	7533	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 78 6d 6c 52 65 71 75 65 73 74 46 72 61 6d 65 2e 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 61 6c 6c 62 61 63 6b 56 61 6c 69 64 61 74 69 6f 6e 46 69 65 6c 64 45 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 61 6c 6c 62 61 63 6b 49 6e 64 65 78 46 69 65 6c 64 45 6c 65 6d 65 6e 74 20 3d 20 78 6d 6c 52 65 71 75 65 73 74 46 72 61 6d 65 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 49 4e 50 55 54 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 49 6e 64 65 78 46 69 65 6c 64 45 6c 65 6d 65 6e 74 2e 74 79 70 65 20 3d 20 22 68 69 64 64 65 6e 22 3b 0d 0a Data Ascii: xmlRequestFrame.document.forms[0].appendChild(callbackValidationFieldElement); } var callbackIndexFieldElement = xmlRequestFrame.document.createElement("INPUT"); callbackIndexFieldElement.type = "hidden";
2024-10-23 18:35:56 UTC	7317	IN	Data Raw: 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 61 72 67 65 74 5d 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 57 65 62 46 6f 72 6d 5f 53 69 6d 75 6c 61 74 65 43 6c 69 63 6b 28 64 65 66 61 75 6c 74 42 75 74 74 6f 6e 2c 20 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 20 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 57 65 62 46 6f 72 6d 5f 47 65 74 53 63 72 6f 6c 6c 58 28 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 5f 5f 6e 6f 6e 4d 53 44 4f 4d 42 72 6f 77 Data Ascii: { defaultButton = document.all[target]; } if (defaultButton) { return WebForm_SimulateClick(defaultButton, event); } } return true;}function WebForm_GetScrollX() { if (__nonMSDOMBrow

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49734	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:56 UTC	396	OUT	GET /_layouts/15/images/microsoft-logo.png HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:56 UTC	733	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 3331 Content-Type: image/png Last-Modified: Sat, 19 Oct 2024 03:12:16 GMT Accept-Ranges: bytes ETag: "cb7a7ab3d421db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,122,377170,0,181310,121 SPRequestDuration: 5 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 266FE8123A504CA3B38120A3CA8D1575 Ref B: DFW311000104009 Ref C: 2024-10-23T18:35:56Z Date: Wed, 23 Oct 2024 18:35:56 GMT Connection: close
2024-10-23 18:35:56 UTC	3331	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e2 00 00 00 30 08 06 00 00 00 0c e6 a6 f3 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 0c bd 49 44 41 54 78 01 ed 9c 3d 77 1b b9 15 86 47 b6 7a d3 bf c0 4c ca 34 66 4e d2 6b 5c 64 53 9a ee b3 c7 a3 5f 60 fa ab 8d a8 da 1f d2 fe 02 8f 72 d2 9b ee b2 95 c9 7e cf 46 aa dc 65 a9 5f b0 52 5a 7f 30 cf 4b 03 5c 0c 06 43 42 12 87 de 8d 31 e7 8c 81 7b 71 71 2f e6 05 5e 7c 0c 47 de fa 6f ff f7 b3 ac 85 0b a7 3f de 18 fd e7 4f 72 fd f7 ef b3 1f b6 b6 b2 79 7e dd a1 f6 ff 92 5d cb b6 b2 56 9e 61 dd 6d 4d fe 12 02 4d 08 5c 6b 2a 48 fa 84 40 42 60 73 08 24 22 6e 0e eb 14 29 21 d0 88 40 22 62 23 34 a9 20 21 b0 39 04 12 11 37 87 75 8a 94 10 68 44 20 11 b1 11 9a 54 90 10 d8 1c 02 89 88 9b c3 3a 45 4a 08 34 22 b0 dd Data Ascii: PNGIHDR0sRGBIDATx=wGzL4fNk\dS_`r~Fe_RZ0K\CB1{qq/^\|Go?Ory~]VamMM\k*H@B`s$"n)!@"b#4 !97uhD T:EJ4"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49732	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:56 UTC	563	OUT	GET /ScriptResource.axd?d=b3JioE5tZaq_9kBjs4RUmRHI00rRfwVS1WIxOEecMyunbbQwGtT920PESG742YeFoZ_48A6prKsTz0ApZ1j-hpnxRYLl1rUa78apnoEaTRJ4JFgEqYO8tl-05CdckY2tEZSlO96Khi6d_SfnQaih0jzlqlSvuo7AczeexLJMBnU1&t=64bd211b HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:56 UTC	767	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 26951 Content-Type: application/x-javascript; charset=utf-8 Expires: Thu, 23 Oct 2025 06:54:52 GMT Last-Modified: Wed, 23 Oct 2024 06:54:52 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,262656,0,0,166,0,26714,22 X-AspNet-Version: 4.0.30319 SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AC5AC7CEDE0D4F5E844928B1179BA0D5 Ref B: DFW311000104047 Ref C: 2024-10-23T18:35:56Z Date: Wed, 23 Oct 2024 18:35:56 GMT Connection: close
2024-10-23 18:35:56 UTC	3793	IN	Data Raw: 76 61 72 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 56 65 72 20 3d 20 22 31 32 35 22 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 73 56 61 6c 69 64 20 3d 20 74 72 75 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 42 6c 6f 63 6b 53 75 62 6d 69 74 20 3d 20 66 61 6c 73 65 3b 0d 0a 76 61 72 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 76 61 72 20 50 61 67 65 5f 54 65 78 74 54 79 70 65 73 20 3d 20 2f 5e 28 74 65 78 74 7c 70 61 73 73 77 6f 72 64 7c 66 69 6c 65 7c 73 65 61 72 63 68 7c 74 65 6c 7c 75 72 6c 7c 65 6d 61 69 6c 7c 6e 75 6d 62 65 72 7c 72 61 6e 67 65 7c 63 6f 6c 6f 72 7c 64 61 74 65 74 69 6d 65 7c 64 61 74 65 7c 6d 6f 6e 74 68 7c 77 65 65 6b 7c 74 69 6d 65 7c 64 61 74 65 74 69 6d 65 Data Ascii: var Page_ValidationVer = "125";var Page_IsValid = true;var Page_BlockSubmit = false;var Page_InvalidControlToBeFocused = null;var Page_TextTypes = /^(text\|password\|file\|search\|tel\|url\|email\|number\|range\|color\|datetime\|date\|month\|week\|time\|datetime
2024-10-23 18:35:56 UTC	8192	IN	Data Raw: 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 76 61 6c 20 3d 20 56 61 6c 69 64 61 74 6f 72 47 65 74 56 61 6c 75 65 52 65 63 75 72 73 69 76 65 28 63 6f 6e 74 72 6f 6c 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 69 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 76 61 6c 20 21 3d 20 22 22 29 20 72 65 74 75 72 6e 20 76 61 6c 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 22 22 3b 0d 0a 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 50 61 67 65 5f 43 6c 69 65 6e 74 56 61 6c 69 64 61 74 65 28 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 20 7b 0d 0a 20 20 20 20 50 61 67 65 5f 49 6e 76 61 6c 69 64 43 6f 6e 74 72 6f 6c 54 6f 42 65 46 6f 63 75 73 65 64 20 3d 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 69 66 20 28 74 79 70 Data Ascii: dNodes.length; i++) { val = ValidatorGetValueRecursive(control.childNodes[i]); if (val != "") return val; } return "";}function Page_ClientValidate(validationGroup) { Page_InvalidControlToBeFocused = null; if (typ
2024-10-23 18:35:57 UTC	3754	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 63 6c 65 61 6e 49 6e 70 75 74 20 3d 20 28 6d 5b 31 5d 20 21 3d 20 6e 75 6c 6c 20 3f 20 6d 5b 31 5d 20 3a 20 22 22 29 20 2b 20 28 6d 5b 32 5d 2e 6c 65 6e 67 74 68 3e 30 20 3f 20 6d 5b 32 5d 20 3a 20 22 30 22 29 20 2b 20 28 6d 5b 33 5d 2e 6c 65 6e 67 74 68 3e 30 20 3f 20 22 2e 22 20 2b 20 6d 5b 33 5d 20 3a 20 22 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 6e 75 6d 20 3d 20 70 61 72 73 65 46 6c 6f 61 74 28 63 6c 65 61 6e 49 6e 70 75 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 69 73 4e 61 4e 28 6e 75 6d 29 20 3f 20 6e 75 6c 6c 20 3a 20 6e 75 6d 29 3b 0d 0a 20 20 20 20 7d 0d 0a 20 20 20 20 65 6c 73 65 20 69 66 20 28 64 61 74 61 54 79 70 65 20 3d 3d Data Ascii: return null; cleanInput = (m[1] != null ? m[1] : "") + (m[2].length>0 ? m[2] : "0") + (m[3].length>0 ? "." + m[3] : ""); num = parseFloat(cleanInput); return (isNaN(num) ? null : num); } else if (dataType ==
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 2e 63 6f 6e 74 72 6f 6c 74 6f 76 61 6c 69 64 61 74 65 29 3b 0d 0a 20 20 20 20 69 66 20 28 56 61 6c 69 64 61 74 6f 72 54 72 69 6d 28 76 61 6c 75 65 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0d 0a 20 20 20 20 76 61 72 20 63 6f 6d 70 61 72 65 54 6f 20 3d 20 22 22 3b 0d 0a 20 20 20 20 69 66 20 28 28 74 79 70 65 6f 66 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 20 21 3d 20 22 73 74 72 69 6e 67 22 29 20 7c 7c 0d 0a 20 20 20 20 20 20 20 20 28 74 79 70 65 6f 66 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 76 61 6c 2e 63 6f 6e 74 72 6f 6c 74 6f 63 6f 6d 70 61 72 65 29 29 20 3d 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7c 7c 0d 0a 20 20 20 20 20 Data Ascii: .controltovalidate); if (ValidatorTrim(value).length == 0) return true; var compareTo = ""; if ((typeof(val.controltocompare) != "string") \|\| (typeof(document.getElementById(val.controltocompare)) == "undefined") \|\|
2024-10-23 18:35:57 UTC	3020	IN	Data Raw: 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 6e 67 74 68 20 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 6f 72 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 6e 67 74 68 20 2b 3d 20 70 61 72 73 65 53 70 65 63 69 66 69 63 41 74 74 72 69 62 75 74 65 28 73 65 6c 65 63 74 6f 72 2c 20 64 61 74 61 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 79 41 74 74 72 69 62 75 74 65 2c 20 50 61 67 65 5f 56 61 6c 69 64 61 74 69 6f 6e 53 75 6d 6d 61 72 69 65 73 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 65 6e 67 74 68 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 Data Ascii: var length = parseSpecificAttribute(selector, dataValidationAttribute, Page_Validators); length += parseSpecificAttribute(selector, dataValidationSummaryAttribute, Page_ValidationSummaries); return length; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49733	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:56 UTC	592	OUT	GET /ScriptResource.axd?d=VD59jzzntrD9czf7Vv-dVyvHKJS_6Box7OvgCtP6DfZ_r0mKhiVQHBtnieAUHwNMJNDZlGL2qBFUxguOjgn_kyWFWeD_wRd-ApQFE52bC-a3lvJml3XV_QsG_IVlcOfKJpHlqBbRgyBulBX9k1GCvy8jnz2S1ee5lwrMgCSozXtsUftoM5sLZhcqUOqjHBgW0&t=ffffffffb201fd3f HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:56 UTC	766	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 40326 Content-Type: application/x-javascript; charset=utf-8 Expires: Thu, 23 Oct 2025 06:51:27 GMT Last-Modified: Wed, 23 Oct 2024 06:51:27 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,262656,0,0,319,0,21070,3 X-AspNet-Version: 4.0.30319 SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D109ECCD7FC24D6CAC14BA01737EEA8C Ref B: DFW311000105033 Ref C: 2024-10-23T18:35:56Z Date: Wed, 23 Oct 2024 18:35:56 GMT Connection: close
2024-10-23 18:35:56 UTC	3479	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f 72 6d 73 2e 6a 73 0d 0a 54 79 70 65 2e 5f 72 65 67 69 73 74 65 72 53 63 72 69 70 74 28 22 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 57 65 62 46 6f Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjaxWebForms.jsType._registerScript("MicrosoftAjaxWebFo
2024-10-23 18:35:56 UTC	8192	IN	Data Raw: 3b 74 68 69 73 2e 5f 73 63 72 69 70 74 4c 6f 61 64 65 64 44 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 7d 2c 6c 6f 61 64 53 63 72 69 70 74 73 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 62 2c 63 2c 61 29 7b 76 61 72 20 65 3d 7b 61 6c 6c 53 63 72 69 70 74 73 4c 6f 61 64 65 64 43 61 6c 6c 62 61 63 6b 3a 62 2c 73 63 72 69 70 74 4c 6f 61 64 46 61 69 6c 65 64 43 61 6c 6c 62 61 63 6b 3a 63 2c 73 63 72 69 70 74 4c 6f 61 64 54 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 3a 61 2c 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 3a 74 68 69 73 2e 5f 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 2c 73 63 72 69 70 74 54 69 6d 65 6f 75 74 3a 64 7d 3b 74 68 69 73 2e 5f 73 63 72 69 70 74 73 54 6f 4c 6f 61 64 3d 6e 75 6c 6c 3b 74 68 69 73 2e 5f 73 65 73 73 69 6f 6e 73 5b 74 68 69 73 2e 5f 73 65 73 73 69 Data Ascii: ;this._scriptLoadedDelegate=null},loadScripts:function(d,b,c,a){var e={allScriptsLoadedCallback:b,scriptLoadFailedCallback:c,scriptLoadTimeoutCallback:a,scriptsToLoad:this._scriptsToLoad,scriptTimeout:d};this._scriptsToLoad=null;this._sessions[this._sessi
2024-10-23 18:35:57 UTC	4069	IN	Data Raw: 2e 52 65 73 2e 50 52 4d 5f 53 65 72 76 65 72 45 72 72 6f 72 2c 61 29 29 2c 62 3d 45 72 72 6f 72 2e 63 72 65 61 74 65 28 63 2c 7b 6e 61 6d 65 3a 22 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 53 65 72 76 65 72 45 72 72 6f 72 45 78 63 65 70 74 69 6f 6e 22 2c 68 74 74 70 53 74 61 74 75 73 43 6f 64 65 3a 61 7d 29 3b 62 2e 70 6f 70 53 74 61 63 6b 46 72 61 6d 65 28 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 63 72 65 61 74 65 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 50 61 72 73 65 72 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 22 53 79 73 2e 57 65 62 46 6f 72 6d 73 2e 50 61 67 65 52 65 71 75 65 73 74 4d 61 6e 61 67 65 72 50 61 72 73 65 72 45 72 72 6f 72 45 78 63 65 70 74 69 6f Data Ascii: .Res.PRM_ServerError,a)),b=Error.create(c,{name:"Sys.WebForms.PageRequestManagerServerErrorException",httpStatusCode:a});b.popStackFrame();return b},_createPageRequestManagerParserError:function(b){var c="Sys.WebForms.PageRequestManagerParserErrorExceptio
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 61 74 65 28 61 2e 76 61 6c 69 64 61 74 69 6f 6e 47 72 6f 75 70 29 3b 69 66 28 64 29 7b 69 66 28 74 79 70 65 6f 66 20 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 21 3d 6e 75 6c 6c 26 26 61 2e 61 63 74 69 6f 6e 55 72 6c 2e 6c 65 6e 67 74 68 3e 30 29 74 68 65 46 6f 72 6d 2e 61 63 74 69 6f 6e 3d 61 2e 61 63 74 69 6f 6e 55 72 6c 3b 69 66 28 61 2e 74 72 61 63 6b 46 6f 63 75 73 29 7b 76 61 72 20 63 3d 74 68 65 46 6f 72 6d 2e 65 6c 65 6d 65 6e 74 73 5b 22 5f 5f 4c 41 53 54 46 4f 43 55 53 22 5d 3b 69 66 28 74 79 70 65 6f 66 20 63 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 63 21 3d 6e 75 6c 6c 29 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d Data Ascii: ate(a.validationGroup);if(d){if(typeof a.actionUrl!="undefined"&&a.actionUrl!=null&&a.actionUrl.length>0)theForm.action=a.actionUrl;if(a.trackFocus){var c=theForm.elements["__LASTFOCUS"];if(typeof c!="undefined"&&c!=null)if(typeof document.activeElement==
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 7b 62 2e 61 70 70 65 6e 64 28 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 29 3b 74 68 69 73 2e 5f 61 64 64 69 74 69 6f 6e 61 6c 49 6e 70 75 74 3d 6e 75 6c 6c 7d 76 61 72 20 63 3d 6e 65 77 20 53 79 73 2e 4e 65 74 2e 57 65 62 52 65 71 75 65 73 74 2c 61 3d 77 2e 61 63 74 69 6f 6e 3b 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 29 7b 76 61 72 20 72 3d 61 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 69 66 28 72 21 3d 3d 2d 31 29 61 3d 61 2e 73 75 62 73 74 72 28 30 2c 72 29 3b 76 61 72 20 6f 3d 22 22 2c 76 3d 22 22 2c 6d 3d 61 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 69 66 28 6d 21 3d 3d 2d 31 29 Data Ascii: ditionalInput){b.append(this._additionalInput);this._additionalInput=null}var c=new Sys.Net.WebRequest,a=w.action;if(Sys.Browser.agent===Sys.Browser.InternetExplorer){var r=a.indexOf("#");if(r!==-1)a=a.substr(0,r);var o="",v="",m=a.indexOf("?");if(m!==-1)
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 65 73 5b 61 5d 2c 62 29 7d 2c 5f 73 63 72 69 70 74 49 6e 63 6c 75 64 65 73 4c 6f 61 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 62 29 7b 69 66 28 62 2e 65 78 65 63 75 74 6f 72 2e 67 65 74 5f 77 65 62 52 65 71 75 65 73 74 28 29 21 3d 3d 74 68 69 73 2e 5f 72 65 71 75 65 73 74 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 5f 63 6f 6d 6d 69 74 43 6f 6e 74 72 6f 6c 73 28 62 2e 75 70 64 61 74 65 50 61 6e 65 6c 44 61 74 61 2c 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 3f 62 2e 61 73 79 6e 63 50 6f 73 74 42 61 63 6b 54 69 6d 65 6f 75 74 4e 6f 64 65 2e 63 6f 6e 74 65 6e 74 3a 6e 75 6c 6c 29 3b 69 66 28 62 2e 66 6f 72 6d 41 63 74 69 6f 6e 4e 6f 64 65 29 74 68 69 73 2e 5f 66 6f 72 6d 2e 61 63 74 69 6f 6e 3d 62 2e 66 6f Data Ascii: es[a],b)},_scriptIncludesLoadComplete:function(e,b){if(b.executor.get_webRequest()!==this._request)return;this._commitControls(b.updatePanelData,b.asyncPostBackTimeoutNode?b.asyncPostBackTimeoutNode.content:null);if(b.formActionNode)this._form.action=b.fo
2024-10-23 18:35:57 UTC	10	IN	Data Raw: 6e 20 6f 6e 63 65 2e 22 7d 3b Data Ascii: n once."};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49737	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:56 UTC	592	OUT	GET /ScriptResource.axd?d=AoO_Zpn0QjxuBwM64iz_IKcG1LD2Q4te1Uuxqfe4ZkCiVFZaI2XQu6tkKgtQXafF9ZadOF-iFVriAjKAbDKFQmtujEm7daW_2kLFKyKDYd3A2CoISJOQSGiiPa_yCufVUAWWRyhOB5zJqZ4hhDFCzd9ECcfTihD-WUfd1As5msUG1XTWmcnYVnpckjjqCUVs0&t=ffffffffb201fd3f HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:57 UTC	767	IN	HTTP/1.1 200 OK Cache-Control: public Content-Length: 102801 Content-Type: application/x-javascript; charset=utf-8 Expires: Thu, 23 Oct 2025 14:46:58 GMT Last-Modified: Wed, 23 Oct 2024 14:46:58 GMT P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,262656,0,0,181,0,21070,4 X-AspNet-Version: 4.0.30319 SPRequestDuration: 3 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 7B8E9CD443374B80830BBC69B3F9BFD3 Ref B: DFW311000110051 Ref C: 2024-10-23T18:35:56Z Date: Wed, 23 Oct 2024 18:35:56 GMT Connection: close
2024-10-23 18:35:57 UTC	3510	IN	Data Raw: 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 2f 2f 20 4d 69 63 72 6f 73 6f 66 74 41 6a 61 78 2e 6a 73 0d 0a 46 75 6e 63 74 69 6f 6e 2e 5f 5f 74 79 70 65 4e 61 6d 65 3d 22 46 75 6e 63 74 69 6f 6e 22 3b 46 75 6e 63 74 69 6f 6e 2e 5f 5f 63 6c 61 73 73 3d Data Ascii: //----------------------------------------------------------// Copyright (C) Microsoft Corporation. All rights reserved.//----------------------------------------------------------// MicrosoftAjax.jsFunction.__typeName="Function";Function.__class=
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 52 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 64 29 7b 76 61 72 20 62 3d 22 53 79 73 2e 41 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 45 78 63 65 70 74 69 6f 6e 3a 20 22 2b 28 64 3f 64 3a 53 79 73 2e 52 65 73 2e 61 72 67 75 6d 65 6e 74 4f 75 74 4f 66 52 61 6e 67 65 29 3b 69 66 28 63 29 62 2b 3d 22 5c 6e 22 2b 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 52 65 73 2e 70 61 72 61 6d 4e 61 6d 65 2c 63 29 3b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 21 3d 3d 6e 75 6c 6c 29 62 2b 3d 22 5c 6e 22 2b 53 74 72 69 6e 67 2e 66 6f 72 6d 61 74 28 53 79 73 2e 52 65 73 2e 61 63 74 75 61 6c 56 61 6c 75 65 2c 61 29 3b 76 61 72 20 65 3d 45 72 72 6f 72 2e 63 72 65 61 74 65 28 62 2c 7b 6e 61 6d 65 3a 22 53 Data Ascii: Range=function(c,a,d){var b="Sys.ArgumentOutOfRangeException: "+(d?d:Sys.Res.argumentOutOfRange);if(c)b+="\n"+String.format(Sys.Res.paramName,c);if(typeof a!=="undefined"&&a!==null)b+="\n"+String.format(Sys.Res.actualValue,a);var e=Error.create(b,{name:"S
2024-10-23 18:35:57 UTC	4037	IN	Data Raw: 61 72 20 61 3d 62 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 3b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 3f 61 3a 6e 75 6c 6c 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 53 79 73 2e 5f 69 73 44 6f 6d 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 66 61 6c 73 65 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 62 3d 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 64 6f 63 75 6d 65 6e 74 7c 7c 61 3b 69 66 28 62 21 3d 61 29 7b 76 61 72 20 64 3d 62 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 62 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3b 63 3d 64 21 3d 61 7d 65 6c 73 65 20 63 3d 74 79 70 65 6f 66 20 62 2e 62 6f 64 79 3d 3d Data Ascii: ar a=b.prototype[c];return a instanceof Function?a:null}return null};Sys._isDomElement=function(a){var c=false;if(typeof a.nodeType!=="number"){var b=a.ownerDocument\|\|a.document\|\|a;if(b!=a){var d=b.defaultView\|\|b.parentWindow;c=d!=a}else c=typeof b.body==
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 41 72 67 73 29 3b 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 79 73 2e 55 49 22 29 3b 53 79 73 2e 5f 44 65 62 75 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 53 79 73 2e 5f 44 65 62 75 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 61 70 70 65 6e 64 43 6f 6e 73 6f 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 44 65 62 75 67 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 29 44 65 62 75 67 2e 77 72 69 74 65 6c 6e 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 61 29 3b 69 66 28 77 69 6e 64 6f 77 2e 6f 70 65 72 61 29 77 69 6e 64 6f Data Ascii: Args);Type.registerNamespace("Sys.UI");Sys._Debug=function(){};Sys._Debug.prototype={_appendConsole:function(a){if(typeof Debug!=="undefined"&&Debug.writeln)Debug.writeln(a);if(window.console&&window.console.log)window.console.log(a);if(window.opera)windo
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 31 2c 5b 62 5d 2c 63 29 29 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 65 6d 6f 76 65 41 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 29 7b 69 66 28 61 3e 2d 31 26 26 61 3c 62 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 63 3d 62 5b 61 5d 3b 41 72 72 61 79 2e 72 65 6d 6f 76 65 41 74 28 62 2c 61 29 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 62 2c 6e 65 77 20 53 79 73 2e 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 28 53 79 73 2e 4e 6f 74 69 66 79 43 6f 6c 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 41 63 74 69 6f 6e 2e 72 65 6d 6f 76 65 2c 6e 75 6c 6c 2c 2d 31 2c 5b 63 5d 2c 61 29 29 7d 7d 3b 53 79 73 2e 4f 62 73 65 72 76 65 72 2e 72 Data Ascii: 1,[b],c));return true}return false};Sys.Observer.removeAt=function(b,a){if(a>-1&&a<b.length){var c=b[a];Array.removeAt(b,a);Sys.Observer._collectionChange(b,new Sys.CollectionChange(Sys.NotifyCollectionChangedAction.remove,null,-1,[c],a))}};Sys.Observer.r
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 29 7b 69 66 28 61 3c 31 30 29 72 65 74 75 72 6e 20 22 30 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 29 72 65 74 75 72 6e 20 22 30 30 22 2b 61 3b 65 6c 73 65 20 69 66 28 61 3c 31 30 30 30 29 72 65 74 75 72 6e 20 22 30 22 2b 61 3b 72 65 74 75 72 6e 20 61 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 68 2c 70 2c 74 3d 2f 28 5b 5e 64 5d 7c 5e 29 28 64 7c 64 64 29 28 5b 5e 64 5d 7c 24 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 68 7c 7c 70 29 72 65 74 75 72 6e 20 68 3b 68 3d 74 2e 74 65 73 74 28 65 29 3b 70 3d 74 72 75 65 3b 72 65 74 75 72 6e 20 68 7d 76 61 72 20 71 3d 30 2c 6f 3d 44 61 74 65 2e 5f 67 65 74 54 6f 6b 65 6e 52 65 67 45 78 70 28 29 2c 66 3b 69 66 28 21 6b 26 26 6e 29 Data Ascii: g()}function v(a){if(a<10)return "000"+a;else if(a<100)return "00"+a;else if(a<1000)return "0"+a;return a.toString()}var h,p,t=/([^d]\|^)(d\|dd)([^d]\|$)/g;function s(){if(h\|\|p)return h;h=t.test(e);p=true;return h}var q=0,o=Date._getTokenRegExp(),f;if(!k&&n)
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 75 70 70 65 72 41 62 62 72 44 61 79 73 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 41 72 72 61 79 28 74 68 69 73 2e 64 61 74 65 54 69 6d 65 46 6f 72 6d 61 74 2e 41 62 62 72 65 76 69 61 74 65 64 44 61 79 4e 61 6d 65 73 29 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 5f 75 70 70 65 72 41 62 62 72 44 61 79 73 2c 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 61 29 29 7d 2c 5f 74 6f 55 70 70 65 72 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 61 3d 30 2c 64 3d 63 2e 6c 65 6e 67 74 68 3b 61 3c 64 3b 61 2b 2b 29 62 5b 61 5d 3d 74 68 69 73 2e 5f 74 6f 55 70 70 65 72 28 63 5b 61 5d 29 3b 72 65 74 75 72 6e 20 62 7d 2c 5f 74 6f 55 70 70 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: upperAbbrDays=this._toUpperArray(this.dateTimeFormat.AbbreviatedDayNames);return Array.indexOf(this._upperAbbrDays,this._toUpper(a))},_toUpperArray:function(c){var b=[];for(var a=0,d=c.length;a<d;a++)b[a]=this._toUpper(c[a]);return b},_toUpper:function(a)
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 69 66 28 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 4f 70 65 72 61 7c 7c 53 79 73 2e 42 72 6f 77 73 65 72 2e 61 67 65 6e 74 3d 3d 3d 53 79 73 2e 42 72 6f 77 73 65 72 2e 46 69 72 65 46 6f 78 29 61 3d 61 2e 73 70 6c 69 74 28 62 29 2e 6a 6f 69 6e 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 65 73 63 61 70 65 43 68 61 72 73 5b 62 5d 29 3b 65 6c 73 65 20 61 3d 61 2e 72 65 70 6c 61 63 65 28 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a 61 76 61 53 63 72 69 70 74 53 65 72 69 61 6c 69 7a 65 72 2e 5f 63 68 61 72 73 54 6f 45 73 63 61 70 65 52 65 67 45 78 73 5b 62 5d 2c 53 79 73 2e 53 65 72 69 61 6c 69 7a 61 74 69 6f 6e 2e 4a Data Ascii: if(Sys.Browser.agent===Sys.Browser.Opera\|\|Sys.Browser.agent===Sys.Browser.FireFox)a=a.split(b).join(Sys.Serialization.JavaScriptSerializer._escapeChars[b]);else a=a.replace(Sys.Serialization.JavaScriptSerializer._charsToEscapeRegExs[b],Sys.Serialization.J
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 65 6f 66 20 61 2e 6f 66 66 73 65 74 58 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 61 2e 6f 66 66 73 65 74 59 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 61 2e 6f 66 66 73 65 74 58 3b 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 61 2e 6f 66 66 73 65 74 59 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 74 61 72 67 65 74 26 26 74 68 69 73 2e 74 61 72 67 65 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 33 26 26 74 79 70 65 6f 66 20 61 2e 63 6c 69 65 6e 74 58 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 76 61 72 20 63 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 28 74 68 69 73 2e 74 61 72 67 65 74 29 2c 64 3d 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 Data Ascii: eof a.offsetX!=="undefined"&&typeof a.offsetY!=="undefined"){this.offsetX=a.offsetX;this.offsetY=a.offsetY}else if(this.target&&this.target.nodeType!==3&&typeof a.clientX==="number"){var c=Sys.UI.DomElement.getLocation(this.target),d=Sys.UI.DomElement._ge
2024-10-23 18:35:57 UTC	8192	IN	Data Raw: 29 7b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 29 7b 76 61 72 20 62 3d 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7c 7c 53 79 73 2e 55 49 2e 44 6f 6d 45 6c 65 6d 65 6e 74 2e 5f 67 65 74 43 75 72 72 65 6e 74 53 74 79 6c 65 28 61 29 3b 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 62 3f 62 2e 64 69 73 70 6c 61 79 3a 6e 75 6c 6c 3b 69 66 28 21 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 7c 7c 61 2e 5f 6f 6c 64 44 69 73 70 6c 61 79 4d 6f 64 65 3d 3d 3d 22 6e 6f 6e 65 22 29 73 77 69 74 63 68 28 61 2e 74 61 67 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7b 63 61 73 65 20 22 44 49 56 22 3a 63 61 73 65 20 22 50 22 3a 63 61 73 65 20 22 41 44 44 52 45 53 53 22 3a 63 61 73 65 20 22 42 4c 4f 43 4b 51 55 4f 54 45 22 3a Data Ascii: ){if(!a._oldDisplayMode){var b=a.currentStyle\|\|Sys.UI.DomElement._getCurrentStyle(a);a._oldDisplayMode=b?b.display:null;if(!a._oldDisplayMode\|\|a._oldDisplayMode==="none")switch(a.tagName.toUpperCase()){case "DIV":case "P":case "ADDRESS":case "BLOCKQUOTE":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49739	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:56 UTC	755	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:57 UTC	733	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sat, 19 Oct 2024 03:12:37 GMT Accept-Ranges: bytes ETag: "5c41f1bfd421db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,512062,0,87797,122 SPRequestDuration: 3 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 462E7358717C492C827D8F5E92368C0E Ref B: DFW311000107033 Ref C: 2024-10-23T18:35:56Z Date: Wed, 23 Oct 2024 18:35:56 GMT Connection: close
2024-10-23 18:35:57 UTC	3437	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2024-10-23 18:35:57 UTC	4449	IN	Data Raw: 00 00 00 00 00 00 00 00 00 70 6c 03 bf 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 bf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 40 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: plplplplplplplplplplplplplplplplplplpl@plplplplplplplplplplplplplplplplpl@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49743	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:57 UTC	396	OUT	GET /_layouts/15/images/favicon.ico?rev=47 HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:35:58 UTC	735	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sat, 19 Oct 2024 03:12:37 GMT Accept-Ranges: bytes ETag: "5c41f1bfd421db1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,1092006,0,102618,121 SPRequestDuration: 6 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 4F727635952941FC84C22C52486963CC Ref B: DFW311000103025 Ref C: 2024-10-23T18:35:57Z Date: Wed, 23 Oct 2024 18:35:57 GMT Connection: close
2024-10-23 18:35:58 UTC	347	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2024-10-23 18:35:58 UTC	7539	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 50 d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 10 d0 c6 37 ef d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ef d0 c6 37 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 7P77777777777P77777777777777

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49745	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:58 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kWR8Zym5yZKfL9A&MD=HsB53M7E HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 18:35:59 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: b8298b87-7b52-4dd6-b017-d52b92041f09 MS-RequestId: 06e765d6-2f76-444f-a133-b1eeb904362d MS-CV: 29jVAON/xUiBx22z.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 18:35:58 GMT Connection: close Content-Length: 24490
2024-10-23 18:35:59 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-23 18:35:59 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:35:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 18:35:59 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=79813 Date: Wed, 23 Oct 2024 18:35:59 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:36:00 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-23 18:36:00 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=79781 Date: Wed, 23 Oct 2024 18:36:00 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-23 18:36:00 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49750	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:36:36 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=kWR8Zym5yZKfL9A&MD=HsB53M7E HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-23 18:36:36 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: e1a1a489-5551-4df7-99d2-be8e472d1633 MS-RequestId: 2bc4025a-897c-4e08-8fed-6560e96f9bae MS-CV: os8VENhyWkSi7Flh.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 23 Oct 2024 18:36:35 GMT Connection: close Content-Length: 30005
2024-10-23 18:36:36 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-23 18:36:36 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49752	2.23.209.187	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:36:42 UTC	2595	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: -240 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDoAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAeKlD4m2Q%2BFusMXhY/IRCAfYJrjZnYxx5/mIax7C2uCgLRr5Rnbp8HS0EGOPxpZsTRwF7kwMKrBqacs/h8u0sWoRTh1fz793HDFqCAs/BM67WHnWfXaAHr2unUwQM%2BNdnZAaJPDpXIysSNdI0F8unEAEk9Mw5hMlj0REsf0wAHDRzkufXx8EAI6Am8tSh2VdPI7I2Gcj9lKBsjxTHk2%2Bktviph0VQOC7nXEVSjyv6W1lHi9WfLmNoPw1fPO5ZCAv4lsIqSV%2B9o2eUdlhtXvEPjVmV4NzbB4wi74kVLcL80tmJGPPBqtymCeus0QztzNKqP%2B45a4Z%2BzJU6pT3fxNg4FoQZgAAEOM9Ohp%2Bo//1RUdJWza1cD2wAd2qsWghKVzQ95ZMpkG%2BxJvONeRF4CkLb9PqGBQGUIFG8aghp0IztAHWmBBXWvFW%2BMjOw85w6MvsVjiO5uqVUdEUcT20POSe7AXMCHWO6DCO%2BTwiCXrA1gkcu8ZnNeilC4usqBw1AuRrK8QixrcQgK2/%2BBloXrk6BPRD6whLUvPfQWtV3fMVGjwzymjo9QbkfWSyXZS5Vf7%2BupKuzobQxdQpYrlySP/9VoB7kT9P%2B0kCkz03eGGoyj1ZSCYxcocVuJgzq8KAvu/g/LjNym55wOaI2Fm%2BCwyv8m0khiv9oEAQNpw8F4ZJDdUKOHUBnWn4UGO5VjKTM6mo1rgxFykCW%2BNtrvZ%2BzhnKD6SyAxHr5Bxd2Zji2NEM%2B9zecVphVXVCM85i7IR2UT4p6Ibq4WxJsGEE4SMvhlYx6yQnlOMTjaNauvCLGVitjc1B8rTX6iXWxhBsg9icGv%2B8sgzcz1NlQrccDVDlJ2HS3K9qkb70vMh2cOqpTZON0wIcmTWyBST/jq2JVA9BRjqyCD3HRKmXVL0fz%2B5T5TBXN5rOHEE [TRUNCATED] X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1729708599 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 709D926D63CF46AA98B51A3BCDC3B832 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-10-23 18:36:43 UTC	1147	IN	HTTP/1.1 200 OK Content-Length: 2215 Content-Type: application/json; charset=utf-8 Cache-Control: private X-EventID: 6719423bc25747fa889343353c44391c X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Wed, 23 Oct 2024 18:36:43 GMT Connection: close Set-Cookie: _EDGE_S=SID=1E3262E780B16BD810C477C6816C6AFE&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Mon, 17-Nov-2025 18:36:43 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=1E3262E780B16BD810C477C6816C6AFE; domain=.bing.com; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.31d01702.1729708603.33a4c9f
2024-10-23 18:36:43 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.17	49753	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:36:43 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-10-23 18:36:43 UTC	209	IN	HTTP/1.1 400 Bad Request X-MSEdge-Ref: Ref A: C53B6E5DFC40447EAD6337CB0CC31816 Ref B: DFW311000108031 Ref C: 2024-10-23T18:36:43Z Date: Wed, 23 Oct 2024 18:36:43 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49760	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:34 UTC	1126	OUT	POST /personal/rogawskia_karlaotto_com/_layouts/15/guestaccess.aspx?e=5%3aQjOX6J&at=9&share=EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive Content-Length: 1623 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://independentsgroup-my.sharepoint.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:34 UTC	1623	OUT	Data Raw: 5f 5f 45 56 45 4e 54 54 41 52 47 45 54 3d 62 74 6e 53 75 62 6d 69 74 45 6d 61 69 6c 26 5f 5f 45 56 45 4e 54 41 52 47 55 4d 45 4e 54 3d 26 53 69 64 65 42 79 53 69 64 65 54 6f 6b 65 6e 3d 31 36 2e 30 2e 32 35 34 30 32 2e 31 32 30 30 39 26 5f 5f 56 49 45 57 53 54 41 54 45 3d 6b 25 32 42 75 4c 48 49 45 25 32 42 72 75 4a 52 45 30 63 7a 51 42 37 31 4f 70 4c 6c 66 45 54 35 52 33 70 45 4c 73 64 25 32 42 39 48 68 39 6a 6a 6e 59 34 4c 51 62 35 41 72 4d 45 71 76 33 47 48 38 6c 79 44 47 4f 6f 42 37 39 62 4a 68 4b 25 32 46 50 59 46 41 45 4e 68 62 61 6b 76 6c 4a 32 45 69 43 35 79 35 4f 33 61 54 74 4f 58 31 42 53 46 31 25 32 46 31 49 36 49 52 62 44 45 79 74 6f 57 36 73 46 4c 61 46 6b 46 37 45 6a 73 61 73 52 48 73 51 35 59 4f 44 79 30 63 64 42 42 64 4b 39 4f 35 50 57 51 Data Ascii: __EVENTTARGET=btnSubmitEmail&__EVENTARGUMENT=&SideBySideToken=16.0.25402.12009&__VIEWSTATE=k%2BuLHIE%2BruJRE0czQB71OpLlfET5R3pELsd%2B9Hh9jjnY4LQb5ArMEqv3GH8lyDGOoB79bJhK%2FPYFAENhbakvlJ2EiC5y5O3aTtOX1BSF1%2F1I6IRbDEytoW6sFLaFkF7EjsasRHsQ5YODy0cdBBdK9O5PWQ
2024-10-23 18:37:35 UTC	1177	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 398 Content-Type: text/html; charset=utf-8 Location: https://independentsgroup-my.sharepoint.com/personal/rogawskia_karlaotto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Frogawskia%5Fkarlaotto%5Fcom%2F%5Flayouts%2F15%2Fguestaccess%2Easpx%3Fe%3D5%253aQjOX6J%26at%3D9%26share%3DEmZI2ojsTbZCvWUk1z%2DjCWkBMDec1bTFXOixjJwJN7fCLw P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,125,73099,0,74879,121 X-SharePointHealthScore: 3 SPRequestGuid: 85cd5ca1-4085-a000-2eed-fda9fcb81be5 request-id: 85cd5ca1-4085-a000-2eed-fda9fcb81be5 MS-CV: oVzNhYVAAKAu7f2p/Lgb5Q.0 Strict-Transport-Security: max-age=31536000 X-AspNet-Version: 4.0.30319 SPRequestDuration: 172 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C42810F098CB4ECBAAD4D04ED0CC8B3C Ref B: DFW311000110023 Ref C: 2024-10-23T18:37:34Z Date: Wed, 23 Oct 2024 18:37:34 GMT Connection: close
2024-10-23 18:37:35 UTC	37	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c Data Ascii: <html><head><title>Object moved</titl
2024-10-23 18:37:35 UTC	361	IN	Data Raw: 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 64 65 70 65 6e 64 65 6e 74 73 67 72 6f 75 70 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 72 6f 67 61 77 73 6b 69 61 5f 6b 61 72 6c 61 6f 74 74 6f 5f 63 6f 6d 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 3f 53 6f 75 72 63 65 3d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 72 6f 67 61 77 73 6b 69 61 25 35 46 6b 61 72 6c 61 6f 74 74 6f 25 35 46 63 6f 6d 25 32 46 25 35 46 6c 61 79 6f 75 74 73 25 32 46 31 35 25 32 46 67 75 65 73 74 61 63 63 65 73 73 25 32 45 61 73 70 78 25 33 46 65 25 33 44 35 25 32 35 33 61 51 6a Data Ascii: e></head><body><h2>Object moved to <a href="https://independentsgroup-my.sharepoint.com/personal/rogawskia_karlaotto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Frogawskia%5Fkarlaotto%5Fcom%2F%5Flayouts%2F15%2Fguestaccess%2Easpx%3Fe%3D5%253aQj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49759	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:35 UTC	1106	OUT	GET /personal/rogawskia_karlaotto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Frogawskia%5Fkarlaotto%5Fcom%2F%5Flayouts%2F15%2Fguestaccess%2Easpx%3Fe%3D5%253aQjOX6J%26at%3D9%26share%3DEmZI2ojsTbZCvWUk1z%2DjCWkBMDec1bTFXOixjJwJN7fCLw HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:35 UTC	2123	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 452 Content-Type: text/html; charset=utf-8 Location: /_forms/default.aspx?ReturnUrl=%2fpersonal%2frogawskia_karlaotto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Frogawskia%255Fkarlaotto%255Fcom%252F%255Flayouts%252F15%252Fguestaccess%252Easpx%253Fe%253D5%25253aQjOX6J%2526at%253D9%2526share%253DEmZI2ojsTbZCvWUk1z%252DjCWkBMDec1bTFXOixjJwJN7fCLw&Source=cookie P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGcm9nYXdza2lhJTVGa2FybGFvdHRvJTVGY29tJTJGJTVGbGF5b3V0cyUyRjE1JTJGZ3Vlc3RhY2Nlc3MlMkVhc3B4JTNGZSUzRDUlMjUzYVFqT1g2SiUyNmF0JTNEOSUyNnNoYXJlJTNERW1aSTJvanNUYlpDdldVazF6JTJEakNXa0JNRGVjMWJURlhPaXhqSndKTjdmQ0x3; expires=Wed, 23-Oct-2024 18:47:35 GMT; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,525568,0,0,69791,0,28427,121 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 85cd5ca1-30ae-a000-2eed-fff1fd4e67e0 request-id: 85cd5ca1-30ae-a000-2eed-fff1fd4e67e0 MS-CV: oVzNha4wAKAu7f/x/U5n4A.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-DFW31r5d&frontEnd=AFD&RemoteIP=173.254.250.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 14 SPIisLatency: 19 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A19612EEE14E4EC6A60E2E6846332783 Ref B: DFW311000108019 Ref C: 2024-10-23T18:37:35Z Date: Wed, 23 Oct 2024 18:37:34 GMT Connection: close
2024-10-23 18:37:35 UTC	77	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a
2024-10-23 18:37:35 UTC	375	IN	Data Raw: 68 72 65 66 3d 22 2f 5f 66 6f 72 6d 73 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 70 65 72 73 6f 6e 61 6c 25 32 66 72 6f 67 61 77 73 6b 69 61 5f 6b 61 72 6c 61 6f 74 74 6f 5f 63 6f 6d 25 32 66 5f 6c 61 79 6f 75 74 73 25 32 66 31 35 25 32 66 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 25 33 66 53 6f 75 72 63 65 25 33 64 25 32 35 32 46 70 65 72 73 6f 6e 61 6c 25 32 35 32 46 72 6f 67 61 77 73 6b 69 61 25 32 35 35 46 6b 61 72 6c 61 6f 74 74 6f 25 32 35 35 46 63 6f 6d 25 32 35 32 46 25 32 35 35 46 6c 61 79 6f 75 74 73 25 32 35 32 46 31 35 25 32 35 32 46 67 75 65 73 74 61 63 63 65 73 73 25 32 35 32 45 61 73 70 78 25 32 35 33 46 65 25 32 35 33 44 35 25 32 35 32 35 33 61 51 6a 4f 58 36 4a 25 32 35 32 36 61 74 25 32 35 Data Ascii: href="/_forms/default.aspx?ReturnUrl=%2fpersonal%2frogawskia_karlaotto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Frogawskia%255Fkarlaotto%255Fcom%252F%255Flayouts%252F15%252Fguestaccess%252Easpx%253Fe%253D5%25253aQjOX6J%2526at%25

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49761	13.107.136.10	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:36 UTC	1458	OUT	GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2frogawskia_karlaotto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Frogawskia%255Fkarlaotto%255Fcom%252F%255Flayouts%252F15%252Fguestaccess%252Easpx%253Fe%253D5%25253aQjOX6J%2526at%253D9%2526share%253DEmZI2ojsTbZCvWUk1z%252DjCWkBMDec1bTFXOixjJwJN7fCLw&Source=cookie HTTP/1.1 Host: independentsgroup-my.sharepoint.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGcm9nYXdza2lhJTVGa2FybGFvdHRvJTVGY29tJTJGJTVGbGF5b3V0cyUyRjE1JTJGZ3Vlc3RhY2Nlc3MlMkVhc3B4JTNGZSUzRDUlMjUzYVFqT1g2SiUyNmF0JTNEOSUyNnNoYXJlJTNERW1aSTJvanNUYlpDdldVazF6JTJEakNXa0JNRGVjMWJURlhPaXhqSndKTjdmQ0x3
2024-10-23 18:37:36 UTC	4104	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 893 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://login.microsoftonline.com:443/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF%2DD9F1D3FC9387452229CED770460E23F9EA9601A7825EDBF66F17762374945C76&redirect%5Furi=https%3A%2F%2Findependentsgroup%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=85cd5ca1%2D60ef%2Da000%2D1e46%2De352e28dcfe8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: nSGt-CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF=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; expires=Wed, 23-Oct-2024 18:41:36 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: nSGt-CFA0F387C5388D24910BE87468367F31FCB04412B4E56EEF=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly Set-Cookie: RpsContextCookie=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; expires=Wed, 23-Oct-2024 18:47:36 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: RpsContextCookie=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly X-NetworkStatistics: 0,525568,0,0,582654,0,56223,121 X-SharePointHealthScore: 0 X-AspNet-Version: 4.0.30319 X-DataBoundary: EU X-1DSCollectorUrl: https://eu-mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://eu-mobile.events.data.microsoft.com/Collector/3.0 SPRequestGuid: 85cd5ca1-60ef-a000-1e46-e352e28dcfe8 request-id: 85cd5ca1-60ef-a000-1e46-e352e28dcfe8 MS-CV: oVzNhe9gAKAeRuNS4o3P6A.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=f984c75b-f487-415d-aaca-d8b1ab8e8708&destinationEndpoint=Edge-Prod-DFW31r5c&frontEnd=AFD&RemoteIP=173.254.250.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 36 SPIisLatency: 1 Include-Referred-Token-Binding-ID: true X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25402 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: EB5A914A0BC349DBA128419B1E455B38 Ref B: DFW311000106049 Ref C: 2024-10-23T18:37:36Z Date: Wed, 23 Oct 2024 18:37:36 GMT Connection: close
2024-10-23 18:37:36 UTC	893	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3a 34 34 33 2f 34 62 38 65 31 66 38 38 2d 35 35 35 34 2d 34 66 38 33 2d 62 63 38 34 2d 31 35 34 64 31 33 62 63 31 35 39 35 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 6d 6f 64 65 3d 66 6f 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com:443/4b8e1f88-5554-4f83-bc84-154d13bc1595/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49763	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:39 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:39 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1788885 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:39 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-10-23 18:37:39 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-23 18:37:39 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-10-23 18:37:39 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2024-10-23 18:37:39 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2024-10-23 18:37:39 UTC	16383	IN	Data Raw: 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 Data Ascii: "UIEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0
2024-10-23 18:37:39 UTC	3	IN	Data Raw: 2c 6f 3a Data Ascii: ,o:
2024-10-23 18:37:39 UTC	16383	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e 6f 72 Data Ascii: function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("ignor
2024-10-23 18:37:39 UTC	16383	IN	Data Raw: 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 Data Ascii: m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function e(
2024-10-23 18:37:39 UTC	16383	IN	Data Raw: 65 74 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 21 Data Ascii: et")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|!
2024-10-23 18:37:39 UTC	16383	IN	Data Raw: 72 6e 20 69 7c 7c 28 69 3d 74 2e 74 65 78 74 28 29 7c 7c 22 22 2c 69 3d 6c 2e 74 65 6d 70 6c 61 74 65 28 6e 75 6c 6c 2c 22 7b 7b 6b 6f 5f 77 69 74 68 20 24 69 74 65 6d 2e 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 7d 7d 22 2b 69 2b 22 7b 7b 2f 6b 6f 5f 77 69 74 68 7d 7d 22 29 2c 74 2e 64 61 74 61 28 22 70 72 65 63 6f 6d 70 69 6c 65 64 22 2c 69 29 29 2c 74 3d 5b 6e 2e 24 64 61 74 61 5d 2c 6e 3d 6c 2e 65 78 74 65 6e 64 28 7b 6b 6f 42 69 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3a 6e 7d 2c 72 2e 74 65 6d 70 6c 61 74 65 4f 70 74 69 6f 6e 73 29 2c 28 6e 3d 6c 2e 74 6d 70 6c 28 69 2c 74 2c 6e 29 29 2e 61 70 70 65 6e 64 54 6f 28 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2c 6c 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 6e 7d 2c 74 68 69 Data Ascii: rn i\|\|(i=t.text()\|\|"",i=l.template(null,"{{ko_with $item.koBindingContext}}"+i+"{{/ko_with}}"),t.data("precompiled",i)),t=[n.$data],n=l.extend({koBindingContext:n},r.templateOptions),(n=l.tmpl(i,t,n)).appendTo(o.createElement("div")),l.fragments={},n},thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49764	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:40 UTC	410	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:41 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1788886 Cache-Control: public, max-age=31536000 Content-MD5: m5bMCfnonQM0ui+8IrUZeg== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:40 GMT Etag: 0x8DCE31CBE97473C Last-Modified: Wed, 02 Oct 2024 19:59:37 GMT Server: ECAcc (lhc/78AB) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: fb7c97c3-801e-0062-1535-154340000000 x-ms-version: 2009-09-19 Content-Length: 142367 Connection: close
2024-10-23 18:37:41 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-23 18:37:41 UTC	1	IN	Data Raw: 29 Data Ascii: )
2024-10-23 18:37:41 UTC	16383	IN	Data Raw: 29 7d 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 74 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 6f 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 4e 75 6d 62 65 72 29 2c 61 3d 69 5b 30 5d 2c 73 3d 69 5b 31 5d 2c 75 3d 69 5b 32 5d 3b 69 66 28 72 28 65 2c 61 2c 73 2c 75 29 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 21 6c 2e 66 69 72 73 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 3d 65 2e 74 72 69 6d 28 29 7d 29 29 7d 69 66 28 5f 2e 69 73 48 69 67 68 43 6f 6e 74 72 61 73 74 28 29 29 7b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2c 6e 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 74 29 Data Ascii: )}for(var o=0;o<t.length;o++){var i=t[o].split(",").map(Number),a=i[0],s=i[1],u=i[2];if(r(e,a,s,u))return!0}return!!l.first(n,(function(t){return t===e.trim()}))}if(_.isHighContrast()){var t=document.getElementsByTagName("body")[0],n=_.getComputedStyle(t)
2024-10-23 18:37:41 UTC	16383	IN	Data Raw: 50 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 Data Ascii: P_E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"800411
2024-10-23 18:37:41 UTC	2	IN	Data Raw: 22 55 Data Ascii: "U
2024-10-23 18:37:41 UTC	16383	IN	Data Raw: 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 70 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 65 28 70 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 68 5b 74 5b 6e 5d 5d 3d 65 7d 29 29 3b 76 61 72 20 67 2c 6d 3d 7b 70 72 6f 70 65 72 74 79 63 68 61 6e 67 65 3a 21 30 7d 2c Data Ascii: IEvents"]=["keyup","keydown","keypress"],p.MouseEvents="click dblclick mousedown mouseup mousemove mouseover mouseout mouseenter mouseleave".split(" "),e(p,(function(e,t){if(t.length)for(var n=0,r=t.length;n<r;n++)h[t[n]]=e}));var g,m={propertychange:!0},
2024-10-23 18:37:41 UTC	16383	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 29 72 65 74 75 72 6e 20 6e 2e 6f 7d 7d 7d 28 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 22 2c 53 2e 53 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 43 6f 75 6e 74 22 2c 53 2e 53 2e 71 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 67 65 74 44 65 70 65 6e 64 65 6e 63 69 65 73 22 2c 53 2e 53 2e 56 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 69 73 49 6e 69 74 69 61 6c 22 2c 53 2e 53 2e 59 61 29 2c 53 2e 62 28 22 63 6f 6d 70 75 74 65 64 43 6f 6e 74 65 78 74 2e 72 65 67 69 73 74 65 72 44 65 70 65 6e 64 65 6e 63 79 22 2c 53 2e 53 2e 63 63 29 2c 53 2e 62 28 22 69 67 6e 6f Data Ascii: :function(){if(n)return n.o}}}(),S.b("computedContext",S.S),S.b("computedContext.getDependenciesCount",S.S.qa),S.b("computedContext.getDependencies",S.S.Va),S.b("computedContext.isInitial",S.S.Ya),S.b("computedContext.registerDependency",S.S.cc),S.b("igno
2024-10-23 18:37:41 UTC	16383	IN	Data Raw: 2e 6d 2e 76 62 28 65 2c 72 29 2b 22 7d 7d 7d 22 3b 73 3d 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 24 63 6f 6e 74 65 78 74 22 2c 22 24 65 6c 65 6d 65 6e 74 22 2c 75 29 2c 6f 3d 69 5b 61 5d 3d 73 7d 72 65 74 75 72 6e 20 6f 28 74 2c 6e 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 63 2e 6d 65 73 73 61 67 65 3d 22 55 6e 61 62 6c 65 20 74 6f 20 70 61 72 73 65 20 62 69 6e 64 69 6e 67 73 2e 5c 6e 42 69 6e 64 69 6e 67 73 20 76 61 6c 75 65 3a 20 22 2b 65 2b 22 5c 6e 4d 65 73 73 61 67 65 3a 20 22 2b 63 2e 6d 65 73 73 61 67 65 2c 63 7d 7d 7d 29 2c 53 2e 67 61 2e 69 6e 73 74 61 6e 63 65 3d 6e 65 77 20 53 2e 67 61 2c 53 2e 62 28 22 62 69 6e 64 69 6e 67 50 72 6f 76 69 64 65 72 22 2c 53 2e 67 61 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 Data Ascii: .m.vb(e,r)+"}}}";s=new Function("$context","$element",u),o=i[a]=s}return o(t,n)}catch(c){throw c.message="Unable to parse bindings.\nBindings value: "+e+"\nMessage: "+c.message,c}}}),S.ga.instance=new S.ga,S.b("bindingProvider",S.ga),function(){function e
2024-10-23 18:37:41 UTC	3	IN	Data Raw: 73 65 74 Data Ascii: set
2024-10-23 18:37:41 UTC	16383	IN	Data Raw: 22 29 26 26 6e 2e 68 61 73 28 22 76 61 6c 75 65 22 29 2c 64 3d 6e 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 49 6e 63 6c 75 64 65 44 65 73 74 72 6f 79 65 64 22 29 3b 74 3d 7b 7d 3b 76 61 72 20 66 2c 70 3d 5b 5d 3b 6c 7c 7c 28 73 3f 70 3d 53 2e 61 2e 4d 62 28 72 28 29 2c 53 2e 77 2e 4d 29 3a 30 3c 3d 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 26 26 70 2e 70 75 73 68 28 53 2e 77 2e 4d 28 65 2e 6f 70 74 69 6f 6e 73 5b 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 5d 29 29 29 2c 63 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 63 2e 6c 65 6e 67 74 68 26 26 28 63 3d 5b 63 5d 29 2c 66 3d 53 2e 61 2e 6a 62 28 63 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 7c 7c 65 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 65 7c 7c 21 53 2e Data Ascii: ")&&n.has("value"),d=n.get("optionsIncludeDestroyed");t={};var f,p=[];l\|\|(s?p=S.a.Mb(r(),S.w.M):0<=e.selectedIndex&&p.push(S.w.M(e.options[e.selectedIndex]))),c&&("undefined"==typeof c.length&&(c=[c]),f=S.a.jb(c,(function(e){return d\|\|e===a\|\|null===e\|\|!S.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49769	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:42 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:42 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2347730 Cache-Control: public, max-age=31536000 Content-MD5: 8N6amNvfqMAnQs5tkvslJA== Content-Type: text/css Date: Wed, 23 Oct 2024 18:37:42 GMT Etag: 0x8DCDDAB171F8006 Last-Modified: Wed, 25 Sep 2024 21:43:27 GMT Server: ECAcc (lhc/78AC) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 541c8d22-201e-00d2-0520-100289000000 x-ms-version: 2009-09-19 Content-Length: 113378 Connection: close
2024-10-23 18:37:42 UTC	15668	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 73 6d 2d 31 33 2c 2e 63 6f 6c 2d 6d 64 2d 31 33 2c 2e 63 6f 6c 2d 6c 67 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 73 6d 2d 31 34 2c 2e 63 6f 6c 2d 6d 64 2d 31 34 2c 2e 63 6f 6c 2d 6c 67 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 73 6d 2d 31 35 2c 2e 63 6f 6c 2d 6d 64 2d 31 35 2c 2e 63 6f 6c 2d 6c 67 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 Data Ascii: 10,.col-md-10,.col-lg-10,.col-xs-11,.col-sm-11,.col-md-11,.col-lg-11,.col-xs-12,.col-sm-12,.col-md-12,.col-lg-12,.col-xs-13,.col-sm-13,.col-md-13,.col-lg-13,.col-xs-14,.col-sm-14,.col-md-14,.col-lg-14,.col-xs-15,.col-sm-15,.col-md-15,.col-lg-15,.col-xs-16
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 31 36 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 39 2e 31 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 37 2e 35 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 31 7b 6d 61 Data Ascii: 16.66667%}.col-xl-offset-5{margin-left:20.83333%}.col-xl-offset-6{margin-left:25%}.col-xl-offset-7{margin-left:29.16667%}.col-xl-offset-8{margin-left:33.33333%}.col-xl-offset-9{margin-left:37.5%}.col-xl-offset-10{margin-left:41.66667%}.col-xl-offset-11{ma
2024-10-23 18:37:42 UTC	718	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 74 61 62 6c 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 7b 76 65 72 74 69 63 61 6c Data Ascii: {background-color:transparent}th{text-align:left}.table{width:100%;max-width:100%}.table>thead>tr>th,.table>thead>tr>td,.table>tbody>tr>th,.table>tbody>tr>td,.table>tfoot>tr>th,.table>tfoot>tr>td{padding:16px;vertical-align:top}.table>thead>tr>th{vertical
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 Data Ascii: w-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.table
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c Data Ascii: ,"Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongol
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 3b 74 65 78 74 2d 64 65 63 6f 72 Data Ascii: y:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-color:#005da6;text-decor
2024-10-23 18:37:42 UTC	15077	IN	Data Raw: 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 Data Ascii: n-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padding:0;margin-top:16p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49771	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:42 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:42 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2347675 Cache-Control: public, max-age=31536000 Content-MD5: qovIxe6RSM2ZSHKxQ4xe1g== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:42 GMT Etag: 0x8DCD83B99743B7D Last-Modified: Wed, 18 Sep 2024 23:42:46 GMT Server: ECAcc (lhc/7934) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 27aee7eb-f01e-0011-7920-105098000000 x-ms-version: 2009-09-19 Content-Length: 449028 Connection: close
2024-10-23 18:37:42 UTC	15652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 48 45 4e 54 49 43 41 54 45 44 3a 22 38 30 30 34 35 35 33 38 22 2c 50 50 5f 45 5f 48 49 50 5f 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 5f 4f 54 48 45 52 3a 22 38 30 30 34 35 35 33 39 22 2c 50 50 5f 45 5f 53 51 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 45 22 2c 50 50 5f 45 5f 53 41 5f 43 4f 4e 54 41 49 4e 53 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 43 22 2c 50 50 5f 45 5f 53 41 5f 43 4f 4e 54 41 49 4e 45 44 5f 49 4e 5f 50 41 53 53 57 4f 52 44 3a 22 38 30 30 34 33 34 31 44 22 2c 50 50 5f 45 5f 4c 49 42 50 48 4f 4e 45 4e 55 4d 42 45 52 49 4e 54 45 52 4f 50 5f 4e 55 4d 42 45 52 50 41 52 53 45 5f 45 58 43 45 50 54 49 4f 4e 3a 22 38 30 30 34 33 35 31 30 22 2c 50 50 5f 45 5f 53 54 52 4f 4e 47 50 52 4f 43 Data Ascii: HENTICATED:"80045538",PP_E_HIP_VALIDATION_ERROR_OTHER:"80045539",PP_E_SQ_CONTAINS_PASSWORD:"8004341E",PP_E_SA_CONTAINS_PASSWORD:"8004341C",PP_E_SA_CONTAINED_IN_PASSWORD:"8004341D",PP_E_LIBPHONENUMBERINTEROP_NUMBERPARSE_EXCEPTION:"80043510",PP_E_STRONGPROC
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 32 22 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 69 2c 5b 22 34 35 2c 35 30 2c 35 34 22 5d 2c 5b 22 23 32 64 33 32 33 36 22 5d 29 2c 63 3d 65 28 69 2c 5b 22 32 35 35 2c 32 35 30 2c 32 33 39 22 5d 2c 5b 22 23 66 66 66 61 65 66 22 5d 29 3b 69 66 28 61 7c 7c 72 7c 7c 73 29 72 65 74 75 72 6e 22 62 6c 61 63 6b 22 3b 69 66 28 6f 7c 7c 63 29 72 65 74 75 72 6e 22 77 68 69 74 65 22 7d 7d 7d 2c 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 Data Ascii: 2"],["#202020"]),s=e(i,["45,50,54"],["#2d3236"]),c=e(i,["255,250,239"],["#fffaef"]);if(a\|\|r\|\|s)return"black";if(o\|\|c)return"white"}}},getComputedStyle:function(e){return document.defaultView&&document.defaultView.getComputedStyle?document.defaultView.getC
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 3f 28 74 3d 65 2e 75 72 6c 2c 69 3d 65 2e 65 76 65 6e 74 4f 70 74 69 6f 6e 73 2c 6e 3d 65 2e 74 72 61 63 65 50 61 72 61 6d 65 74 65 72 73 3f 6e 3a 6e 75 6c 6c 2c 65 2e 74 72 61 63 65 55 72 6c 26 26 28 6e 3f 6e 2e 75 72 6c 3d 74 3a 6e 3d 74 29 29 3a 6e 3d 6e 75 6c 6c 2c 69 26 26 69 2e 65 76 65 6e 74 49 64 26 26 73 2e 6c 6f 67 45 76 65 6e 74 28 7b 65 76 65 6e 74 54 79 70 65 3a 22 6f 6e 52 65 64 69 72 65 63 74 22 2c 65 76 65 6e 74 49 64 3a 69 2e 65 76 65 6e 74 49 64 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 69 2e 65 76 65 6e 74 4c 65 76 65 6c 2c 65 76 65 6e 74 41 72 67 73 3a 6e 2c 65 76 65 6e 74 4f 70 74 69 6f 6e 73 3a 69 7d 29 2c 74 7d 2c 73 2e 67 65 74 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 Data Ascii: ng"!=typeof e?(t=e.url,i=e.eventOptions,n=e.traceParameters?n:null,e.traceUrl&&(n?n.url=t:n=t)):n=null,i&&i.eventId&&s.logEvent({eventType:"onRedirect",eventId:i.eventId,eventLevel:i.eventLevel,eventArgs:n,eventOptions:i}),t},s.getPropertyLogOption=functi
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 46 2e 54 79 70 65 2e 53 4d 53 3a 74 3d 6e 3f 6c 2e 4d 6f 62 69 6c 65 45 6e 63 72 79 70 74 65 64 3a 6c 2e 4d 6f 62 69 6c 65 3b 62 72 65 61 6b 3b 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 45 6d 61 69 6c 3a 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 41 6c 74 45 6d 61 69 6c 3a 74 3d 6e 3f 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 45 6e 63 72 79 70 74 65 64 3a 6c 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 3b 62 72 65 61 6b 3b 63 61 73 65 20 50 52 4f 4f 46 2e 54 79 70 65 2e 54 4f 54 50 41 75 74 68 65 6e 74 69 63 61 74 6f 72 56 32 3a 74 3d 6c 2e 53 65 73 73 69 6f 6e 41 70 70 72 6f 76 65 72 7d 72 65 74 75 72 6e 20 74 7d 3b 6e 2e 50 72 6f 6f 66 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e Data Ascii: F.Type.SMS:t=n?l.MobileEncrypted:l.Mobile;break;case PROOF.Type.Email:case PROOF.Type.AltEmail:t=n?l.EmailAddressEncrypted:l.EmailAddress;break;case PROOF.Type.TOTPAuthenticatorV2:t=l.SessionApprover}return t};n.Proof=function(e){var n=e.username\|\|"",t=e.
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 65 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 2c 74 29 3b 76 61 72 20 69 3d 67 65 3f 67 2e 63 6c 6f 6e 65 28 67 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 69 26 26 28 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 6e 29 2c 73 6e 28 65 2c 69 2c 21 30 2c 6c 2e 45 76 65 6e 74 49 64 73 2e 52 65 64 69 72 65 63 74 5f 4f 74 68 65 72 49 64 70 52 65 64 69 72 65 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 2c 6e 2c 74 29 7b 74 3d 74 7c 7c 6c 65 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 29 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 Data Ascii: e=p.appendOrReplace(e,"login_hint",t);var i=ge?g.clone(ge):null;return i&&(i.unsafe_username=n),sn(e,i,!0,l.EventIds.Redirect_OtherIdpRedirection)}function Ze(e,n,t){t=t\|\|le,t=p.remove(t,"username"),t=p.remove(t,"login_hint");var i=pe?g.clone(pe):null;ret
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 43 6c 69 65 6e 74 49 64 2c 6b 3d 74 2e 73 46 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 50 3d 74 2e 73 4e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 2c 54 3d 74 2e 66 53 68 6f 77 53 69 67 6e 49 6e 4f 70 74 69 6f 6e 73 41 73 42 75 74 74 6f 6e 2c 44 3d 74 2e 66 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 2c 45 3d 74 2e 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 49 6e 74 65 72 73 74 69 74 69 61 6c 56 69 65 77 2c 49 3d 74 2e 66 49 73 50 61 73 73 6b 65 79 53 75 70 70 6f 72 74 45 6e 61 62 6c 65 64 2c 41 3d 74 2e 66 49 73 56 65 72 69 66 69 61 62 6c 65 43 72 65 64 65 6e 74 69 61 6c 73 53 75 70 70 6f 72 74 45 6e 61 62 6c 65 64 2c 52 3d 74 2e 66 55 73 65 57 65 62 76 69 65 77 46 69 64 6f 43 75 73 74 6f 6d 50 72 6f 74 6f 63 6f 6c 2c Data Ascii: ClientId,k=t.sForwardedClientId,P=t.sNoPaBubbleVersion,T=t.fShowSignInOptionsAsButton,D=t.fOfflineAccountVisible,E=t.fUseCertificateInterstitialView,I=t.fIsPasskeySupportEnabled,A=t.fIsVerifiableCredentialsSupportEnabled,R=t.fUseWebviewFidoCustomProtocol,
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 6f 73 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 41 63 74 69 6f 6e 3d 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 33 29 2c 61 3d 74 28 37 29 2c 6f 3d 69 2e 41 72 72 61 79 2c 72 3d 7b 6d 65 72 67 65 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 6f 2e 66 6f 72 45 61 63 68 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 6e 5b 74 5d 2e 6e 61 6d 65 3d 3d 3d 65 2e 6e 61 6d 65 26 26 6e 5b 74 5d 2e 69 64 70 3d 3d 3d 65 2e 69 64 70 29 72 65 74 75 72 6e 20 74 3b 72 65 74 Data Ascii: ostConfirmationAction=t},e.exports=l},function(e,n,t){var i=t(3),a=t(7),o=i.Array,r={mergeSessions:function(e,n,t){var i=[];return o.forEach(n,(function(n){var a=function(e,n){for(var t=0;t<n.length;t++)if(n[t].name===e.name&&n[t].idp===e.idp)return t;ret
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 3b 76 61 72 20 75 3d 72 2e 4c 6f 67 69 6e 4d 6f 64 65 2c 70 3d 73 2e 48 65 6c 70 65 72 2c 66 3d 73 2e 51 75 65 72 79 53 74 72 69 6e 67 2c 67 3d 73 2e 43 6f 6f 6b 69 65 73 2c 6d 3d 64 2e 4c 6f 67 69 6e 4f 70 74 69 6f 6e 2c 62 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 76 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 28 6e 65 77 20 49 6d 61 67 65 29 2e 73 72 63 3d 65 7d 7d 28 65 2e 75 72 6c 49 50 76 36 45 78 70 65 72 69 6d 65 6e 74 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 66 55 70 67 72 61 64 65 45 56 43 65 72 74 26 26 6e 75 6c 6c 21 3d 3d 6e 65 77 20 52 65 67 45 78 70 28 22 57 69 6e 64 6f 77 73 20 4e 54 20 28 5b 30 2d 39 5d 7b 31 2c Data Ascii: getInstance(window.ServerData);var u=r.LoginMode,p=s.Helper,f=s.QueryString,g=s.Cookies,m=d.LoginOption,b=!1;function v(e){!function(e){if(e){(new Image).src=e}}(e.urlIPv6Experiment),function(e){if(e.fUpgradeEVCert&&null!==new RegExp("Windows NT ([0-9]{1,
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 6e 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 2c 6e 3d 6e 75 6c 6c 2c 65 28 29 7d 2c 63 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 30 29 7d 2c 7a 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 7c 7c 43 2e 6e 61 2e 73 63 68 65 64 75 6c 65 72 28 6e 29 2c 74 5b 69 2b Data Ascii: nction(e){var n=c.createElement("script");n.onreadystatechange=function(){n.onreadystatechange=null,c.documentElement.removeChild(n),n=null,e()},c.documentElement.appendChild(n)}:function(e){setTimeout(e,0)},zb:function(e){return i\|\|C.na.scheduler(n),t[i+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49770	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:42 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:42 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4871136 Cache-Control: public, max-age=31536000 Content-MD5: wheuNbhZLcnx5oBIfa0JTw== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:42 GMT Etag: 0x8DCC6D4DD76DEA7 Last-Modified: Tue, 27 Aug 2024 20:14:33 GMT Server: ECAcc (lhc/794B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5fcf6533-b01e-000b-222d-f97a0c000000 x-ms-version: 2009-09-19 Content-Length: 57443 Connection: close
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-10-23 18:37:42 UTC	16383	IN	Data Raw: 22 2c 65 2e 53 54 52 5f 4e 61 74 69 76 65 5f 53 53 50 52 5f 45 6e 74 65 72 43 6f 64 65 5f 44 65 73 63 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 65 2e 53 54 52 5f 43 65 72 74 42 61 73 65 41 75 74 68 50 6f 6c 69 63 79 5f 42 6c 6f 63 6b 3d 22 59 6f 75 20 63 61 6e 27 74 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e 6f 74 68 65 72 20 6d 65 74 68 6f 64 2e 22 2c 65 2e 53 54 52 5f 49 6e 76 61 6c 69 64 43 72 65 64 65 6e 74 69 61 6c 44 75 65 54 6f 4d 66 61 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 3d 22 4d 75 6c 74 69 Data Ascii: ",e.STR_Native_SSPR_EnterCode_Desc="Enter the code we just sent to {0} to reset your password.",e.STR_CertBaseAuthPolicy_Block="You can't sign in with a certificate. Try signing in with another method.",e.STR_InvalidCredentialDueToMfaClassification="Multi
2024-10-23 18:37:42 UTC	8294	IN	Data Raw: 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 4e 75 Data Ascii: ",UserVoiceAuthFailedCallWentToVoicemail:"UserVoiceAuthFailedCallWentToVoicemail",UserVoiceAuthFailedInvalidPhoneInput:"UserVoiceAuthFailedInvalidPhoneInput",UserVoiceAuthFailedPhoneHungUp:"UserVoiceAuthFailedPhoneHungUp",UserVoiceAuthFailedInvalidPhoneNu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49767	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:43 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:43 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5900761 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:43 GMT Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Server: ECAcc (lhc/7888) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 10a7d1b4-001e-005d-7bcf-ef5e4a000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-10-23 18:37:43 UTC	15652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 73 28 6e 29 2c 6f 28 72 29 3f 28 65 3f 74 28 72 2c 6e 29 3a 72 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6e 2c 72 29 3a 72 7d 7d 28 29 3a 75 6e 64 65 66 69 6e 65 64 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 37 30 29 2c 6f 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 6e 28 65 2c 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 6e 65 77 20 6f 28 22 49 6e 63 6f 72 72 65 63 74 20 69 6e 76 6f 63 61 74 69 6f 6e 22 29 7d 7d 2c 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 2c 6f 2c 69 3d 72 28 35 33 39 29 2c 73 3d 72 28 35 38 39 29 2c 75 3d 69 2e 70 72 6f 63 65 Data Ascii: s(n),o(r)?(e?t(r,n):r.__proto__=n,r):r}}():undefined)},function(t,e,r){"use strict";var n=r(570),o=TypeError;t.exports=function(t,e){if(n(e,t))return t;throw new o("Incorrect invocation")}},,function(t,e,r){"use strict";var n,o,i=r(539),s=r(589),u=i.proce
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 29 29 72 65 74 75 72 6e 20 65 28 72 2c 6e 29 7d 29 29 3a 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 22 64 65 63 6c 22 3d 3d 3d 72 2e 74 79 70 65 26 26 72 2e 70 72 6f 70 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 28 72 2c 6e 29 7d 29 29 3a 28 65 3d 74 2c 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 72 29 7b 69 66 28 22 64 65 63 6c 22 3d 3d 3d 74 2e 74 79 70 65 29 72 65 74 75 72 6e 20 65 28 74 2c 72 29 7d 29 29 29 7d 7d 2c 7b 6b 65 79 3a 22 77 61 6c 6b 52 75 6c 65 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 3f 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 69 66 28 Data Ascii: ))return e(r,n)})):this.walk((function(r,n){if("decl"===r.type&&r.prop===t)return e(r,n)})):(e=t,this.walk((function(t,r){if("decl"===t.type)return e(t,r)})))}},{key:"walkRules",value:function(t,e){return e?t instanceof RegExp?this.walk((function(r,n){if(
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 75 66 66 65 72 22 3d 3d 3d 65 2e 74 79 70 65 26 26 69 28 65 2e 64 61 74 61 29 29 72 65 74 75 72 6e 20 68 28 74 2c 65 2e 64 61 74 61 29 7d 76 61 72 20 6e 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 2c 20 42 75 66 66 65 72 2c 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 61 72 72 61 79 2d 6c 69 6b 65 20 6f 62 6a 65 63 74 2e 22 29 7d 28 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 74 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 22 73 69 7a 65 22 20 61 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 6e 75 6d 62 65 72 27 29 Data Ascii: uffer"===e.type&&i(e.data))return h(t,e.data)}var n;throw new TypeError("First argument must be a string, Buffer, ArrayBuffer, Array, or array-like object.")}(t,e)}function f(t){if("number"!=typeof t)throw new TypeError('"size" argument must be a number')
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 28 6e 3d 65 2c 65 3d 30 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 6e 3d 72 2c 72 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6f 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 6f 3c 32 35 36 26 26 28 74 3d 6f 29 7d 69 66 28 6e 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 65 6e 63 6f 64 69 6e 67 Data Ascii: ototype.fill=function(t,e,r,n){if("string"==typeof t){if("string"==typeof e?(n=e,e=0,r=this.length):"string"==typeof r&&(n=r,r=this.length),1===t.length){var o=t.charCodeAt(0);o<256&&(t=o)}if(n!==undefined&&"string"!=typeof n)throw new TypeError("encoding
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 21 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 74 7d 28 29 7d 28 29 3f 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 65 2c 72 7c 7c 5b 5d 2c 66 28 74 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 3a 65 2e 61 70 70 6c 79 28 74 2c 72 29 29 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 29 7b 72 65 74 75 72 6e 28 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 Data Ascii: ction(){try{var t=!Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],(function(){})))}catch(t){}return function(){return!!t}()}()?Reflect.construct(e,r\|\|[],f(t).constructor):e.apply(t,r))}function f(t){return(f=Object.setPrototypeOf?Object.getPr
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 6e 7d 28 28 28 6e 3d 72 28 37 32 37 29 29 26 26 6e 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 6e 3a 7b 22 64 65 66 61 75 6c 74 22 3a 6e 7d 29 5b 22 64 65 66 61 75 6c 74 22 5d 29 3b 65 5b 22 64 65 66 61 75 6c 74 22 5d 3d 6f 2c 74 2e 65 78 70 6f 72 74 73 3d 65 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 72 65 74 75 72 6e 28 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 Data Ascii: n}(((n=r(727))&&n.__esModule?n:{"default":n})["default"]);e["default"]=o,t.exports=e["default"]},function(t,e,r){"use strict";function n(t){return(n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){retur
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 7a 22 2c 74 2e 65 78 70 6f 72 74 73 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 3d 3d 3d 53 74 72 69 6e 67 28 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 34 30 29 2c 6f 3d 72 28 38 30 38 29 2c 69 3d 72 28 35 35 36 29 2c 73 3d 72 28 35 34 33 29 2c 75 3d 72 28 35 36 30 29 2c 61 3d 72 28 36 33 32 29 3b 65 2e 66 3d 6e 26 26 21 6f 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 73 28 74 29 3b 66 6f 72 28 76 61 72 20 72 2c 6e 3d 75 28 65 29 2c 6f 3d 61 28 65 29 2c 63 3d 6f 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 63 3e 66 3b 29 69 2e 66 28 74 2c 72 3d 6f 5b 66 2b 2b 5d 2c 6e 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c Data Ascii: z",t.exports="[object z]"===String(n)},function(t,e,r){"use strict";var n=r(540),o=r(808),i=r(556),s=r(543),u=r(560),a=r(632);e.f=n&&!o?Object.defineProperties:function(t,e){s(t);for(var r,n=u(e),o=a(e),c=o.length,f=0;c>f;)i.f(t,r=o[f++],n[r]);return t}},
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 28 6e 2e 6b 65 79 29 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6e 28 74 29 7c 7c 21 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 3d 74 5b 53 79 6d 62 6f 6c 2e 74 6f 50 72 69 6d 69 74 69 76 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 76 61 72 20 6f 3d 72 2e 63 61 6c 6c 28 74 2c 65 7c 7c 22 64 65 66 61 75 6c 74 22 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 6e 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 Data Ascii: e=!0),Object.defineProperty(t,i(n.key),n)}}function i(t){var e=function(t,e){if("object"!=n(t)\|\|!t)return t;var r=t[Symbol.toPrimitive];if(void 0!==r){var o=r.call(t,e\|\|"default");if("object"!=n(o))return o;throw new TypeError("@@toPrimitive must return a
2024-10-23 18:37:43 UTC	16383	IN	Data Raw: 3d 74 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 6c 2e 77 61 72 6e 69 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 79 6e 63 28 29 2e 77 61 72 6e 69 6e 67 73 28 29 7d 2c 6c 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 73 73 7d 2c 6c 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 2e 74 68 65 6e 28 74 2c 65 29 7d 2c 6c 5b 22 63 61 74 63 68 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 5b 22 63 61 74 63 68 22 5d 28 74 29 7d 2c 6c 5b 22 66 69 6e 61 6c 6c 79 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 Data Ascii: =t.prototype;return l.warnings=function(){return this.sync().warnings()},l.toString=function(){return this.css},l.then=function(t,e){return this.async().then(t,e)},l["catch"]=function(t){return this.async()["catch"](t)},l["finally"]=function(t){return thi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49773	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:44 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:44 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4871138 Cache-Control: public, max-age=31536000 Content-MD5: wheuNbhZLcnx5oBIfa0JTw== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:44 GMT Etag: 0x8DCC6D4DD76DEA7 Last-Modified: Tue, 27 Aug 2024 20:14:33 GMT Server: ECAcc (lhc/794B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5fcf6533-b01e-000b-222d-f97a0c000000 x-ms-version: 2009-09-19 Content-Length: 57443 Connection: close
2024-10-23 18:37:44 UTC	15653	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-10-23 18:37:44 UTC	16383	IN	Data Raw: 6e 3d 22 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 50 65 6e 64 69 6e 67 5f 54 69 74 6c 65 3d 22 53 68 61 72 65 20 61 20 56 65 72 69 66 69 65 64 20 49 44 20 74 6f 20 61 63 63 65 73 73 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 50 65 6e 64 69 6e 67 5f 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 4f 70 65 6e 20 74 68 65 20 4d 69 63 72 6f 73 6f 66 74 20 41 75 74 68 65 6e 74 69 63 61 74 6f 72 20 61 70 70 20 61 6e 64 20 73 63 61 6e 20 74 68 65 20 51 52 20 63 6f 64 65 20 74 6f 20 73 68 61 72 65 20 74 68 65 20 72 65 71 75 65 73 74 65 64 20 56 65 72 69 66 69 65 64 20 49 44 73 2e 22 2c 65 2e 43 54 5f 56 43 5f 53 54 52 5f 52 65 66 72 65 73 68 5f 42 75 74 74 6f 6e 3d 22 52 65 66 72 65 73 68 22 2c 6f 2e 66 55 73 65 4e 65 77 50 68 6f Data Ascii: n="Redirecting...",e.CT_VC_STR_Pending_Title="Share a Verified ID to access",e.CT_VC_STR_Pending_Description="Open the Microsoft Authenticator app and scan the QR code to share the requested Verified IDs.",e.CT_VC_STR_Refresh_Button="Refresh",o.fUseNewPho
2024-10-23 18:37:44 UTC	16383	IN	Data Raw: 53 54 52 5f 53 53 53 55 5f 53 69 67 6e 55 70 5f 48 65 61 64 65 72 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 53 69 67 6e 20 75 70 20 74 6f 20 61 63 63 65 73 73 20 7b 30 7d 22 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 53 53 53 55 5f 45 72 72 6f 72 5f 45 6d 61 69 6c 41 63 63 6f 75 6e 74 4e 6f 74 46 6f 75 6e 64 3d 22 57 65 20 63 6f 75 6c 64 6e 27 74 20 66 69 6e 64 20 61 6e 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 74 68 69 73 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2e 22 2c 65 2e 43 54 5f 50 57 44 5f 53 54 52 5f 53 53 53 55 5f 45 72 72 6f 72 5f 49 6e 76 61 6c 69 64 45 6d 61 69 6c 4f 72 50 61 73 73 77 6f 72 64 3d 22 57 65 20 63 6f 75 6c 64 6e 27 74 20 66 69 6e 64 20 61 6e 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 74 68 69 73 20 65 6d 61 69 6c 20 61 64 64 72 65 Data Ascii: STR_SSSU_SignUp_HeaderDescription="Sign up to access {0}",e.CT_PWD_STR_SSSU_Error_EmailAccountNotFound="We couldn't find an account with this email address.",e.CT_PWD_STR_SSSU_Error_InvalidEmailOrPassword="We couldn't find an account with this email addre
2024-10-23 18:37:44 UTC	9024	IN	Data Raw: 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 42 65 67 69 6e 43 61 6c 6c 4e 6f 6e 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 32 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 45 6e 64 43 61 6c 6c 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 33 22 2c 50 75 62 6c 69 63 49 64 65 6e 74 69 66 69 65 72 53 61 73 45 6e 64 43 61 6c 6c 4e 6f 6e 52 65 74 72 69 61 62 6c 65 45 72 72 6f 72 3a 22 31 33 31 30 30 34 22 2c 44 65 76 69 63 65 49 73 44 69 73 61 62 6c 65 64 3a 22 31 33 35 30 31 31 22 2c 46 69 64 6f 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 3a 22 31 33 35 30 31 36 22 2c 50 61 73 73 6b 65 79 42 6c 6f 63 6b 65 64 42 79 50 6f 6c 69 63 79 4f 74 68 65 72 41 75 74 68 41 70 70 50 61 73 73 6b 65 79 41 76 61 69 6c 61 Data Ascii: cIdentifierSasBeginCallNonRetriableError:"131002",PublicIdentifierSasEndCallRetriableError:"131003",PublicIdentifierSasEndCallNonRetriableError:"131004",DeviceIsDisabled:"135011",FidoBlockedByPolicy:"135016",PasskeyBlockedByPolicyOtherAuthAppPasskeyAvaila

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49774	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:44 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_DQTmGfOEMmPUR-Vehc8U6Q2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:44 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2347677 Cache-Control: public, max-age=31536000 Content-MD5: qovIxe6RSM2ZSHKxQ4xe1g== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:44 GMT Etag: 0x8DCD83B99743B7D Last-Modified: Wed, 18 Sep 2024 23:42:46 GMT Server: ECAcc (lhc/7934) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 27aee7eb-f01e-0011-7920-105098000000 x-ms-version: 2009-09-19 Content-Length: 449028 Connection: close
2024-10-23 18:37:44 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-23 18:37:44 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-10-23 18:37:44 UTC	2	IN	Data Raw: 54 61 Data Ascii: Ta
2024-10-23 18:37:44 UTC	16383	IN	Data Raw: 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 65 2e 74 61 72 67 65 74 3f 65 2e 74 61 72 67 65 74 3a 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3f 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3a 6e 75 6c 6c 3a 6e 75 6c 6c 7d 7d 2c 44 3d 6e 2e 51 75 65 72 79 53 74 72 69 6e 67 3d 7b 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2c 74 3d 6e 75 6c 6c 2c 69 3d 6e 75 6c 6c 3b 69 66 28 65 29 7b 76 61 72 20 61 3d 65 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 2c 6f 3d 65 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 3b 2d 31 21 3d 3d 6f 26 26 28 2d 31 3d 3d 3d 61 7c 7c 6f 3c 61 29 3f 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6f 29 2c 69 3d 64 2e 64 6f 75 62 6c 65 53 70 6c 69 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 6f 2b Data Ascii: rget:function(e){return e?e.target?e.target:e.srcElement?e.srcElement:null:null}},D=n.QueryString={parse:function(e){var n=e,t=null,i=null;if(e){var a=e.indexOf("?"),o=e.indexOf("#");-1!==o&&(-1===a\|\|o<a)?(n=e.substring(0,o),i=d.doubleSplit(e.substring(o+
2024-10-23 18:37:44 UTC	16383	IN	Data Raw: 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 50 61 73 73 77 6f 72 64 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 69 64 69 6e 67 4d 6f 64 65 3d 69 2e 48 69 64 69 6e 67 4d 6f 64 65 2e 48 69 64 65 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 28 65 2c 6e 29 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 45 76 65 6e 74 54 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 72 65 74 75 72 6e 7b 65 76 65 6e 74 49 64 3a 65 2c 65 76 65 6e 74 4c 65 76 65 6c 3a 74 7c 7c 69 2e 45 76 Data Ascii: tTextBoxPropertyLogOption(e,n)},s.getPasswordTextBoxPropertyLogOption=function(e,n){return(n=n\|\|{}).hidingMode=i.HidingMode.Hide,s.getDefaultTextBoxPropertyLogOption(e,n)},s.getDefaultEventTracingOptions=function(e,n,t){return{eventId:e,eventLevel:t\|\|i.Ev
2024-10-23 18:37:44 UTC	16383	IN	Data Raw: 74 68 69 73 5b 75 2e 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 5d 3d 62 29 2c 76 26 26 28 74 68 69 73 5b 75 2e 43 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 5d 3d 76 29 7d 2c 6e 2e 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 2c 61 2c 63 2c 64 3d 74 68 69 73 2c 6c 3d 70 2e 4e 6f 6e 65 2c 75 3d 22 22 2c 66 3d 22 22 2c 67 3d 22 22 2c 6d 3d 65 2e 64 61 74 61 2c 62 3d 65 2e 6f 6e 53 65 6e 64 2c 76 3d 65 2e 6f 6e 53 65 6e 64 46 61 69 6c 2c 68 3d 65 2e 6f 6e 46 6c 6f 77 45 78 70 69 72 65 64 2c 5f 3d 65 2e 74 69 6d 65 6f 75 74 7c 7c 33 65 34 2c 43 3d 65 2e 73 69 74 65 49 64 2c 53 3d 65 2e 63 6c 69 65 6e 74 49 64 2c 78 3d 65 2e 66 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 77 3d 65 2e 6e 6f 50 61 42 75 62 62 6c Data Ascii: this[u.ProofConfirmation]=b),v&&(this[u.CanaryFlowToken]=v)},n.Request=function(e){var n,t,a,c,d=this,l=p.None,u="",f="",g="",m=e.data,b=e.onSend,v=e.onSendFail,h=e.onFlowExpired,_=e.timeout\|\|3e4,C=e.siteId,S=e.clientId,x=e.forwardedClientId,w=e.noPaBubbl
2024-10-23 18:37:44 UTC	16383	IN	Data Raw: 61 6d 73 7c 7c 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 61 63 65 62 6f 6f 6b 50 61 72 61 6d 73 29 29 29 72 65 74 75 72 6e 20 69 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 6d 2e 52 65 6d 6f 74 65 4e 47 43 3a 63 61 73 65 20 6d 2e 46 65 64 65 72 61 74 69 6f 6e 3a 63 61 73 65 20 6d 2e 41 63 63 65 73 73 50 61 73 73 3a 63 61 73 65 20 6d 2e 4e 6f 50 72 65 66 65 72 72 65 64 43 72 65 64 65 6e 74 69 61 6c 3a 6f 26 26 6f 2e 53 61 6d 6c 52 65 71 75 65 73 74 26 26 6f 2e 52 65 6c 61 79 53 74 61 74 65 3f 28 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 69 2e 69 64 70 52 65 64 69 72 65 63 74 50 6f 73 74 50 61 72 61 6d 73 3d 7b 53 41 4d 4c 52 65 71 75 Data Ascii: ams\|\|n.Credentials.FacebookParams)))return i;switch(a){case m.RemoteNGC:case m.Federation:case m.AccessPass:case m.NoPreferredCredential:o&&o.SamlRequest&&o.RelayState?(i.idpRedirectUrl=n.Credentials.FederationRedirectUrl,i.idpRedirectPostParams={SAMLRequ
2024-10-23 18:37:44 UTC	16383	IN	Data Raw: 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 64 69 72 65 63 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 52 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 6e 72 65 67 69 73 74 65 72 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 68 6f 77 44 69 61 6c 6f 67 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 53 65 74 50 65 6e 64 69 6e 67 52 65 71 75 65 73 74 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 6f 6e 55 70 64 61 74 65 46 6c 6f 77 54 6f 6b 65 6e 3d 6f 2e 63 72 65 61 74 65 28 29 2c 6e 2e 63 72 65 64 65 6e 74 69 61 6c 43 6f 75 6e 74 3d 30 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 54 79 70 65 3d 6e 75 6c 6c 2c 6e 2e 73 65 6c 65 63 74 65 64 43 72 65 64 53 68 6f 77 6e 4f 6e 6c 79 4f 6e 50 69 63 6b Data Ascii: ate(),n.onRedirect=o.create(),n.onRegisterDialog=o.create(),n.onUnregisterDialog=o.create(),n.onShowDialog=o.create(),n.onSetPendingRequest=o.create(),n.onUpdateFlowToken=o.create(),n.credentialCount=0,n.selectedCredType=null,n.selectedCredShownOnlyOnPick
2024-10-23 18:37:44 UTC	5	IN	Data Raw: 2e 61 75 74 68 Data Ascii: .auth
2024-10-23 18:37:44 UTC	16383	IN	Data Raw: 65 6e 74 69 63 61 74 65 64 53 74 61 74 65 2c 69 73 57 69 6e 64 6f 77 73 53 73 6f 3a 65 2e 69 73 57 69 6e 64 6f 77 73 53 73 6f 7c 7c 21 31 2c 69 73 4d 65 43 6f 6e 74 72 6f 6c 53 65 73 73 69 6f 6e 3a 21 30 2c 69 73 47 69 74 48 75 62 46 65 64 3a 65 2e 69 73 47 69 74 48 75 62 46 65 64 7c 7c 21 31 7d 7d 29 29 7d 2c 70 61 72 73 65 42 73 73 6f 53 65 73 73 69 6f 6e 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 2e 6d 61 70 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 73 73 6f 55 6e 69 71 75 65 49 64 3a 65 2e 73 73 6f 55 6e 69 71 75 65 49 64 2c 6e 61 6d 65 3a 65 2e 6e 61 6d 65 2c 64 69 73 70 6c 61 79 4e 61 6d 65 3a 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 2c 69 64 70 3a 61 2e 53 65 73 73 69 6f 6e 49 64 70 2e 41 61 64 2c 73 Data Ascii: enticatedState,isWindowsSso:e.isWindowsSso\|\|!1,isMeControlSession:!0,isGitHubFed:e.isGitHubFed\|\|!1}}))},parseBssoSessions:function(e){return o.map(e,(function(e){return{ssoUniqueId:e.ssoUniqueId,name:e.name,displayName:e.displayName,idp:a.SessionIdp.Aad,s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.17	49775	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:44 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:44 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18449942 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Wed, 23 Oct 2024 18:37:44 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-10-23 18:37:44 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-23 18:37:44 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.17	49778	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:45 UTC	622	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:45 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5749684 Cache-Control: public, max-age=31536000 Content-MD5: betEqf4nMmbvq8MhS5mLoA== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:45 GMT Etag: 0x8DCBD52F3A242D0 Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Server: ECAcc (lhc/7941) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bbd0cf2c-501e-006f-482f-f15e3d000000 x-ms-version: 2009-09-19 Content-Length: 15755 Connection: close
2024-10-23 18:37:45 UTC	15653	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-23 18:37:45 UTC	102	IN	Data Raw: 6c 6f 67 69 6e 5f 70 66 65 74 63 68 73 65 73 73 69 6f 6e 73 70 72 6f 67 72 65 73 73 5f 64 30 61 38 30 33 32 37 39 65 37 33 39 37 62 65 66 38 33 34 3d 21 30 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 2e 2e 2f 64 30 61 38 30 33 32 37 39 65 37 33 39 37 62 65 66 38 33 34 2e 6d 61 70 Data Ascii: login_pfetchsessionsprogress_d0a803279e7397bef834=!0;//# sourceMappingURL=../d0a803279e7397bef834.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49776	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:45 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:45 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5900763 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:45 GMT Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Server: ECAcc (lhc/7888) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 10a7d1b4-001e-005d-7bcf-ef5e4a000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-10-23 18:37:45 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-23 18:37:45 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-10-23 18:37:45 UTC	16383	IN	Data Raw: 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e Data Ascii: =Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(537);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var n
2024-10-23 18:37:45 UTC	16383	IN	Data Raw: 31 7d 29 2c 65 7d 28 72 28 36 38 32 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 Data Ascii: 1}),e}(r(682));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule
2024-10-23 18:37:45 UTC	2	IN	Data Raw: 22 21 Data Ascii: "!
2024-10-23 18:37:45 UTC	16383	IN	Data Raw: 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 22 3a Data Ascii: =typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary":
2024-10-23 18:37:45 UTC	1	IN	Data Raw: 66 Data Ascii: f
2024-10-23 18:37:45 UTC	16383	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d 3d 33 29 Data Ascii: unction N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-=3)
2024-10-23 18:37:46 UTC	16383	IN	Data Raw: 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 Data Ascii: r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t,"
2024-10-23 18:37:46 UTC	2	IN	Data Raw: 65 74 Data Ascii: et

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49777	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:45 UTC	670	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:45 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18449892 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Wed, 23 Oct 2024 18:37:45 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-10-23 18:37:45 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.17	49779	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:45 UTC	664	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:45 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18450070 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Wed, 23 Oct 2024 18:37:45 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-10-23 18:37:45 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.17	49780	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:46 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:46 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18449944 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Wed, 23 Oct 2024 18:37:46 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-10-23 18:37:46 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-23 18:37:46 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.17	49781	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:46 UTC	425	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:46 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18449893 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Wed, 23 Oct 2024 18:37:46 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-10-23 18:37:46 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.17	49782	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:46 UTC	419	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:46 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18450071 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Wed, 23 Oct 2024 18:37:46 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-10-23 18:37:46 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.17	49783	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:46 UTC	437	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:46 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5749685 Cache-Control: public, max-age=31536000 Content-MD5: betEqf4nMmbvq8MhS5mLoA== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:46 GMT Etag: 0x8DCBD52F3A242D0 Last-Modified: Thu, 15 Aug 2024 17:51:55 GMT Server: ECAcc (lhc/7941) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bbd0cf2c-501e-006f-482f-f15e3d000000 x-ms-version: 2009-09-19 Content-Length: 15755 Connection: close
2024-10-23 18:37:46 UTC	15755	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.17	49784	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:46 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:46 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18449749 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Wed, 23 Oct 2024 18:37:46 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-10-23 18:37:46 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.17	49785	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:46 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:46 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18449789 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Wed, 23 Oct 2024 18:37:46 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-10-23 18:37:46 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.17	49788	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:47 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:48 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18449791 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Wed, 23 Oct 2024 18:37:48 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-10-23 18:37:48 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.17	49787	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:47 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:48 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18449751 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Wed, 23 Oct 2024 18:37:48 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-10-23 18:37:48 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.17	49790	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:48 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:48 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5900766 Cache-Control: public, max-age=31536000 Content-MD5: 07aumYbfJEqwNBLMcAM10A== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:48 GMT Etag: 0x8DCBD52F42903D2 Last-Modified: Thu, 15 Aug 2024 17:51:56 GMT Server: ECAcc (lhc/78A7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 22797220-301e-0043-49cf-ef2c70000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-10-23 18:37:48 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-23 18:37:48 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-10-23 18:37:48 UTC	2	IN	Data Raw: 32 39 Data Ascii: 29
2024-10-23 18:37:48 UTC	16383	IN	Data Raw: 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 61 22 Data Ascii: 0f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdca"
2024-10-23 18:37:48 UTC	16383	IN	Data Raw: 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 34 29 2c 74 2e 43 63 3d 72 28 38 38 35 29 2c 74 2e 43 66 3d 72 28 31 33 38 31 29 2c 74 2e 50 3d 72 28 37 38 34 29 2c 74 2e 5a 3d 72 28 38 38 36 29 7d 2c 31 33 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c 75 Data Ascii: rict";t.Any=r(884),t.Cc=r(885),t.Cf=r(1381),t.P=r(784),t.Z=r(886)},1381:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\u
2024-10-23 18:37:48 UTC	16383	IN	Data Raw: 61 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b Data Ascii: arks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.mark
2024-10-23 18:37:48 UTC	16383	IN	Data Raw: 72 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 Data Ascii: rn r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a"
2024-10-23 18:37:48 UTC	4	IN	Data Raw: 62 61 6c 61 Data Ascii: bala
2024-10-23 18:37:48 UTC	15465	IN	Data Raw: 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 6e 73 Data Ascii: nce_pairs","emphasis","text_collapse"]}}}},1428:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="ins

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.17	49791	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:48 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:48 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18363773 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Wed, 23 Oct 2024 18:37:48 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-10-23 18:37:48 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.17	49794	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:49 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:50 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 18363774 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Wed, 23 Oct 2024 18:37:49 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-10-23 18:37:50 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.17	49795	152.199.21.175	443	3636	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-23 18:37:50 UTC	441	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-23 18:37:50 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 5900768 Cache-Control: public, max-age=31536000 Content-MD5: 07aumYbfJEqwNBLMcAM10A== Content-Type: application/x-javascript Date: Wed, 23 Oct 2024 18:37:50 GMT Etag: 0x8DCBD52F42903D2 Last-Modified: Thu, 15 Aug 2024 17:51:56 GMT Server: ECAcc (lhc/78A7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 22797220-301e-0043-49cf-ef2c70000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-10-23 18:37:50 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-10-23 18:37:50 UTC	16383	IN	Data Raw: 75 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 Data Ascii: u200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u2
2024-10-23 18:37:50 UTC	2	IN	Data Raw: 32 39 Data Ascii: 29
2024-10-23 18:37:50 UTC	16383	IN	Data Raw: 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 61 22 Data Ascii: 0f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdca"
2024-10-23 18:37:50 UTC	16383	IN	Data Raw: 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 34 29 2c 74 2e 43 63 3d 72 28 38 38 35 29 2c 74 2e 43 66 3d 72 28 31 33 38 31 29 2c 74 2e 50 3d 72 28 37 38 34 29 2c 74 2e 5a 3d 72 28 38 38 36 29 7d 2c 31 33 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c 75 Data Ascii: rict";t.Any=r(884),t.Cc=r(885),t.Cf=r(1381),t.P=r(784),t.Z=r(886)},1381:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\u
2024-10-23 18:37:50 UTC	16383	IN	Data Raw: 61 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 6b Data Ascii: arks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.mark
2024-10-23 18:37:50 UTC	3	IN	Data Raw: 72 6e 20 Data Ascii: rn
2024-10-23 18:37:50 UTC	16383	IN	Data Raw: 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 22 2c 2d 31 Data Ascii: r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a",-1
2024-10-23 18:37:50 UTC	15466	IN	Data Raw: 61 6e 63 65 5f 70 61 69 72 73 22 2c 22 65 6d 70 68 61 73 69 73 22 2c 22 74 65 78 74 5f 63 6f 6c 6c 61 70 73 65 22 5d 7d 7d 7d 7d 2c 31 34 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 73 2c 6f 2c 69 2c 61 3d 5b 5d 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 72 3d 30 3b 72 3c 63 3b 72 2b 2b 29 34 33 3d 3d 3d 28 73 3d 74 5b 72 5d 29 2e 6d 61 72 6b 65 72 26 26 2d 31 21 3d 3d 73 2e 65 6e 64 26 26 28 6f 3d 74 5b 73 2e 65 6e 64 5d 2c 28 69 3d 65 2e 74 6f 6b 65 6e 73 5b 73 2e 74 6f 6b 65 6e 5d 29 2e 74 79 70 65 3d 22 69 6e 73 5f 6f 70 65 6e 22 2c 69 2e 74 61 67 3d 22 69 6e Data Ascii: ance_pairs","emphasis","text_collapse"]}}}},1428:function(e,t,r){"use strict";e.exports=function(e){function t(e,t){var r,n,s,o,i,a=[],c=t.length;for(r=0;r<c;r++)43===(s=t[r]).marker&&-1!==s.end&&(o=t[s.end],(i=e.tokens[s.token]).type="ins_open",i.tag="in

Target ID:	0
Start time:	14:35:50
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	14:35:51
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=1948,i,11637739563851034214,2270769472258100713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:35:52
Start date:	23/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9"
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
https://independentsgroup-my.sharepoint.com/:o:/g/personal/rogawskia_karlaotto_com/EmZI2ojsTbZCvWUk1z-jCWkBMDec1bTFXOixjJwJN7fCLw?e=5%3aQjOX6J&at=9