Edit tour

Windows Analysis Report
https://robertsonalger-my.sharepoint.com/

Overview

General Information

Sample URL:	https://robertsonalger-my.sharepoint.com/
Analysis ID:	1562777
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1904 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3020 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,13325661113055625624,13795328057881421946,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://robertsonalger-my.sharepoint.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.195.62.26:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.195.62.26:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49788 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: robertsonalger-my.sharepoint.com to https://login.microsoftonline.com:443/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5fid=00000003%2d0000%2d0ff1%2dce00%2d000000000000&response%5fmode=form%5fpost&response%5ftype=code%20id%5ftoken&resource=00000003%2d0000%2d0ff1%2dce00%2d000000000000&scope=openid&nonce=438d31b5c6be3f50ab81b36a525ac0decf4be79b27964805%2d5c9db26a543c772bd44a6b32abea7d367a4cca0114ba41e34dfc7adfa2961600&redirect%5furi=https%3a%2f%2frobertsonalger%2dmy%2esharepoint%2ecom%2f%5fforms%2fdefault%2easpx&state=od0w&claims=%7b%22id%5ftoken%22%3a%7b%22xms%5fcc%22%3a%7b%22values%22%3a%5b%22cp1%22%5d%7d%7d%7d&wsucxt=1&cobrandid=11bd8083%2d87e0%2d41b5%2dbb78%2d0bc43c8a8e8a&client%2drequest%2did=248067a1%2dd0c4%2d6000%2de7f0%2d32da669241ec

Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.195.62.26
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: robertsonalger-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/authenticate.aspx?Source=%2F HTTP/1.1Host: robertsonalger-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fauthenticate.aspx%3fSource%3d%252F&Source=cookie HTTP/1.1Host: robertsonalger-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RpsContextCookie=U291cmNlPSUyRg==
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+HMSKoonZHV9MmD&MD=PWFxAHsX HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+HMSKoonZHV9MmD&MD=PWFxAHsX HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: robertsonalger-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: chromecache_80.2.dr, chromecache_82.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_83.2.dr, chromecache_87.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_83.2.dr, chromecache_87.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_80.2.dr, chromecache_83.2.dr, chromecache_82.2.dr, chromecache_87.2.dr, chromecache_72.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_61.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_61.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 23.195.62.26:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.195.62.26:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.4:49788 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/44@14/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,13325661113055625624,13795328057881421946,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://robertsonalger-my.sharepoint.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,13325661113055625624,13795328057881421946,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://robertsonalger-my.sharepoint.com/	0%	Avira URL Cloud	safe
https://robertsonalger-my.sharepoint.com/	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://robertsonalger-my.sharepoint.com/_layouts/15/authenticate.aspx?Source=%2F	0%	Avira URL Cloud	safe
https://robertsonalger-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fauthenticate.aspx%3fSource%3d%252F&Source=cookie	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.181.100	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
robertsonalger-my.sharepoint.com	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	false		high
https://robertsonalger-my.sharepoint.com/_layouts/15/authenticate.aspx?Source=%2F	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js	false		high
https://robertsonalger-my.sharepoint.com/	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false		high
https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec&sso_reload=true	false		high
https://robertsonalger-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fauthenticate.aspx%3fSource%3d%252F&Source=cookie	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js	false		high
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://login.microsoftonline.com	chromecache_61.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_83.2.dr, chromecache_87.2.dr	false	high
http://knockoutjs.com/	chromecache_83.2.dr, chromecache_87.2.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_80.2.dr, chromecache_83.2.dr, chromecache_82.2.dr, chromecache_87.2.dr, chromecache_72.2.dr	false	high
https://login.windows-ppe.net	chromecache_61.2.dr	false	high
http://feross.org	chromecache_80.2.dr, chromecache_82.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.63	s-part-0035.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1562777
Start date and time:	2024-11-26 01:17:29 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://robertsonalger-my.sharepoint.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/44@14/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.17.46, 64.233.165.84, 216.58.208.227, 34.104.35.123, 40.126.53.17, 40.126.53.16, 40.126.53.6, 40.126.53.11, 40.126.53.18, 20.231.128.67, 20.190.181.0, 20.231.128.66, 23.54.81.193, 23.54.81.209, 20.190.181.5, 40.126.53.15, 20.190.181.6, 40.126.53.19, 20.190.181.2, 20.190.181.4, 178.79.238.0, 192.229.221.95, 172.217.19.202, 216.58.208.234, 172.217.21.42, 172.217.19.234, 142.250.181.74, 142.250.181.10, 172.217.17.42, 142.250.181.106, 172.217.17.74, 172.217.17.35, 20.189.173.12
Excluded domains from analysis (whitelisted): onedscolprdwus11.westus.cloudapp.azure.com, slscr.update.microsoft.com, 192964-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, clients2.google.com, ocsp.digicert.com, login.live.com, update.googleapis.com, login.mso.msidentity.com, www.tm.ak.prd.aadg.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, www.tm.lg.prod.aadmsa.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://robertsonalger-my.sharepoint.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://robertsonalger-my.sharepoint.com
URL: https://login.microsoftonline.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://login.microsoftonline.com
URL: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "gr7yir@jgamdi.id" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: Joe Sandbox AI	{ "brands": [ "Qgamd" ] }
	{ "brands": [ "Qgamd" ] }
URL: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Next", "text_input_field_labels": [ "gr7yir@jqamdi.io" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We couldn't find an account with that username.", "prominent_button_name": "Next", "text_input_field_labels": [ "gr7yir@jqamdi.id" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://login.microsoftonline.com/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D0000000 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113424
Entropy (8bit):	5.2850742719795925
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmQhSeC1Jzc6VU23:xkXhp6VUU
MD5:	F3588C5412D4119F95E47073A4A5DF72
SHA1:	3C4B1652E71C25E1CE7DE611FBD17EDBAAE411D9
SHA-256:	6CC79C59F00478CE5D8EAA982EFDD8FC3CC205A7EA023A564BB2688FA206A087
SHA-512:	62886F8BFB32D2BE842A23ECA157556C30EC1D616E2607D9DF1894F702BB7A982EEB3576C95F859B4B8E9183A84D70149A8802F31317F80D4845B02CCFA018F9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	dropped
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	98304
Entropy (8bit):	5.449327168920244
Encrypted:	false
SSDEEP:	1536:RS8gIRPY0+r5qnWisLTfM6tQSqLXCIIgbgZ1uXt1EN5eAR:vgDTMnWRwvDIgb0q7Eb9R
MD5:	45B0B18B92602D41DEA9CB007617ED81
SHA1:	D1C3315FBE2A7E2B50D23B6800623960CC2E5BFD
SHA-256:	CD786B04C0B40AD08AA9B75DA735E47ED8C1B0D363B22C5B183B6B3B4114DC81
SHA-512:	3340E5D2005CAA7C97F08E1B7EE295E046F2197CA5072B340243CCE338AFFBDF6A2631D00C515BF048CC0506DD6A1A1C6272E657E15C65B7F485F70202F6F9A3
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{1373:function(e,t,

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32016)
Category:	downloaded
Size (bytes):	57510
Entropy (8bit):	5.3728935008680745
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3P7ym+d/Px25+1wtv+ixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJ/7ym+d/Po5+1wtv+iJig/Ml
MD5:	23C7FEEF919F9374C1B26F019804CDA8
SHA1:	3E22BA24CFD4F5A1C4D189AAADB1A82A867377C0
SHA-256:	993A5748DB7B6BC125F88788845A7599234130BCE2858B528071035488CB886D
SHA-512:	93D4D19CA4BACFC0AD64690E2426D573D47991DAF772D178D5C477369675539274A5E97C666A97A49AD0EC82E566EF4B71E967E7D7FFC575FBD2171E06791276
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 142367
Category:	downloaded
Size (bytes):	49911
Entropy (8bit):	7.994516776763163
Encrypted:	true
SSDEEP:	1536:vr2T/J/l2R6ACJVMQPYmlBXTm12g9bcKo0y0ci:CzJ/lG2KQzBjm1b3ci
MD5:	9B96CC09F9E89D0334BA2FBC22B5197A
SHA1:	B5FE69F39E9F61FEF88DF794F02DC4F4086E2592
SHA-256:	E6331018533143C411BAE25326AB52FCED541C48674551AEA78E750855BDCD1D
SHA-512:	2BDD71A34A7D6172AD4B7B6CF077A891D6266C148000EEF8345E2343E6C21ED8783B2EA328EF3BF7176462A3CA575D2D6D4B55A07138CFD1B02900C95F61077D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	...........m[.8.0........OL....;w.....a.....\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De.._.8.+S?N..HL..J......%O..S........(=.gO.\|.T.0......6.. ..y....x....8..p.T"1...\|$.Cz..V.D%.Ie.F....^."..5....c...?..T8..._..b.gs.4....S]kDZ..7.J.V..l}..?.....c...g.A...8.......8.VB......^..f..O.... ...`...H.{.$. OP..S..AC.gVE.I8..).-U.....R...A..%.T[...Fc{..49..If...y.'w.Q}..oz..v.....W...pp..%..G.+.r:.A......[.:..s.?U......_............k.y0.U....+I5..0.>.Q%.".w.....O....5w..;.;.>..mr.k53r.......k.0.I.<.D......d&...c..jhE..zx.]....y\|W....i...`.. .k.P...@.Uq.\;..1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F...([..y....K5pzQ.>i.1.......0..P...@...L.".n.x..Cj?..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.TM..n "..km..S.<.T..].k.+1.....P.V...4-W.C....0-/.S;.w......K.z+...DZ....=q.E.@ .Dv.z...@.d.#tE...

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	downloaded
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	190152
Entropy (8bit):	5.348678574819375
Encrypted:	false
SSDEEP:	3072:0+mTq9mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STekBWkYVdLlJNbr6m+rUGa
MD5:	4877EFC88055D60953886EC55B04DE34
SHA1:	2341B026A3E2A3B01AFA1A39D1706840D75E09B3
SHA-256:	8405362EB8F09DF13AE244DE155B51B1577274673D9728B6C81CD0278A63C8B0
SHA-512:	625844EDC37594D5C2F7622BD1B59278BF68ABB2FA22476C56826433C961C7B1924858A7588F8B6284D3C5AC8738ECB895EEC949DE18667A98C04A59CB03DAC0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45797)
Category:	dropped
Size (bytes):	406986
Entropy (8bit):	5.31836569617146
Encrypted:	false
SSDEEP:	3072:f5+ROkZBKxn7oW/sKni2JcPwRTQx4J77m7mBdhh2uZifxOjrCpaLmnF:uOkWxp/Fi9Nxe7maZc7F
MD5:	E40761677762EAB0692F86B259C7D744
SHA1:	34A9B50CEC6E1163CEEFCD4D394DB6524C89A854
SHA-256:	DA4A8DF0C326292B5BEE9C732B3C962FD67AAF2F99D850F1BF65068D573C5619
SHA-512:	04FA1D6074AD24E3ABAB53D1DE116A6B39B4BE3DFABC082427F1C5A169E50527561F160CC133C2AC4AEDC4E7AC404572F60E531A4618111EA74D138B2B0DD034
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],Array(533).concat([f

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	450033
Entropy (8bit):	5.448723522254409
Encrypted:	false
SSDEEP:	6144:07PuGBhulRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX44W:07DyZkp6umhpsUSuh
MD5:	8B962EA6EAE1400A3D8A7BBF39EB6A1F
SHA1:	A3F7D74A3ACD43D454A6F0B5AE6863E7CD8B88C7
SHA-256:	C8123F7EF42D7B45509B8E632FD575F4DC14BB1826188005FEF312C819B1BC3F
SHA-512:	BB1F1D831863A99AA81DC8E9B4B22D6789520F3F8E5396C6584BF9C4383F424F2F14E258222761DCAD0068E50FF3145DA935C1D558E7217A3644E02B1312D52D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32016)
Category:	dropped
Size (bytes):	57510
Entropy (8bit):	5.3728935008680745
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3P7ym+d/Px25+1wtv+ixn/TPRUbx3VDg/MvA5Gl:ABrkF7IyJ/7ym+d/Po5+1wtv+iJig/Ml
MD5:	23C7FEEF919F9374C1B26F019804CDA8
SHA1:	3E22BA24CFD4F5A1C4D189AAADB1A82A867377C0
SHA-256:	993A5748DB7B6BC125F88788845A7599234130BCE2858B528071035488CB886D
SHA-512:	93D4D19CA4BACFC0AD64690E2426D573D47991DAF772D178D5C477369675539274A5E97C666A97A49AD0EC82E566EF4B71E967E7D7FFC575FBD2171E06791276
Malicious:	false
Reputation:	low
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	dropped
Size (bytes):	450033
Entropy (8bit):	5.448723522254409
Encrypted:	false
SSDEEP:	6144:07PuGBhulRK2d/ZkpZYRsmA2pmBe9OpRUS4cEHKE0H3NX44W:07DyZkp6umhpsUSuh
MD5:	8B962EA6EAE1400A3D8A7BBF39EB6A1F
SHA1:	A3F7D74A3ACD43D454A6F0B5AE6863E7CD8B88C7
SHA-256:	C8123F7EF42D7B45509B8E632FD575F4DC14BB1826188005FEF312C819B1BC3F
SHA-512:	BB1F1D831863A99AA81DC8E9B4B22D6789520F3F8E5396C6584BF9C4383F424F2F14E258222761DCAD0068E50FF3145DA935C1D558E7217A3644E02B1312D52D
Malicious:	false
Reputation:	low
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	190152
Entropy (8bit):	5.348678574819375
Encrypted:	false
SSDEEP:	3072:0+mTq9mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STekBWkYVdLlJNbr6m+rUGa
MD5:	4877EFC88055D60953886EC55B04DE34
SHA1:	2341B026A3E2A3B01AFA1A39D1706840D75E09B3
SHA-256:	8405362EB8F09DF13AE244DE155B51B1577274673D9728B6C81CD0278A63C8B0
SHA-512:	625844EDC37594D5C2F7622BD1B59278BF68ABB2FA22476C56826433C961C7B1924858A7588F8B6284D3C5AC8738ECB895EEC949DE18667A98C04A59CB03DAC0
Malicious:	false
Reputation:	low
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 26, 2024 01:18:23.714662075 CET	49737	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:23.714715004 CET	443	49737	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:23.714838982 CET	49737	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:23.715087891 CET	49738	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:23.715121984 CET	443	49738	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:23.715187073 CET	49738	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:23.715308905 CET	49737	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:23.715332985 CET	443	49737	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:23.715423107 CET	49738	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:23.715435028 CET	443	49738	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.117871046 CET	49739	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:18:25.117965937 CET	443	49739	142.250.181.100	192.168.2.4
Nov 26, 2024 01:18:25.118042946 CET	49739	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:18:25.118227959 CET	49739	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:18:25.118263006 CET	443	49739	142.250.181.100	192.168.2.4
Nov 26, 2024 01:18:25.305529118 CET	443	49738	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.305828094 CET	49738	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.305845022 CET	443	49738	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.307285070 CET	443	49738	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.307351112 CET	49738	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.308326960 CET	49738	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.308409929 CET	443	49738	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.308486938 CET	49738	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.355334997 CET	443	49738	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.359545946 CET	443	49737	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.359776020 CET	49737	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.359790087 CET	443	49737	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.361818075 CET	49738	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.361826897 CET	443	49738	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.363387108 CET	443	49737	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.363459110 CET	49737	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.363787889 CET	49737	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.363969088 CET	443	49737	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.409784079 CET	49738	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.409790039 CET	49737	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.409797907 CET	443	49737	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.455780983 CET	49737	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.787966967 CET	443	49738	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.788211107 CET	443	49738	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.788269997 CET	49738	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.788803101 CET	49740	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:25.788853884 CET	443	49740	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:25.788923979 CET	49740	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:25.790085077 CET	49738	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.790095091 CET	443	49738	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:25.792022943 CET	49740	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:25.792041063 CET	443	49740	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:25.792954922 CET	49737	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:25.835328102 CET	443	49737	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:26.164535999 CET	443	49737	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:26.164660931 CET	443	49737	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:26.164733887 CET	49737	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:26.165304899 CET	49737	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:26.165319920 CET	443	49737	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:26.167248011 CET	49741	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:26.167337894 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:26.167479038 CET	49741	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:26.167674065 CET	49741	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:26.167704105 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:26.815130949 CET	443	49739	142.250.181.100	192.168.2.4
Nov 26, 2024 01:18:26.815431118 CET	49739	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:18:26.815496922 CET	443	49739	142.250.181.100	192.168.2.4
Nov 26, 2024 01:18:26.816931963 CET	443	49739	142.250.181.100	192.168.2.4
Nov 26, 2024 01:18:26.817001104 CET	49739	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:18:26.818137884 CET	49739	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:18:26.818224907 CET	443	49739	142.250.181.100	192.168.2.4
Nov 26, 2024 01:18:26.870810032 CET	49739	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:18:26.870841980 CET	443	49739	142.250.181.100	192.168.2.4
Nov 26, 2024 01:18:26.917016029 CET	49739	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:18:27.460235119 CET	443	49740	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:27.460310936 CET	49740	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:27.462475061 CET	49740	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:27.462513924 CET	443	49740	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:27.462747097 CET	443	49740	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:27.497613907 CET	49740	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:27.539328098 CET	443	49740	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:27.759073973 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:27.759341002 CET	49741	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:27.759382963 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:27.760509014 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:27.760899067 CET	49741	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:27.761029959 CET	49741	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:27.761048079 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:27.761082888 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:27.808943987 CET	49741	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:28.170808077 CET	443	49740	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:28.170877934 CET	443	49740	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:28.170958042 CET	49740	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:28.171025991 CET	49740	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:28.171070099 CET	443	49740	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:28.171097040 CET	49740	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:28.171112061 CET	443	49740	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:28.202797890 CET	49742	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:28.202826023 CET	443	49742	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:28.202889919 CET	49742	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:28.203142881 CET	49742	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:28.203155041 CET	443	49742	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:28.269612074 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:28.269680977 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:28.269720078 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:28.269776106 CET	49741	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:28.269808054 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:28.269889116 CET	49741	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:28.269901991 CET	443	49741	13.107.136.10	192.168.2.4
Nov 26, 2024 01:18:28.271408081 CET	49741	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:28.271481991 CET	49741	443	192.168.2.4	13.107.136.10
Nov 26, 2024 01:18:29.890976906 CET	443	49742	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:29.891098022 CET	49742	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:29.892271042 CET	49742	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:29.892285109 CET	443	49742	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:29.892608881 CET	443	49742	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:29.893712044 CET	49742	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:29.935342073 CET	443	49742	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:30.609788895 CET	443	49742	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:30.609942913 CET	443	49742	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:30.610006094 CET	49742	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:30.610553026 CET	49742	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:30.610583067 CET	443	49742	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:30.610598087 CET	49742	443	192.168.2.4	23.195.62.26
Nov 26, 2024 01:18:30.610605001 CET	443	49742	23.195.62.26	192.168.2.4
Nov 26, 2024 01:18:31.448278904 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:31.448308945 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:31.448380947 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:31.448815107 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:31.448829889 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.319207907 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.319608927 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:33.319622040 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.321312904 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.321388006 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:33.332276106 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:33.332381010 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.332787037 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:33.332801104 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.380945921 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:33.806999922 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.807061911 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.807082891 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.807117939 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:33.807121992 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.807152987 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.807154894 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:33.807168961 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:33.807173967 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:33.807193995 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:33.807203054 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.001105070 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:34.001173019 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:34.001204967 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.001240015 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:34.001274109 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.001288891 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.059669971 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:34.059719086 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:34.059753895 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.059779882 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:34.059812069 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.059828043 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.059884071 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:34.059931993 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.059940100 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:34.060081005 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:34.060137987 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.062747955 CET	49747	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.062757015 CET	443	49747	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:34.225826025 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.225868940 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:34.225948095 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.226142883 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:34.226161957 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:35.363598108 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:35.363621950 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:35.363687038 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:35.364659071 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:35.364671946 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:36.012943029 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.013187885 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.013209105 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.016223907 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.016304016 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.016819000 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.016901970 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.016956091 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.059333086 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.059792995 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.059803009 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.102543116 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.506688118 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.506747961 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.506768942 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.506788015 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.506800890 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.506823063 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.506840944 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.506863117 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.506882906 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.506901026 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.506910086 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.506927967 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.506931067 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.506947041 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.512451887 CET	443	49739	142.250.181.100	192.168.2.4
Nov 26, 2024 01:18:36.512603998 CET	443	49739	142.250.181.100	192.168.2.4
Nov 26, 2024 01:18:36.512700081 CET	49739	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:18:36.554251909 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.700439930 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.700462103 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.700504065 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.700505018 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.700525999 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.700537920 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.700551987 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.700553894 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.700572014 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.700599909 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.744805098 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.744853020 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.744877100 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.744895935 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.744910955 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.744930983 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.781580925 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.781630993 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.781649113 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.781749964 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.781909943 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.782006025 CET	49750	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:36.782035112 CET	443	49750	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:36.801125050 CET	49739	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:18:36.801168919 CET	443	49739	142.250.181.100	192.168.2.4
Nov 26, 2024 01:18:37.172468901 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:37.172600985 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:37.178411961 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:37.178421974 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:37.178848028 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:37.201138973 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:37.201199055 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:37.201272011 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:37.203344107 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:37.203377008 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:37.230345011 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:37.290080070 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:37.290093899 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:37.290154934 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:37.290424109 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:37.290457964 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:37.290606976 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:37.290620089 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:37.290646076 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:37.290833950 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:37.290862083 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:38.799892902 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:38.843334913 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:39.059087992 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.059547901 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.059609890 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.061058998 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.061136961 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.061963081 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.062060118 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.062088013 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.062520027 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.062714100 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.062731028 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.064193964 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.064260006 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.064515114 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.064594030 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.064619064 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.103322983 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.105068922 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.105076075 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.105078936 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.105123043 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.125508070 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.125758886 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.125775099 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.129359007 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.129435062 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.129748106 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.129841089 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.129852057 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.129921913 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.153537035 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.153543949 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.181986094 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.181998968 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.230756044 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.401187897 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:39.401251078 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:39.401271105 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:39.401290894 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:39.401329994 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:39.401351929 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:39.401441097 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:39.401441097 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:39.401441097 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:39.401441097 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:39.401470900 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:39.401527882 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:39.419861078 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:39.419985056 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:39.419994116 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:39.420072079 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:39.420131922 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:39.576796055 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.580533028 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.619807959 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.635437965 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.652101040 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.657504082 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.657515049 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.657552958 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.657562971 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.657576084 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.657578945 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.657593966 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.657613039 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.657636881 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.696584940 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.696619987 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.696640015 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.696672916 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.696688890 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.696707964 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.696712017 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.696738958 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.696743011 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.696760893 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.696790934 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.697937965 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.771888018 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.771928072 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.771945000 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.771982908 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.771994114 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.772011995 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.772037029 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.772037983 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.772051096 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.772062063 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.772067070 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.772103071 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.819809914 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.819819927 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.819844007 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.819852114 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.819889069 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.819900990 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.819925070 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.819947958 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.821870089 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.821902037 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.821945906 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.821965933 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.821969032 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.821994066 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.822009087 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.822052002 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.822112083 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.858514071 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.858557940 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.858601093 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.858625889 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.858659029 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.860943079 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.860954046 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.860971928 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.861006975 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.861016989 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.861026049 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.861056089 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.894587994 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.894609928 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.894654989 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.894686937 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.894705057 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.894725084 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.894748926 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.894768953 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.894779921 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.901671886 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.930797100 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.930862904 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.930885077 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.930908918 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.930938005 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.981103897 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.981127024 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.981220961 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.981230974 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.981259108 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.981271982 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.995083094 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.995120049 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.995166063 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.995173931 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.995203972 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.995218039 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.995240927 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:39.995261908 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:39.995294094 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.010795116 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.010816097 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.010890961 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.010898113 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.010942936 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.024327993 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.024374008 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.024410009 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.024442911 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.024471045 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.024492979 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.035060883 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.035079002 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.035146952 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.035152912 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.035196066 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.043422937 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.043463945 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.043524027 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.043539047 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.043565035 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.043589115 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.055752039 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.055788994 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.055824041 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.055830002 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.055854082 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.055874109 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.056572914 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.056596041 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.056631088 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.056663990 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.056674957 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.056786060 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.056833029 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.057085991 CET	49755	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.057113886 CET	443	49755	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.064320087 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.064363003 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.064420938 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.064440966 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.064466953 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.064531088 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.064583063 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.064693928 CET	49753	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.064711094 CET	443	49753	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.167268038 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.167301893 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.167380095 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.167390108 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.167439938 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.183337927 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.183358908 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.183417082 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.183424950 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.183471918 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.198391914 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.198429108 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.198472977 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.198482037 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.198524952 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.200815916 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.200862885 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.200922012 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.201137066 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.201148987 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.213603020 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.213649988 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.213713884 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.213721991 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.213756084 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.227591038 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.227611065 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.227677107 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.227684975 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.227727890 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.240778923 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.240799904 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.240874052 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.240880966 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.240926027 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.349059105 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.349080086 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.349157095 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.349168062 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.349216938 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.359946966 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.359966040 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.360032082 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.360038996 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.360088110 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.371200085 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.371217966 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.371277094 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.371284962 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.371330023 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.380418062 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.380435944 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.380491972 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.380500078 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.380542994 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.390913010 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.390933037 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.390990973 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.390999079 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.391046047 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.400695086 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.400719881 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.400784969 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.400791883 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.400836945 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.411163092 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.411191940 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.411231041 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.411237955 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.411283016 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.411303997 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.426140070 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.426175117 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.426225901 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.426232100 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.426264048 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.426289082 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.426292896 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.481935978 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.542404890 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.542434931 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.542481899 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.542490005 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.542521954 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.542540073 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.549523115 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.549547911 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.549603939 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.549611092 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.549621105 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.549649000 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.556986094 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.557007074 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.557049990 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.557056904 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.557085991 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.557104111 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.564884901 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.564939022 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.564961910 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.564968109 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.564995050 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.565021038 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.575491905 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.575516939 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.575608969 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.575617075 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.575654984 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.580801010 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.580821037 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.580888987 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.580895901 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.580945015 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.584292889 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.584395885 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.584491968 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.584722042 CET	49754	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.584728956 CET	443	49754	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.591018915 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.591048002 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.591111898 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.591303110 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.591321945 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.596451044 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.596493959 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.596554995 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.596779108 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:40.596791983 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:40.807303905 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:40.807331085 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:40.807359934 CET	49751	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:18:40.807365894 CET	443	49751	4.245.163.56	192.168.2.4
Nov 26, 2024 01:18:42.034745932 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.034985065 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.035000086 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.038558006 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.038625002 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.038974047 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.039097071 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.039143085 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.093259096 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.093266964 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.139398098 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.476125002 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.476363897 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.476378918 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.477824926 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.477890015 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.478223085 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.478302002 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.478339911 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.491473913 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.491669893 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.491683006 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.494980097 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.495134115 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.495330095 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.495404959 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.495421886 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.518294096 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.518301964 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.539331913 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.548696995 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.548711061 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.562212944 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.564815998 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.595834017 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.611150980 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.641554117 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.641582012 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.641597986 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.641660929 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.641663074 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.641688108 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.641699076 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.641715050 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.641716957 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.641724110 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.641752958 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.641789913 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.808155060 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.808176041 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.808218956 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.808219910 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.808237076 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.808258057 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.808267117 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.808284998 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.808305025 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.808329105 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.851871967 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.883470058 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.883491039 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.883529902 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.883529902 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.883563042 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.883569956 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.883584023 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.883589029 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.883622885 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.966949940 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.966972113 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.967150927 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.967170000 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:42.967225075 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.967456102 CET	49761	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:42.967469931 CET	443	49761	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.016463041 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.035059929 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.058069944 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.075572968 CET	49723	80	192.168.2.4	199.232.210.172
Nov 26, 2024 01:18:43.076838970 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.076864004 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.076883078 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.076908112 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.076925039 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.076941967 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.076955080 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.076965094 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.076996088 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.076982975 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.077023983 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.077028036 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.077040911 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.102051973 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.102061033 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.102087021 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.102098942 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.102108955 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.102123976 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.102133989 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.102163076 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.102190971 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.120368958 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.195902109 CET	80	49723	199.232.210.172	192.168.2.4
Nov 26, 2024 01:18:43.195977926 CET	49723	80	192.168.2.4	199.232.210.172
Nov 26, 2024 01:18:43.269737959 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.269747972 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.269783974 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.269807100 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.269817114 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.269824028 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.269838095 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.269865036 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.289625883 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.289657116 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.289674997 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.289695024 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.289743900 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.289750099 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.289772034 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.289793015 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.289802074 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.289820910 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.289822102 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.289866924 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.346863985 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.346920967 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.346971035 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.346978903 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.347026110 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.365490913 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.365531921 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.365577936 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.365586042 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.365609884 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.365621090 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.365632057 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.365642071 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.365674019 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.365731001 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.419235945 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.453521013 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.453542948 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.453607082 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.453615904 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.453648090 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.453665972 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.482614994 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.482642889 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.482691050 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.482717037 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.482729912 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.482737064 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.482760906 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.482770920 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.483860016 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.483875036 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.483944893 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.483954906 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.484003067 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.504767895 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.504782915 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.504859924 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.504868031 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.504914045 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.509162903 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.509183884 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.509238958 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.509272099 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.509301901 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.509335995 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.509355068 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.525549889 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.525567055 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.525640011 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.525648117 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.525687933 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.530822039 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.530874014 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.530900002 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.530911922 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.530937910 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.530950069 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.552443027 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.552494049 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.552517891 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.552531958 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.552577019 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.552597046 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.659086943 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.659111977 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.659158945 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.659166098 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.659208059 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.659229994 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.675976992 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.676008940 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.676053047 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.676059008 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.676095009 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.676114082 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.681153059 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.681205988 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.681227922 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.681246042 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.681267977 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.681286097 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.688201904 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.688225031 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.688261986 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.688266993 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.688294888 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.688309908 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.696032047 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.696079016 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.696095943 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.696124077 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.696127892 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.696166039 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.696238041 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.699415922 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.699443102 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.699476004 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.699484110 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.699523926 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.699527979 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.709930897 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.709963083 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.709999084 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.710005045 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.710051060 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.713232040 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.713275909 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.713296890 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.713314056 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.713335037 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.730468035 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.730523109 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.730534077 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.730554104 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.730585098 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.733694077 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.733743906 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.733768940 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.733773947 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.733812094 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.740286112 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.740341902 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.740355968 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.740374088 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.740406036 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.740413904 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.740513086 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.740556955 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.740741014 CET	49763	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.740755081 CET	443	49763	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.747723103 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.747750998 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.747817993 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.748321056 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.748336077 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.774472952 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.774502039 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.774566889 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.774750948 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.774763107 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.781543016 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.796715021 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.796739101 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.796799898 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.796983957 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.796994925 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.868253946 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.868299961 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.868444920 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.868444920 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.868452072 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.868510962 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.878393888 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.878451109 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.878510952 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.878516912 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.878560066 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.887269020 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.887300968 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.887384892 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.887391090 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.887428999 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.897414923 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.897440910 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.897502899 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.897507906 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.897543907 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.906806946 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.906832933 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.906892061 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.906897068 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.906925917 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.906944036 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.916917086 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.916941881 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.917011023 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.917016983 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.917061090 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.927093029 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.927119970 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.927166939 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.927171946 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.927201986 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.927221060 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.946204901 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.946230888 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.946286917 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:43.946293116 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:43.946330070 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.079946995 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.079969883 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.080050945 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.080058098 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.080101967 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.088068008 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.088088036 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.088156939 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.088162899 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.088210106 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.097405910 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.097428083 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.097497940 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.097502947 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.097544909 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.106709957 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.106735945 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.106803894 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.106810093 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.106848001 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.115359068 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.115382910 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.115432024 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.115437031 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.115467072 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.115485907 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.124650002 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.124686956 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.124727011 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.124732018 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.124771118 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.128665924 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.128743887 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.128750086 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.128763914 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:44.128809929 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.128921032 CET	49762	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:44.128930092 CET	443	49762	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.529504061 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.529764891 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:45.529788971 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.530122995 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.530607939 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:45.530673981 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.530778885 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:45.571346045 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.574098110 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.574368000 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:45.574389935 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.574845076 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.575299025 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:45.575382948 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.575450897 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:45.619332075 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.660069942 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.660306931 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:45.660320997 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.660635948 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.661061049 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:45.661118031 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:45.661195993 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:45.703361034 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.048657894 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.093319893 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.101846933 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.148818016 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.161469936 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.161545992 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.161597967 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.161603928 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.161654949 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.161659956 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.161663055 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.161684036 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.161710978 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.161719084 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.161727905 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.161767006 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.163463116 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.163604021 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.163738012 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.163744926 CET	443	49768	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.163757086 CET	49768	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.167860985 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.167932034 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.168013096 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.168304920 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.168339968 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.168713093 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.168720961 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.168772936 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.168807030 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.168858051 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.168888092 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.168900013 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.168909073 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.168909073 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.168942928 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.197918892 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.242460966 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.282448053 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.282479048 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.282516003 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.282526970 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.282560110 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.282581091 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.285403013 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.285424948 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.285465002 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.285470963 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.285501003 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.285502911 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.285516977 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.285522938 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.285537958 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.285545111 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.285655975 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.327210903 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.327231884 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.327291965 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.327300072 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.327336073 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.327343941 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.449328899 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.449353933 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.449412107 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.449419975 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.449454069 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.449479103 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.452380896 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.452442884 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.452464104 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.452486992 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.452511072 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.452523947 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.477489948 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.477509975 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.477583885 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.477591991 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.477643013 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.495793104 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.495840073 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.495873928 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.495897055 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.495912075 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.496711969 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.500994921 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.501036882 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.501080036 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.501085997 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.501130104 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.501130104 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.518357992 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.518378973 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.518446922 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.518459082 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.518501997 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.635719061 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.635765076 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.635797977 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.635812044 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.635835886 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.635853052 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.637449026 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.637474060 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.637511015 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.637517929 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.637547970 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.637557030 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.650475025 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.650499105 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.650552988 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.650562048 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.650604963 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.664787054 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.664832115 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.664911985 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.664935112 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.664949894 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.665446997 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.665467978 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.665509939 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.665509939 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.665518045 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.665525913 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.665544987 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.665564060 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.680253029 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.680273056 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.680335999 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.680345058 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.680371046 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.680386066 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.686285973 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.686352015 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.686367989 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.686393023 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.686419964 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.688749075 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.688812971 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.688821077 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.688860893 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.688873053 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.688905001 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.689194918 CET	49766	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.689204931 CET	443	49766	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.727034092 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.740195990 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.740240097 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.740272045 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.740292072 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.740324020 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.740350962 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.840586901 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.840630054 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.840708971 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.840734959 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.840751886 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.840778112 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.857634068 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.857673883 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.857707024 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.857719898 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.857734919 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.858406067 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.871473074 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.871531963 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.871563911 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.871578932 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.871608019 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.871627092 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.882905006 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.882992983 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.883024931 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.883038998 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.883057117 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.883081913 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.893515110 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.893562078 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.893595934 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.893613100 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.893637896 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.893660069 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.916671038 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.916712999 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.916747093 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.916763067 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:46.916790009 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:46.916811943 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.044456959 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.044518948 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.044554949 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.044584036 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.044604063 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.044625998 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.053333998 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.053379059 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.053432941 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.053464890 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.053482056 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.054219007 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.063276052 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.063335896 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.063429117 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.063452959 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.067636013 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.073364019 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.073447943 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.073487043 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.073508978 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.073537111 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.073554993 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.082154036 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.082195997 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.082226992 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.082242966 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.082269907 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.082290888 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.092876911 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.092919111 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.092972040 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.092998981 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.093020916 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.093044043 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.101674080 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.101715088 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.101763964 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.101792097 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.101814032 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.101838112 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.129158020 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.129216909 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.129257917 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.129275084 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.129302979 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.129322052 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.129328012 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.180166006 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.490617037 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.490663052 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.490813971 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.490813971 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.490839005 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.490858078 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.490885019 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.490892887 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.490915060 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.490919113 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.490950108 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.490956068 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.490979910 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.491008997 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.491039991 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.491092920 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.491101027 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.491115093 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.491142988 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.491161108 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.491214991 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.491271019 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.491280079 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.491307974 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.491333961 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.491353989 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.491359949 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.491466999 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.491513014 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.491883039 CET	49767	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.491905928 CET	443	49767	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.496187925 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.496212006 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.496275902 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.496512890 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.496526003 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.541457891 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.541548967 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.541661024 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.541908026 CET	49772	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.541935921 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.541987896 CET	49772	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.542244911 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.542282104 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.542447090 CET	49772	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.542460918 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.558126926 CET	49773	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.558202982 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.558418989 CET	49773	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.558509111 CET	49773	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.558535099 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.858411074 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.858458042 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.858546019 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.859086037 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.859100103 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.996143103 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.996387959 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.996421099 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.996901035 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.997608900 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:47.997700930 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:47.997812033 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:48.039338112 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:48.523627996 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:48.569983959 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:48.602686882 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:48.602698088 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:48.602716923 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:48.602749109 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:48.602770090 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:48.602806091 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:48.602838039 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:48.602861881 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:48.604697943 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:48.604803085 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:48.604933977 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:48.604959011 CET	443	49769	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:48.604980946 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:48.605010986 CET	49769	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.269098043 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.270821095 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.270838976 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.271344900 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.273947001 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.274033070 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.274213076 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.315341949 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.341248035 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.341567039 CET	49773	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.341603994 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.345156908 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.345227003 CET	49773	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.345535040 CET	49773	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.345602036 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.345664024 CET	49773	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.345670938 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.374114990 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.385410070 CET	49772	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.385431051 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.385741949 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.391515017 CET	49773	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.398230076 CET	49772	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.398288965 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.398372889 CET	49772	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.443329096 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.455471039 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.456188917 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.456249952 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.457448959 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.459511995 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.459646940 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.459738970 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.507956028 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.743371964 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.743597984 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.743674994 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.744788885 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.744890928 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.745215893 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.745327950 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.745343924 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.745368004 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.788264036 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.789185047 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.789201975 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.836062908 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.836102962 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.857270956 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.857281923 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.857320070 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.857338905 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.857351065 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.857361078 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.857378960 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.857398987 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.859148026 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.859340906 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.859391928 CET	49773	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.859406948 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.859569073 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.859617949 CET	49773	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.860165119 CET	49773	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.860193014 CET	443	49773	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.865329981 CET	49776	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.865451097 CET	443	49776	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.865530968 CET	49776	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.866075993 CET	49776	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.866112947 CET	443	49776	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.901200056 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.901374102 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.901423931 CET	49772	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.901434898 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.901446104 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.901473999 CET	49772	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.901500940 CET	49772	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.902558088 CET	49772	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.902568102 CET	443	49772	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.908704042 CET	49777	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.908726931 CET	443	49777	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.908795118 CET	49777	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.909059048 CET	49777	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:49.909070969 CET	443	49777	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:49.994462967 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.025742054 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.025770903 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.025854111 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.025862932 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.025904894 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.039952040 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.080229044 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.080252886 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.080287933 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.080317974 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.080336094 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.080344915 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.080399036 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.080434084 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.080451012 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.080508947 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.100038052 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.100054026 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.100107908 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.100120068 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.100159883 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.190428972 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.190448999 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.190686941 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.190696001 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.190742016 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.221105099 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.221122026 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.221250057 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.221257925 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.221312046 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.245088100 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.245104074 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.245203018 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.245208979 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.245254040 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.249378920 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.249404907 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.249448061 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.249461889 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.249514103 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.249532938 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.249593019 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.263571024 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.263586998 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.263669014 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.263679981 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.263731003 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.280124903 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.280189991 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.280262947 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.280277967 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.280342102 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.281634092 CET	49775	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.281671047 CET	443	49775	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.287383080 CET	49778	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.287420988 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.287514925 CET	49778	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.287687063 CET	49778	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.287715912 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.324846029 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.324906111 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.324953079 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.324976921 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.325005054 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.325030088 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.376674891 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.376691103 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.376770973 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.376781940 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.376823902 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.392721891 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.392735958 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.392828941 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.392836094 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.392888069 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.407938957 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.407977104 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.408050060 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.408056974 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.408101082 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.423373938 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.423392057 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.423445940 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.423454046 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.423492908 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.435117960 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.435173988 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.435224056 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.435288906 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.435365915 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.435365915 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.437756062 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.437772036 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.437830925 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.437838078 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.437882900 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.451034069 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.451049089 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.451111078 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.451117039 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.451160908 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.461241961 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.461263895 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.461316109 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.461348057 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.461364985 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.461391926 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.482732058 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.482757092 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.482822895 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.482846975 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.482902050 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.503133059 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.503290892 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.503297091 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.503344059 CET	443	49771	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.503366947 CET	49771	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.508856058 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:50.508910894 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:50.508987904 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:50.509830952 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:50.509862900 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:50.560374975 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.560395956 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.560465097 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.560487986 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.560534954 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.572397947 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.572417021 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.572490931 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.572499037 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.572540045 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.582134008 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.582153082 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.582211018 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.582217932 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.582258940 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.592916012 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.592936993 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.592973948 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.592981100 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.593017101 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.593035936 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.603728056 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.603743076 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.603796005 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.603804111 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.603841066 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.613873959 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.613894939 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.613933086 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.613939047 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.613972902 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.624742031 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.624757051 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.624799013 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.624815941 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.624829054 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.624855042 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.633908033 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.633924961 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.633974075 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.633981943 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.634013891 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.751462936 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.751477957 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.751518965 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.751538992 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.751554966 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.751579046 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.759937048 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.759953976 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.760040998 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.760050058 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.760101080 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.767110109 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.767132998 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.767163038 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.767169952 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.767198086 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.767215967 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.774056911 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.774096966 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.774096966 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.774123907 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.774128914 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:50.774153948 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.774164915 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.774358034 CET	49770	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:50.774369955 CET	443	49770	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:51.638226032 CET	443	49776	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:51.638518095 CET	49776	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:51.638578892 CET	443	49776	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:51.638921976 CET	443	49776	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:51.639242887 CET	49776	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:51.639343977 CET	443	49776	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:51.639370918 CET	49776	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:51.680100918 CET	49776	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:51.680123091 CET	443	49776	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:51.737035036 CET	443	49777	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:51.737941980 CET	49777	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:51.737960100 CET	443	49777	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:51.738255024 CET	443	49777	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:51.743964911 CET	49777	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:51.744019032 CET	443	49777	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:51.744200945 CET	49777	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:51.791328907 CET	443	49777	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.066800117 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.069207907 CET	49778	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.069240093 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.072779894 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.072865009 CET	49778	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.076807976 CET	49778	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.076987982 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.080436945 CET	49778	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.080456018 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.134540081 CET	49778	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.156362057 CET	443	49776	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.156414986 CET	443	49776	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.156476974 CET	443	49776	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.156505108 CET	49776	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.156543970 CET	49776	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.157541990 CET	49776	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.157572031 CET	443	49776	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.231030941 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.232891083 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.232913971 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.236279964 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.236388922 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.236613035 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.236705065 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.236728907 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.267410040 CET	443	49777	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.267469883 CET	443	49777	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.267514944 CET	443	49777	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.267560959 CET	49777	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.267630100 CET	49777	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.268399000 CET	49777	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.268408060 CET	443	49777	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.279350996 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.290800095 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.290815115 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.337809086 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.584402084 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.584517956 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.584604025 CET	49778	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.584666967 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.584705114 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.584762096 CET	49778	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.585433006 CET	49778	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:52.585462093 CET	443	49778	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:52.715380907 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.715441942 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.715462923 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.715481043 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.715506077 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.715519905 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.715547085 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.715550900 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.715568066 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.715580940 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.715606928 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.715636015 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.898444891 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.898510933 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.898520947 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.898559093 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.898591042 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.898591042 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.898622036 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.905761003 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.905854940 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.905874014 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.905915022 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.905944109 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.905972958 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.925684929 CET	49779	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.925712109 CET	443	49779	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.955686092 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.955713987 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:52.955771923 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.956176996 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:52.956192017 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:54.736148119 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:54.736448050 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:54.736460924 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:54.736766100 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:54.737056971 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:54.737114906 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:54.737184048 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:54.783338070 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:55.227693081 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:55.227715969 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:55.227745056 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:55.227813959 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:55.227824926 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:55.227863073 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:55.227885008 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:55.416059971 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:55.416088104 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:55.416174889 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:55.416205883 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:55.416260004 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:55.423263073 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:55.423325062 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:55.423331976 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:55.423348904 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:55.423383951 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:55.423413038 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:55.423549891 CET	49780	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:18:55.423563004 CET	443	49780	13.107.246.63	192.168.2.4
Nov 26, 2024 01:18:56.125374079 CET	49781	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:56.125395060 CET	443	49781	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:56.125479937 CET	49781	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:56.125700951 CET	49781	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:56.125718117 CET	443	49781	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:56.126445055 CET	49782	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:56.126526117 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:56.126617908 CET	49782	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:56.128801107 CET	49782	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:56.128837109 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:57.906434059 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:57.906784058 CET	49782	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:57.906831026 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:57.908024073 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:57.908369064 CET	49782	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:57.908493042 CET	49782	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:57.908504963 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:57.908550024 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:57.951894999 CET	49782	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:57.963340044 CET	443	49781	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:57.963637114 CET	49781	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:57.963649035 CET	443	49781	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:57.963993073 CET	443	49781	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:57.964308977 CET	49781	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:57.964371920 CET	443	49781	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:57.964423895 CET	49781	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.011332989 CET	443	49781	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.013602972 CET	49781	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.425970078 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.426114082 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.426219940 CET	49782	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.426256895 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.426289082 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.426364899 CET	49782	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.427282095 CET	49782	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.427329063 CET	443	49782	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.432976007 CET	49784	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.433023930 CET	443	49784	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.433092117 CET	49784	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.433942080 CET	49784	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.433957100 CET	443	49784	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.490848064 CET	443	49781	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.490916014 CET	443	49781	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.490978003 CET	443	49781	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.490982056 CET	49781	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.491014957 CET	49781	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.491750956 CET	49781	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.491763115 CET	443	49781	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.495029926 CET	49785	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.495052099 CET	443	49785	152.199.21.175	192.168.2.4
Nov 26, 2024 01:18:58.495125055 CET	49785	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.495338917 CET	49785	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:18:58.495351076 CET	443	49785	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.266690016 CET	443	49784	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.266942978 CET	49784	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.266976118 CET	443	49784	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.268095016 CET	443	49784	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.268398046 CET	49784	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.268508911 CET	49784	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.268569946 CET	443	49784	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.320936918 CET	49784	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.377707005 CET	443	49785	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.377938986 CET	49785	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.377948999 CET	443	49785	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.378253937 CET	443	49785	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.378566980 CET	49785	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.378623962 CET	443	49785	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.378689051 CET	49785	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.419367075 CET	443	49785	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.793205976 CET	443	49784	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.793338060 CET	443	49784	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.793405056 CET	49784	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.793432951 CET	443	49784	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.793493032 CET	443	49784	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.793556929 CET	49784	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.794868946 CET	49784	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.794889927 CET	443	49784	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.917706013 CET	443	49785	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.917773962 CET	443	49785	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.917840958 CET	49785	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.917845011 CET	443	49785	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:00.917897940 CET	49785	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.918349028 CET	49785	443	192.168.2.4	152.199.21.175
Nov 26, 2024 01:19:00.918356895 CET	443	49785	152.199.21.175	192.168.2.4
Nov 26, 2024 01:19:17.136044025 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:17.136090994 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:17.136153936 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:17.136495113 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:17.136506081 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:18.164702892 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:18.164743900 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:18.164809942 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:18.165167093 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:18.165191889 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:18.926692009 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:18.926820040 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:18.930309057 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:18.930320024 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:18.930546999 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:18.938683033 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:18.983342886 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:19.640153885 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:19.640182972 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:19.640197039 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:19.640279055 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:19.640302896 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:19.640352964 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:19.683868885 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:19.683909893 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:19.683959961 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:19.683967113 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:19.683979034 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:19.683991909 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:19.684015989 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:19.684077978 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:19.684099913 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:19.684108019 CET	49787	443	192.168.2.4	4.245.163.56
Nov 26, 2024 01:19:19.684112072 CET	443	49787	4.245.163.56	192.168.2.4
Nov 26, 2024 01:19:19.962043047 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:19.962115049 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:19.963968992 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:19.963982105 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:19.964382887 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:19.973902941 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.019326925 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.453593016 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.453669071 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.453713894 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.453736067 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.453754902 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.453777075 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.453804970 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.635399103 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.635463953 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.635499001 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.635529041 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.635548115 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.635579109 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.689074039 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.689117908 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.689156055 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.689167023 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.689183950 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.689217091 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.821765900 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.821795940 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.821847916 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.821858883 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.821893930 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.821914911 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.857558012 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.857604027 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.857630968 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.857639074 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.857671022 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.857681990 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.875631094 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.875691891 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.875701904 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.875710011 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.875741005 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.875761986 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.896653891 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.896676064 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.896713972 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.896722078 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:20.896748066 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:20.896771908 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.015589952 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.015619040 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.015726089 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.015738010 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.015785933 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.032339096 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.032393932 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.032426119 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.032433987 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.032465935 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.032485962 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.046072006 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.046117067 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.046200037 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.046215057 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.046298027 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.061944008 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.061989069 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.062050104 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.062057972 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.062083960 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.062103033 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.077797890 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.077857971 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.077883005 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.077889919 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.077939034 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.077953100 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.078088999 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.078201056 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.078814983 CET	49788	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.078828096 CET	443	49788	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.114958048 CET	49791	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.114978075 CET	49790	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.114998102 CET	443	49790	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.115004063 CET	443	49791	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.115118027 CET	49790	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.115411997 CET	49790	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.115427971 CET	443	49790	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.115432024 CET	49791	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.115560055 CET	49791	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.115573883 CET	443	49791	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.117150068 CET	49792	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.117180109 CET	443	49792	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.117228985 CET	49792	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.117362022 CET	49792	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.117374897 CET	443	49792	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.119117022 CET	49793	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.119163036 CET	443	49793	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.119205952 CET	49793	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.119955063 CET	49794	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.119961977 CET	443	49794	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.120008945 CET	49794	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.120136976 CET	49794	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.120146990 CET	443	49794	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:21.120234013 CET	49793	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:21.120245934 CET	443	49793	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.831087112 CET	443	49791	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.831660032 CET	49791	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:22.831679106 CET	443	49791	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.832192898 CET	49791	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:22.832201958 CET	443	49791	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.896961927 CET	443	49792	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.897352934 CET	49792	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:22.897375107 CET	443	49792	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.897830963 CET	49792	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:22.897835970 CET	443	49792	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.901042938 CET	443	49790	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.901350021 CET	49790	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:22.901377916 CET	443	49790	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.901814938 CET	49790	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:22.901823044 CET	443	49790	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.963603973 CET	443	49794	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.964135885 CET	49794	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:22.964143991 CET	443	49794	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.964490891 CET	443	49793	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.964692116 CET	49794	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:22.964701891 CET	443	49794	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.965316057 CET	49793	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:22.965352058 CET	443	49793	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:22.965863943 CET	49793	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:22.965869904 CET	443	49793	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.267041922 CET	443	49791	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.267116070 CET	443	49791	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.267165899 CET	49791	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.267374039 CET	49791	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.267402887 CET	443	49791	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.267417908 CET	49791	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.267426968 CET	443	49791	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.270735025 CET	49795	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.270771027 CET	443	49795	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.270824909 CET	49795	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.270999908 CET	49795	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.271015882 CET	443	49795	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.346354961 CET	443	49792	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.346371889 CET	443	49792	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.346420050 CET	49792	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.346429110 CET	443	49792	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.346467972 CET	49792	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.346592903 CET	49792	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.346596956 CET	443	49792	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.346610069 CET	49792	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.346704960 CET	443	49792	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.346728086 CET	443	49792	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.346769094 CET	49792	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.348855019 CET	49796	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.348872900 CET	443	49796	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.348926067 CET	49796	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.349138975 CET	49796	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.349149942 CET	443	49796	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.349370003 CET	443	49790	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.349427938 CET	443	49790	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.349488020 CET	49790	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.349495888 CET	443	49790	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.349545956 CET	49790	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.349641085 CET	49790	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.349643946 CET	443	49790	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.349668026 CET	49790	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.350043058 CET	443	49790	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.350126028 CET	443	49790	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.350176096 CET	49790	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.351707935 CET	49797	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.351727962 CET	443	49797	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.351775885 CET	49797	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.352164984 CET	49797	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.352174997 CET	443	49797	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.419331074 CET	443	49793	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.419401884 CET	443	49793	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.419502974 CET	49793	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.419706106 CET	49793	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.419727087 CET	443	49793	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.419739962 CET	49793	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.419747114 CET	443	49793	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.422048092 CET	49798	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.422063112 CET	443	49798	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.422411919 CET	49798	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.422552109 CET	49798	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.422564983 CET	443	49798	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.424065113 CET	443	49794	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.424086094 CET	443	49794	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.424125910 CET	443	49794	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.424143076 CET	49794	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.424182892 CET	49794	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.424326897 CET	49794	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.424338102 CET	443	49794	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.424349070 CET	49794	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.424354076 CET	443	49794	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.426671028 CET	49799	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.426696062 CET	443	49799	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:23.427048922 CET	49799	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.427182913 CET	49799	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:23.427195072 CET	443	49799	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.006182909 CET	443	49795	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.006697893 CET	49795	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.006731033 CET	443	49795	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.007291079 CET	49795	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.007297039 CET	443	49795	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.039753914 CET	49800	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:19:25.039781094 CET	443	49800	142.250.181.100	192.168.2.4
Nov 26, 2024 01:19:25.039866924 CET	49800	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:19:25.040232897 CET	49800	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:19:25.040242910 CET	443	49800	142.250.181.100	192.168.2.4
Nov 26, 2024 01:19:25.062819004 CET	443	49796	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.063385963 CET	49796	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.063395977 CET	443	49796	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.063950062 CET	49796	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.063954115 CET	443	49796	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.073067904 CET	443	49797	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.073473930 CET	49797	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.073493004 CET	443	49797	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.073959112 CET	49797	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.073964119 CET	443	49797	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.208434105 CET	443	49799	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.208863974 CET	443	49798	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.208945990 CET	49799	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.208962917 CET	443	49799	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.209188938 CET	49798	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.209206104 CET	443	49798	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.209579945 CET	49799	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.209583998 CET	443	49799	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.209626913 CET	49798	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.209631920 CET	443	49798	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.445548058 CET	443	49795	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.445626974 CET	443	49795	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.445686102 CET	49795	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.445815086 CET	49795	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.445848942 CET	443	49795	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.445863962 CET	49795	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.445872068 CET	443	49795	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.448714972 CET	49801	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.448797941 CET	443	49801	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.448915958 CET	49801	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.449040890 CET	49801	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.449079037 CET	443	49801	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.497967005 CET	443	49796	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.498008013 CET	443	49796	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.498053074 CET	49796	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.498182058 CET	49796	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.498193979 CET	443	49796	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.498203993 CET	49796	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.498208046 CET	443	49796	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.500627995 CET	49802	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.500653028 CET	443	49802	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.500742912 CET	49802	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.500853062 CET	49802	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.500864983 CET	443	49802	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.507059097 CET	443	49797	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.507226944 CET	443	49797	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.507288933 CET	49797	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.507369041 CET	49797	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.507383108 CET	443	49797	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.507391930 CET	49797	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.507396936 CET	443	49797	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.509741068 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.509778976 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.509860992 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.509999990 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.510027885 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.654628038 CET	443	49799	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.654711962 CET	443	49799	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.654762983 CET	49799	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.654874086 CET	49799	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.654885054 CET	443	49799	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.654908895 CET	49799	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.654913902 CET	443	49799	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.657459974 CET	49804	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.657486916 CET	443	49804	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.657571077 CET	49804	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.657711983 CET	49804	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.657727003 CET	443	49804	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.658392906 CET	443	49798	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.658457041 CET	443	49798	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.658502102 CET	49798	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.658600092 CET	49798	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.658607960 CET	443	49798	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.658622980 CET	49798	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.658627033 CET	443	49798	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.660808086 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.660840034 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:25.660912037 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.661031008 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:25.661045074 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:26.729279041 CET	443	49800	142.250.181.100	192.168.2.4
Nov 26, 2024 01:19:26.729736090 CET	49800	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:19:26.729748964 CET	443	49800	142.250.181.100	192.168.2.4
Nov 26, 2024 01:19:26.730026960 CET	443	49800	142.250.181.100	192.168.2.4
Nov 26, 2024 01:19:26.730434895 CET	49800	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:19:26.730488062 CET	443	49800	142.250.181.100	192.168.2.4
Nov 26, 2024 01:19:26.773776054 CET	49800	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:19:27.229768038 CET	443	49801	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.232075930 CET	49801	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.232131958 CET	443	49801	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.232486010 CET	49801	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.232505083 CET	443	49801	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.235800982 CET	443	49802	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.239916086 CET	49802	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.239938974 CET	443	49802	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.240272999 CET	49802	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.240278006 CET	443	49802	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.352977991 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.353420973 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.353447914 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.353990078 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.354001999 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.378087044 CET	443	49804	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.378115892 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.378528118 CET	49804	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.378540039 CET	443	49804	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.378721952 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.378741026 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.379013062 CET	49804	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.379019022 CET	443	49804	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.379169941 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.379175901 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.671436071 CET	443	49802	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.671477079 CET	443	49802	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.671529055 CET	49802	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.671731949 CET	49802	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.671741962 CET	443	49802	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.671751022 CET	49802	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.671755075 CET	443	49802	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.674313068 CET	443	49801	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.674391985 CET	443	49801	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.674459934 CET	49801	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.674556017 CET	49801	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.674556017 CET	49801	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.674622059 CET	443	49801	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.674654961 CET	443	49801	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.674781084 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.674809933 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.674869061 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.674988031 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.675002098 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.676892042 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.676950932 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.677031040 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.677154064 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.677170038 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.797873974 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.798027039 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.798095942 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.798146009 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.798146963 CET	49803	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.798170090 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.798191071 CET	443	49803	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.800416946 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.800460100 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.800601959 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.800726891 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.800774097 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.813874006 CET	443	49804	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.813937902 CET	443	49804	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.813991070 CET	49804	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.814086914 CET	49804	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.814095020 CET	443	49804	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.814105034 CET	49804	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.814109087 CET	443	49804	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.814526081 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.814589977 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.814637899 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.814759970 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.814769983 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.814784050 CET	49805	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.814790010 CET	443	49805	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.816258907 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.816278934 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.816344976 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.816519976 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.816534042 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.816840887 CET	49810	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.816864014 CET	443	49810	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:27.816934109 CET	49810	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.817076921 CET	49810	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:27.817101955 CET	443	49810	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.072762012 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.073225975 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.073252916 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.073638916 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.073643923 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.136470079 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.136830091 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.136859894 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.137166023 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.137171984 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.195903063 CET	49724	80	192.168.2.4	199.232.210.172
Nov 26, 2024 01:19:30.198975086 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.199287891 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.199305058 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.199635029 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.199640036 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.259984970 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.260315895 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.260416031 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.260643005 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.260658979 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.268860102 CET	443	49810	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.269094944 CET	49810	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.269141912 CET	443	49810	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.269406080 CET	49810	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.269417048 CET	443	49810	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.316099882 CET	80	49724	199.232.210.172	192.168.2.4
Nov 26, 2024 01:19:30.316178083 CET	49724	80	192.168.2.4	199.232.210.172
Nov 26, 2024 01:19:30.518099070 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.518143892 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.518202066 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.518377066 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.518390894 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.518399954 CET	49807	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.518404961 CET	443	49807	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.521024942 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.521045923 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.521131992 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.521298885 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.521310091 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.589912891 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.589982986 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.590034962 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.590162039 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.590162039 CET	49806	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.590173960 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.590183020 CET	443	49806	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.592169046 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.592190027 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.592248917 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.592349052 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.592358112 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.644227982 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.644294024 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.644342899 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.644428015 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.644434929 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.644444942 CET	49809	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.644448996 CET	443	49809	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.646224976 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.646241903 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.646311045 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.646435976 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.646449089 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.713735104 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.713897943 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.713962078 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.714024067 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.714025021 CET	49808	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.714080095 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.714106083 CET	443	49808	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.715977907 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.716011047 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.716090918 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.716217041 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.716227055 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.722198963 CET	443	49810	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.722255945 CET	443	49810	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.722300053 CET	49810	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.722373962 CET	49810	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.722388029 CET	443	49810	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.722421885 CET	49810	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.722434998 CET	443	49810	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.724062920 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.724072933 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:30.724137068 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.724251986 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:30.724263906 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.365622044 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.366136074 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.366148949 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.366576910 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.366580963 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.427822113 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.428278923 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.428299904 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.428884983 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.428890944 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.436327934 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.436652899 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.436676025 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.437017918 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.437022924 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.497050047 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.497541904 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.497555971 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.497941017 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.497946024 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.537962914 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.538491011 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.538505077 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.538860083 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.538865089 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.856332064 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.856388092 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.856610060 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.856640100 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.856650114 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.856664896 CET	49811	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.856668949 CET	443	49811	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.859345913 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.859400988 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.859481096 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.859631062 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.859652042 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.897468090 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.897521973 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.897641897 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.897752047 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.897783041 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.897793055 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.897811890 CET	49813	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.897815943 CET	443	49813	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.897819996 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.897859097 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.897978067 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.897994041 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.898005009 CET	49812	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.898009062 CET	443	49812	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.899873018 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.899897099 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.899964094 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.900075912 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.900077105 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.900089025 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.900094986 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.900150061 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.900284052 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.900290966 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.983335972 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.983406067 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.983510017 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.983544111 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.983549118 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.983577013 CET	49815	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.983581066 CET	443	49815	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.985411882 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.985421896 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:32.985487938 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.985611916 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:32.985622883 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:33.026735067 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:33.026990891 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:33.027045012 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:33.027065992 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:33.027074099 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:33.027084112 CET	49814	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:33.027087927 CET	443	49814	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:33.028724909 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:33.028752089 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:33.028805971 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:33.028901100 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:33.028913021 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.581589937 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.582047939 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:34.582093954 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.582489014 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:34.582494020 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.723797083 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.724261999 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:34.724280119 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.724589109 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:34.724595070 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.804250002 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.804776907 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:34.804794073 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.805381060 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:34.805385113 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.893712044 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.894108057 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:34.894123077 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.894390106 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.894521952 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:34.894526958 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.894650936 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:34.894666910 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:34.894972086 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:34.894977093 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.021420956 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.021477938 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.021532059 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.021662951 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.021682024 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.021692038 CET	49816	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.021699905 CET	443	49816	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.024518967 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.024552107 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.024630070 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.024753094 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.024766922 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.169051886 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.169112921 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.169163942 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.169245005 CET	49817	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.169253111 CET	443	49817	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.173484087 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.173518896 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.173568964 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.173809052 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.173820972 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.259279013 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.259346962 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.259388924 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.259524107 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.259535074 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.259553909 CET	49818	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.259558916 CET	443	49818	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.262063980 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.262079954 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.262139082 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.262279987 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.262293100 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.348038912 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.348094940 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.348146915 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.348231077 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.348236084 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.348244905 CET	49819	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.348248959 CET	443	49819	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.350713015 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.350795984 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.350862980 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.351100922 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.351138115 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.351285934 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.351459980 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.351511955 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.351546049 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.351557016 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.351566076 CET	49820	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.351572037 CET	443	49820	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.353408098 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.353441954 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:35.353501081 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.353605986 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:35.353616953 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:36.438380957 CET	443	49800	142.250.181.100	192.168.2.4
Nov 26, 2024 01:19:36.438427925 CET	443	49800	142.250.181.100	192.168.2.4
Nov 26, 2024 01:19:36.438513994 CET	49800	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:19:36.805361032 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:36.805846930 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:36.805865049 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:36.806313992 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:36.806318998 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:36.953226089 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:36.953581095 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:36.953602076 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:36.953984022 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:36.953989029 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.044120073 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.044493914 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.044511080 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.044845104 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.044850111 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.161458015 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.161940098 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.161962032 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.162343025 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.162347078 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.199438095 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.199812889 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.199896097 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.200165987 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.200185061 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.249680996 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.249764919 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.249813080 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.249980927 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.249991894 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.250000954 CET	49821	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.250005007 CET	443	49821	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.252944946 CET	49826	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.252998114 CET	443	49826	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.253096104 CET	49826	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.253233910 CET	49826	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.253264904 CET	443	49826	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.402744055 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.402805090 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.402896881 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.403043985 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.403059959 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.403069019 CET	49822	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.403074026 CET	443	49822	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.405402899 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.405421019 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.405523062 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.405661106 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.405673981 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.463593006 CET	49800	443	192.168.2.4	142.250.181.100
Nov 26, 2024 01:19:37.463602066 CET	443	49800	142.250.181.100	192.168.2.4
Nov 26, 2024 01:19:37.489115000 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.489176989 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.489228010 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.489371061 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.489376068 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.489386082 CET	49823	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.489388943 CET	443	49823	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.491403103 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.491435051 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.491520882 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.491638899 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.491655111 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.615086079 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.615232944 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.615309954 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.615356922 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.615364075 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.615402937 CET	49825	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.615407944 CET	443	49825	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.617398024 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.617422104 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.617647886 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.617647886 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.617675066 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.653933048 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.654006958 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.654083967 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.654175997 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.654205084 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.654257059 CET	49824	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.654288054 CET	443	49824	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.656043053 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.656075001 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:37.656143904 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.656255960 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:37.656265974 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.032917023 CET	443	49826	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.033473969 CET	49826	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.033531904 CET	443	49826	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.033860922 CET	49826	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.033875942 CET	443	49826	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.185806990 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.186227083 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.186254025 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.186583042 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.186588049 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.272285938 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.272687912 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.272705078 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.273058891 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.273062944 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.434808969 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.435257912 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.435271978 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.435611010 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.435615063 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.468343973 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.468703032 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.468724012 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.469005108 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.469011068 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.479760885 CET	443	49826	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.479805946 CET	443	49826	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.479896069 CET	49826	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.480021954 CET	49826	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.480057001 CET	443	49826	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.480108023 CET	49826	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.480123043 CET	443	49826	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.482357025 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.482372999 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.482455015 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.482577085 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.482588053 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.630961895 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.631055117 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.631155014 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.631223917 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.631233931 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.631268024 CET	49827	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.631273031 CET	443	49827	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.633071899 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.633102894 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.633167982 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.633307934 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.633320093 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.722023964 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.722084045 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.722152948 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.722242117 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.722254992 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.722290993 CET	49828	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.722296953 CET	443	49828	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.724016905 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.724039078 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.724114895 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.724229097 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.724242926 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.880058050 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.880104065 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.880203962 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.880315065 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.880321026 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.880357981 CET	49830	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.880362034 CET	443	49830	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.882169008 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.882191896 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.882272005 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.882392883 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.882402897 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.921731949 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.921894073 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.921962023 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.921998978 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.922008038 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.922204018 CET	49829	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.922209978 CET	443	49829	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.923603058 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.923614979 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:39.923686981 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.923804045 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:39.923815966 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.326766968 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.327328920 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.327353001 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.327774048 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.327783108 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.442034960 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.442416906 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.442445993 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.442769051 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.442774057 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.476613998 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.476962090 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.476994038 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.477300882 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.477307081 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.662714958 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.663078070 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.663096905 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.663403988 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.663409948 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.711467028 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.711986065 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.711996078 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.712347984 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.712352991 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.800750971 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.800801039 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.800862074 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.800985098 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.800996065 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.801031113 CET	49831	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.801035881 CET	443	49831	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.803395033 CET	49836	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.803423882 CET	443	49836	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.803499937 CET	49836	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.803632021 CET	49836	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.803658962 CET	443	49836	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.878371954 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.878443003 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.878509045 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.878602028 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.878613949 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.878643990 CET	49833	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.878648996 CET	443	49833	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.880538940 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.880572081 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.880640984 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.880764008 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.880775928 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.931809902 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.931849957 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.931905031 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.932030916 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.932053089 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.932082891 CET	49832	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.932090044 CET	443	49832	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.933840036 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.933861971 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:41.933928013 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.934046984 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:41.934057951 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.156161070 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.156227112 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.156267881 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.156474113 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.156480074 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.156487942 CET	49835	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.156492949 CET	443	49835	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.158447981 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.158471107 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.158535004 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.158714056 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.158735037 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.308074951 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.308384895 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.308464050 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.308518887 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.308532953 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.308568001 CET	49834	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.308573961 CET	443	49834	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.310451031 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.310467005 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:42.310534000 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.310647011 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:42.310662031 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.582715034 CET	443	49836	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.583720922 CET	49836	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:43.583720922 CET	49836	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:43.583743095 CET	443	49836	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.583755970 CET	443	49836	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.598133087 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.598836899 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:43.598836899 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:43.598867893 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.598877907 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.779500961 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.780292034 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:43.780292034 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:43.780303955 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.780318975 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.939166069 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.939666986 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:43.939694881 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:43.940152884 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:43.940157890 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.029591084 CET	443	49836	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.029644012 CET	443	49836	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.029912949 CET	49836	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.029912949 CET	49836	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.029912949 CET	49836	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.032310963 CET	49842	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.032330990 CET	443	49842	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.032429934 CET	49842	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.032532930 CET	49842	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.032543898 CET	443	49842	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.034193993 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.034250021 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.034393072 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.034393072 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.034465075 CET	49837	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.034475088 CET	443	49837	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.036446095 CET	49843	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.036473036 CET	443	49843	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.036631107 CET	49843	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.036631107 CET	49843	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.036654949 CET	443	49843	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.094238043 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.095187902 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.095187902 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.095197916 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.095211983 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.336699963 CET	49836	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.336721897 CET	443	49836	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.383981943 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.384136915 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.384300947 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.384300947 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.386727095 CET	49844	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.386727095 CET	49839	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.386751890 CET	443	49844	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.386763096 CET	443	49839	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.386969090 CET	49844	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.386969090 CET	49844	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.386991978 CET	443	49844	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.463588953 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.463732958 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.464188099 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.464265108 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.464265108 CET	49838	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.464279890 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.464288950 CET	443	49838	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.466402054 CET	49845	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.466423035 CET	443	49845	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.466722012 CET	49845	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.466897964 CET	49845	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.466908932 CET	443	49845	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.539644957 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.539709091 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.539860964 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.539882898 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.539891005 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.539901018 CET	49840	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.539905071 CET	443	49840	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.541925907 CET	49846	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.541948080 CET	443	49846	13.107.246.63	192.168.2.4
Nov 26, 2024 01:19:44.542013884 CET	49846	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.542133093 CET	49846	443	192.168.2.4	13.107.246.63
Nov 26, 2024 01:19:44.542146921 CET	443	49846	13.107.246.63	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 26, 2024 01:18:21.399864912 CET	53	59718	1.1.1.1	192.168.2.4
Nov 26, 2024 01:18:21.400214911 CET	53	51811	1.1.1.1	192.168.2.4
Nov 26, 2024 01:18:22.966721058 CET	59492	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:22.967012882 CET	58167	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:24.150253057 CET	53	56448	1.1.1.1	192.168.2.4
Nov 26, 2024 01:18:24.977475882 CET	63357	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:24.977865934 CET	52713	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:25.116679907 CET	53	63357	1.1.1.1	192.168.2.4
Nov 26, 2024 01:18:25.116858959 CET	53	52713	1.1.1.1	192.168.2.4
Nov 26, 2024 01:18:28.272886992 CET	64791	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:28.273006916 CET	63533	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:36.801563025 CET	58399	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:36.801879883 CET	52320	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:37.025100946 CET	51941	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:37.025361061 CET	56988	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:37.164089918 CET	53	51941	1.1.1.1	192.168.2.4
Nov 26, 2024 01:18:37.532866955 CET	53	56988	1.1.1.1	192.168.2.4
Nov 26, 2024 01:18:40.060405016 CET	58429	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:40.060542107 CET	56795	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:40.199281931 CET	53	58429	1.1.1.1	192.168.2.4
Nov 26, 2024 01:18:40.200280905 CET	53	56795	1.1.1.1	192.168.2.4
Nov 26, 2024 01:18:41.131006956 CET	53	58774	1.1.1.1	192.168.2.4
Nov 26, 2024 01:18:41.784735918 CET	138	138	192.168.2.4	192.168.2.255
Nov 26, 2024 01:18:47.774045944 CET	53	50711	1.1.1.1	192.168.2.4
Nov 26, 2024 01:18:59.250133991 CET	50895	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:59.250262022 CET	53053	53	192.168.2.4	1.1.1.1
Nov 26, 2024 01:18:59.890077114 CET	53	62888	1.1.1.1	192.168.2.4
Nov 26, 2024 01:19:20.635340929 CET	53	55916	1.1.1.1	192.168.2.4
Nov 26, 2024 01:19:22.329799891 CET	53	51322	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 26, 2024 01:18:31.953500032 CET	192.168.2.4	1.1.1.1	c2dc	(Port unreachable)	Destination Unreachable
Nov 26, 2024 01:18:37.532932043 CET	192.168.2.4	1.1.1.1	c265	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 26, 2024 01:18:22.966721058 CET	192.168.2.4	1.1.1.1	0xc880	Standard query (0)	robertsonalger-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:22.967012882 CET	192.168.2.4	1.1.1.1	0xcb03	Standard query (0)	robertsonalger-my.sharepoint.com	65	IN (0x0001)	false
Nov 26, 2024 01:18:24.977475882 CET	192.168.2.4	1.1.1.1	0xf583	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:24.977865934 CET	192.168.2.4	1.1.1.1	0xcc81	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 26, 2024 01:18:28.272886992 CET	192.168.2.4	1.1.1.1	0xd797	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:28.273006916 CET	192.168.2.4	1.1.1.1	0x5df	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Nov 26, 2024 01:18:36.801563025 CET	192.168.2.4	1.1.1.1	0x2a50	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:36.801879883 CET	192.168.2.4	1.1.1.1	0x4f74	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Nov 26, 2024 01:18:37.025100946 CET	192.168.2.4	1.1.1.1	0x5d83	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:37.025361061 CET	192.168.2.4	1.1.1.1	0x12c6	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 26, 2024 01:18:40.060405016 CET	192.168.2.4	1.1.1.1	0x38db	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:40.060542107 CET	192.168.2.4	1.1.1.1	0xd0a4	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Nov 26, 2024 01:18:59.250133991 CET	192.168.2.4	1.1.1.1	0x76f6	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:59.250262022 CET	192.168.2.4	1.1.1.1	0xd615	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 26, 2024 01:18:23.584553003 CET	1.1.1.1	192.168.2.4	0xcb03	No error (0)	robertsonalger-my.sharepoint.com	robertsonalger.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:23.584553003 CET	1.1.1.1	192.168.2.4	0xcb03	No error (0)	robertsonalger.sharepoint.com	674-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:23.584553003 CET	1.1.1.1	192.168.2.4	0xcb03	No error (0)	674-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192964-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:23.584553003 CET	1.1.1.1	192.168.2.4	0xcb03	No error (0)	192964-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192964-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:23.713715076 CET	1.1.1.1	192.168.2.4	0xc880	No error (0)	robertsonalger-my.sharepoint.com	robertsonalger.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:23.713715076 CET	1.1.1.1	192.168.2.4	0xc880	No error (0)	robertsonalger.sharepoint.com	674-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:23.713715076 CET	1.1.1.1	192.168.2.4	0xc880	No error (0)	674-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192964-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:23.713715076 CET	1.1.1.1	192.168.2.4	0xc880	No error (0)	192964-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192964-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:23.713715076 CET	1.1.1.1	192.168.2.4	0xc880	No error (0)	192964-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:23.713715076 CET	1.1.1.1	192.168.2.4	0xc880	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:23.713715076 CET	1.1.1.1	192.168.2.4	0xc880	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:25.116679907 CET	1.1.1.1	192.168.2.4	0xf583	No error (0)	www.google.com		142.250.181.100	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:25.116858959 CET	1.1.1.1	192.168.2.4	0xcc81	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 26, 2024 01:18:28.411864042 CET	1.1.1.1	192.168.2.4	0xd797	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:28.413002968 CET	1.1.1.1	192.168.2.4	0x5df	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:31.416376114 CET	1.1.1.1	192.168.2.4	0xc6b	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:31.416376114 CET	1.1.1.1	192.168.2.4	0xc6b	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:34.224747896 CET	1.1.1.1	192.168.2.4	0x78a8	No error (0)	shed.dual-low.s-part-0035.t-0009.t-msedge.net	s-part-0035.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:34.224747896 CET	1.1.1.1	192.168.2.4	0x78a8	No error (0)	s-part-0035.t-0009.t-msedge.net		13.107.246.63	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:36.942081928 CET	1.1.1.1	192.168.2.4	0x4f74	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:37.034811974 CET	1.1.1.1	192.168.2.4	0x2a50	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:37.164089918 CET	1.1.1.1	192.168.2.4	0x5d83	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:37.164089918 CET	1.1.1.1	192.168.2.4	0x5d83	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:37.164089918 CET	1.1.1.1	192.168.2.4	0x5d83	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:37.532866955 CET	1.1.1.1	192.168.2.4	0x12c6	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:37.532866955 CET	1.1.1.1	192.168.2.4	0x12c6	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:40.199281931 CET	1.1.1.1	192.168.2.4	0x38db	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:40.199281931 CET	1.1.1.1	192.168.2.4	0x38db	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:40.199281931 CET	1.1.1.1	192.168.2.4	0x38db	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Nov 26, 2024 01:18:40.200280905 CET	1.1.1.1	192.168.2.4	0xd0a4	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:40.200280905 CET	1.1.1.1	192.168.2.4	0xd0a4	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:59.390331984 CET	1.1.1.1	192.168.2.4	0x76f6	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 26, 2024 01:18:59.390404940 CET	1.1.1.1	192.168.2.4	0xd615	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

robertsonalger-my.sharepoint.com

fs.microsoft.com

https:

aadcdn.msauth.net

aadcdn.msftauth.net

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	13.107.136.10	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:25 UTC	675	OUT	GET / HTTP/1.1 Host: robertsonalger-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:25 UTC	2023	IN	HTTP/1.1 302 Found Content-Length: 198 Content-Type: text/html; charset=utf-8 Location: https://robertsonalger-my.sharepoint.com/_layouts/15/authenticate.aspx?Source=%2F P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,0,34,2597941,0,1051136,6 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 248067a1-502b-6000-e7f0-3cb7021a23d6 request-id: 248067a1-502b-6000-e7f0-3cb7021a23d6 MS-CV: oWeAJCtQAGDn8Dy3Ahoj1g.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-EWR31r5a&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com teams.cloud.microsoft .office365.com goals.cloud.microsoft .powerapps.com app.powerbi.com .yammer.com engage.cloud.microsoft word.cloud.microsoft excel.cloud.microsoft powerpoint.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 21 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25430 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 068E562E37FB4B99A11059865A5BDC8C Ref B: EWR311000102047 Ref C: 2024-11-26T00:18:25Z Date: Tue, 26 Nov 2024 00:18:24 GMT Connection: close
2024-11-26 00:18:25 UTC	198	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 6f 62 65 72 74 73 6f 6e 61 6c 67 65 72 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 61 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 3f 53 6f 75 72 63 65 3d 25 32 46 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://robertsonalger-my.sharepoint.com/_layouts/15/authenticate.aspx?Source=%2F">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49737	13.107.136.10	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:25 UTC	715	OUT	GET /_layouts/15/authenticate.aspx?Source=%2F HTTP/1.1 Host: robertsonalger-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:26 UTC	1669	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 219 Content-Type: text/html; charset=utf-8 Location: /_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fauthenticate.aspx%3fSource%3d%252F&Source=cookie P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RpsContextCookie=U291cmNlPSUyRg==; expires=Tue, 26-Nov-2024 00:28:25 GMT; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,1051136,5,0,2471588,0,1051136,6 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 248067a1-b042-7000-27f7-e6a13c2e5f0d request-id: 248067a1-b042-7000-27f7-e6a13c2e5f0d MS-CV: oWeAJEKwAHAn9+ahPC5fDQ.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-EWR31r5d&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 12 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25430 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: CA3A3A98A0D8494080480EEE8C13EACC Ref B: EWR311000108053 Ref C: 2024-11-26T00:18:25Z Date: Tue, 26 Nov 2024 00:18:25 GMT Connection: close
2024-11-26 00:18:26 UTC	219	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 5f 66 6f 72 6d 73 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 5f 6c 61 79 6f 75 74 73 25 32 66 31 35 25 32 66 61 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 25 33 66 53 6f 75 72 63 65 25 33 64 25 32 35 32 46 26 61 6d 70 3b 53 6f 75 72 63 65 3d 63 6f 6f 6b 69 65 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fauthenticate.aspx%3fSource%3d%252F&Source=cookie">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	23.195.62.26	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:27 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-26 00:18:28 UTC	480	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: HK Cache-Control: public, max-age=165072 Date: Tue, 26 Nov 2024 00:18:27 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	13.107.136.10	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:27 UTC	815	OUT	GET /_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fauthenticate.aspx%3fSource%3d%252F&Source=cookie HTTP/1.1 Host: robertsonalger-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RpsContextCookie=U291cmNlPSUyRg==
2024-11-26 00:18:28 UTC	3557	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 890 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://login.microsoftonline.com:443/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805%2D5C9DB26A543C772BD44A6B32ABEA7D367A4CCA0114BA41E34DFC7ADFA2961600&redirect%5Furi=https%3A%2F%2Frobertsonalger%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: nSGt-438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805=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; expires=Tue, 26-Nov-2024 00:22:28 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: nSGt-438D31B5C6BE3F50AB81B36A525AC0DECF4BE79B27964805=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly Set-Cookie: RpsContextCookie=U291cmNlPSUyRiZQcmV2aW91c1JlcXVlc3RDb3JyZWxhdGlvbklkPTI0ODA2N2ExJTJEZDBjNCUyRDYwMDAlMkRlN2YwJTJEMzJkYTY2OTI0MWVjJlJldHVyblVybD0lMkYlNUZsYXlvdXRzJTJGMTUlMkZhdXRoZW50aWNhdGUlMkVhc3B4JTNGU291cmNlJTNEJTI1MkY=; expires=Tue, 26-Nov-2024 00:28:28 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: RpsContextCookie=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly X-NetworkStatistics: 0,2102272,0,19,9804619,0,2102272,7 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 248067a1-d0c4-6000-e7f0-32da669241ec request-id: 248067a1-d0c4-6000-e7f0-32da669241ec MS-CV: oWeAJMTQAGDn8DLaZpJB7A.0 Alt-Svc: h3=":443";ma=86400 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=807c4734-d345-4738-a7ae-b485c937050d&destinationEndpoint=Edge-Prod-EWR31r5b&frontEnd=AFD&RemoteIP=8.46.123.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 41 SPIisLatency: 0 Include-Referred-Token-Binding-ID: true X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.25430 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F5CE9DE51B5049CDB560D2D9AE0AC004 Ref B: EWR311000104019 Ref C: 2024-11-26T00:18:28Z Date: Tue, 26 Nov 2024 00:18:27 GMT Connection: close
2024-11-26 00:18:28 UTC	613	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3a 34 34 33 2f 38 30 37 63 34 37 33 34 2d 64 33 34 35 2d 34 37 33 38 2d 61 37 61 65 2d 62 34 38 35 63 39 33 37 30 35 30 64 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 6d 6f 64 65 3d 66 6f 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com:443/807c4734-d345-4738-a7ae-b485c937050d/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=for
2024-11-26 00:18:28 UTC	277	IN	Data Raw: 4f 44 30 77 26 61 6d 70 3b 63 6c 61 69 6d 73 3d 25 37 42 25 32 32 69 64 25 35 46 74 6f 6b 65 6e 25 32 32 25 33 41 25 37 42 25 32 32 78 6d 73 25 35 46 63 63 25 32 32 25 33 41 25 37 42 25 32 32 76 61 6c 75 65 73 25 32 32 25 33 41 25 35 42 25 32 32 43 50 31 25 32 32 25 35 44 25 37 44 25 37 44 25 37 44 26 61 6d 70 3b 77 73 75 63 78 74 3d 31 26 61 6d 70 3b 63 6f 62 72 61 6e 64 69 64 3d 31 31 62 64 38 30 38 33 25 32 44 38 37 65 30 25 32 44 34 31 62 35 25 32 44 62 62 37 38 25 32 44 30 62 63 34 33 63 38 61 38 65 38 61 26 61 6d 70 3b 63 6c 69 65 6e 74 25 32 44 72 65 71 75 65 73 74 25 32 44 69 64 3d 32 34 38 30 36 37 61 31 25 32 44 64 30 63 34 25 32 44 36 30 30 30 25 32 44 65 37 66 30 25 32 44 33 32 64 61 36 36 39 32 34 31 65 63 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c Data Ascii: OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=248067a1%2Dd0c4%2D6000%2De7f0%2D32da669241ec">here</a>.<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	23.195.62.26	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:29 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-26 00:18:30 UTC	456	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (hkc/BD20) X-CID: 11 Cache-Control: public, max-age=232285 Date: Tue, 26 Nov 2024 00:18:30 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-26 00:18:30 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	13.107.246.63	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:33 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:33 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:18:33 GMT Content-Type: application/x-javascript Content-Length: 49911 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT ETag: 0x8DCE31D8CF87EF9 x-ms-request-id: 6f188932-d01e-0068-4896-3fa5c6000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T001833Z-174f7845968kdththC1EWRzvxn0000000700000000003w66 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:18:33 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 cc cc 2e b0 5c 4e ac 80 bb 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 5f c4 38 89 2b 53 3f 4e a0 d0 48 4c c3 c7 4a 15 aa 8b bc ca a9 1b 25 4f 95 c3 53 b3 0e f5 0b a8 cd bf f5 03 28 3d 0e 67 4f f0 7c 97 54 82 30 f1 c7 a2 e2 06 1e d5 36 85 97 20 16 95 79 e0 89 a8 f2 78 e7 8f ef 2a c7 fe 38 0a e3 70 92 54 22 31 16 Data Ascii: m[80OL;wa.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDe_8+S?NHLJ%OS(=gO\|T06 yx*8pT"1
2024-11-26 00:18:33 UTC	16384	IN	Data Raw: bb 0c 77 90 36 70 02 a2 23 27 68 d7 13 77 83 5b ce 75 c8 5d 1e 38 7e d8 ef 65 93 b7 51 ba 99 a3 99 6e c4 c1 49 25 dd 80 44 6f 6d d6 5b f8 24 0d de 5f 42 cf db 25 c7 07 20 5b 70 93 25 fa 4a f2 b1 09 72 79 ab 24 b3 29 e5 95 16 1b 3c 9b e3 f6 1e bc 63 2b a7 73 9c 09 3c 7b 87 34 0e 7c c0 b3 7e cf c4 83 50 e7 60 ac d8 21 42 fd 4d eb 90 1b 4e 38 90 99 77 8e e0 d0 a6 2f bd 49 a2 b4 57 da 5c 87 87 25 cd 61 58 8e c4 2d 4e ad 5b 1a 28 47 10 3f 31 5a 3e 44 bc 65 2b c5 c3 87 fc 45 47 b6 f1 b7 8f bd 8f 7b 1f 77 8d bc 52 c5 f3 16 77 73 08 e5 a7 d2 38 b4 8d 58 7b 03 2e 80 2a 7d 95 75 9f bd f0 3c 9d e0 69 54 92 0e 40 a4 ab 30 9c 54 f3 53 f3 32 8c 02 fa 7d e9 16 60 90 4a da 17 b0 b9 c2 43 2e b7 f6 3f 0c ce 10 8a e3 b7 49 a4 a8 49 28 d5 0d 41 59 e3 36 4b e1 be dd c8 64 fa Data Ascii: w6p#'hw[u]8~eQnI%Dom[$_B% [p%Jry$)<c+s<{4\|~P`!BMN8w/IW\%aX-N[(G?1Z>De+EG{wRws8X{.*}u<iT@0TS2}`JC.?II(AY6Kd
2024-11-26 00:18:34 UTC	16384	IN	Data Raw: 6c 5a 04 6d 94 02 7c 5f 33 90 18 0e f6 15 fb 9f fd c2 2d 7c f6 09 99 56 e0 1b df 55 00 e9 61 19 a9 ae 08 b4 08 de 5e 5e 8b 45 87 04 e9 6b b8 4e 14 17 ac 44 38 17 c4 11 e4 15 f5 05 82 e4 5a e1 00 e1 b1 7a c3 5a 2a cb eb 40 53 54 ab c1 7c ad ba a5 5c a6 6e 38 df 2e 84 c6 0f 51 3b 3d 74 de 84 36 7f d1 36 c8 68 2e a7 19 09 6f b4 0d 8a 69 11 fc 25 99 f6 55 32 25 02 a3 cd f2 e5 b9 1f 5a 92 03 c5 6a 6e d0 c6 ff b1 0d 05 a2 16 7e 06 11 d8 2f e6 d8 0b d6 12 91 54 cd 2a 90 95 47 9c 89 ce 07 af 7b 17 a7 3f 3f c1 8f fe 53 46 e8 38 88 e1 92 f5 d4 34 4b ca ff d8 a1 26 dd bc d2 22 ad b5 44 6f f6 c3 ab 20 de c6 32 0d 70 78 26 6a f3 08 a8 73 81 d6 01 20 73 48 80 a3 ea 25 4e 2a 1f eb b1 f6 d7 5d 21 e3 43 50 cc 65 af 1d a9 f7 78 ab d5 9d ad 16 9b 6a 23 b0 19 6a 77 87 19 d4 Data Ascii: lZm\|_3-\|VUa^^EkND8ZzZ@ST\|\n8.Q;=t66h.oi%U2%Zjn~/TG{??SF84K&"Do 2px&js sH%N*]!CPexj#jw
2024-11-26 00:18:34 UTC	1556	IN	Data Raw: c8 f9 f6 eb 34 7d f4 dd 37 c9 ee f7 8f f6 e2 dd 6f 66 df 7e bf fb 7d f2 f5 de 6e fc a7 bd af f7 bf 9d 3d fa d3 77 5f ff c9 21 56 2a a5 73 b5 26 36 2a 27 82 5f 12 0b 55 10 07 45 ac c1 2c da 23 56 89 cf dd 43 f9 73 20 7f 9e 75 9c 76 3f 1a ef 92 4a 90 bf 91 22 52 db 77 24 13 55 ce a9 1a 01 89 98 e7 e9 12 09 35 70 a9 69 d1 8b 04 3e 39 b8 03 34 3d 1a 1b f6 0d 11 dc b4 09 a7 5a e3 8c 8b a0 d8 8e 04 67 bc 91 4c 62 e2 2d 07 7e 93 24 60 c7 c4 68 e0 da 03 1d 6c 3c 21 5c 7a 3a 4f b3 ab 34 19 29 dd 15 7b 6b c9 37 46 ce 38 f3 54 8a b9 ab e3 f2 64 a2 b4 95 f8 ed 6f a1 2d 95 5b 98 f6 b3 12 95 75 5d 1b eb 28 7f d3 8a 79 02 81 cc da 41 13 ca b3 45 0d 0a 89 e2 cd 78 84 e3 f1 cc c7 60 84 29 31 ff 70 62 90 50 0e 31 a6 45 b5 e7 53 db ac f1 3b a1 c9 6b 77 f7 30 e5 18 a3 e1 de Data Ascii: 4}7of~}n=w_!Vs&6'_UE,#VCs uv?J"Rw$U5pi>94=ZgLb-~$`hl<!\z:O4){k7F8Tdo-[u](yAEx`)1pbP1ES;kw0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49750	13.107.246.63	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:36 UTC	408	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:36 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:18:36 GMT Content-Type: application/x-javascript Content-Length: 49911 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 02 Oct 2024 20:05:23 GMT ETag: 0x8DCE31D8CF87EF9 x-ms-request-id: b424ba50-801e-0028-3a6c-39a2fe000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T001836Z-174f7845968nxc96hC1EWRspw80000000ucg000000003vp9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:18:36 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 cc cc 2e b0 5c 4e ac 80 bb 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 5f c4 38 89 2b 53 3f 4e a0 d0 48 4c c3 c7 4a 15 aa 8b bc ca a9 1b 25 4f 95 c3 53 b3 0e f5 0b a8 cd bf f5 03 28 3d 0e 67 4f f0 7c 97 54 82 30 f1 c7 a2 e2 06 1e d5 36 85 97 20 16 95 79 e0 89 a8 f2 78 e7 8f ef 2a c7 fe 38 0a e3 70 92 54 22 31 16 Data Ascii: m[80OL;wa.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDe_8+S?NHLJ%OS(=gO\|T06 yx*8pT"1
2024-11-26 00:18:36 UTC	16384	IN	Data Raw: bb 0c 77 90 36 70 02 a2 23 27 68 d7 13 77 83 5b ce 75 c8 5d 1e 38 7e d8 ef 65 93 b7 51 ba 99 a3 99 6e c4 c1 49 25 dd 80 44 6f 6d d6 5b f8 24 0d de 5f 42 cf db 25 c7 07 20 5b 70 93 25 fa 4a f2 b1 09 72 79 ab 24 b3 29 e5 95 16 1b 3c 9b e3 f6 1e bc 63 2b a7 73 9c 09 3c 7b 87 34 0e 7c c0 b3 7e cf c4 83 50 e7 60 ac d8 21 42 fd 4d eb 90 1b 4e 38 90 99 77 8e e0 d0 a6 2f bd 49 a2 b4 57 da 5c 87 87 25 cd 61 58 8e c4 2d 4e ad 5b 1a 28 47 10 3f 31 5a 3e 44 bc 65 2b c5 c3 87 fc 45 47 b6 f1 b7 8f bd 8f 7b 1f 77 8d bc 52 c5 f3 16 77 73 08 e5 a7 d2 38 b4 8d 58 7b 03 2e 80 2a 7d 95 75 9f bd f0 3c 9d e0 69 54 92 0e 40 a4 ab 30 9c 54 f3 53 f3 32 8c 02 fa 7d e9 16 60 90 4a da 17 b0 b9 c2 43 2e b7 f6 3f 0c ce 10 8a e3 b7 49 a4 a8 49 28 d5 0d 41 59 e3 36 4b e1 be dd c8 64 fa Data Ascii: w6p#'hw[u]8~eQnI%Dom[$_B% [p%Jry$)<c+s<{4\|~P`!BMN8w/IW\%aX-N[(G?1Z>De+EG{wRws8X{.*}u<iT@0TS2}`JC.?II(AY6Kd
2024-11-26 00:18:36 UTC	16384	IN	Data Raw: 6c 5a 04 6d 94 02 7c 5f 33 90 18 0e f6 15 fb 9f fd c2 2d 7c f6 09 99 56 e0 1b df 55 00 e9 61 19 a9 ae 08 b4 08 de 5e 5e 8b 45 87 04 e9 6b b8 4e 14 17 ac 44 38 17 c4 11 e4 15 f5 05 82 e4 5a e1 00 e1 b1 7a c3 5a 2a cb eb 40 53 54 ab c1 7c ad ba a5 5c a6 6e 38 df 2e 84 c6 0f 51 3b 3d 74 de 84 36 7f d1 36 c8 68 2e a7 19 09 6f b4 0d 8a 69 11 fc 25 99 f6 55 32 25 02 a3 cd f2 e5 b9 1f 5a 92 03 c5 6a 6e d0 c6 ff b1 0d 05 a2 16 7e 06 11 d8 2f e6 d8 0b d6 12 91 54 cd 2a 90 95 47 9c 89 ce 07 af 7b 17 a7 3f 3f c1 8f fe 53 46 e8 38 88 e1 92 f5 d4 34 4b ca ff d8 a1 26 dd bc d2 22 ad b5 44 6f f6 c3 ab 20 de c6 32 0d 70 78 26 6a f3 08 a8 73 81 d6 01 20 73 48 80 a3 ea 25 4e 2a 1f eb b1 f6 d7 5d 21 e3 43 50 cc 65 af 1d a9 f7 78 ab d5 9d ad 16 9b 6a 23 b0 19 6a 77 87 19 d4 Data Ascii: lZm\|_3-\|VUa^^EkND8ZzZ@ST\|\n8.Q;=t66h.oi%U2%Zjn~/TG{??SF84K&"Do 2px&js sH%N*]!CPexj#jw
2024-11-26 00:18:36 UTC	1556	IN	Data Raw: c8 f9 f6 eb 34 7d f4 dd 37 c9 ee f7 8f f6 e2 dd 6f 66 df 7e bf fb 7d f2 f5 de 6e fc a7 bd af f7 bf 9d 3d fa d3 77 5f ff c9 21 56 2a a5 73 b5 26 36 2a 27 82 5f 12 0b 55 10 07 45 ac c1 2c da 23 56 89 cf dd 43 f9 73 20 7f 9e 75 9c 76 3f 1a ef 92 4a 90 bf 91 22 52 db 77 24 13 55 ce a9 1a 01 89 98 e7 e9 12 09 35 70 a9 69 d1 8b 04 3e 39 b8 03 34 3d 1a 1b f6 0d 11 dc b4 09 a7 5a e3 8c 8b a0 d8 8e 04 67 bc 91 4c 62 e2 2d 07 7e 93 24 60 c7 c4 68 e0 da 03 1d 6c 3c 21 5c 7a 3a 4f b3 ab 34 19 29 dd 15 7b 6b c9 37 46 ce 38 f3 54 8a b9 ab e3 f2 64 a2 b4 95 f8 ed 6f a1 2d 95 5b 98 f6 b3 12 95 75 5d 1b eb 28 7f d3 8a 79 02 81 cc da 41 13 ca b3 45 0d 0a 89 e2 cd 78 84 e3 f1 cc c7 60 84 29 31 ff 70 62 90 50 0e 31 a6 45 b5 e7 53 db ac f1 3b a1 c9 6b 77 f7 30 e5 18 a3 e1 de Data Ascii: 4}7of~}n=w_!Vs&6'_UE,#VCs uv?J"Rw$U5pi>94=ZgLb-~$`hl<!\z:O4){k7F8Tdo-[u](yAEx`)1pbP1ES;kw0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:38 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+HMSKoonZHV9MmD&MD=PWFxAHsX HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-26 00:18:39 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 6108cf85-fa73-41a9-9e47-11458fa44a81 MS-RequestId: 31d9a3e9-afd3-4f1f-a912-7780ef3b5a78 MS-CV: GKxFKbRxhku8XDtE.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 26 Nov 2024 00:18:38 GMT Connection: close Content-Length: 24490
2024-11-26 00:18:39 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-26 00:18:39 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49753	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:39 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_81imvbluez-v5hbzpkxfcg2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:39 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1502177 Cache-Control: public, max-age=31536000 Content-MD5: O6TXahet0KbDTuaW8oyFQQ== Content-Type: text/css Date: Tue, 26 Nov 2024 00:18:39 GMT Etag: 0x8DCFFB1F10FB7D8 Last-Modified: Fri, 08 Nov 2024 04:58:09 GMT Server: ECAcc (lhc/794E) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d067d0c7-d01e-003c-6aef-317d09000000 x-ms-version: 2009-09-19 Content-Length: 113424 Connection: close
2024-11-26 00:18:39 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-11-26 00:18:39 UTC	16383	IN	Data Raw: 73 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a Data Ascii: s-1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:
2024-11-26 00:18:39 UTC	2	IN	Data Raw: 72 67 Data Ascii: rg
2024-11-26 00:18:39 UTC	16383	IN	Data Raw: 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 Data Ascii: in-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-box
2024-11-26 00:18:39 UTC	16383	IN	Data Raw: 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c Data Ascii: ow-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.tabl
2024-11-26 00:18:40 UTC	16383	IN	Data Raw: 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f Data Ascii: ","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongo
2024-11-26 00:18:40 UTC	16383	IN	Data Raw: 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 3b 74 65 78 74 2d 64 65 63 6f Data Ascii: ry:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-color:#005da6;text-deco
2024-11-26 00:18:40 UTC	15124	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 Data Ascii: in-bottom:20px;margin-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padding:0;margin-top:16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49754	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:39 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:39 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1451618 Cache-Control: public, max-age=31536000 Content-MD5: jbC9GEhrwCJDWw8N8erxdQ== Content-Type: application/x-javascript Date: Tue, 26 Nov 2024 00:18:39 GMT Etag: 0x8DCFAB2EEF1B69A Last-Modified: Fri, 01 Nov 2024 20:22:39 GMT Server: ECAcc (lhc/7970) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 42bb63b7-701e-002b-4d64-3201ab000000 x-ms-version: 2009-09-19 Content-Length: 450033 Connection: close
2024-11-26 00:18:39 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-26 00:18:39 UTC	1	IN	Data Raw: 44 Data Ascii: D
2024-11-26 00:18:39 UTC	16383	IN	Data Raw: 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 Data Ascii: ING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorize
2024-11-26 00:18:39 UTC	16383	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: ocument.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){T.isHistorySupported()&&u.history.pushState(e,n)},replaceState:function(e,n){T.isHistorySupported()&&u.history.replaceState(e,n)}},addEventList
2024-11-26 00:18:39 UTC	16383	IN	Data Raw: 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 6e 2e 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 21 30 29 2c 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 65 2c 74 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3a 6e 7d 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d Data Ascii: PropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(n.tracingPropertyChange=!0),n.eventLevel=n.eventLevel\|\|i.EventLevel.Info,{viewModel:e,tracingOptions:n}},s.getDefaultTextBoxPropertyLogOption=function(e,n){return(n=
2024-11-26 00:18:40 UTC	16383	IN	Data Raw: 61 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c 7c 22 22 2c 72 3d 65 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 3d 65 2e 75 69 4d 6f 64 65 2c 64 3d 65 2e 6c 63 69 64 2c 6c 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 7c 7c 22 22 2c 70 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 7c 7c 22 22 2c 6d 3d 65 2e 75 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 2c 62 3d 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 76 3d 65 2e 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3b 74 68 69 73 5b 75 2e 55 73 65 72 6e 61 6d 65 5d 3d Data Ascii: ar n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|\|"",r=e.isEncrypted,s=e.uiMode,d=e.lcid,l=e.phoneCountry\|\|"",p=e.phoneCountryCode\|\|"",m=e.unauthSessionId,b=e.proofConfirmation,v=e.canaryFlowToken;this[u.Username]=
2024-11-26 00:18:40 UTC	4	IN	Data Raw: 3f 67 2e 63 Data Ascii: ?g.c
2024-11-26 00:18:40 UTC	16383	IN	Data Raw: 6c 6f 6e 65 28 67 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 69 26 26 28 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 6e 29 2c 6c 6e 28 65 2c 69 2c 21 30 2c 6c 2e 45 76 65 6e 74 49 64 73 2e 52 65 64 69 72 65 63 74 5f 4f 74 68 65 72 49 64 70 52 65 64 69 72 65 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6e 28 65 2c 6e 2c 74 29 7b 74 3d 74 7c 7c 6c 65 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 29 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 4e 6f 74 45 78 69 73 74 7c 7c 6e 2e 49 73 55 6e 6d 61 6e 61 67 Data Ascii: lone(ge):null;return i&&(i.unsafe_username=n),ln(e,i,!0,l.EventIds.Redirect_OtherIdpRedirection)}function tn(e,n,t){t=t\|\|le,t=p.remove(t,"username"),t=p.remove(t,"login_hint");var i=pe?g.clone(pe):null;return n&&(n.IfExistsResult===S.NotExist\|\|n.IsUnmanag
2024-11-26 00:18:40 UTC	16383	IN	Data Raw: 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e 75 72 6c 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 77 3d 74 2e 73 53 69 74 65 49 64 2c 79 3d 74 2e 73 43 6c 69 65 6e 74 49 64 2c 6b 3d 74 2e 73 46 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 50 3d 74 2e 73 4e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 2c 54 3d 74 2e 66 53 68 6f 77 53 69 67 6e 49 6e 4f 70 74 69 6f 6e 73 41 73 42 75 74 74 6f 6e 2c 44 3d 74 2e 66 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 2c 45 3d 74 2e 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 49 6e 74 Data Ascii: owForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.urlForgotUsername,w=t.sSiteId,y=t.sClientId,k=t.sForwardedClientId,P=t.sNoPaBubbleVersion,T=t.fShowSignInOptionsAsButton,D=t.fOfflineAccountVisible,E=t.fUseCertificateInt
2024-11-26 00:18:40 UTC	16383	IN	Data Raw: 68 69 73 2e 6e 61 6d 65 3d 22 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 22 43 61 6e 61 72 79 20 76 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 75 73 65 72 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2e 22 2c 74 68 69 73 2e 73 74 61 63 6b 3d 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 69 6e 6e 65 72 45 72 72 6f 72 3d 65 2c 74 68 69 73 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 3d 6e 2c 74 68 69 73 2e 70 6f 73 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 41 63 74 69 6f 6e 3d 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 33 29 2c 61 3d 74 28 37 29 2c 6f 3d Data Ascii: his.name="CanaryValidationError",this.message="Canary validation failed, user confirmation required.",this.stack=(new Error).stack,this.innerError=e,this.confirmationViewId=n,this.postConfirmationAction=t},e.exports=l},function(e,n,t){var i=t(3),a=t(7),o=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49755	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:39 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:39 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2438506 Cache-Control: public, max-age=31536000 Content-MD5: GHueukH99mssj362RdK8Fw== Content-Type: application/x-javascript Date: Tue, 26 Nov 2024 00:18:39 GMT Etag: 0x8DCF55E8343790A Last-Modified: Sat, 26 Oct 2024 01:35:45 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 19e084fe-501e-0061-776b-29a224000000 x-ms-version: 2009-09-19 Content-Length: 57510 Connection: close
2024-11-26 00:18:39 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-11-26 00:18:39 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-11-26 00:18:39 UTC	2	IN	Data Raw: 65 20 Data Ascii: e
2024-11-26 00:18:39 UTC	16383	IN	Data Raw: 77 61 73 20 61 6e 20 69 73 73 75 65 20 6c 6f 6f 6b 69 6e 67 20 75 70 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 72 65 63 6f 76 65 72 79 20 6d 65 74 68 6f 64 73 2e 20 54 72 79 20 61 67 61 69 6e 2e 22 2c 65 2e 53 54 52 5f 4e 61 74 69 76 65 5f 53 53 50 52 5f 45 6e 74 65 72 43 6f 64 65 5f 44 65 73 63 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 65 2e 53 54 52 5f 43 65 72 74 42 61 73 65 41 75 74 68 50 6f 6c 69 63 79 5f 42 6c 6f 63 6b 3d 22 59 6f 75 20 63 61 6e 27 74 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e 6f 74 Data Ascii: was an issue looking up your account recovery methods. Try again.",e.STR_Native_SSPR_EnterCode_Desc="Enter the code we just sent to {0} to reset your password.",e.STR_CertBaseAuthPolicy_Block="You can't sign in with a certificate. Try signing in with anot
2024-11-26 00:18:40 UTC	8359	IN	Data Raw: 22 39 30 31 30 31 33 22 2c 4e 6f 45 78 74 65 72 6e 61 6c 49 64 65 6e 74 69 66 69 65 72 43 6f 6c 6c 65 63 74 65 64 46 72 6f 6d 45 78 74 65 72 6e 61 6c 4f 69 64 63 49 44 50 3a 22 39 30 31 30 31 34 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 3a 22 Data Ascii: "901013",NoExternalIdentifierCollectedFromExternalOidcIDP:"901014",UserVoiceAuthFailedCallWentToVoicemail:"UserVoiceAuthFailedCallWentToVoicemail",UserVoiceAuthFailedInvalidPhoneInput:"UserVoiceAuthFailedInvalidPhoneInput",UserVoiceAuthFailedPhoneHungUp:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49761	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:42 UTC	431	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:42 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2438509 Cache-Control: public, max-age=31536000 Content-MD5: GHueukH99mssj362RdK8Fw== Content-Type: application/x-javascript Date: Tue, 26 Nov 2024 00:18:42 GMT Etag: 0x8DCF55E8343790A Last-Modified: Sat, 26 Oct 2024 01:35:45 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 19e084fe-501e-0061-776b-29a224000000 x-ms-version: 2009-09-19 Content-Length: 57510 Connection: close
2024-11-26 00:18:42 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-11-26 00:18:42 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-11-26 00:18:42 UTC	2	IN	Data Raw: 65 20 Data Ascii: e
2024-11-26 00:18:42 UTC	16383	IN	Data Raw: 77 61 73 20 61 6e 20 69 73 73 75 65 20 6c 6f 6f 6b 69 6e 67 20 75 70 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 20 72 65 63 6f 76 65 72 79 20 6d 65 74 68 6f 64 73 2e 20 54 72 79 20 61 67 61 69 6e 2e 22 2c 65 2e 53 54 52 5f 4e 61 74 69 76 65 5f 53 53 50 52 5f 45 6e 74 65 72 43 6f 64 65 5f 44 65 73 63 3d 22 45 6e 74 65 72 20 74 68 65 20 63 6f 64 65 20 77 65 20 6a 75 73 74 20 73 65 6e 74 20 74 6f 20 7b 30 7d 20 74 6f 20 72 65 73 65 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 65 2e 53 54 52 5f 43 65 72 74 42 61 73 65 41 75 74 68 50 6f 6c 69 63 79 5f 42 6c 6f 63 6b 3d 22 59 6f 75 20 63 61 6e 27 74 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 61 20 63 65 72 74 69 66 69 63 61 74 65 2e 20 54 72 79 20 73 69 67 6e 69 6e 67 20 69 6e 20 77 69 74 68 20 61 6e 6f 74 Data Ascii: was an issue looking up your account recovery methods. Try again.",e.STR_Native_SSPR_EnterCode_Desc="Enter the code we just sent to {0} to reset your password.",e.STR_CertBaseAuthPolicy_Block="You can't sign in with a certificate. Try signing in with anot
2024-11-26 00:18:42 UTC	8359	IN	Data Raw: 22 39 30 31 30 31 33 22 2c 4e 6f 45 78 74 65 72 6e 61 6c 49 64 65 6e 74 69 66 69 65 72 43 6f 6c 6c 65 63 74 65 64 46 72 6f 6d 45 78 74 65 72 6e 61 6c 4f 69 64 63 49 44 50 3a 22 39 30 31 30 31 34 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 43 61 6c 6c 57 65 6e 74 54 6f 56 6f 69 63 65 6d 61 69 6c 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 3a 22 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 49 6e 76 61 6c 69 64 50 68 6f 6e 65 49 6e 70 75 74 22 2c 55 73 65 72 56 6f 69 63 65 41 75 74 68 46 61 69 6c 65 64 50 68 6f 6e 65 48 75 6e 67 55 70 3a 22 Data Ascii: "901013",NoExternalIdentifierCollectedFromExternalOidcIDP:"901014",UserVoiceAuthFailedCallWentToVoicemail:"UserVoiceAuthFailedCallWentToVoicemail",UserVoiceAuthFailedInvalidPhoneInput:"UserVoiceAuthFailedInvalidPhoneInput",UserVoiceAuthFailedPhoneHungUp:"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49762	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:42 UTC	412	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_i5YupurhQAo9inu_OetqHw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:43 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 1451621 Cache-Control: public, max-age=31536000 Content-MD5: jbC9GEhrwCJDWw8N8erxdQ== Content-Type: application/x-javascript Date: Tue, 26 Nov 2024 00:18:42 GMT Etag: 0x8DCFAB2EEF1B69A Last-Modified: Fri, 01 Nov 2024 20:22:39 GMT Server: ECAcc (lhc/7970) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 42bb63b7-701e-002b-4d64-3201ab000000 x-ms-version: 2009-09-19 Content-Length: 450033 Connection: close
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a Data Ascii: DING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthoriz
2024-11-26 00:18:43 UTC	2	IN	Data Raw: 64 6f Data Ascii: do
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3a 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3f 65 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 3a 7b 7d 7d 2c 68 69 73 74 6f 72 79 3a 7b 70 75 73 68 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 70 75 73 68 53 74 61 74 65 28 65 2c 6e 29 7d 2c 72 65 70 6c 61 63 65 53 74 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 54 2e 69 73 48 69 73 74 6f 72 79 53 75 70 70 6f 72 74 65 64 28 29 26 26 75 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 65 2c 6e 29 7d 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 Data Ascii: cument.defaultView.getComputedStyle(e,null):e.currentStyle?e.currentStyle:{}},history:{pushState:function(e,n){T.isHistorySupported()&&u.history.pushState(e,n)},replaceState:function(e,n){T.isHistorySupported()&&u.history.replaceState(e,n)}},addEventListe
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e 7c 7c 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 22 29 7c 7c 28 6e 2e 74 72 61 63 69 6e 67 50 72 6f 70 65 72 74 79 43 68 61 6e 67 65 3d 21 30 29 2c 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 3d 6e 2e 65 76 65 6e 74 4c 65 76 65 6c 7c 7c 69 2e 45 76 65 6e 74 4c 65 76 65 6c 2e 49 6e 66 6f 2c 7b 76 69 65 77 4d 6f 64 65 6c 3a 65 2c 74 72 61 63 69 6e 67 4f 70 74 69 6f 6e 73 3a 6e 7d 7d 2c 73 2e 67 65 74 44 65 66 61 75 6c 74 54 65 78 74 42 6f 78 50 72 6f 70 65 72 74 79 4c 6f 67 4f 70 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 3d 6e Data Ascii: ropertyLogOption=function(e,n){return(n=n\|\|{}).hasOwnProperty("tracingPropertyChange")\|\|(n.tracingPropertyChange=!0),n.eventLevel=n.eventLevel\|\|i.EventLevel.Info,{viewModel:e,tracingOptions:n}},s.getDefaultTextBoxPropertyLogOption=function(e,n){return(n=n
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 72 20 6e 3d 65 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 22 2c 74 3d 65 2e 66 6c 6f 77 54 6f 6b 65 6e 7c 7c 22 22 2c 69 3d 65 2e 70 75 72 70 6f 73 65 7c 7c 63 2e 50 61 73 73 77 6f 72 64 2c 61 3d 65 2e 70 72 6f 6f 66 54 79 70 65 2c 6f 3d 65 2e 70 72 6f 6f 66 44 61 74 61 7c 7c 22 22 2c 72 3d 65 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 3d 65 2e 75 69 4d 6f 64 65 2c 64 3d 65 2e 6c 63 69 64 2c 6c 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 7c 7c 22 22 2c 70 3d 65 2e 70 68 6f 6e 65 43 6f 75 6e 74 72 79 43 6f 64 65 7c 7c 22 22 2c 6d 3d 65 2e 75 6e 61 75 74 68 53 65 73 73 69 6f 6e 49 64 2c 62 3d 65 2e 70 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 76 3d 65 2e 63 61 6e 61 72 79 46 6c 6f 77 54 6f 6b 65 6e 3b 74 68 69 73 5b 75 2e 55 73 65 72 6e 61 6d 65 5d 3d 6e Data Ascii: r n=e.username\|\|"",t=e.flowToken\|\|"",i=e.purpose\|\|c.Password,a=e.proofType,o=e.proofData\|\|"",r=e.isEncrypted,s=e.uiMode,d=e.lcid,l=e.phoneCountry\|\|"",p=e.phoneCountryCode\|\|"",m=e.unauthSessionId,b=e.proofConfirmation,v=e.canaryFlowToken;this[u.Username]=n
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 67 2e 63 6c 6f 6e 65 28 67 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 69 26 26 28 69 2e 75 6e 73 61 66 65 5f 75 73 65 72 6e 61 6d 65 3d 6e 29 2c 6c 6e 28 65 2c 69 2c 21 30 2c 6c 2e 45 76 65 6e 74 49 64 73 2e 52 65 64 69 72 65 63 74 5f 4f 74 68 65 72 49 64 70 52 65 64 69 72 65 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6e 28 65 2c 6e 2c 74 29 7b 74 3d 74 7c 7c 6c 65 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 75 73 65 72 6e 61 6d 65 22 29 2c 74 3d 70 2e 72 65 6d 6f 76 65 28 74 2c 22 6c 6f 67 69 6e 5f 68 69 6e 74 22 29 3b 76 61 72 20 69 3d 70 65 3f 67 2e 63 6c 6f 6e 65 28 70 65 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 6e 26 26 28 6e 2e 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 3d 3d 3d 53 2e 4e 6f 74 45 78 69 73 74 7c 7c 6e 2e 49 73 55 6e 6d 61 Data Ascii: g.clone(ge):null;return i&&(i.unsafe_username=n),ln(e,i,!0,l.EventIds.Redirect_OtherIdpRedirection)}function tn(e,n,t){t=t\|\|le,t=p.remove(t,"username"),t=p.remove(t,"login_hint");var i=pe?g.clone(pe):null;return n&&(n.IfExistsResult===S.NotExist\|\|n.IsUnma
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 2e 73 68 6f 77 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 68 3d 65 2e 68 69 64 65 43 72 65 64 53 77 69 74 63 68 4c 69 6e 6b 2c 5f 3d 65 2e 61 72 69 61 44 65 73 63 72 69 62 65 64 42 79 2c 43 3d 65 2e 73 65 74 46 6f 63 75 73 2c 53 3d 74 2e 73 74 72 2c 78 3d 74 2e 75 72 6c 46 6f 72 67 6f 74 55 73 65 72 6e 61 6d 65 2c 77 3d 74 2e 73 53 69 74 65 49 64 2c 79 3d 74 2e 73 43 6c 69 65 6e 74 49 64 2c 6b 3d 74 2e 73 46 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 2c 50 3d 74 2e 73 4e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 2c 54 3d 74 2e 66 53 68 6f 77 53 69 67 6e 49 6e 4f 70 74 69 6f 6e 73 41 73 42 75 74 74 6f 6e 2c 44 3d 74 2e 66 4f 66 66 6c 69 6e 65 41 63 63 6f 75 6e 74 56 69 73 69 62 6c 65 2c 45 3d 74 2e 66 55 73 65 43 65 72 74 69 66 69 63 61 74 65 Data Ascii: .showForgotUsername,h=e.hideCredSwitchLink,_=e.ariaDescribedBy,C=e.setFocus,S=t.str,x=t.urlForgotUsername,w=t.sSiteId,y=t.sClientId,k=t.sForwardedClientId,P=t.sNoPaBubbleVersion,T=t.fShowSignInOptionsAsButton,D=t.fOfflineAccountVisible,E=t.fUseCertificate
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 22 43 61 6e 61 72 79 56 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 22 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 22 43 61 6e 61 72 79 20 76 61 6c 69 64 61 74 69 6f 6e 20 66 61 69 6c 65 64 2c 20 75 73 65 72 20 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 72 65 71 75 69 72 65 64 2e 22 2c 74 68 69 73 2e 73 74 61 63 6b 3d 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 69 6e 6e 65 72 45 72 72 6f 72 3d 65 2c 74 68 69 73 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 56 69 65 77 49 64 3d 6e 2c 74 68 69 73 2e 70 6f 73 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 41 63 74 69 6f 6e 3d 74 7d 2c 65 2e 65 78 70 6f 72 74 73 3d 6c 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 74 28 33 29 2c 61 3d 74 28 37 29 Data Ascii: ){this.name="CanaryValidationError",this.message="Canary validation failed, user confirmation required.",this.stack=(new Error).stack,this.innerError=e,this.confirmationViewId=n,this.postConfirmationAction=t},e.exports=l},function(e,n,t){var i=t(3),a=t(7)
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 65 2e 65 78 70 6f 72 74 73 3d 73 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 69 3d 77 69 6e 64 6f 77 3b 74 2e 70 3d 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 43 64 6e 2c 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 49 6d 61 67 65 50 61 74 68 3d 69 2e 53 65 72 76 65 72 44 61 74 61 2e 75 72 6c 43 64 6e 2b 22 69 6d 61 67 65 73 2f 22 3b 76 61 72 20 61 3d 74 28 32 29 2c 6f 3d 74 28 37 30 29 2c 72 3d 74 28 30 29 2c 73 3d 74 28 31 29 2c 63 3d 74 28 37 33 29 2c 64 3d 74 28 37 29 2c 6c 3d 74 28 37 34 29 3b 74 28 31 38 29 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 77 69 6e 64 6f 77 2e 53 65 72 76 65 72 44 61 74 61 29 3b 76 61 72 20 75 3d 72 2e 4c 6f 67 69 6e 4d 6f 64 65 2c 70 3d 73 2e 48 65 6c 70 65 72 2c 66 3d 73 2e 51 75 65 72 79 53 74 Data Ascii: e.exports=s},function(e,n,t){var i=window;t.p=i.ServerData.urlCdn,i.ServerData.urlImagePath=i.ServerData.urlCdn+"images/";var a=t(2),o=t(70),r=t(0),s=t(1),c=t(73),d=t(7),l=t(74);t(18).getInstance(window.ServerData);var u=r.LoginMode,p=s.Helper,f=s.QuerySt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49763	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:42 UTC	579	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:43 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321340 Cache-Control: public, max-age=31536000 Content-MD5: wegr9xrdYirQ87+FcvY0/A== Content-Type: application/x-javascript Date: Tue, 26 Nov 2024 00:18:42 GMT Etag: 0x8DB5D44A2CEB430 Last-Modified: Thu, 25 May 2023 17:22:37 GMT Server: ECAcc (lhc/7931) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e556728b-d01e-00f6-6fae-7d057f000000 x-ms-version: 2009-09-19 Content-Length: 190152 Connection: close
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 62 7d Data Ascii: (window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b}
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 74 2c 22 50 72 6f 70 65 72 74 69 65 73 50 6c 75 67 69 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 50 6f 73 74 43 68 61 6e 6e 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 43 6f 72 65 55 74 69 6c 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 42 45 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 4e 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f Data Ascii: t,"PropertiesPlugin",(function(){return g.a})),n.d(t,"PostChannel",(function(){return v.a})),n.d(t,"CoreUtils",(function(){return c.a})),n.d(t,"BE_PROFILE",(function(){return p.a})),n.d(t,"NRT_PROFILE",(function(){return p.b})),n.d(t,"RT_PROFILE",(functio
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 68 69 73 2e 74 79 70 65 4e 61 6d 65 29 29 7c 7c 22 6e 6f 74 5f 73 70 65 63 69 66 69 65 64 22 3b 76 61 72 20 61 3d 74 2e 73 74 61 63 6b 44 65 74 61 69 6c 73 7c 7c 6c 65 28 74 29 3b 74 68 69 73 2e 70 61 72 73 65 64 53 74 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 6f 62 6a 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 3d 5b 5d 3b 76 61 72 20 72 3d 30 2c 69 3d 30 3b 4f 62 6a 65 63 74 28 53 2e 62 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 67 65 2e 72 65 67 65 78 2e 74 65 73 74 28 6e 29 29 7b 76 61 72 20 61 3d 6e 65 77 20 67 65 28 6e 2c 72 2b 2b 29 3b 69 2b 3d 61 2e 73 69 7a 65 49 6e 42 79 74 65 73 2c 74 2e 70 75 73 68 28 61 29 7d 7d 29 29 Data Ascii: his.typeName))\|\|"not_specified";var a=t.stackDetails\|\|le(t);this.parsedStack=function(e){var t,n=e.obj;if(n&&n.length>0){t=[];var r=0,i=0;Object(S.b)(n,(function(e){var n=e.toString();if(ge.regex.test(n)){var a=new ge(n,r++);i+=a.sizeInBytes,t.push(a)}}))
2024-11-26 00:18:43 UTC	3	IN	Data Raw: 69 63 79 Data Ascii: icy
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 20 70 72 65 76 65 6e 74 73 20 75 73 20 66 72 6f 6d 20 67 65 74 74 69 6e 67 20 74 68 65 20 64 65 74 61 69 6c 73 20 6f 66 20 74 68 69 73 20 65 78 63 65 70 74 69 6f 6e 2e 20 43 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 68 65 20 27 63 72 6f 73 73 6f 72 69 67 69 6e 27 20 61 74 74 72 69 62 75 74 65 2e 22 2c 61 2c 74 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 30 2c 74 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 7c 7c 30 2c 6e 2c 72 2c 6e 75 6c 6c 2c 6f 29 2c 63 29 3a 28 74 2e 65 72 72 6f 72 53 72 63 7c 7c 28 74 2e 65 72 72 6f 72 53 72 63 3d 6f 29 2c 65 2e 74 72 61 63 6b 45 78 63 65 70 74 69 6f 6e 28 7b 65 78 63 65 70 74 69 6f 6e 3a 74 2c 73 65 76 65 72 69 74 79 4c 65 76 65 6c 3a 33 7d 2c 63 29 29 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 75 3d 6e 3f 6e 2e 6e 61 6d 65 Data Ascii: prevents us from getting the details of this exception. Consider using the 'crossorigin' attribute.",a,t.lineNumber\|\|0,t.columnNumber\|\|0,n,r,null,o),c):(t.errorSrc\|\|(t.errorSrc=o),e.trackException({exception:t,severityLevel:3},c))}catch(e){var u=n?n.name
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 4f 62 6a 65 63 74 28 63 2e 74 29 28 65 29 3f 65 3a 7b 7d 3b 76 61 72 20 6e 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 28 63 2e 74 29 28 74 29 3f 74 3a 7b 7d 3b 74 68 69 73 2e 5f 73 65 74 42 61 73 69 63 50 72 6f 70 65 72 74 69 65 73 28 6e 2c 65 29 2c 74 68 69 73 2e 5f 73 65 74 50 61 67 65 54 61 67 73 28 6e 2c 65 29 2c 6e 2e 69 73 4d 61 6e 75 61 6c 3d 21 65 2e 69 73 41 75 74 6f 2c 72 2e 62 65 68 61 76 69 6f 72 3d 74 68 69 73 2e 5f 67 65 74 42 65 68 61 76 69 6f 72 28 65 29 2c 72 2e 76 70 48 65 69 67 68 74 3d 65 2e 76 70 48 65 69 67 68 74 2c 72 2e 76 70 57 69 64 74 68 3d 65 2e 76 70 57 69 64 74 68 2c 72 2e 66 72 61 6d 65 77 6f 72 6b 3d 65 2e 66 72 61 6d 65 77 6f 72 6b 2c 72 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 3d 65 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 2c 72 2e Data Ascii: Object(c.t)(e)?e:{};var n={},r=Object(c.t)(t)?t:{};this._setBasicProperties(n,e),this._setPageTags(n,e),n.isManual=!e.isAuto,r.behavior=this._getBehavior(e),r.vpHeight=e.vpHeight,r.vpWidth=e.vpWidth,r.framework=e.framework,r.systemTiming=e.systemTiming,r.
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 22 5d 29 2c 65 2e 65 6d 70 74 79 53 6e 69 70 70 65 74 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 7b 4f 62 6a 65 63 74 28 53 2e 73 29 28 6e 29 7c 7c 6e 2c 4f 62 6a 65 63 74 28 53 2e 43 29 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 69 66 28 4f 62 6a 65 63 74 28 53 2e 76 29 28 6e 29 26 26 21 4f 62 6a 65 63 74 28 53 2e 70 29 28 72 29 26 26 6e 26 26 22 5f 22 21 3d 3d 6e 5b 30 5d 26 26 2d 31 3d 3d 3d 4f 62 6a 65 63 74 28 53 2e 63 29 28 52 74 2c 6e 29 29 74 72 79 7b 74 5b 6e 5d 3d 72 7d 63 61 74 63 68 28 74 29 7b 4f 62 6a 65 63 74 28 66 2e 64 29 28 65 2e 6c 6f 67 67 65 72 2c 32 2c 35 31 34 2c 22 46 61 69 6c 65 64 20 74 6f 20 73 65 74 20 5b 22 2b 6e 2b 22 5d 20 64 75 72 69 Data Ascii: "]),e.emptySnippetQueue=function(t){try{if(function(){if(t){Object(S.s)(n)\|\|n,Object(S.C)(e,(function(n,r){if(Object(S.v)(n)&&!Object(S.p)(r)&&n&&"_"!==n[0]&&-1===Object(S.c)(Rt,n))try{t[n]=r}catch(t){Object(f.d)(e.logger,2,514,"Failed to set ["+n+"] duri
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 2e 69 6e 64 65 78 4f 66 28 74 2c 6e 29 3b 76 61 72 20 72 3d 65 5b 61 2e 78 5d 2c 69 3d 6e 7c 7c 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 3d 4d 61 74 68 2e 6d 61 78 28 69 3e 3d 30 3f 69 3a 72 2d 4d 61 74 68 2e 61 62 73 28 69 29 2c 30 29 3b 6f 3c 72 3b 6f 2b 2b 29 69 66 28 6f 20 69 6e 20 65 26 26 65 5b 6f 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6f 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 7b 69 66 28 65 2e 6d 61 70 29 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 74 2c 6e 29 3b 76 61 72 20 69 3d 65 5b 61 2e 78 5d 2c 6f 3d 6e 7c 7c 65 3b 72 3d 6e 65 77 20 41 72 72 61 79 28 69 29 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 69 3b 63 2b 2b 29 63 Data Ascii: .indexOf(t,n);var r=e[a.x],i=n\|\|0;try{for(var o=Math.max(i>=0?i:r-Math.abs(i),0);o<r;o++)if(o in e&&e[o]===t)return o}catch(e){}}return-1}function W(e,t,n){var r;if(e){if(e.map)return e.map(t,n);var i=e[a.x],o=n\|\|e;r=new Array(i);try{for(var c=0;c<i;c++)c
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 45 5d 7c 7c 39 3d 3d 3d 65 5b 69 2e 45 5d 7c 7c 21 2b 65 5b 69 2e 45 5d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 5b 65 2e 69 64 5d 3b 69 66 28 21 6e 29 7b 6e 3d 7b 7d 3b 74 72 79 7b 6c 28 74 29 26 26 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 75 29 74 72 79 7b 72 65 74 75 72 6e 20 75 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 21 31 7d 28 74 2c 65 2e 69 64 2c 6e 29 7c 7c 28 74 5b 65 2e 69 64 5d 3d 6e 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d Data Ascii: E]\|\|9===e[i.E]\|\|!+e[i.E]}function d(e,t){var n=t[e.id];if(!n){n={};try{l(t)&&(function(e,t,n){if(u)try{return u(e,t,{value:n,enumerable:!1,configurable:!0}),!0}catch(e){}return!1}(t,e.id,n)\|\|(t[e.id]=n))}catch(e){}}return n}function b(e,t){return void 0==
2024-11-26 00:18:43 UTC	16383	IN	Data Raw: 65 74 4e 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 64 2e 73 65 74 4e 61 6d 65 28 65 29 2c 62 2e 6e 61 6d 65 3d 65 7d 2c 67 65 74 54 72 61 63 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 74 72 61 63 65 49 64 7d 2c 73 65 74 54 72 61 63 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 64 2e 73 65 74 54 72 61 63 65 49 64 28 65 29 2c 4f 62 6a 65 63 74 28 6f 2e 66 29 28 65 29 26 26 28 62 2e 74 72 61 63 65 49 64 3d 65 29 7d 2c 67 65 74 53 70 61 6e 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 70 61 72 65 6e 74 49 64 7d 2c 73 65 74 53 70 61 6e 49 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 64 2e 73 65 74 53 70 61 6e 49 64 28 65 29 2c 4f 62 6a 65 63 74 28 6f 2e 65 29 28 65 29 26 26 28 Data Ascii: etName:function(e){d&&d.setName(e),b.name=e},getTraceId:function(){return b.traceId},setTraceId:function(e){d&&d.setTraceId(e),Object(o.f)(e)&&(b.traceId=e)},getSpanId:function(){return b.parentId},setSpanId:function(e){d&&d.setSpanId(e),Object(o.e)(e)&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49766	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:45 UTC	394	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:46 UTC	751	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321343 Cache-Control: public, max-age=31536000 Content-MD5: wegr9xrdYirQ87+FcvY0/A== Content-Type: application/x-javascript Date: Tue, 26 Nov 2024 00:18:45 GMT Etag: 0x8DB5D44A2CEB430 Last-Modified: Thu, 25 May 2023 17:22:37 GMT Server: ECAcc (lhc/7931) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e556728b-d01e-00f6-6fae-7d057f000000 x-ms-version: 2009-09-19 Content-Length: 190152 Connection: close
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 62 7d Data Ascii: (window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b}
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 74 2c 22 50 72 6f 70 65 72 74 69 65 73 50 6c 75 67 69 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 50 6f 73 74 43 68 61 6e 6e 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 43 6f 72 65 55 74 69 6c 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 42 45 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 4e 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f Data Ascii: t,"PropertiesPlugin",(function(){return g.a})),n.d(t,"PostChannel",(function(){return v.a})),n.d(t,"CoreUtils",(function(){return c.a})),n.d(t,"BE_PROFILE",(function(){return p.a})),n.d(t,"NRT_PROFILE",(function(){return p.b})),n.d(t,"RT_PROFILE",(functio
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 68 69 73 2e 74 79 70 65 4e 61 6d 65 29 29 7c 7c 22 6e 6f 74 5f 73 70 65 63 69 66 69 65 64 22 3b 76 61 72 20 61 3d 74 2e 73 74 61 63 6b 44 65 74 61 69 6c 73 7c 7c 6c 65 28 74 29 3b 74 68 69 73 2e 70 61 72 73 65 64 53 74 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 6f 62 6a 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 3d 5b 5d 3b 76 61 72 20 72 3d 30 2c 69 3d 30 3b 4f 62 6a 65 63 74 28 53 2e 62 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 67 65 2e 72 65 67 65 78 2e 74 65 73 74 28 6e 29 29 7b 76 61 72 20 61 3d 6e 65 77 20 67 65 28 6e 2c 72 2b 2b 29 3b 69 2b 3d 61 2e 73 69 7a 65 49 6e 42 79 74 65 73 2c 74 2e 70 75 73 68 28 61 29 7d 7d 29 29 Data Ascii: his.typeName))\|\|"not_specified";var a=t.stackDetails\|\|le(t);this.parsedStack=function(e){var t,n=e.obj;if(n&&n.length>0){t=[];var r=0,i=0;Object(S.b)(n,(function(e){var n=e.toString();if(ge.regex.test(n)){var a=new ge(n,r++);i+=a.sizeInBytes,t.push(a)}}))
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 69 63 79 20 70 72 65 76 65 6e 74 73 20 75 73 20 66 72 6f 6d 20 67 65 74 74 69 6e 67 20 74 68 65 20 64 65 74 61 69 6c 73 20 6f 66 20 74 68 69 73 20 65 78 63 65 70 74 69 6f 6e 2e 20 43 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 68 65 20 27 63 72 6f 73 73 6f 72 69 67 69 6e 27 20 61 74 74 72 69 62 75 74 65 2e 22 2c 61 2c 74 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 30 2c 74 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 7c 7c 30 2c 6e 2c 72 2c 6e 75 6c 6c 2c 6f 29 2c 63 29 3a 28 74 2e 65 72 72 6f 72 53 72 63 7c 7c 28 74 2e 65 72 72 6f 72 53 72 63 3d 6f 29 2c 65 2e 74 72 61 63 6b 45 78 63 65 70 74 69 6f 6e 28 7b 65 78 63 65 70 74 69 6f 6e 3a 74 2c 73 65 76 65 72 69 74 79 4c 65 76 65 6c 3a 33 7d 2c 63 29 29 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 75 3d 6e 3f 6e 2e 6e Data Ascii: icy prevents us from getting the details of this exception. Consider using the 'crossorigin' attribute.",a,t.lineNumber\|\|0,t.columnNumber\|\|0,n,r,null,o),c):(t.errorSrc\|\|(t.errorSrc=o),e.trackException({exception:t,severityLevel:3},c))}catch(e){var u=n?n.n
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 7b 65 3d 4f 62 6a 65 63 74 28 63 2e 74 29 28 65 29 3f 65 3a 7b 7d 3b 76 61 72 20 6e 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 28 63 2e 74 29 28 74 29 3f 74 3a 7b 7d 3b 74 68 69 73 2e 5f 73 65 74 42 61 73 69 63 50 72 6f 70 65 72 74 69 65 73 28 6e 2c 65 29 2c 74 68 69 73 2e 5f 73 65 74 50 61 67 65 54 61 67 73 28 6e 2c 65 29 2c 6e 2e 69 73 4d 61 6e 75 61 6c 3d 21 65 2e 69 73 41 75 74 6f 2c 72 2e 62 65 68 61 76 69 6f 72 3d 74 68 69 73 2e 5f 67 65 74 42 65 68 61 76 69 6f 72 28 65 29 2c 72 2e 76 70 48 65 69 67 68 74 3d 65 2e 76 70 48 65 69 67 68 74 2c 72 2e 76 70 57 69 64 74 68 3d 65 2e 76 70 57 69 64 74 68 2c 72 2e 66 72 61 6d 65 77 6f 72 6b 3d 65 2e 66 72 61 6d 65 77 6f 72 6b 2c 72 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 3d 65 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 Data Ascii: {e=Object(c.t)(e)?e:{};var n={},r=Object(c.t)(t)?t:{};this._setBasicProperties(n,e),this._setPageTags(n,e),n.isManual=!e.isAuto,r.behavior=this._getBehavior(e),r.vpHeight=e.vpHeight,r.vpWidth=e.vpWidth,r.framework=e.framework,r.systemTiming=e.systemTiming
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 72 6f 72 22 5d 29 2c 65 2e 65 6d 70 74 79 53 6e 69 70 70 65 74 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 7b 4f 62 6a 65 63 74 28 53 2e 73 29 28 6e 29 7c 7c 6e 2c 4f 62 6a 65 63 74 28 53 2e 43 29 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 69 66 28 4f 62 6a 65 63 74 28 53 2e 76 29 28 6e 29 26 26 21 4f 62 6a 65 63 74 28 53 2e 70 29 28 72 29 26 26 6e 26 26 22 5f 22 21 3d 3d 6e 5b 30 5d 26 26 2d 31 3d 3d 3d 4f 62 6a 65 63 74 28 53 2e 63 29 28 52 74 2c 6e 29 29 74 72 79 7b 74 5b 6e 5d 3d 72 7d 63 61 74 63 68 28 74 29 7b 4f 62 6a 65 63 74 28 66 2e 64 29 28 65 2e 6c 6f 67 67 65 72 2c 32 2c 35 31 34 2c 22 46 61 69 6c 65 64 20 74 6f 20 73 65 74 20 5b 22 2b 6e 2b 22 5d 20 64 Data Ascii: ror"]),e.emptySnippetQueue=function(t){try{if(function(){if(t){Object(S.s)(n)\|\|n,Object(S.C)(e,(function(n,r){if(Object(S.v)(n)&&!Object(S.p)(r)&&n&&"_"!==n[0]&&-1===Object(S.c)(Rt,n))try{t[n]=r}catch(t){Object(f.d)(e.logger,2,514,"Failed to set ["+n+"] d
2024-11-26 00:18:46 UTC	6	IN	Data Raw: 6e 20 65 2e 69 6e Data Ascii: n e.in
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 64 65 78 4f 66 28 74 2c 6e 29 3b 76 61 72 20 72 3d 65 5b 61 2e 78 5d 2c 69 3d 6e 7c 7c 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 3d 4d 61 74 68 2e 6d 61 78 28 69 3e 3d 30 3f 69 3a 72 2d 4d 61 74 68 2e 61 62 73 28 69 29 2c 30 29 3b 6f 3c 72 3b 6f 2b 2b 29 69 66 28 6f 20 69 6e 20 65 26 26 65 5b 6f 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6f 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 7b 69 66 28 65 2e 6d 61 70 29 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 74 2c 6e 29 3b 76 61 72 20 69 3d 65 5b 61 2e 78 5d 2c 6f 3d 6e 7c 7c 65 3b 72 3d 6e 65 77 20 41 72 72 61 79 28 69 29 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 69 3b 63 2b 2b 29 63 20 69 6e Data Ascii: dexOf(t,n);var r=e[a.x],i=n\|\|0;try{for(var o=Math.max(i>=0?i:r-Math.abs(i),0);o<r;o++)if(o in e&&e[o]===t)return o}catch(e){}}return-1}function W(e,t,n){var r;if(e){if(e.map)return e.map(t,n);var i=e[a.x],o=n\|\|e;r=new Array(i);try{for(var c=0;c<i;c++)c in
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 7c 39 3d 3d 3d 65 5b 69 2e 45 5d 7c 7c 21 2b 65 5b 69 2e 45 5d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 5b 65 2e 69 64 5d 3b 69 66 28 21 6e 29 7b 6e 3d 7b 7d 3b 74 72 79 7b 6c 28 74 29 26 26 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 75 29 74 72 79 7b 72 65 74 75 72 6e 20 75 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 21 31 7d 28 74 2c 65 2e 69 64 2c 6e 29 7c 7c 28 74 5b 65 2e 69 64 5d 3d 6e 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 26 Data Ascii: \|9===e[i.E]\|\|!+e[i.E]}function d(e,t){var n=t[e.id];if(!n){n={};try{l(t)&&(function(e,t,n){if(u)try{return u(e,t,{value:n,enumerable:!1,configurable:!0}),!0}catch(e){}return!1}(t,e.id,n)\|\|(t[e.id]=n))}catch(e){}}return n}function b(e,t){return void 0===t&
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 64 2e 73 65 74 4e 61 6d 65 28 65 29 2c 62 2e 6e 61 6d 65 3d 65 7d 2c 67 65 74 54 72 61 63 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 74 72 61 63 65 49 64 7d 2c 73 65 74 54 72 61 63 65 49 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 64 2e 73 65 74 54 72 61 63 65 49 64 28 65 29 2c 4f 62 6a 65 63 74 28 6f 2e 66 29 28 65 29 26 26 28 62 2e 74 72 61 63 65 49 64 3d 65 29 7d 2c 67 65 74 53 70 61 6e 49 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 2e 70 61 72 65 6e 74 49 64 7d 2c 73 65 74 53 70 61 6e 49 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 64 2e 73 65 74 53 70 61 6e 49 64 28 65 29 2c 4f 62 6a 65 63 74 28 6f 2e 65 29 28 65 29 26 26 28 62 2e 70 Data Ascii: ame:function(e){d&&d.setName(e),b.name=e},getTraceId:function(){return b.traceId},setTraceId:function(e){d&&d.setTraceId(e),Object(o.f)(e)&&(b.traceId=e)},getSpanId:function(){return b.parentId},setSpanId:function(e){d&&d.setSpanId(e),Object(o.e)(e)&&(b.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49768	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:45 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:46 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321603 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Tue, 26 Nov 2024 00:18:45 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-11-26 00:18:46 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49767	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:45 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:46 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 540524 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Content-Type: application/x-javascript Date: Tue, 26 Nov 2024 00:18:45 GMT Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Server: ECAcc (lhc/7888) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cfa5d8ca-401e-00b6-4bae-3af311000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 69 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: i=Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(537);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 21 31 7d 29 2c 65 7d 28 72 28 36 38 32 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c Data Ascii: !1}),e}(r(682));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rul
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 64 22 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 Data Ascii: d"!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binar
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 Data Ascii: /g;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e
2024-11-26 00:18:46 UTC	5	IN	Data Raw: 7d 76 61 72 20 Data Ascii: }var
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 70 Data Ascii: r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t,"p
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 64 65 66 61 Data Ascii: turn new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["defa
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f 74 6f 74 79 Data Ascii: rts=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(537);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.prototy
2024-11-26 00:18:46 UTC	16383	IN	Data Raw: 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 Data Ascii: uments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49769	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:47 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:48 UTC	720	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321606 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Tue, 26 Nov 2024 00:18:48 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (lhc/7944) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1c016ee5-901e-008a-08ad-7d0366000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-11-26 00:18:48 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-11-26 00:18:48 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49770	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:49 UTC	435	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:49 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 540528 Cache-Control: public, max-age=31536000 Content-MD5: LT++1t3XGfzBv7UAthL87A== Content-Type: application/x-javascript Date: Tue, 26 Nov 2024 00:18:49 GMT Etag: 0x8DCBD52F37806EC Last-Modified: Thu, 15 Aug 2024 17:51:54 GMT Server: ECAcc (lhc/7888) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cfa5d8ca-401e-00b6-4bae-3af311000000 x-ms-version: 2009-09-19 Content-Length: 406986 Connection: close
2024-11-26 00:18:49 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 69 3d 4d 61 74 68 2e 6d 69 6e 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 6e 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 6f 28 72 2b 65 2c 30 29 3a 69 28 72 2c 65 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 5b 5d 5b 74 5d 3b 72 65 74 75 72 6e 21 21 72 26 26 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 31 7d 2c 31 29 7d 29 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 Data Ascii: i=Math.min;t.exports=function(t,e){var r=n(t);return r<0?o(r+e,0):i(r,e)}},function(t,e,r){"use strict";var n=r(537);t.exports=function(t,e){var r=[][t];return!!r&&n((function(){r.call(null,e\|\|function(){return 1},1)}))}},function(t,e,r){"use strict";var
2024-11-26 00:18:50 UTC	2	IN	Data Raw: 21 31 Data Ascii: !1
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 7d 29 2c 65 7d 28 72 28 36 38 32 29 29 3b 45 2e 72 65 67 69 73 74 65 72 50 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 67 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 41 74 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6d 3d 74 7d 2c 45 2e 72 65 67 69 73 74 65 72 52 6f 6f 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 62 3d 74 7d 2c 74 2e 65 78 70 6f 72 74 73 3d 45 2c 45 5b 22 64 65 66 61 75 6c 74 22 5d 3d 45 2c 45 2e 72 65 62 75 69 6c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 61 74 72 75 6c 65 22 3d 3d 3d 74 2e 74 79 70 65 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 3a 22 72 75 6c 65 22 Data Ascii: }),e}(r(682));E.registerParse=function(t){v=t},E.registerRule=function(t){g=t},E.registerAtRule=function(t){m=t},E.registerRoot=function(t){b=t},t.exports=E,E["default"]=E,E.rebuild=function(t){"atrule"===t.type?Object.setPrototypeOf(t,m.prototype):"rule"
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 21 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 26 26 28 41 72 72 61 79 42 75 66 66 65 72 2e 69 73 56 69 65 77 28 74 29 7c 7c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 42 75 66 66 65 72 29 29 72 65 74 75 72 6e 20 74 2e 62 79 74 65 4c 65 6e 67 74 68 3b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 22 22 2b 74 29 3b 76 61 72 20 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 72 29 72 65 74 75 72 6e 20 30 3b 66 6f 72 28 76 61 72 20 6e 3d 21 31 3b 3b 29 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 22 61 73 63 69 69 22 3a 63 61 73 65 22 6c 61 74 69 6e 31 22 3a 63 61 73 65 22 62 69 6e 61 72 79 22 Data Ascii: !=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(t)\|\|t instanceof ArrayBuffer))return t.byteLength;"string"!=typeof t&&(t=""+t);var r=t.length;if(0===r)return 0;for(var n=!1;;)switch(e){case"ascii":case"latin1":case"binary"
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 4e 28 74 29 7b 72 65 74 75 72 6e 20 74 3c 31 36 3f 22 30 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3a 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 74 2c 65 29 7b 76 61 72 20 72 3b 65 3d 65 7c 7c 49 6e 66 69 6e 69 74 79 3b 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 75 6c 6c 2c 69 3d 5b 5d 2c 73 3d 30 3b 73 3c 6e 3b 2b 2b 73 29 7b 69 66 28 28 72 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 73 29 29 3e 35 35 32 39 35 26 26 72 3c 35 37 33 34 34 29 7b 69 66 28 21 6f 29 7b 69 66 28 72 3e 35 36 33 31 39 29 7b 28 65 2d 3d 33 29 3e 2d 31 26 26 69 2e 70 75 73 68 28 32 33 39 2c 31 39 31 2c 31 38 39 29 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 73 2b 31 3d 3d 3d 6e 29 7b 28 65 2d 3d Data Ascii: ;function N(t){return t<16?"0"+t.toString(16):t.toString(16)}function F(t,e){var r;e=e\|\|Infinity;for(var n=t.length,o=null,i=[],s=0;s<n;++s){if((r=t.charCodeAt(s))>55295&&r<57344){if(!o){if(r>56319){(e-=3)>-1&&i.push(239,191,189);continue}if(s+1===n){(e-=
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 61 72 20 72 2c 6e 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 Data Ascii: ar r,n,o;return function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function");t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,writable:!0,configurable:!0}}),Object.defineProperty(t
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 7d 72 65 74 75 72 6e 20 6e 65 77 20 6f 5b 22 64 65 66 61 75 6c 74 22 5d 28 74 29 7d 2c 65 2e 77 61 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6e 6f 64 65 3a 74 68 69 73 7d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 72 29 6e 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 74 2e 77 61 72 6e 28 65 2c 6e 29 7d 2c 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 26 26 74 68 69 73 2e 70 61 72 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 29 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 75 6e 64 65 66 69 6e 65 64 2c 74 68 69 73 7d 2c 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 73 5b 22 64 Data Ascii: }return new o["default"](t)},e.warn=function(t,e,r){var n={node:this};for(var o in r)n[o]=r[o];return t.warn(e,n)},e.remove=function(){return this.parent&&this.parent.removeChild(this),this.parent=undefined,this},e.toString=function(t){void 0===t&&(t=s["d
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 61 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 21 6f 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 29 66 6f 72 28 3b 65 2d 2d 3b 29 74 3d 69 28 74 2c 75 2c 22 22 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 35 33 37 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 6e 75 6c 6c 2c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 65 77 20 74 29 21 3d 3d 74 2e 70 72 6f 74 Data Ascii: xports=function(t,e){if(a&&"string"==typeof t&&!o.prepareStackTrace)for(;e--;)t=i(t,u,"");return t}},function(t,e,r){"use strict";var n=r(537);t.exports=!n((function(){function t(){}return t.prototype.constructor=null,Object.getPrototypeOf(new t)!==t.prot
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 31 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 65 2e 70 6c 75 67 69 6e 7c 7c 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 26 26 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 26 26 28 65 2e 70 6c 75 67 69 6e 3d 74 68 69 73 2e 6c 61 73 74 50 6c 75 67 69 6e 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 29 3b 76 61 72 20 72 3d 6e 65 77 20 73 28 74 2c 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 70 75 73 68 28 72 29 2c 72 7d 7d 2c 7b 6b 65 79 3a 22 77 61 72 6e 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 73 73 61 67 65 73 2e 66 69 6c 74 65 72 28 28 66 75 6e Data Ascii: arguments[1]!==undefined?arguments[1]:{};e.plugin\|\|this.lastPlugin&&this.lastPlugin.postcssPlugin&&(e.plugin=this.lastPlugin.postcssPlugin);var r=new s(t,e);return this.messages.push(r),r}},{key:"warnings",value:function(){return this.messages.filter((fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49773	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:49 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:49 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321412 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 26 Nov 2024 00:18:49 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-11-26 00:18:49 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49772	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:49 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:49 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321452 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Tue, 26 Nov 2024 00:18:49 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-11-26 00:18:49 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49771	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:49 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:49 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 8772427 Cache-Control: public, max-age=31536000 Content-MD5: 07aumYbfJEqwNBLMcAM10A== Content-Type: application/x-javascript Date: Tue, 26 Nov 2024 00:18:49 GMT Etag: 0x8DCBD52F42903D2 Last-Modified: Thu, 15 Aug 2024 17:51:56 GMT Server: ECAcc (lhc/78A7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 22797220-301e-0043-49cf-ef2c70000000 x-ms-version: 2009-09-19 Content-Length: 113769 Connection: close
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-11-26 00:18:50 UTC	1	IN	Data Raw: 75 Data Ascii: u
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 32 30 30 61 22 2c 22 68 61 6c 66 22 3a 22 5c 78 62 64 22 2c 22 68 61 6d 69 6c 74 22 3a 22 5c 75 32 31 30 62 22 2c 22 48 41 52 44 63 79 22 3a 22 5c 75 30 34 32 61 22 2c 22 68 61 72 64 63 79 22 3a 22 5c 75 30 34 34 61 22 2c 22 68 61 72 72 63 69 72 22 3a 22 5c 75 32 39 34 38 22 2c 22 68 61 72 72 22 3a 22 5c 75 32 31 39 34 22 2c 22 68 41 72 72 22 3a 22 5c 75 32 31 64 34 22 2c 22 68 61 72 72 77 22 3a 22 5c 75 32 31 61 64 22 2c 22 48 61 74 22 3a 22 5e 22 2c 22 68 62 61 72 22 3a 22 5c 75 32 31 30 66 22 2c 22 48 63 69 72 63 22 3a 22 5c 75 30 31 32 34 22 2c 22 68 63 69 72 63 22 3a 22 5c 75 30 31 32 35 22 2c 22 68 65 61 72 74 73 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 61 72 74 73 75 69 74 22 3a 22 5c 75 32 36 36 35 22 2c 22 68 65 6c 6c 69 70 22 3a 22 5c 75 32 30 Data Ascii: 200a","half":"\xbd","hamilt":"\u210b","HARDcy":"\u042a","hardcy":"\u044a","harrcir":"\u2948","harr":"\u2194","hArr":"\u21d4","harrw":"\u21ad","Hat":"^","hbar":"\u210f","Hcirc":"\u0124","hcirc":"\u0125","hearts":"\u2665","heartsuit":"\u2665","hellip":"\u20
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 39 30 66 22 2c 22 52 42 61 72 72 22 3a 22 5c 75 32 39 31 30 22 2c 22 72 62 62 72 6b 22 3a 22 5c 75 32 37 37 33 22 2c 22 72 62 72 61 63 65 22 3a 22 7d 22 2c 22 72 62 72 61 63 6b 22 3a 22 5d 22 2c 22 72 62 72 6b 65 22 3a 22 5c 75 32 39 38 63 22 2c 22 72 62 72 6b 73 6c 64 22 3a 22 5c 75 32 39 38 65 22 2c 22 72 62 72 6b 73 6c 75 22 3a 22 5c 75 32 39 39 30 22 2c 22 52 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 38 22 2c 22 72 63 61 72 6f 6e 22 3a 22 5c 75 30 31 35 39 22 2c 22 52 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 36 22 2c 22 72 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 37 22 2c 22 72 63 65 69 6c 22 3a 22 5c 75 32 33 30 39 22 2c 22 72 63 75 62 22 3a 22 7d 22 2c 22 52 63 79 22 3a 22 5c 75 30 34 32 30 22 2c 22 72 63 79 22 3a 22 5c 75 30 34 34 30 22 2c 22 72 64 63 61 Data Ascii: 90f","RBarr":"\u2910","rbbrk":"\u2773","rbrace":"}","rbrack":"]","rbrke":"\u298c","rbrksld":"\u298e","rbrkslu":"\u2990","Rcaron":"\u0158","rcaron":"\u0159","Rcedil":"\u0156","rcedil":"\u0157","rceil":"\u2309","rcub":"}","Rcy":"\u0420","rcy":"\u0440","rdca
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 74 72 69 63 74 22 3b 74 2e 41 6e 79 3d 72 28 38 38 34 29 2c 74 2e 43 63 3d 72 28 38 38 35 29 2c 74 2e 43 66 3d 72 28 31 33 38 31 29 2c 74 2e 50 3d 72 28 37 38 34 29 2c 74 2e 5a 3d 72 28 38 38 36 29 7d 2c 31 33 38 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 78 41 44 5c 75 30 36 30 30 2d 5c 75 30 36 30 35 5c 75 30 36 31 43 5c 75 30 36 44 44 5c 75 30 37 30 46 5c 75 30 38 45 32 5c 75 31 38 30 45 5c 75 32 30 30 42 2d 5c 75 32 30 30 46 5c 75 32 30 32 41 2d 5c 75 32 30 32 45 5c 75 32 30 36 30 2d 5c 75 32 30 36 34 5c 75 32 30 36 36 2d 5c 75 32 30 36 46 5c 75 46 45 46 46 5c 75 46 46 46 39 2d 5c 75 46 46 46 42 5d 7c 5c 75 44 38 30 34 5b 5c 75 44 43 42 44 5c 75 44 43 43 44 5d 7c 5c 75 44 38 32 46 5b 5c 75 44 43 41 30 2d 5c Data Ascii: trict";t.Any=r(884),t.Cc=r(885),t.Cf=r(1381),t.P=r(784),t.Z=r(886)},1381:function(e,t){e.exports=/[\xAD\u0600-\u0605\u061C\u06DD\u070F\u08E2\u180E\u200B-\u200F\u202A-\u202E\u2060-\u2064\u2066-\u206F\uFEFF\uFFF9-\uFFFB]\|\uD804[\uDCBD\uDCCD]\|\uD82F[\uDCA0-\
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 4d 61 72 6b 73 5b 74 5d 3b 69 66 28 65 2e 73 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 72 65 74 75 72 6e 21 31 3b 69 66 28 34 32 21 3d 3d 28 6f 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 26 26 34 35 21 3d 3d 6f 26 26 39 35 21 3d 3d 6f 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 69 3d 31 3b 75 3c 6c 3b 29 7b 69 66 28 28 61 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 21 3d 3d 6f 26 26 21 6e 28 61 29 29 72 65 74 75 72 6e 21 31 3b 61 3d 3d 3d 6f 26 26 69 2b 2b 7d 72 65 74 75 72 6e 21 28 69 3c 33 29 26 26 28 73 7c 7c 28 65 2e 6c 69 6e 65 3d 74 2b 31 2c 28 63 3d 65 2e 70 75 73 68 28 22 68 72 22 2c 22 68 72 22 2c 30 29 29 2e 6d 61 70 3d 5b 74 2c 65 2e 6c 69 6e 65 5d 2c 63 2e 6d 61 72 Data Ascii: Marks[t];if(e.sCount[t]-e.blkIndent>=4)return!1;if(42!==(o=e.src.charCodeAt(u++))&&45!==o&&95!==o)return!1;for(i=1;u<l;){if((a=e.src.charCodeAt(u++))!==o&&!n(a))return!1;a===o&&i++}return!(i<3)&&(s\|\|(e.line=t+1,(c=e.push("hr","hr",0)).map=[t,e.line],c.mar
2024-11-26 00:18:50 UTC	16383	IN	Data Raw: 75 72 6e 20 72 3d 65 2e 73 72 63 2e 73 6c 69 63 65 28 63 2b 31 2c 6c 29 2c 73 2e 74 65 73 74 28 72 29 3f 28 6f 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 28 72 29 2c 21 21 65 2e 6d 64 2e 76 61 6c 69 64 61 74 65 4c 69 6e 6b 28 6f 29 26 26 28 74 7c 7c 28 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 6f 70 65 6e 22 2c 22 61 22 2c 31 29 29 2e 61 74 74 72 73 3d 5b 5b 22 68 72 65 66 22 2c 6f 5d 5d 2c 69 2e 6d 61 72 6b 75 70 3d 22 61 75 74 6f 6c 69 6e 6b 22 2c 69 2e 69 6e 66 6f 3d 22 61 75 74 6f 22 2c 28 69 3d 65 2e 70 75 73 68 28 22 74 65 78 74 22 2c 22 22 2c 30 29 29 2e 63 6f 6e 74 65 6e 74 3d 65 2e 6d 64 2e 6e 6f 72 6d 61 6c 69 7a 65 4c 69 6e 6b 54 65 78 74 28 72 29 2c 28 69 3d 65 2e 70 75 73 68 28 22 6c 69 6e 6b 5f 63 6c 6f 73 65 22 2c 22 61 Data Ascii: urn r=e.src.slice(c+1,l),s.test(r)?(o=e.md.normalizeLink(r),!!e.md.validateLink(o)&&(t\|\|((i=e.push("link_open","a",1)).attrs=[["href",o]],i.markup="autolink",i.info="auto",(i=e.push("text","",0)).content=e.md.normalizeLinkText(r),(i=e.push("link_close","a
2024-11-26 00:18:50 UTC	5	IN	Data Raw: 22 62 61 6c 61 Data Ascii: "bala

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49775	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:49 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:50 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21235435 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Tue, 26 Nov 2024 00:18:50 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-11-26 00:18:50 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49776	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:51 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:52 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321414 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Tue, 26 Nov 2024 00:18:51 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (lhc/792B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 60ece416-101e-0092-59ad-7deb55000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-11-26 00:18:52 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49777	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:51 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:52 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321455 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Tue, 26 Nov 2024 00:18:52 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7892) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 002cd9d5-201e-00e1-69ad-7d6453000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-11-26 00:18:52 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49778	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:52 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:52 UTC	738	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21235437 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Tue, 26 Nov 2024 00:18:52 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (lhc/7928) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 21996301-501e-00c2-0976-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-11-26 00:18:52 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49779	13.107.246.63	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:52 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:52 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:18:52 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 3818e0f8-501e-0007-41af-339098000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T001852Z-174f784596886s2bhC1EWR743w0000000um00000000043ft x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:18:52 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-11-26 00:18:52 UTC	16384	IN	Data Raw: 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c cb 13 7e 4b 7f b3 f5 a0 bd 18 b0 9c 02 ae 84 Data Ascii: 6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x~K
2024-11-26 00:18:52 UTC	3197	IN	Data Raw: a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 23 de 14 2a 36 0a d3 69 66 72 2e 59 04 99 e6 Data Ascii: -av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x#*6ifr.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49780	13.107.246.63	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:54 UTC	439	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:55 UTC	797	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:18:54 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: 3818e0f8-501e-0007-41af-339098000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241126T001854Z-174f7845968kvnqxhC1EWRmf3g0000000dg00000000048t0 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:18:55 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-11-26 00:18:55 UTC	16384	IN	Data Raw: 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c cb 13 7e 4b 7f b3 f5 a0 bd 18 b0 9c 02 ae 84 Data Ascii: 6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x~K
2024-11-26 00:18:55 UTC	3197	IN	Data Raw: a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 23 de 14 2a 36 0a d3 69 66 72 2e 59 04 99 e6 Data Ascii: -av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x#*6ifr.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49782	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:57 UTC	670	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:58 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321565 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Tue, 26 Nov 2024 00:18:58 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-11-26 00:18:58 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49781	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:18:57 UTC	664	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:18:58 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321743 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Tue, 26 Nov 2024 00:18:58 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-11-26 00:18:58 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49784	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:00 UTC	425	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:19:00 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321567 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Tue, 26 Nov 2024 00:19:00 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7945) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8ea465c-601e-0025-11ad-7d4c1f000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-11-26 00:19:00 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49785	152.199.21.175	443	3020	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:00 UTC	419	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-26 00:19:00 UTC	716	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 21321745 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Tue, 26 Nov 2024 00:19:00 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (lhc/7941) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d63faa2-d01e-009e-5cad-7d1f4c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-11-26 00:19:00 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49787	4.245.163.56	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:18 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=+HMSKoonZHV9MmD&MD=PWFxAHsX HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-26 00:19:19 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: c303b29b-e755-441c-a734-e747fadde1be MS-RequestId: f31fd8fe-663b-47b8-b857-8dcf28e80e95 MS-CV: sfndwNgEe06q8b4L.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 26 Nov 2024 00:19:18 GMT Connection: close Content-Length: 30005
2024-11-26 00:19:19 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-26 00:19:19 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:19 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:20 UTC	492	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:20 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 25 Nov 2024 13:17:46 GMT ETag: "0x8DD0D538D5EA1E0" x-ms-request-id: f5f75198-101e-00a2-8091-3f9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001920Z-174f7845968xlwnmhC1EWR0sv80000000ug0000000003nfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:20 UTC	15892	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-26 00:19:20 UTC	16384	IN	Data Raw: 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 Data Ascii: <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V
2024-11-26 00:19:20 UTC	16384	IN	Data Raw: 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 Data Ascii: 20v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="T
2024-11-26 00:19:20 UTC	16384	IN	Data Raw: 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d Data Ascii: T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F=
2024-11-26 00:19:20 UTC	16384	IN	Data Raw: 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a Data Ascii: alse"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C>
2024-11-26 00:19:20 UTC	16384	IN	Data Raw: 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 Data Ascii: I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="Cleanup
2024-11-26 00:19:20 UTC	16384	IN	Data Raw: 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 Data Ascii: </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R>
2024-11-26 00:19:21 UTC	16384	IN	Data Raw: 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 Data Ascii: </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C>
2024-11-26 00:19:21 UTC	16384	IN	Data Raw: 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" />
2024-11-26 00:19:21 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 Data Ascii: <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:22 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:23 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:23 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 59158d4f-901e-00a0-5491-3f6a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001923Z-174f7845968zgtf6hC1EWRqd8s0000000mrg0000000009ue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:23 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:22 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:23 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:23 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0a3cdbcf-401e-0016-597f-3f53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001923Z-174f78459684bddphC1EWRbht40000000ud0000000003zg8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:23 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:22 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:23 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:23 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 0b3277ea-501e-00a0-5e91-3f9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001923Z-174f7845968zgtf6hC1EWRqd8s0000000mq0000000003dt3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:23 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49794	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:22 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:23 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:23 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 6eac4bdd-a01e-006f-1c91-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001923Z-174f7845968px8v7hC1EWR08ng0000000utg000000004cpw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:23 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49793	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:22 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:23 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:23 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: dc0e4179-901e-005b-2991-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001923Z-174f78459685m244hC1EWRgp2c0000000ue0000000004frn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:23 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49795	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:25 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:25 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 8ccd6c39-f01e-0085-6e81-3f88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001925Z-174f7845968frfdmhC1EWRxxbw0000000ung0000000047d9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:25 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:25 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:25 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: f5d49257-301e-005d-758c-3fe448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001925Z-174f7845968j6t2phC1EWRcfe80000000us0000000004e7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:25 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:25 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:25 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 30944020-a01e-0053-5e8b-3f8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001925Z-174f7845968cpnpfhC1EWR3afc0000000ud0000000000y6m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:25 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:25 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:25 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 3360fb1d-601e-0097-3291-3ff33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001925Z-174f7845968zgtf6hC1EWRqd8s0000000mm00000000047cr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:25 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:25 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:25 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:25 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6f96f590-e01e-0099-0e7f-3fda8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001925Z-174f7845968qj8jrhC1EWRh41s0000000ugg0000000048b2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:25 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49801	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:27 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:27 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: ed9dfa2a-401e-0015-7891-3f0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001927Z-174f7845968ljs8phC1EWRe6en0000000ug00000000048ne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49802	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:27 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 6eac52fb-a01e-006f-2191-3f13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001927Z-174f7845968kvnqxhC1EWRmf3g0000000de00000000059ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49803	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:27 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:27 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: c665a67d-901e-002a-1b91-3f7a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001927Z-174f78459685m244hC1EWRgp2c0000000ue0000000004fzq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:27 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49804	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:27 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:27 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: dc0e488f-901e-005b-3891-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001927Z-174f78459685m244hC1EWRgp2c0000000ud0000000004ak5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:27 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:27 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:27 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:27 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: ff98645e-b01e-0001-1091-3f46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001927Z-174f7845968frfdmhC1EWRxxbw0000000usg000000003q1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:27 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:30 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:30 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:30 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 106d127d-401e-008c-1a91-3f86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001930Z-174f7845968jrjrxhC1EWRmmrs0000000utg000000003e7f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:30 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:30 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 417b6c53-401e-0029-0d91-3f9b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001930Z-174f7845968pf68xhC1EWRr4h80000000uvg000000003s68 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:30 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:30 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:30 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:30 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: a99e6065-701e-006f-4d91-3fafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001930Z-174f784596886s2bhC1EWR743w0000000ung000000003x9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:30 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:30 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:30 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:30 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: e9babc56-001e-0049-5291-3f5bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001930Z-174f7845968n2hr8hC1EWR9cag0000000u80000000004kn7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:30 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49810	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:30 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:30 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:30 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 3fc8b732-401e-0083-1091-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001930Z-174f7845968psccphC1EWRuz9s0000000uwg000000004c2g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:30 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:32 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:32 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 02716611-001e-00ad-7089-3f554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001932Z-174f7845968ljs8phC1EWRe6en0000000ue0000000004a00 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:32 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:32 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:32 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f5c4af5a-301e-005d-6385-3fe448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001932Z-174f7845968xr5c2hC1EWRd0hn0000000bhg000000003xtt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:32 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:32 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:32 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:32 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: b18988de-c01e-0079-2891-3fe51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001932Z-174f7845968swgbqhC1EWRmnb40000000uwg0000000053dg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:32 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:32 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:33 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:32 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: f5817373-b01e-003e-3591-3f8e41000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001932Z-174f7845968cpnpfhC1EWR3afc0000000u90000000003rq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49815	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:32 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:32 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:32 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: b254496e-901e-0016-2991-3fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001932Z-174f7845968swgbqhC1EWRmnb40000000uvg000000004k7a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:32 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49816	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:34 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:34 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 89e88ad2-001e-0065-4491-3f0b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001934Z-174f7845968ljs8phC1EWRe6en0000000ueg0000000048m9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:35 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49817	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:34 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f440c5dc-801e-0047-7891-3f7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001934Z-174f78459688l8rvhC1EWRtzr000000007ag000000003vsz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49818	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:34 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:35 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 6c824192-201e-0051-0a91-3f7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001935Z-174f7845968j6t2phC1EWRcfe80000000urg0000000046q1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:35 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49819	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:34 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c3d74fa2-201e-0003-1d91-3ff85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001935Z-174f7845968v75bwhC1EWRuqen0000000fpg000000004b51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49820	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:34 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:35 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: baa0830a-001e-0082-4291-3f5880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001935Z-174f7845968psccphC1EWRuz9s0000000v000000000032ga x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:36 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:37 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: d3507608-601e-003d-4b91-3f6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001937Z-174f7845968psccphC1EWRuz9s0000000uu0000000004cwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:37 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:36 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:37 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: dc0e5a4e-901e-005b-0191-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001937Z-174f78459685m244hC1EWRgp2c0000000ufg0000000046bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:37 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:37 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:37 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5810d2d2-301e-0000-6891-3feecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001937Z-174f78459688l8rvhC1EWRtzr000000007500000000052xa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:37 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:37 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:37 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:37 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: dc0e6055-901e-005b-2d91-3f2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001937Z-174f7845968frfdmhC1EWRxxbw0000000usg000000003qhn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:37 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:37 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:37 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:37 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: fac497c4-501e-008f-4391-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001937Z-174f7845968jrjrxhC1EWRmmrs0000000ux00000000021cy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:37 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49826	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:39 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:39 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:39 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 1fa1b817-401e-0067-5691-3f09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001939Z-174f78459685726chC1EWRsnbg0000000ut000000000451y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:39 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49827	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:39 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:39 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:39 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e52ede4a-001e-0017-0591-3f0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001939Z-174f784596886s2bhC1EWR743w0000000umg000000003wru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:39 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49828	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:39 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:39 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be7987d0-001e-0034-1e91-3fdd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001939Z-174f7845968n2hr8hC1EWR9cag0000000u90000000005cw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49830	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:39 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:39 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:39 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 8dfbf447-101e-0028-0f8e-3f8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001939Z-174f7845968zgtf6hC1EWRqd8s0000000mp00000000040nh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:39 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49829	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:39 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:39 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:39 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 6760f0bc-801e-002a-1f91-3f31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001939Z-174f7845968pf68xhC1EWRr4h80000000utg000000004bu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:39 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49831	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:41 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:41 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:41 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: cb9203b6-501e-0029-2691-3fd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001941Z-174f7845968jrjrxhC1EWRmmrs0000000uw0000000004dwh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:41 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:41 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:41 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:41 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: e14f358b-d01e-007a-5d7e-3ff38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001941Z-174f7845968g6hv8hC1EWR1v2n00000002mg0000000047qd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:41 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:41 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:41 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:41 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: fac49ef3-501e-008f-0a91-3f9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001941Z-174f7845968vqt9xhC1EWRgten0000000utg000000003ped x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:41 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:41 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:42 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:42 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 5cf18591-601e-000d-7e91-3f2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001941Z-174f7845968cpnpfhC1EWR3afc0000000u9g000000003mye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:42 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:41 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:42 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:41 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 3fc8ca9f-401e-0083-6c91-3f075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001941Z-174f7845968zgtf6hC1EWRqd8s0000000mn0000000004k9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:42 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:43 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:44 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:43 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 59a03737-a01e-00ab-1891-3f9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001943Z-174f78459684bddphC1EWRbht40000000uc0000000004du2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:44 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49837	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:43 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:44 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:43 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b24172ee-901e-0016-3789-3fefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001943Z-174f78459688l8rvhC1EWRtzr0000000079g000000003r3a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:44 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:43 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:44 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:44 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: dcf51672-d01e-005a-5c91-3f7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001944Z-174f7845968qj8jrhC1EWRh41s0000000uh000000000450b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:44 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:43 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:44 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 5cf18767-601e-000d-7d91-3f2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001944Z-174f7845968glpgnhC1EWR7uec0000000uqg000000004tf5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:44 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:44 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:44 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7af319f3-d01e-0017-6a91-3fb035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001944Z-174f7845968n2hr8hC1EWR9cag0000000u700000000044sx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:44 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49843	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:45 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:46 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:46 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: f73eacfc-701e-0001-0b91-3fb110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001946Z-174f78459688l8rvhC1EWRtzr0000000077g00000000433b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-26 00:19:46 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:45 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-26 00:19:46 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 26 Nov 2024 00:19:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: dd02da03-701e-001e-0d91-3ff5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241126T001946Z-174f7845968cdxdrhC1EWRg0en0000000urg000000000sy0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-26 00:19:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49844	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:46 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49845	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:46 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49846	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-11-26 00:19:46 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Target ID:	0
Start time:	19:18:16
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:18:19
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,13325661113055625624,13795328057881421946,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:18:22
Start date:	25/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://robertsonalger-my.sharepoint.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://robertsonalger-my.sharepoint.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Windows Analysis Report
https://robertsonalger-my.sharepoint.com/