Edit tour

Windows Analysis Report
http://cnytechnologies-my.sharepoint.com

Overview

General Information

Sample URL:	http://cnytechnologies-my.sharepoint.com
Analysis ID:	1417056
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3264 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2232,i,17876861822445243493,403250052627078713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6524 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://cnytechnologies-my.sharepoint.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707&sso_reload=true

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49745 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.242.90
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cnytechnologies-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/Authenticate.aspx?Source=%2F HTTP/1.1Host: cnytechnologies-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F&Source=cookie HTTP/1.1Host: cnytechnologies-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RpsContextCookie=U291cmNlPSUyRg==
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: cnytechnologies-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: cnytechnologies-my.sharepoint.com

Source: chromecache_76.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_55.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_55.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_71.2.dr, chromecache_55.2.dr, chromecache_76.2.dr, chromecache_68.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_57.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_57.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.242.90:443 -> 192.168.2.4:49745 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/46@14/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2232,i,17876861822445243493,403250052627078713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://cnytechnologies-my.sharepoint.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2232,i,17876861822445243493,403250052627078713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://cnytechnologies-my.sharepoint.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Link
dual-spo-0005.spo-msedge.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
aadcdn.msftauth.net	0%	Virustotal	Browse
cs1100.wpc.omegacdn.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js	0%	Avira URL Cloud	safe
https://cnytechnologies-my.sharepoint.com/_layouts/15/Authenticate.aspx?Source=%2F	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js	0%	Avira URL Cloud	safe
https://cnytechnologies-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F&Source=cookie	0%	Avira URL Cloud	safe
https://cnytechnologies-my.sharepoint.com/	0%	Avira URL Cloud	safe
http://cnytechnologies-my.sharepoint.com/	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js	0%	Virustotal		Browse
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	0%, Virustotal, Browse	unknown
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.251.167.99	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
identity.nel.measure.office.net	unknown	unknown	false		high
cnytechnologies-my.sharepoint.com	unknown	unknown	false		unknown
aadcdn.msftauth.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
login.microsoftonline.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js	false	Avira URL Cloud: safe	unknown
https://cnytechnologies-my.sharepoint.com/_layouts/15/Authenticate.aspx?Source=%2F	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	URL Reputation: safe	unknown
https://cnytechnologies-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F&Source=cookie	false	Avira URL Cloud: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	URL Reputation: safe	unknown
https://cnytechnologies-my.sharepoint.com/	false	Avira URL Cloud: safe	unknown
http://cnytechnologies-my.sharepoint.com/	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707&sso_reload=true	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://knockoutjs.com/	chromecache_55.2.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_71.2.dr, chromecache_55.2.dr, chromecache_76.2.dr, chromecache_68.2.dr	false	high
https://login.windows-ppe.net	chromecache_57.2.dr	false	high
https://login.microsoftonline.com	chromecache_57.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_55.2.dr	false	high
http://feross.org	chromecache_76.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.167.99	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417056
Start date and time:	2024-03-28 15:08:32 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://cnytechnologies-my.sharepoint.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/46@14/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.167.94, 142.251.167.138, 142.251.167.102, 142.251.167.139, 142.251.167.101, 142.251.167.100, 142.251.167.113, 172.253.62.84, 34.104.35.123, 20.190.190.131, 20.190.190.195, 20.190.190.196, 40.126.62.130, 20.190.190.130, 20.190.190.129, 20.190.190.193, 40.126.62.129, 13.105.221.39, 23.215.0.238, 23.215.0.235, 20.190.151.133, 20.190.151.67, 20.190.151.132, 20.190.151.9, 20.190.151.134, 20.190.151.69, 20.190.151.8, 20.190.151.6, 142.251.111.95, 172.253.122.95, 142.251.179.95, 172.253.115.95, 142.250.31.95, 142.251.163.95, 142.251.167.95, 142.251.16.95, 172.253.62.95, 172.253.63.95, 13.85.23.86, 72.21.81.240, 192.229.211.108, 20.3.187.198, 20.189.173.8, 52.182.143.209, 52.165.164.15, 172.253.122.94
Excluded domains from analysis (whitelisted): 191908-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net, global-entry-afdthirdparty-fallback-first.trafficmanager.net, slscr.update.microsoft.com, clientservices.googleapis.com, browser.events.data.trafficmanager.net, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, wu.azureedge.net, onedscolprdwus07.westus.cloudapp.azure.com, clients2.google.com, ocsp.digicert.com, login.live.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, login.mso.msidentity.com, glb.sls.prod.dcat.dsp.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.ak.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.akadns.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, aadcdn.msauth.net, wu-bg-shim.trafficmanager.net, firstparty-azuref
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	443045
Entropy (8bit):	5.449958379847302
Encrypted:	false
SSDEEP:	6144:217tl9pnilRPqNfFDCAfDYs8d18AfJ9Oxb4XFE0HfNX4Tb:21rlFDCAbR8/8z4Xy3
MD5:	40C25B65273F3E1A1F97E95F77ADC12F
SHA1:	37415368742F493832C149947581CBB0DA4E5536
SHA-256:	1A593C25442E0B30D379EE4A9C5C8772C70E097C4F92BFEFE07BAF8C168E79EE
SHA-512:	60169EBF86B598228158B6AC318F0625AA3A7414C4767BC02CE7D9A1F30AAB4A41C41C7F2E7B6E803968C62BD8F1993219CE1D65567DCF173275F3CA99380340
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141289
Category:	downloaded
Size (bytes):	49611
Entropy (8bit):	7.995268724057165
Encrypted:	true
SSDEEP:	768:UZoBcWYFXCBJFtbPWbFrVfU0zs3WRDCNenWRmIbM6m0AZAR9c79S0zuy5P24geCY:IohTdtbQZ43mCNJRmeKrygsVQ5gfbk
MD5:	462394CA2CEA9EFD7907540CBA6FF476
SHA1:	16B41B5BFDE870C38B481E3418B900AAFB0F6E29
SHA-256:	440AFCE54C4215A9A6CEAF3303E44CDBBD3D2A31FF17295074858DE108B1F880
SHA-512:	900589E07BD9EDE7A5B107CA59624E0DFBBF4EDC9CC0FF24EBDFA0DA8FF46603E057348DC645F30A7A1D7806300B606585DF0353814650110833C471F24C53C5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_HC7t4HZ_o96i0-T341lIwg2.js
Preview:	...........m[.8.0........'&..hp.'.t73@...g.X.'V......4.9...d.C..}....K...,..JU.......T~.l..?...w>..?T.....g..g.?<.?..z.....+...w....A%.~0..Y....+.....2...Jr'.(.".I\..q..Fb.>V.P].U..(y....u._@m...@.q8{.....?..7.)......OD..;.\|W9..Q..........#....n$.H.0J.....!e.1}....84......u.~..~.M...X&..Ou..ie..\|.IXy...Y....x...;..U.M....f,..l.tZ..<...bl{E\|..@<}..Fn.(W...so#!.E.X.<AEGO..~....Y..'.l&.8.T.....".J.K......Rm5.;...F..$.......G.qx.....C.._.s../.......3....\|.-.......o...?.a.La...W...7.?.O.....6..clXU....T.x.....".w.......;.k.\^w.~}.....jf......!..a..0y........@.L.1..0.......2.^_..g..../.........$@.....]+...2.v\.1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F... [..y....K5qzQ.>i.1.......0..P...@...L.".n.x..!.0..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.T...n "..km..3..T..]......paJV.(J...g....!.\|.].......;.zN...%}....DZ..i.....j .a".i=O.R Q2..."....

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	379
Entropy (8bit):	4.942805876241154
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXADQKDTcVEq0FyX4bVGEynbtwag8R+mkbtR1dI1zAmiadc:t4pb8WsQKvkB0wX4gEkbtLv8mkbtvdIe
MD5:	2D8F86059BE176833897099EE6DDEDEB
SHA1:	93A2E327027DEED53076E86BFA7D9EEBBF0CC4B9
SHA-256:	34D8DA073F47030EE94B99D84FBE68E3345BD8AAA37EA909FF2DA00238447486
SHA-512:	64D75B1F35180FF61F5BF11D21544454DF016D0854573D75D277FCB933CE845D1436BDC822445B78C627A1FF730B39FC34B72C27D45A39E237F2CCF0876FCA4E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.982,0A10.573,10.573,0,0,0,13.44,36Zm4.8-16.32A5.76,5.76,0,1,1,24,25.44,5.766,5.766,0,0,1,18.24,19.68Z" fill="#404040"/></svg>

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1378
Entropy (8bit):	4.316299265862323
Encrypted:	false
SSDEEP:	24:t4pb8m3NquUzOqnXmZcU4BC+CaAIA5cAEisx+fUu3fLkY:zoNLUzOeXfU4BJxA5fXUWx
MD5:	F83EBFF69A4A1685E4DC9650CDAB8886
SHA1:	FD21658884945B00157557AE06803DAA6A9F10C6
SHA-256:	7B1669DA90261CDB1483950BB480AD96875F84B09BC48D1055303CE94821BF64
SHA-512:	AA21A03AB84FA0129AFCED8A56E499757A6625C9B24A81EE08F5775B9B542F71BA67EAE817D633CB4E4533A8CF6A0DDA80BD7EE8A90E95AB3D39A77F88073F23
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.494,0,0,1,32.5,40h-17A1.494,1.494,0,0,1,14,38.5v-23A1.494,1.494,0,0,1,15.5,14h4.873l-3-6h2.25l3,6h2.751l3-6h2.25l-3,6ZM32,16H23.623l1.266,2.546A1.13,1.13,0,0,1,25,19a1.009,1.009,0,0,1-1,1,1,1,0,0,1-.534-.149.974.974,0,0,1-.368-.4L21.375,16H16v22H32ZM20,26a3.92,3.92,0,0,1,.312-1.555,4.023,4.023,0,0,1,2.133-2.133,4.041,4.041,0,0,1,3.109,0,4.014,4.014,0,0,1,2.133,2.133A3.886,3.886,0,0,1,28,26a3.937,3.937,0,0,1-.288,1.485,3.987,3.987,0,0,1-.8,1.266A5.7,5.7,0,0,1,28.2,29.7a5.907,5.907,0,0,1,.968,1.251,6.388,6.388,0,0,1,.616,1.461A5.786,5.786,0,0,1,30,34H28a3.877,3.877,0,0,0-.312-1.554,4,4,0,0,0-2.133-2.133,4.011,4.011,0,0,0-3.109,0,4.023,4.023,0,0,0-2.133,2.133A3.912,3.912,0,0,0,20,33.995H18a5.786,5.786,0,0,1,.218-1.586,6.388,6.388,0,0,1,.61

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	4.942805876241154
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXADQKDTcVEq0FyX4bVGEynbtwag8R+mkbtR1dI1zAmiadc:t4pb8WsQKvkB0wX4gEkbtLv8mkbtvdIe
MD5:	2D8F86059BE176833897099EE6DDEDEB
SHA1:	93A2E327027DEED53076E86BFA7D9EEBBF0CC4B9
SHA-256:	34D8DA073F47030EE94B99D84FBE68E3345BD8AAA37EA909FF2DA00238447486
SHA-512:	64D75B1F35180FF61F5BF11D21544454DF016D0854573D75D277FCB933CE845D1436BDC822445B78C627A1FF730B39FC34B72C27D45A39E237F2CCF0876FCA4E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.982,0A10.573,10.573,0,0,0,13.44,36Zm4.8-16.32A5.76,5.76,0,1,1,24,25.44,5.766,5.766,0,0,1,18.24,19.68Z" fill="#404040"/></svg>

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3757)
Category:	downloaded
Size (bytes):	4730
Entropy (8bit):	5.1271657856751744
Encrypted:	false
SSDEEP:	96:jPjDXOMS1WflPlZxUWRWKa1RwCEL3Aa1Rj1LjpVZG2:jP7dlZ3K2LtjLNVZG2
MD5:	04C75ABBF4A93DB4E3389D5866E22FC0
SHA1:	B8DA1F0A7DB01BE5E2C6106C79ECE0D2A17811AA
SHA-256:	F496EC64CAD15D3315586359DB1B34E9EA130EDF760C4BD78EABDC9706F460D5
SHA-512:	4BAA39EAAA5F8B358DC63A5CF04EDE531969FC494CD7E9998F26F760B01BF2A20E2D91AA59092C79BA6B0078E391EA3BC423ACD89C2068A5E1D54137C99A6159
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[36],{498:function(t,e,i

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113657
Entropy (8bit):	5.491599164368304
Encrypted:	false
SSDEEP:	1536:PKq+7j8gIRPY0+r5qnWiseKVeOIXYx15CevgbSvzNXteFN50Xu:bgDTMnWcdOswvgbmp8Fbiu
MD5:	5B0E3778C74235B06DA49808DD8DF90A
SHA1:	AD25897B0870B81568412F55B19898E406CC11B3
SHA-256:	7530B843A86F3155CE07CDA787A40DA87052664B09C22F3D4DB5E9238664DBE0
SHA-512:	EE1FB8F232311A45A10D2CC2A8F19B6C8F86ECE52688F909B0928C0F65AE0953EB2176D0ADEA893A371300D0E3FEE7AF046865D48FFC2812B3440D01ADAEB727
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{487:function(e,t,r

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113084
Entropy (8bit):	5.285180915082997
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmchSeC2Jzc6VUWG:xkNh06VUT
MD5:	D62B4EDEB512B07ABEF4688E27ECDDE3
SHA1:	981A7825DA5E29938AB6FE0CBFE2DB622F7B8333
SHA-256:	4B01A0A34CE8ED4BC8A8713BE0442D49DA6A756236B7B4424622CA3DEE820F41
SHA-512:	6E91B285BEA8566EBB7829F592744A6706CF6498E6D5DC1C5A0EBDD0A685D767AA215B275A88568B957E6BE824AEE60521ED1D77D92A697A3CE0F446ECDCDDB9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43896)
Category:	downloaded
Size (bytes):	223759
Entropy (8bit):	5.257227710687157
Encrypted:	false
SSDEEP:	3072:KO0fqoBmncEhWcjYcB6UpO2jrksurdPvsiQj:UmcKrpO7surRve
MD5:	5252837FFA272234E1CBF2D3D83EF32C
SHA1:	CAA4E48A54A2B1CA09327E42F24F6031FDF21CDA
SHA-256:	DF2E852C347ECF82F70A0C8A4B91713FBB0914D58F2CBAB01316BFE646ABEE7C
SHA-512:	523C59BC0D2861B8F35A8D46E52C935A26001B2A2EF8197F7F6DBFC38E8F0D51A5D3753FD4F0DCCD68DA08505D3313AFCFA7CB236E0363EDA4856D41F05A233A
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{528:function(e,t,r)

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	190152
Entropy (8bit):	5.348678574819375
Encrypted:	false
SSDEEP:	3072:0+mTq9mTuZEOHEXp6WXWkYVlMBMwMlJNbdffVv6GhL+rUWxa:STekBWkYVdLlJNbr6m+rUGa
MD5:	4877EFC88055D60953886EC55B04DE34
SHA1:	2341B026A3E2A3B01AFA1A39D1706840D75E09B3
SHA-256:	8405362EB8F09DF13AE244DE155B51B1577274673D9728B6C81CD0278A63C8B0
SHA-512:	625844EDC37594D5C2F7622BD1B59278BF68ABB2FA22476C56826433C961C7B1924858A7588F8B6284D3C5AC8738ECB895EEC949DE18667A98C04A59CB03DAC0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	(window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b})),n.d(t,"TraceLevel",(function(){return r.d})),n.d(t,"AppInsightsCore",(function(){return i.a})),n.d(t,"BaseCore",(function(){return d})),n.d(t,"_ExtendedInternalMessageId",(function(){return r.f})),n.d(t,"EventPropertyType",(function(){return r.c})),n.d(t,"ESPromise",(function(){return g})),n.d(t,"ESPromiseScheduler",(function(){return C})),n.d(t,"ValueSanitizer",(function(){return I})),n.d(t,"NotificationManager",(function(){return E.a})),n.d(t,"BaseTelemetryPlugin",(function(){return S.a})),n.d(t,"ProcessTelemetryContext",(function(){return N.a})),n.d(t,"MinChannelPriorty",(function(){return w.a})),n.d(t,"EventsDiscardedReason",(function(){return P.a})),n.d(t,"DiagnosticLogger",(function(){return c.a})),n.d(t,"LoggingSeverity",(fun

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32153)
Category:	downloaded
Size (bytes):	55021
Entropy (8bit):	5.379712355793089
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3/ym+d/Px2g+0wtwGixnqTPRUbx3VDg/Mf+k:ABrkF7IyJvym+d/Pog+0wtwGiUig/MH
MD5:	A4456E5516CD9F3FB972823F6F826D6F
SHA1:	BEA6BBBAB63D6782E6FFD8880AF5E4CED70EE05B
SHA-256:	30FF8EF06932EFA5BA690BF160EEA1FC719D3F2A3D756BD3A9B4C837F7220B0C
SHA-512:	10265914D9BC16A56263B766E5C47703479D5C72C7FDD9DD5AB28F39133CCAC054F8F29CB22EDCD7E476E8761E75E6AB7497B8A2296F35530F6A791DB84D50F6
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1378
Entropy (8bit):	4.316299265862323
Encrypted:	false
SSDEEP:	24:t4pb8m3NquUzOqnXmZcU4BC+CaAIA5cAEisx+fUu3fLkY:zoNLUzOeXfU4BJxA5fXUWx
MD5:	F83EBFF69A4A1685E4DC9650CDAB8886
SHA1:	FD21658884945B00157557AE06803DAA6A9F10C6
SHA-256:	7B1669DA90261CDB1483950BB480AD96875F84B09BC48D1055303CE94821BF64
SHA-512:	AA21A03AB84FA0129AFCED8A56E499757A6625C9B24A81EE08F5775B9B542F71BA67EAE817D633CB4E4533A8CF6A0DDA80BD7EE8A90E95AB3D39A77F88073F23
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.494,0,0,1,32.5,40h-17A1.494,1.494,0,0,1,14,38.5v-23A1.494,1.494,0,0,1,15.5,14h4.873l-3-6h2.25l3,6h2.751l3-6h2.25l-3,6ZM32,16H23.623l1.266,2.546A1.13,1.13,0,0,1,25,19a1.009,1.009,0,0,1-1,1,1,1,0,0,1-.534-.149.974.974,0,0,1-.368-.4L21.375,16H16v22H32ZM20,26a3.92,3.92,0,0,1,.312-1.555,4.023,4.023,0,0,1,2.133-2.133,4.041,4.041,0,0,1,3.109,0,4.014,4.014,0,0,1,2.133,2.133A3.886,3.886,0,0,1,28,26a3.937,3.937,0,0,1-.288,1.485,3.987,3.987,0,0,1-.8,1.266A5.7,5.7,0,0,1,28.2,29.7a5.907,5.907,0,0,1,.968,1.251,6.388,6.388,0,0,1,.616,1.461A5.786,5.786,0,0,1,30,34H28a3.877,3.877,0,0,0-.312-1.554,4,4,0,0,0-2.133-2.133,4.011,4.011,0,0,0-3.109,0,4.023,4.023,0,0,0-2.133,2.133A3.912,3.912,0,0,0,20,33.995H18a5.786,5.786,0,0,1,.218-1.586,6.388,6.388,0,0,1,.61

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 15:09:14.319848061 CET	49675	443	192.168.2.4	173.222.162.32
Mar 28, 2024 15:09:14.601093054 CET	49678	443	192.168.2.4	104.46.162.224
Mar 28, 2024 15:09:23.927782059 CET	49675	443	192.168.2.4	173.222.162.32
Mar 28, 2024 15:09:24.996634960 CET	49734	80	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:24.997026920 CET	49735	80	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.091139078 CET	80	49734	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.091274023 CET	49734	80	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.091550112 CET	49734	80	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.091670036 CET	80	49735	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.091727972 CET	49735	80	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.185810089 CET	80	49734	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.287237883 CET	80	49734	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.287281036 CET	80	49734	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.287357092 CET	49734	80	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.426186085 CET	49737	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.426227093 CET	443	49737	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.426614046 CET	49737	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.426939964 CET	49737	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.426955938 CET	443	49737	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.724582911 CET	443	49737	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.724891901 CET	49737	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.724915981 CET	443	49737	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.726061106 CET	443	49737	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.726135015 CET	49737	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.727221012 CET	49737	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.727283001 CET	443	49737	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.727395058 CET	49737	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.727401018 CET	443	49737	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.779572010 CET	49737	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.893335104 CET	443	49737	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.893425941 CET	443	49737	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.893484116 CET	49737	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.919553041 CET	49737	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.919576883 CET	443	49737	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.923728943 CET	49739	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.923773050 CET	443	49739	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:25.923860073 CET	49739	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.924078941 CET	49739	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:25.924092054 CET	443	49739	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.219511032 CET	443	49739	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.219963074 CET	49739	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.219993114 CET	443	49739	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.220374107 CET	443	49739	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.221179962 CET	49739	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.221240044 CET	443	49739	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.221854925 CET	49739	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.268240929 CET	443	49739	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.370646954 CET	443	49739	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.370748997 CET	443	49739	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.370801926 CET	49739	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.372755051 CET	49739	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.372775078 CET	443	49739	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.376951933 CET	49740	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.376986027 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.377046108 CET	49740	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.377641916 CET	49740	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.377655983 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.673130989 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.673397064 CET	49740	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.673414946 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.673794985 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.675226927 CET	49740	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.675299883 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.675827026 CET	49740	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.720237970 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.869801044 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.869823933 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.869838953 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.869878054 CET	49740	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.869898081 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.869935036 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:26.869935036 CET	49740	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.869973898 CET	49740	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.883661985 CET	49740	443	192.168.2.4	13.107.136.10
Mar 28, 2024 15:09:26.883677959 CET	443	49740	13.107.136.10	192.168.2.4
Mar 28, 2024 15:09:27.589770079 CET	49742	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:09:27.589802980 CET	443	49742	142.251.167.99	192.168.2.4
Mar 28, 2024 15:09:27.589871883 CET	49742	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:09:27.590295076 CET	49742	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:09:27.590306044 CET	443	49742	142.251.167.99	192.168.2.4
Mar 28, 2024 15:09:27.856661081 CET	443	49742	142.251.167.99	192.168.2.4
Mar 28, 2024 15:09:27.857439995 CET	49742	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:09:27.857464075 CET	443	49742	142.251.167.99	192.168.2.4
Mar 28, 2024 15:09:27.858496904 CET	443	49742	142.251.167.99	192.168.2.4
Mar 28, 2024 15:09:27.858701944 CET	49742	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:09:27.860008001 CET	49742	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:09:27.860075951 CET	443	49742	142.251.167.99	192.168.2.4
Mar 28, 2024 15:09:27.900638103 CET	49742	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:09:27.900651932 CET	443	49742	142.251.167.99	192.168.2.4
Mar 28, 2024 15:09:27.940339088 CET	49743	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:27.940381050 CET	443	49743	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:27.940512896 CET	49743	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:27.942533970 CET	49743	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:27.942550898 CET	443	49743	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:27.944658995 CET	49742	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:09:28.310894012 CET	443	49743	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:28.311197996 CET	49743	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:28.316713095 CET	49743	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:28.316734076 CET	443	49743	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:28.317025900 CET	443	49743	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:28.367228031 CET	49743	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:28.406209946 CET	49743	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:28.452229977 CET	443	49743	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:28.671401978 CET	443	49743	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:28.671479940 CET	443	49743	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:28.671533108 CET	49743	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:28.671643019 CET	49743	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:28.671659946 CET	443	49743	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:28.671674013 CET	49743	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:28.671679974 CET	443	49743	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:28.713385105 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:28.713422060 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:28.713490963 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:28.713929892 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:28.713943958 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:29.070323944 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:29.070390940 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:29.144063950 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:29.144087076 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:29.144448042 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:29.174690008 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:29.220237017 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:29.419538975 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:29.419619083 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:29.419665098 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:29.424627066 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:29.424638033 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:29.424653053 CET	49745	443	192.168.2.4	23.221.242.90
Mar 28, 2024 15:09:29.424657106 CET	443	49745	23.221.242.90	192.168.2.4
Mar 28, 2024 15:09:30.706994057 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:30.707035065 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:30.707099915 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:30.707745075 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:30.707777977 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:30.707861900 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:30.708242893 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:30.708275080 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:30.708329916 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:30.714960098 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:30.714977980 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:30.715311050 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:30.715327024 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:30.715724945 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:30.715753078 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.081281900 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.081720114 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.081762075 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.123429060 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.128669977 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.128673077 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.130750895 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.130763054 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.131127119 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.131136894 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.131565094 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.131577015 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.132061958 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.132133961 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.132355928 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.132422924 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.132971048 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.133035898 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.133486986 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.133553028 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.133671045 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.133780956 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.134658098 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.134741068 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.135250092 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.135257959 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.135338068 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.135349989 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.135447025 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.135452986 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.178126097 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.178128004 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.178200960 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.232497931 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.233597040 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.233604908 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.233643055 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.233661890 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.233665943 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.233675957 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.233700037 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.233716965 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.233716965 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.233757973 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.234517097 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.234535933 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.234587908 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.234594107 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.234925985 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.235774994 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.235790968 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.235821962 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.235826969 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.235835075 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.235847950 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.235871077 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.235887051 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.235894918 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.235928059 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.236908913 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.236927032 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.236990929 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.236999035 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.237040043 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.237330914 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.238348961 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.238358021 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.238373995 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.238382101 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.238384962 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.238401890 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.238425016 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.238462925 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.238485098 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.239420891 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.239444971 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.239494085 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.239500046 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.239564896 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.288708925 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.288712978 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.288726091 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.327286959 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.327334881 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.327347040 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.327362061 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.327363968 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.327375889 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.327421904 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.327817917 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.327847004 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.327855110 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.327877045 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.327882051 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.327889919 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.327903986 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.327935934 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.328442097 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.328469038 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.328521967 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.328527927 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.329332113 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.329355955 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.329395056 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.329422951 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.329425097 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.329451084 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.329464912 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.329498053 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.329734087 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.329751968 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.329807997 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.329816103 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.329855919 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.330360889 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.330388069 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.330421925 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.330426931 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.330460072 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.330487013 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.330491066 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.330977917 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.330998898 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.331033945 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.331042051 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.331073999 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.331653118 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.331680059 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.331731081 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.331753016 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.331768036 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.331792116 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.331975937 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.332027912 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.332032919 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.332070112 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.332071066 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.332109928 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.343059063 CET	49749	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.343077898 CET	443	49749	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.374687910 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.374727964 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.374767065 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.374783993 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.374816895 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.383887053 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.415661097 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.422002077 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.422010899 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.422034979 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.422070026 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.422075987 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.422092915 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.422120094 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.422126055 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.422167063 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.423839092 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.423862934 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.423917055 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.423932076 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.423959017 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.423968077 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.424571991 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.424590111 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.424627066 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.424633980 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.424659967 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.424681902 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.424998999 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.425014019 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.425064087 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.425071001 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.425110102 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.425465107 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.425502062 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.425529003 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.425534964 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.425570965 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.425579071 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.425749063 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.425781012 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.425806999 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.425813913 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.425844908 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.425863028 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.425868988 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.426116943 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.426151991 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.426176071 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.426183939 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.426218033 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.426414967 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.426430941 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.426482916 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.426491022 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.426769972 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.426815987 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.426831007 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.426836967 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.426871061 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.446899891 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.453444004 CET	49751	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.453461885 CET	443	49751	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.517267942 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.517292976 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.517373085 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.517390966 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.517437935 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.518836975 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.518855095 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.518927097 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.518934011 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.518974066 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.521687031 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.521708012 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.521759033 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.521765947 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.521828890 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.522201061 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.522250891 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.522264004 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.522269964 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.522300005 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.522320986 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.522793055 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.522810936 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.522855043 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.522861958 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.522912025 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.523463011 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.523483992 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.523525000 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.523535013 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.523565054 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.523586988 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.523968935 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.523986101 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.524024963 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.524032116 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.524055958 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.524079084 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.524405956 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.524422884 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.524480104 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.524487019 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.524527073 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.525459051 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.525480032 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.525517941 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.525523901 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.525543928 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.525563955 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.526138067 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.526155949 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.526199102 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.526204109 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.526241064 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.526268005 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.526890993 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.526909113 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.526949883 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.526956081 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.526988029 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.527009964 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.527544975 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.527564049 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.527610064 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.527616024 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.527663946 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.528438091 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.528455973 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.528484106 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.528505087 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.528512955 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.528527975 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.528599977 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.528645039 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.531291008 CET	49750	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.531303883 CET	443	49750	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.593658924 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.593688965 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.593736887 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.594415903 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.594430923 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.884424925 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.884840965 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.884852886 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.885912895 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.885972977 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.887383938 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.887478113 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.887674093 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:31.887687922 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:31.930926085 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.073080063 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.074093103 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.074100971 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.074111938 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.074136972 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.074166059 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.074182987 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.074204922 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.074227095 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.074232101 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.074259996 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.074830055 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.074856043 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.074878931 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.074882984 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.074923038 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.167162895 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.167186975 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.167244911 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.167258978 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.167300940 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.167797089 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.167813063 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.167889118 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.167893887 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.167954922 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.168286085 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.168302059 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.168356895 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.168360949 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.168404102 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.168762922 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.168781996 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.168824911 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.168828964 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.168859959 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.168881893 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.263679028 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.263715029 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.263796091 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.263806105 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.263839960 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.263851881 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.264554977 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.264575005 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.264631033 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.264636993 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.264678955 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.265343904 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.265368938 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.265408039 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.265413046 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.265455008 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.266073942 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.266098022 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.266136885 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.266143084 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.266170025 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.266191959 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.266864061 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.266879082 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.266942978 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.266947031 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.266982079 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.267335892 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.267374992 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.267390966 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.267395020 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.267412901 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.267432928 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.267463923 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.268486977 CET	49755	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.268501043 CET	443	49755	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.325958967 CET	49756	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.326004028 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.326073885 CET	49756	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.326376915 CET	49756	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.326391935 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.356120110 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.356159925 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.356394053 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.357280970 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.357305050 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.615684032 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.618968010 CET	49756	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.618994951 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.619366884 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.623300076 CET	49756	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.623374939 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.623506069 CET	49756	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.646622896 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.648050070 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.648076057 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.648471117 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.648890018 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.648951054 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.649194956 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.668234110 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.696233988 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.804924011 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.805780888 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.805802107 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.805888891 CET	49756	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.805888891 CET	49756	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.805922985 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.805953979 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.805983067 CET	49756	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.806039095 CET	49756	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.806317091 CET	49756	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.806334972 CET	443	49756	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.837596893 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.837841988 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.837858915 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.837980986 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.838000059 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.838047981 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.838088989 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.838105917 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.838186979 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.838196039 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.881242037 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.923757076 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.923794031 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.923877001 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.926523924 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.926539898 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.931859016 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.931880951 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.931967020 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.931967020 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.931991100 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.932079077 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.932257891 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.932275057 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.932351112 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.932359934 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.932483912 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.932846069 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.932873964 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.932950974 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.932950974 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.932957888 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.933161020 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.933182955 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.933187962 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.933195114 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:32.933212996 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:32.933267117 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.026874065 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.026909113 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.026973009 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.027012110 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.027029037 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.027627945 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.027669907 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.027920008 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.027932882 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.028023958 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.028034925 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.028211117 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.028863907 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.028903961 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.028930902 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.028942108 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.029269934 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.029326916 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.029362917 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.029433966 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.029433966 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.029439926 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.029759884 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.029793024 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.029819965 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.029827118 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.029850006 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.030149937 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.030174017 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.030203104 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.030210972 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.030236959 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.069099903 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.069128990 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.069221020 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.069226027 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.069221020 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.069634914 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.069634914 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.113595009 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.113595963 CET	49759	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.113637924 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.113645077 CET	443	49759	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.114006996 CET	49759	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.114007950 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.114403009 CET	49759	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.114403009 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.114413977 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.114418030 CET	443	49759	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.143235922 CET	49761	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.143277884 CET	443	49761	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.143601894 CET	49761	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.143601894 CET	49761	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.143632889 CET	443	49761	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.218012094 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.218297958 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.218327045 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.219692945 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.219836950 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.221689939 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.221759081 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.225044966 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.268100023 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.268121958 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.315172911 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.378519058 CET	49757	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.378554106 CET	443	49757	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.414254904 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.414500952 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.414510012 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.414546013 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.414557934 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.414568901 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.414588928 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.414612055 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.414653063 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.414676905 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.414716959 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.416531086 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.438961029 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.441339016 CET	443	49759	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.442413092 CET	443	49761	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.465333939 CET	49761	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.465357065 CET	443	49761	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.465859890 CET	49759	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.465886116 CET	443	49759	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.466510057 CET	443	49761	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.466547012 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.466558933 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.466584921 CET	49761	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.466834068 CET	443	49759	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.466974020 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.468579054 CET	49761	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.468652010 CET	443	49761	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.468677998 CET	49759	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.468759060 CET	443	49759	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.474509001 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.474586964 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.478522062 CET	49761	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.478529930 CET	443	49761	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.479593039 CET	49759	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.481287956 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.481302977 CET	49763	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.481328011 CET	443	49763	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.482291937 CET	49758	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.482316017 CET	443	49758	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.482367992 CET	49763	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.483028889 CET	49763	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.483051062 CET	443	49763	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.524239063 CET	443	49759	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.524276018 CET	49761	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.528234005 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.606045961 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.606270075 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.606313944 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.606333971 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.606378078 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.606410027 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.606437922 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.606512070 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.606651068 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.606673956 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.606734037 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.606734037 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.606741905 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.606848001 CET	443	49759	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.606900930 CET	443	49759	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.606982946 CET	443	49759	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.607007980 CET	49759	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.614522934 CET	49759	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.630579948 CET	443	49761	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.630640030 CET	443	49761	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.630702972 CET	443	49761	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.630752087 CET	49761	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.637393951 CET	49759	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.637418985 CET	443	49759	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.644859076 CET	49761	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.644876957 CET	443	49761	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.649249077 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.700377941 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.700409889 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.700445890 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.700462103 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.700498104 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.700510979 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.700819016 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.700849056 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.700872898 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.700879097 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.700912952 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.700928926 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.701174021 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.701194048 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.701225996 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.701230049 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.701256990 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.701276064 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.742487907 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.742506981 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.742548943 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.742557049 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.742597103 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.772842884 CET	443	49763	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.773163080 CET	49763	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.773183107 CET	443	49763	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.773566008 CET	443	49763	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.784687996 CET	49763	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.784810066 CET	443	49763	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.785063028 CET	49763	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.794687033 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.794733047 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.794773102 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.794784069 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.794811964 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.794826984 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.795681000 CET	49760	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.795696974 CET	443	49760	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.832233906 CET	443	49763	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.961996078 CET	443	49763	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.962052107 CET	443	49763	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.962132931 CET	443	49763	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:33.962166071 CET	49763	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:33.962196112 CET	49763	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.125400066 CET	49763	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.125428915 CET	443	49763	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:34.483556032 CET	49764	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.483602047 CET	443	49764	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:34.483716965 CET	49764	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.484051943 CET	49764	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.484071970 CET	443	49764	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:34.485595942 CET	49765	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.485621929 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:34.485691071 CET	49765	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.485876083 CET	49765	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.485887051 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:34.487910986 CET	49766	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.487941027 CET	443	49766	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:34.488104105 CET	49766	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.488409996 CET	49766	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.488420963 CET	443	49766	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:34.795905113 CET	443	49764	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:34.803750992 CET	443	49766	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:34.803774118 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:34.850096941 CET	49766	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.850096941 CET	49765	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:34.850099087 CET	49764	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.314557076 CET	49765	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.314587116 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.314661026 CET	49766	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.314693928 CET	443	49766	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.314954996 CET	49764	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.314980030 CET	443	49764	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.315170050 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.315464020 CET	443	49764	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.315829992 CET	49765	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.315907001 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.316046000 CET	443	49766	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.316102982 CET	49766	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.316427946 CET	49764	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.316490889 CET	443	49764	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.316956043 CET	49766	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.317022085 CET	443	49766	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.317230940 CET	49765	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.317334890 CET	49764	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.317378044 CET	49766	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.317385912 CET	443	49766	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.364226103 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.364234924 CET	443	49764	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.412494898 CET	443	49766	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.412545919 CET	49766	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.412565947 CET	443	49766	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.412576914 CET	443	49766	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.412620068 CET	49766	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.413069010 CET	443	49764	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.413110971 CET	443	49764	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.413165092 CET	443	49764	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.413166046 CET	49764	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.413170099 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.413207054 CET	49764	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.413211107 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.413254976 CET	49765	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.413278103 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.413295984 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.413320065 CET	49765	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.458734035 CET	49764	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.458754063 CET	443	49764	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.459422112 CET	49766	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.459438086 CET	443	49766	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:36.461029053 CET	49765	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:36.461041927 CET	443	49765	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:37.870940924 CET	443	49742	142.251.167.99	192.168.2.4
Mar 28, 2024 15:09:37.871011972 CET	443	49742	142.251.167.99	192.168.2.4
Mar 28, 2024 15:09:37.871088982 CET	49742	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:09:38.578197956 CET	49742	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:09:38.578211069 CET	443	49742	142.251.167.99	192.168.2.4
Mar 28, 2024 15:09:45.012521982 CET	49775	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.012530088 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.012717009 CET	49775	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.012907028 CET	49775	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.012922049 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.019061089 CET	49776	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.019108057 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.019161940 CET	49776	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.019520044 CET	49776	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.019534111 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.024173021 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.024235964 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.024288893 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.024550915 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.024566889 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.302608013 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.303051949 CET	49775	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.303070068 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.303443909 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.304472923 CET	49775	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.304565907 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.304748058 CET	49775	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.314094067 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.314363003 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.314392090 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.315794945 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.315870047 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.316365957 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.316466093 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.316520929 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.319257021 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.319458008 CET	49776	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.319482088 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.328676939 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.329217911 CET	49776	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.329432964 CET	49776	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.329442978 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.332187891 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.352231026 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.360240936 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.374366045 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.374403000 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.375235081 CET	49776	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.422297001 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.492650032 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.492748022 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.492805958 CET	49775	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.492821932 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.492839098 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.492891073 CET	49775	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.495290995 CET	49775	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.495307922 CET	443	49775	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.503865004 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.504021883 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.504209042 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.504235983 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.504277945 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.504792929 CET	49777	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.504812002 CET	443	49777	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.509263992 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.509319067 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.509388924 CET	49776	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.509413004 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.509427071 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.509462118 CET	49776	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.509495974 CET	49776	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.512667894 CET	49776	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.512681007 CET	443	49776	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.517116070 CET	49778	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.517149925 CET	443	49778	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.517349005 CET	49778	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.517668962 CET	49779	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.517703056 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.517756939 CET	49779	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.518112898 CET	49778	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.518121004 CET	443	49778	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.518431902 CET	49779	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.518445969 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.786144018 CET	49780	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.786190033 CET	443	49780	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.786277056 CET	49780	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.787034988 CET	49781	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.787079096 CET	443	49781	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.787148952 CET	49781	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.787364960 CET	49780	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.787381887 CET	443	49780	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.787798882 CET	49781	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.787813902 CET	443	49781	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.829313993 CET	443	49778	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.829593897 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.829664946 CET	49778	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.829699039 CET	443	49778	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.829781055 CET	49779	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.829794884 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.830074072 CET	443	49778	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.830149889 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.830552101 CET	49778	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.830634117 CET	443	49778	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.830893040 CET	49779	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.830960989 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.831100941 CET	49778	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.831187010 CET	49779	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:45.872242928 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:45.872245073 CET	443	49778	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.007100105 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.007174015 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.007221937 CET	49779	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.007246971 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.007278919 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.007289886 CET	49779	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.007323027 CET	49779	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.008392096 CET	443	49778	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.008446932 CET	443	49778	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.008503914 CET	49778	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.008507967 CET	443	49778	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.008635998 CET	49778	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.010812998 CET	49778	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.010844946 CET	443	49778	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.011131048 CET	49779	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.011147022 CET	443	49779	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.091842890 CET	443	49781	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.092211962 CET	49781	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.092246056 CET	443	49781	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.092876911 CET	443	49781	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.093230963 CET	49781	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.093285084 CET	443	49781	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.093391895 CET	49781	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.093569040 CET	443	49780	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.093749046 CET	49780	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.093764067 CET	443	49780	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.094181061 CET	443	49780	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.094507933 CET	49780	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.094583988 CET	443	49780	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.094589949 CET	49780	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.136241913 CET	443	49781	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.136243105 CET	443	49780	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.147371054 CET	49780	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.278795958 CET	443	49781	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.278940916 CET	443	49781	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.278996944 CET	49781	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.279788017 CET	49781	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.279817104 CET	443	49781	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.282572031 CET	443	49780	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.282710075 CET	443	49780	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.282762051 CET	49780	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.284212112 CET	49780	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.284228086 CET	443	49780	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.289052963 CET	49782	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.289086103 CET	443	49782	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.289154053 CET	49782	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.289354086 CET	49782	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.289367914 CET	443	49782	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.290848970 CET	49783	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.290877104 CET	443	49783	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.291040897 CET	49783	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.291224957 CET	49783	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.291235924 CET	443	49783	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.580472946 CET	443	49782	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.580787897 CET	49782	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.580813885 CET	443	49782	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.581155062 CET	443	49782	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.581568003 CET	49782	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.581653118 CET	443	49782	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.581707001 CET	49782	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.584331989 CET	443	49783	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.584579945 CET	49783	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.584593058 CET	443	49783	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.584995031 CET	443	49783	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.585412979 CET	49783	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.585473061 CET	443	49783	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.585581064 CET	49783	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.624237061 CET	443	49782	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.628238916 CET	443	49783	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.777343035 CET	443	49782	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.777462006 CET	443	49782	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.777513981 CET	443	49783	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.777626991 CET	443	49783	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.777700901 CET	49783	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.777704954 CET	49782	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.779896021 CET	49783	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.779910088 CET	49782	443	192.168.2.4	152.199.4.44
Mar 28, 2024 15:09:46.779911995 CET	443	49783	152.199.4.44	192.168.2.4
Mar 28, 2024 15:09:46.779927015 CET	443	49782	152.199.4.44	192.168.2.4
Mar 28, 2024 15:10:10.099813938 CET	49735	80	192.168.2.4	13.107.136.10
Mar 28, 2024 15:10:10.194308043 CET	80	49735	13.107.136.10	192.168.2.4
Mar 28, 2024 15:10:10.288619995 CET	49734	80	192.168.2.4	13.107.136.10
Mar 28, 2024 15:10:10.383291960 CET	80	49734	13.107.136.10	192.168.2.4
Mar 28, 2024 15:10:25.337074995 CET	49735	80	192.168.2.4	13.107.136.10
Mar 28, 2024 15:10:25.431809902 CET	80	49735	13.107.136.10	192.168.2.4
Mar 28, 2024 15:10:25.431835890 CET	80	49735	13.107.136.10	192.168.2.4
Mar 28, 2024 15:10:27.541752100 CET	49789	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:10:27.541801929 CET	443	49789	142.251.167.99	192.168.2.4
Mar 28, 2024 15:10:27.541873932 CET	49789	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:10:27.542234898 CET	49789	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:10:27.542247057 CET	443	49789	142.251.167.99	192.168.2.4
Mar 28, 2024 15:10:27.814457893 CET	443	49789	142.251.167.99	192.168.2.4
Mar 28, 2024 15:10:27.814774990 CET	49789	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:10:27.814800978 CET	443	49789	142.251.167.99	192.168.2.4
Mar 28, 2024 15:10:27.815115929 CET	443	49789	142.251.167.99	192.168.2.4
Mar 28, 2024 15:10:27.815504074 CET	49789	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:10:27.815558910 CET	443	49789	142.251.167.99	192.168.2.4
Mar 28, 2024 15:10:27.865997076 CET	49789	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:10:31.718842983 CET	80	49734	13.107.136.10	192.168.2.4
Mar 28, 2024 15:10:37.832166910 CET	443	49789	142.251.167.99	192.168.2.4
Mar 28, 2024 15:10:37.832247019 CET	443	49789	142.251.167.99	192.168.2.4
Mar 28, 2024 15:10:37.834252119 CET	49789	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:10:39.561861992 CET	49789	443	192.168.2.4	142.251.167.99
Mar 28, 2024 15:10:39.561901093 CET	443	49789	142.251.167.99	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 15:09:23.085036993 CET	53	50865	1.1.1.1	192.168.2.4
Mar 28, 2024 15:09:23.087404013 CET	53	56552	1.1.1.1	192.168.2.4
Mar 28, 2024 15:09:23.903340101 CET	53	55533	1.1.1.1	192.168.2.4
Mar 28, 2024 15:09:24.874447107 CET	60676	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:24.874598026 CET	60891	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:25.289947987 CET	51171	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:25.290088892 CET	50348	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:26.885781050 CET	54668	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:26.885940075 CET	64467	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:27.491492033 CET	57298	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:27.491944075 CET	64183	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:27.586426973 CET	53	57298	1.1.1.1	192.168.2.4
Mar 28, 2024 15:09:27.588113070 CET	53	64183	1.1.1.1	192.168.2.4
Mar 28, 2024 15:09:30.575292110 CET	54855	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:30.575505018 CET	51255	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:30.607891083 CET	50983	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:30.611116886 CET	51159	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:30.703722954 CET	53	50983	1.1.1.1	192.168.2.4
Mar 28, 2024 15:09:30.706063032 CET	53	51159	1.1.1.1	192.168.2.4
Mar 28, 2024 15:09:32.811813116 CET	57049	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:32.811813116 CET	60815	53	192.168.2.4	1.1.1.1
Mar 28, 2024 15:09:32.907632113 CET	53	57049	1.1.1.1	192.168.2.4
Mar 28, 2024 15:09:32.910113096 CET	53	60815	1.1.1.1	192.168.2.4
Mar 28, 2024 15:09:33.301376104 CET	53	62594	1.1.1.1	192.168.2.4
Mar 28, 2024 15:09:42.363779068 CET	53	51486	1.1.1.1	192.168.2.4
Mar 28, 2024 15:09:45.129498959 CET	138	138	192.168.2.4	192.168.2.255
Mar 28, 2024 15:10:01.363976955 CET	53	61158	1.1.1.1	192.168.2.4
Mar 28, 2024 15:10:22.925832033 CET	53	54645	1.1.1.1	192.168.2.4
Mar 28, 2024 15:10:23.918165922 CET	53	63309	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 28, 2024 15:09:24.874447107 CET	192.168.2.4	1.1.1.1	0xdee4	Standard query (0)	cnytechnologies-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:24.874598026 CET	192.168.2.4	1.1.1.1	0xec11	Standard query (0)	cnytechnologies-my.sharepoint.com	65	IN (0x0001)	false
Mar 28, 2024 15:09:25.289947987 CET	192.168.2.4	1.1.1.1	0xc1b6	Standard query (0)	cnytechnologies-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:25.290088892 CET	192.168.2.4	1.1.1.1	0xedfc	Standard query (0)	cnytechnologies-my.sharepoint.com	65	IN (0x0001)	false
Mar 28, 2024 15:09:26.885781050 CET	192.168.2.4	1.1.1.1	0xef8f	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:26.885940075 CET	192.168.2.4	1.1.1.1	0x5eaa	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Mar 28, 2024 15:09:27.491492033 CET	192.168.2.4	1.1.1.1	0x24ce	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:27.491944075 CET	192.168.2.4	1.1.1.1	0x2e0e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 15:09:30.575292110 CET	192.168.2.4	1.1.1.1	0x4d62	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:30.575505018 CET	192.168.2.4	1.1.1.1	0x88df	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Mar 28, 2024 15:09:30.607891083 CET	192.168.2.4	1.1.1.1	0x37a1	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:30.611116886 CET	192.168.2.4	1.1.1.1	0x66db	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Mar 28, 2024 15:09:32.811813116 CET	192.168.2.4	1.1.1.1	0x3320	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:32.811813116 CET	192.168.2.4	1.1.1.1	0xd8c	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 28, 2024 15:09:24.991812944 CET	1.1.1.1	192.168.2.4	0xec11	No error (0)	cnytechnologies-my.sharepoint.com	cnytechnologies.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:24.991812944 CET	1.1.1.1	192.168.2.4	0xec11	No error (0)	cnytechnologies.sharepoint.com	2779-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:24.991812944 CET	1.1.1.1	192.168.2.4	0xec11	No error (0)	2779-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	191908-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:24.991812944 CET	1.1.1.1	192.168.2.4	0xec11	No error (0)	191908-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	191908-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:24.995929003 CET	1.1.1.1	192.168.2.4	0xdee4	No error (0)	cnytechnologies-my.sharepoint.com	cnytechnologies.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:24.995929003 CET	1.1.1.1	192.168.2.4	0xdee4	No error (0)	cnytechnologies.sharepoint.com	2779-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:24.995929003 CET	1.1.1.1	192.168.2.4	0xdee4	No error (0)	2779-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	191908-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:24.995929003 CET	1.1.1.1	192.168.2.4	0xdee4	No error (0)	191908-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	191908-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:24.995929003 CET	1.1.1.1	192.168.2.4	0xdee4	No error (0)	191908-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:24.995929003 CET	1.1.1.1	192.168.2.4	0xdee4	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:24.995929003 CET	1.1.1.1	192.168.2.4	0xdee4	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:25.411530972 CET	1.1.1.1	192.168.2.4	0xedfc	No error (0)	cnytechnologies-my.sharepoint.com	cnytechnologies.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:25.411530972 CET	1.1.1.1	192.168.2.4	0xedfc	No error (0)	cnytechnologies.sharepoint.com	2779-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:25.411530972 CET	1.1.1.1	192.168.2.4	0xedfc	No error (0)	2779-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	191908-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:25.411530972 CET	1.1.1.1	192.168.2.4	0xedfc	No error (0)	191908-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	191908-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:25.425168037 CET	1.1.1.1	192.168.2.4	0xc1b6	No error (0)	cnytechnologies-my.sharepoint.com	cnytechnologies.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:25.425168037 CET	1.1.1.1	192.168.2.4	0xc1b6	No error (0)	cnytechnologies.sharepoint.com	2779-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:25.425168037 CET	1.1.1.1	192.168.2.4	0xc1b6	No error (0)	2779-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	191908-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:25.425168037 CET	1.1.1.1	192.168.2.4	0xc1b6	No error (0)	191908-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	191908-ipv4v6e.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:25.425168037 CET	1.1.1.1	192.168.2.4	0xc1b6	No error (0)	191908-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:25.425168037 CET	1.1.1.1	192.168.2.4	0xc1b6	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:25.425168037 CET	1.1.1.1	192.168.2.4	0xc1b6	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:26.982023001 CET	1.1.1.1	192.168.2.4	0x5eaa	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:26.999715090 CET	1.1.1.1	192.168.2.4	0xef8f	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:27.586426973 CET	1.1.1.1	192.168.2.4	0x24ce	No error (0)	www.google.com		142.251.167.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:27.586426973 CET	1.1.1.1	192.168.2.4	0x24ce	No error (0)	www.google.com		142.251.167.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:27.586426973 CET	1.1.1.1	192.168.2.4	0x24ce	No error (0)	www.google.com		142.251.167.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:27.586426973 CET	1.1.1.1	192.168.2.4	0x24ce	No error (0)	www.google.com		142.251.167.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:27.586426973 CET	1.1.1.1	192.168.2.4	0x24ce	No error (0)	www.google.com		142.251.167.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:27.586426973 CET	1.1.1.1	192.168.2.4	0x24ce	No error (0)	www.google.com		142.251.167.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:27.588113070 CET	1.1.1.1	192.168.2.4	0x2e0e	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 15:09:28.141669035 CET	1.1.1.1	192.168.2.4	0xf337	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	global-entry-afdthirdparty-fallback-first.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:30.671298981 CET	1.1.1.1	192.168.2.4	0x4d62	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:30.672307014 CET	1.1.1.1	192.168.2.4	0x88df	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:30.703722954 CET	1.1.1.1	192.168.2.4	0x37a1	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:30.703722954 CET	1.1.1.1	192.168.2.4	0x37a1	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:30.706063032 CET	1.1.1.1	192.168.2.4	0x66db	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:32.907632113 CET	1.1.1.1	192.168.2.4	0x3320	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:32.907632113 CET	1.1.1.1	192.168.2.4	0x3320	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:32.910113096 CET	1.1.1.1	192.168.2.4	0xd8c	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:39.768578053 CET	1.1.1.1	192.168.2.4	0xadfe	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:39.768578053 CET	1.1.1.1	192.168.2.4	0xadfe	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:09:52.884763956 CET	1.1.1.1	192.168.2.4	0xe661	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:09:52.884763956 CET	1.1.1.1	192.168.2.4	0xe661	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:10:16.461385012 CET	1.1.1.1	192.168.2.4	0x8fc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:10:16.461385012 CET	1.1.1.1	192.168.2.4	0x8fc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:10:35.870388031 CET	1.1.1.1	192.168.2.4	0x2c30	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:10:35.870388031 CET	1.1.1.1	192.168.2.4	0x2c30	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cnytechnologies-my.sharepoint.com

fs.microsoft.com

https:

aadcdn.msftauth.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49734	13.107.136.10	80	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 28, 2024 15:09:25.091550112 CET	448	OUT	GET / HTTP/1.1 Host: cnytechnologies-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 28, 2024 15:09:25.287237883 CET	1286	IN	HTTP/1.1 301 Moved Permanently Location: https://cnytechnologies-my.sharepoint.com/ P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,23040,0,0,1,0,14400 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 1b7919a1-90ac-5000-18d1-255e8cdb0905 request-id: 1b7919a1-90ac-5000-18d1-255e8cdb0905 MS-CV: oRl5G6yQAFAY0SVejNsJBQ.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-BL2r5b&frontEnd=AFD&remoteIp=102.165.48.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com *.microsoft.com onedrive. Data Raw: Data Ascii:
Mar 28, 2024 15:09:25.287281036 CET	428	IN	Data Raw: 69 76 65 2e 63 6f 6d 20 2a 2e 6f 6e 65 64 72 69 76 65 2e 6c 69 76 65 2e 63 6f 6d 20 73 65 63 75 72 65 62 72 6f 6b 65 72 2e 73 68 61 72 65 70 6f 69 6e 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3b 0d 0a 53 50 52 65 71 75 65 73 74 44 75 72 61 74 69 6f 6e 3a Data Ascii: ive.com *.onedrive.live.com securebroker.sharepointonline.com;SPRequestDuration: 23SPIisLatency: 0X-Powered-By: ASP.NETMicrosoftSharePointTeamServices: 16.0.0.24713X-Content-Type-Options: nosniffX-MS-InvokeApp: 1; RequireReadOnly
Mar 28, 2024 15:10:10.288619995 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	13.107.136.10	80	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 28, 2024 15:10:10.099813938 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	13.107.136.10	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:25 UTC	676	OUT	GET / HTTP/1.1 Host: cnytechnologies-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:25 UTC	1890	IN	HTTP/1.1 302 Found Content-Length: 199 Content-Type: text/html; charset=utf-8 Location: https://cnytechnologies-my.sharepoint.com/_layouts/15/Authenticate.aspx?Source=%2F P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,4204800,79,247,33547765,0,4204800 X-SharePointHealthScore: 1 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 1b7919a1-60d2-5000-173e-bce76032a2ae request-id: 1b7919a1-60d2-5000-173e-bce76032a2ae MS-CV: oRl5G9JgAFAXPrznYDKirg.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-BL2r5e&frontEnd=AFD&remoteIp=102.165.48.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 22 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24713 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0732207D6F75407586220D22B3043180 Ref B: BL2EDGE2107 Ref C: 2024-03-28T14:09:25Z Date: Thu, 28 Mar 2024 14:09:25 GMT Connection: close
2024-03-28 14:09:25 UTC	199	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6e 79 74 65 63 68 6e 6f 6c 6f 67 69 65 73 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 3f 53 6f 75 72 63 65 3d 25 32 46 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://cnytechnologies-my.sharepoint.com/_layouts/15/Authenticate.aspx?Source=%2F">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	13.107.136.10	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:26 UTC	716	OUT	GET /_layouts/15/Authenticate.aspx?Source=%2F HTTP/1.1 Host: cnytechnologies-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:26 UTC	1636	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 219 Content-Type: text/html; charset=utf-8 Location: /_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F&Source=cookie P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RpsContextCookie=U291cmNlPSUyRg==; expires=Thu, 28-Mar-2024 14:19:26 GMT; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,2102272,0,32,13556441,0,1362857 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 1b7919a1-30f0-5000-1632-a734d0b56cda request-id: 1b7919a1-30f0-5000-1632-a734d0b56cda MS-CV: oRl5G/AwAFAWMqc00LVs2g.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-BL2r5b&frontEnd=AFD&remoteIp=102.165.48.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 12 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24713 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: B1FAE9A1B3DA46299597AC0B4F9A68B5 Ref B: BL2EDGE1515 Ref C: 2024-03-28T14:09:26Z Date: Thu, 28 Mar 2024 14:09:25 GMT Connection: close
2024-03-28 14:09:26 UTC	219	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 5f 66 6f 72 6d 73 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 5f 6c 61 79 6f 75 74 73 25 32 66 31 35 25 32 66 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 25 33 66 53 6f 75 72 63 65 25 33 64 25 32 35 32 46 26 61 6d 70 3b 53 6f 75 72 63 65 3d 63 6f 6f 6b 69 65 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F&Source=cookie">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	13.107.136.10	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:26 UTC	816	OUT	GET /_forms/default.aspx?ReturnUrl=%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F&Source=cookie HTTP/1.1 Host: cnytechnologies-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RpsContextCookie=U291cmNlPSUyRg==
2024-03-28 14:09:26 UTC	3525	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 891 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://login.microsoftonline.com:443/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164%2DE2D3AAF6A538A014AFE5FA979E450B89E43790B1A7E4F1CE81687A5964F4FAA2&redirect%5Furi=https%3A%2F%2Fcnytechnologies%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=1c7919a1%2D800d%2D5000%2D173e%2Db8c9cea4f707 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: nSGt-44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164=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; expires=Thu, 28-Mar-2024 14:13:26 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: nSGt-44E36E836F46A270DB6E41EC4E6F621154AB643D0D4A7164=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly Set-Cookie: RpsContextCookie=U291cmNlPSUyRiZQcmV2aW91c1JlcXVlc3RDb3JyZWxhdGlvbklkPTFjNzkxOWExJTJEODAwZCUyRDUwMDAlMkQxNzNlJTJEYjhjOWNlYTRmNzA3JlJldHVyblVybD0lMkYlNUZsYXlvdXRzJTJGMTUlMkZBdXRoZW50aWNhdGUlMkVhc3B4JTNGU291cmNlJTNEJTI1MkY=; expires=Thu, 28-Mar-2024 14:19:26 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: RpsContextCookie=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly X-NetworkStatistics: 0,4204800,50,107,3505061,0,2102030 X-SharePointHealthScore: 0 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 1c7919a1-800d-5000-173e-b8c9cea4f707 request-id: 1c7919a1-800d-5000-173e-b8c9cea4f707 MS-CV: oRl5HA2AAFAXPrjJzqT3Bw.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=06bb0e21-dbae-4056-9dfd-4eb3d5d09b54&destinationEndpoint=Edge-Prod-BL2r5f&frontEnd=AFD&remoteIp=102.165.48.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 48 SPIisLatency: 0 Include-Referred-Token-Binding-ID: true X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24713 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AF5315E4F98E46A6AFC64E8A6D18982E Ref B: BL2EDGE2809 Ref C: 2024-03-28T14:09:26Z Date: Thu, 28 Mar 2024 14:09:26 GMT Connection: close
2024-03-28 14:09:26 UTC	891	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3a 34 34 33 2f 36 34 37 64 36 38 35 63 2d 66 66 30 38 2d 34 65 30 66 2d 61 38 38 32 2d 38 38 32 30 32 66 31 65 62 38 33 63 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 6d 6f 64 65 3d 66 6f 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com:443/647d685c-ff08-4e0f-a882-88202f1eb83c/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:28 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 14:09:28 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=233641 Date: Thu, 28 Mar 2024 14:09:28 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49745	23.221.242.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:29 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 14:09:29 UTC	774	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-CID: 7 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 8BFC17DD061B46CAAD2B2AEB7B19C3D8 Ref B: CH1AA2040901011 Ref C: 2023-07-21T06:04:00Z X-MSEdge-Ref: Ref A: 1421F39FA7224BE199CC2F2C3DD24574 Ref B: CHI30EDGE0415 Ref C: 2023-07-21T06:04:00Z Content-Type: application/octet-stream X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=233620 Date: Thu, 28 Mar 2024 14:09:29 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-28 14:09:29 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49751	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:31 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:31 UTC	733	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279659 Cache-Control: public, max-age=31536000 Content-MD5: kqhA3D0Xczna4D/t8ioitQ== Content-Type: text/css Date: Thu, 28 Mar 2024 14:09:31 GMT Etag: 0x8DC070858CA028D Last-Modified: Wed, 27 Dec 2023 18:19:21 GMT Server: ECAcc (dce/26D8) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ab67d9d2-601e-00d9-4c8e-7e1d53000000 x-ms-version: 2009-09-19 Content-Length: 113084 Connection: close
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 73 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a Data Ascii: s-1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:
2024-03-28 14:09:31 UTC	2	IN	Data Raw: 72 67 Data Ascii: rg
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 Data Ascii: in-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-box
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c Data Ascii: ow-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.tabl
2024-03-28 14:09:31 UTC	2	IN	Data Raw: 22 2c Data Ascii: ",
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 6f 6c 69 Data Ascii: "Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mongoli
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: pe="reset"].btn-primary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background-co
2024-03-28 14:09:31 UTC	14782	IN	Data Raw: 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 Data Ascii: in-top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padding:0;margin-top:16px;margin-bottom:12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49750	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:31 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_QMJbZSc_Phofl-lfd63BLw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:31 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279801 Cache-Control: public, max-age=31536000 Content-MD5: cUlB6QxKI222kY9gJnLAfQ== Content-Type: application/x-javascript Date: Thu, 28 Mar 2024 14:09:31 GMT Etag: 0x8DC3A4D647E2225 Last-Modified: Sat, 02 Mar 2024 00:12:05 GMT Server: ECAcc (dce/26AA) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 288d8d04-701e-0084-0d8e-7ea17b000000 x-ms-version: 2009-09-19 Content-Length: 443045 Connection: close
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 4d 73 61 47 75 65 73 74 55 73 65 72 73 4e 6f 74 53 75 70 70 6f 72 74 Data Ascii: 7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnauthorizedMsaGuestUsersNotSupport
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 3d 22 3f 22 2b 63 2e 6a 6f 69 6e 28 65 2e 71 75 65 72 79 2c 22 26 22 2c 22 3d 22 29 29 2c 65 2e 66 72 61 67 6d 65 6e 74 26 26 28 6e 2b 3d 22 23 22 2b 63 2e 6a 6f 69 6e 28 65 2e 66 72 61 67 6d 65 6e 74 2c 22 26 22 2c 22 3d 22 29 29 2c 6e 7d 2c 61 70 70 65 6e 64 43 75 72 72 65 6e 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 49 66 4e 6f 74 45 78 69 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 44 2e 70 61 72 73 65 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 63 2e 66 6f 72 45 61 63 68 28 6e 2e 71 75 65 72 79 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 65 3d 44 2e 61 64 64 49 66 4e 6f 74 45 78 69 73 74 28 65 2c 6e 2c 74 29 7d 29 29 2c 65 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ="?"+c.join(e.query,"&","=")),e.fragment&&(n+="#"+c.join(e.fragment,"&","=")),n},appendCurrentQueryParameterIfNotExist:function(e){var n=D.parse(window.location.href);return c.forEach(n.query,(function(n,t){e=D.addIfNotExist(e,n,t)})),e},append:function(e
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 65 45 6e 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 2c 61 29 7b 6c 3f 6c 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 28 65 2c 6e 2c 74 2c 69 2c 61 29 3a 61 26 26 61 28 29 7d 2c 73 2e 73 65 74 50 61 67 65 56 69 65 77 4d 6f 64 65 6c 3d 75 28 22 73 65 74 50 61 67 65 56 69 65 77 4d 6f 64 65 6c 22 29 2c 73 2e 6c 6f 67 43 6f 6d 70 6f 6e 65 6e 74 45 76 65 6e 74 3d 75 28 22 6c 6f 67 43 6f 6d 70 6f 6e 65 6e 74 45 76 65 6e 74 22 29 2c 73 2e 6c 6f 67 56 69 65 77 53 74 61 74 65 3d 75 28 22 6c 6f 67 56 69 65 77 53 74 61 74 65 22 29 2c 73 2e 73 65 74 56 69 65 77 56 69 65 77 4d 6f 64 65 6c 3d 75 28 22 73 65 74 56 69 65 77 56 69 65 77 4d 6f 64 65 6c 22 29 2c 73 2e 73 77 69 74 63 68 56 69 65 77 3d 75 28 22 73 77 69 74 63 68 56 69 65 77 Data Ascii: eEndRequest=function(e,n,t,i,a){l?l.traceEndRequest(e,n,t,i,a):a&&a()},s.setPageViewModel=u("setPageViewModel"),s.logComponentEvent=u("logComponentEvent"),s.logViewState=u("logViewState"),s.setViewViewModel=u("setViewViewModel"),s.switchView=u("switchView
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 22 6c 63 69 64 22 2c 74 5d 5d 3a 5b 5d 2c 53 3f 5b 5b 22 69 64 22 2c 53 5d 5d 3a 5b 5d 2c 43 3f 5b 5b 22 63 6c 69 65 6e 74 5f 69 64 22 2c 43 5d 5d 3a 5b 5d 2c 77 3f 5b 5b 22 66 63 69 22 2c 77 5d 5d 3a 5b 5d 2c 78 3f 5b 5b 22 6e 6f 70 61 22 2c 78 5d 5d 3a 5b 5d 29 2c 63 3d 7b 74 61 72 67 65 74 55 72 6c 3a 72 2e 61 64 64 28 22 47 65 74 4f 6e 65 54 69 6d 65 43 6f 64 65 2e 73 72 66 22 2c 61 29 2c 72 65 71 75 65 73 74 54 79 70 65 3a 69 2e 52 65 71 75 65 73 74 54 79 70 65 2e 50 6f 73 74 2c 64 61 74 61 3a 6f 2e 67 65 6e 65 72 61 74 65 52 65 71 75 65 73 74 53 74 72 69 6e 67 28 6d 29 2c 69 73 41 73 79 6e 63 3a 21 30 2c 74 69 6d 65 6f 75 74 3a 5f 2c 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 3a 79 2c 66 61 69 6c 75 72 65 43 61 6c 6c 62 61 63 6b 3a 6b 2c 74 69 6d Data Ascii: "lcid",t]]:[],S?[["id",S]]:[],C?[["client_id",C]]:[],w?[["fci",w]]:[],x?[["nopa",x]]:[]),c={targetUrl:r.add("GetOneTimeCode.srf",a),requestType:i.RequestType.Post,data:o.generateRequestString(m),isAsync:!0,timeout:_,successCallback:y,failureCallback:k,tim
2024-03-28 14:09:31 UTC	5	IN	Data Raw: 65 63 6f 64 65 Data Ascii: ecode
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 70 2e 65 78 74 72 61 63 74 28 22 6c 63 22 29 29 29 29 7d 28 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6d 2e 43 6c 6f 75 64 46 65 64 65 72 61 74 69 6f 6e 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 6d 2e 4c 69 6e 6b 65 64 49 6e 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 4c 69 6e 6b 65 64 49 6e 50 61 72 61 6d 73 2e 4c 69 6e 6b 65 64 49 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 69 2e 69 64 70 52 65 64 69 72 65 63 74 Data Ascii: URIComponent(p.extract("lc"))))}(n.Credentials.FederationRedirectUrl,e);break;case m.CloudFederation:i.idpRedirectUrl=n.Credentials.FederationRedirectUrl;break;case m.LinkedIn:i.idpRedirectUrl=n.Credentials.LinkedInParams.LinkedInRedirectUrl,i.idpRedirect
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 65 3d 7b 75 73 65 72 6e 61 6d 65 3a 66 2e 63 6c 65 61 6e 73 65 55 73 65 72 6e 61 6d 65 28 61 29 2c 70 72 6f 6f 66 44 61 74 61 3a 4f 2e 70 72 6f 6f 66 2e 64 61 74 61 2c 70 72 6f 6f 66 54 79 70 65 3a 4f 2e 70 72 6f 6f 66 2e 74 79 70 65 2c 70 75 72 70 6f 73 65 3a 4f 2e 70 72 6f 6f 66 2e 69 73 4e 6f 70 61 3f 6c 2e 50 75 72 70 6f 73 65 2e 4e 6f 50 61 73 73 77 6f 72 64 3a 6c 2e 50 75 72 70 6f 73 65 2e 4f 74 63 4c 6f 67 69 6e 2c 66 6c 6f 77 54 6f 6b 65 6e 3a 70 2c 69 73 45 6e 63 72 79 70 74 65 64 3a 4f 2e 70 72 6f 6f 66 2e 69 73 45 6e 63 72 79 70 74 65 64 2c 73 69 74 65 49 64 3a 78 2c 63 6c 69 65 6e 74 49 64 3a 79 2c 66 6f 72 77 61 72 64 65 64 43 6c 69 65 6e 74 49 64 3a 6b 2c 6e 6f 50 61 42 75 62 62 6c 65 56 65 72 73 69 6f 6e 3a 54 2c 73 75 63 63 65 73 73 43 61 Data Ascii: e={username:f.cleanseUsername(a),proofData:O.proof.data,proofType:O.proof.type,purpose:O.proof.isNopa?l.Purpose.NoPassword:l.Purpose.OtcLogin,flowToken:p,isEncrypted:O.proof.isEncrypted,siteId:x,clientId:y,forwardedClientId:k,noPaBubbleVersion:T,successCa
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 61 69 6c 73 22 29 7d 29 29 2c 61 2e 73 68 6f 77 46 6f 6f 74 65 72 43 6f 6e 74 72 6f 6c 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 72 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 68 61 73 49 6e 69 74 69 61 6c 56 69 65 77 53 68 6f 77 6e 28 29 7d 29 29 2c 61 2e 73 68 6f 77 4c 6f 67 6f 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 28 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 Data Ascii: ails")})),a.showFooterControl=i.pureComputed((function(){return!r&&a.paginationControlMethods()&&a.paginationControlMethods().hasInitialViewShown()})),a.showLogo=i.pureComputed((function(){return!(a.paginationControlMethods()&&a.paginationControlMethods()
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 6c 6f 63 6b 65 64 3a 63 61 73 65 20 75 2e 53 65 72 76 69 63 65 42 6c 6f 63 6b 65 64 3a 63 61 73 65 20 75 2e 49 44 50 46 61 69 6c 65 64 3a 63 61 73 65 20 75 2e 48 49 50 5f 4c 6f 63 6b 6f 75 74 3a 63 61 73 65 20 75 2e 48 49 50 5f 4c 6f 63 6b 6f 75 74 4d 6f 62 69 6c 65 3a 63 61 73 65 20 75 2e 48 49 50 5f 4c 6f 63 6b 6f 75 74 48 6f 73 74 3a 63 61 73 65 20 75 2e 42 69 6e 64 46 61 69 6c 65 64 3a 74 2e 65 28 31 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 28 34 38 38 29 3b 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 28 34 38 39 29 2c 61 2e 61 70 70 6c 79 42 69 6e 64 69 6e 67 Data Ascii: locked:case u.ServiceBlocked:case u.IDPFailed:case u.HIP_Lockout:case u.HIP_LockoutMobile:case u.HIP_LockoutHost:case u.BindFailed:t.e(1).then(function(){var n=t(488);document.body.appendChild(document.createElement("div")).innerHTML=t(489),a.applyBinding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:31 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pevuvrbnnz-5coi_b4jtbw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:31 UTC	748	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279769 Cache-Control: public, max-age=31536000 Content-MD5: CWi6wHL02j8bOmrVCAJelA== Content-Type: application/x-javascript Date: Thu, 28 Mar 2024 14:09:31 GMT Etag: 0x8DC2F767FC0BDAD Last-Modified: Sat, 17 Feb 2024 05:08:37 GMT Server: ECAcc (dce/2695) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 947441f0-101e-0006-688e-7ea02a000000 x-ms-version: 2009-09-19 Content-Length: 55021 Connection: close
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-03-28 14:09:31 UTC	16383	IN	Data Raw: 6f 74 50 61 73 73 77 6f 72 64 30 22 20 68 72 65 66 3d 22 23 22 3e 72 65 73 65 74 20 69 74 20 6e 6f 77 2e 3c 2f 61 3e 27 3a 27 59 6f 75 72 20 65 6d 61 69 6c 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 49 66 20 79 6f 75 20 64 6f 6e 5c 27 74 20 72 65 6d 65 6d 62 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2c 20 3c 61 20 69 64 3d 22 69 64 41 5f 49 4c 5f 46 6f 72 67 6f 74 50 61 73 73 77 6f 72 64 30 22 20 68 72 65 66 3d 22 23 22 3e 72 65 73 65 74 20 69 74 20 6e 6f 77 2e 3c 2f 61 3e 27 2c 65 2e 43 54 5f 53 54 52 5f 43 6f 6e 66 69 72 6d 53 65 6e 64 5f 4f 74 63 3d 22 57 65 27 6c 6c 20 73 65 6e 64 20 61 20 63 6f 64 65 20 74 6f 20 7b 30 7d 20 74 6f 20 73 69 67 6e 20 79 6f 75 20 69 6e 2e 22 2c 65 2e 43 54 5f 4f 54 43 5f 53 54 Data Ascii: otPassword0" href="#">reset it now.</a>':'Your email or password is incorrect. If you don\'t remember your password, <a id="idA_IL_ForgotPassword0" href="#">reset it now.</a>',e.CT_STR_ConfirmSend_Otc="We'll send a code to {0} to sign you in.",e.CT_OTC_ST
2024-03-28 14:09:31 UTC	5872	IN	Data Raw: 65 41 70 70 56 65 72 73 69 6f 6e 22 2c 46 6c 6f 77 54 6f 6b 65 6e 45 78 70 69 72 65 64 54 66 61 3a 22 46 6c 6f 77 54 6f 6b 65 6e 45 78 70 69 72 65 64 22 2c 41 70 70 6c 69 63 61 74 69 6f 6e 55 73 65 64 49 73 4e 6f 74 41 6e 41 70 70 72 6f 76 65 64 41 70 70 52 65 71 75 69 72 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 3a 22 35 33 30 30 32 31 22 2c 42 6c 6f 63 6b 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 3a 22 35 33 30 30 33 22 2c 42 6c 6f 63 6b 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 46 6f 72 52 65 6d 6f 74 65 44 65 76 69 63 65 46 6c 6f 77 3a 22 35 33 30 30 33 33 22 2c 42 72 6f 6b 65 72 41 70 70 4e 6f 74 49 6e 73 74 61 6c 6c 65 64 3a 22 35 30 31 32 37 22 2c 42 72 6f 6b 65 72 41 70 70 4e 6f 74 49 Data Ascii: eAppVersion",FlowTokenExpiredTfa:"FlowTokenExpired",ApplicationUsedIsNotAnApprovedAppRequiredByConditionalAccess:"530021",BlockedByConditionalAccess:"53003",BlockedByConditionalAccessForRemoteDeviceFlow:"530033",BrokerAppNotInstalled:"50127",BrokerAppNotI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49755	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:31 UTC	579	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:32 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279813 Cache-Control: public, max-age=31536000 Content-MD5: wegr9xrdYirQ87+FcvY0/A== Content-Type: application/x-javascript Date: Thu, 28 Mar 2024 14:09:32 GMT Etag: 0x8DB5D44A2CEB430 Last-Modified: Thu, 25 May 2023 17:22:37 GMT Server: ECAcc (dce/269B) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 05c16523-e01e-0045-508e-7e0e3d000000 x-ms-version: 2009-09-19 Content-Length: 190152 Connection: close
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 74 65 6c 65 6d 65 74 72 79 5f 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 2c 2c 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 22 56 61 6c 75 65 4b 69 6e 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 65 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 4c 61 74 65 6e 63 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 45 76 65 6e 74 50 65 72 73 69 73 74 65 6e 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 62 7d Data Ascii: (window.telemetry_webpackJsonp=window.telemetry_webpackJsonp\|\|[]).push([[2],[,,,function(e,t,n){"use strict";n.r(t),n.d(t,"ValueKind",(function(){return r.e})),n.d(t,"EventLatency",(function(){return r.a})),n.d(t,"EventPersistence",(function(){return r.b}
2024-03-28 14:09:32 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 2c 22 50 72 6f 70 65 72 74 69 65 73 50 6c 75 67 69 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 50 6f 73 74 43 68 61 6e 6e 65 6c 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 43 6f 72 65 55 74 69 6c 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 42 45 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 61 7d 29 29 2c 6e 2e 64 28 74 2c 22 4e 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 2e 62 7d 29 29 2c 6e 2e 64 28 74 2c 22 52 54 5f 50 52 4f 46 49 4c 45 22 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: ,"PropertiesPlugin",(function(){return g.a})),n.d(t,"PostChannel",(function(){return v.a})),n.d(t,"CoreUtils",(function(){return c.a})),n.d(t,"BE_PROFILE",(function(){return p.a})),n.d(t,"NRT_PROFILE",(function(){return p.b})),n.d(t,"RT_PROFILE",(function
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 69 73 2e 74 79 70 65 4e 61 6d 65 29 29 7c 7c 22 6e 6f 74 5f 73 70 65 63 69 66 69 65 64 22 3b 76 61 72 20 61 3d 74 2e 73 74 61 63 6b 44 65 74 61 69 6c 73 7c 7c 6c 65 28 74 29 3b 74 68 69 73 2e 70 61 72 73 65 64 53 74 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 65 2e 6f 62 6a 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 3d 5b 5d 3b 76 61 72 20 72 3d 30 2c 69 3d 30 3b 4f 62 6a 65 63 74 28 53 2e 62 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 67 65 2e 72 65 67 65 78 2e 74 65 73 74 28 6e 29 29 7b 76 61 72 20 61 3d 6e 65 77 20 67 65 28 6e 2c 72 2b 2b 29 3b 69 2b 3d 61 2e 73 69 7a 65 49 6e 42 79 74 65 73 2c 74 2e 70 75 73 68 28 61 29 7d 7d 29 29 3b Data Ascii: is.typeName))\|\|"not_specified";var a=t.stackDetails\|\|le(t);this.parsedStack=function(e){var t,n=e.obj;if(n&&n.length>0){t=[];var r=0,i=0;Object(S.b)(n,(function(e){var n=e.toString();if(ge.regex.test(n)){var a=new ge(n,r++);i+=a.sizeInBytes,t.push(a)}}));
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 63 79 20 70 72 65 76 65 6e 74 73 20 75 73 20 66 72 6f 6d 20 67 65 74 74 69 6e 67 20 74 68 65 20 64 65 74 61 69 6c 73 20 6f 66 20 74 68 69 73 20 65 78 63 65 70 74 69 6f 6e 2e 20 43 6f 6e 73 69 64 65 72 20 75 73 69 6e 67 20 74 68 65 20 27 63 72 6f 73 73 6f 72 69 67 69 6e 27 20 61 74 74 72 69 62 75 74 65 2e 22 2c 61 2c 74 2e 6c 69 6e 65 4e 75 6d 62 65 72 7c 7c 30 2c 74 2e 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 7c 7c 30 2c 6e 2c 72 2c 6e 75 6c 6c 2c 6f 29 2c 63 29 3a 28 74 2e 65 72 72 6f 72 53 72 63 7c 7c 28 74 2e 65 72 72 6f 72 53 72 63 3d 6f 29 2c 65 2e 74 72 61 63 6b 45 78 63 65 70 74 69 6f 6e 28 7b 65 78 63 65 70 74 69 6f 6e 3a 74 2c 73 65 76 65 72 69 74 79 4c 65 76 65 6c 3a 33 7d 2c 63 29 29 7d 63 61 74 63 68 28 65 29 7b 76 61 72 20 75 3d 6e 3f 6e 2e 6e 61 Data Ascii: cy prevents us from getting the details of this exception. Consider using the 'crossorigin' attribute.",a,t.lineNumber\|\|0,t.columnNumber\|\|0,n,r,null,o),c):(t.errorSrc\|\|(t.errorSrc=o),e.trackException({exception:t,severityLevel:3},c))}catch(e){var u=n?n.na
2024-03-28 14:09:32 UTC	3	IN	Data Raw: 65 3d 4f Data Ascii: e=O
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 62 6a 65 63 74 28 63 2e 74 29 28 65 29 3f 65 3a 7b 7d 3b 76 61 72 20 6e 3d 7b 7d 2c 72 3d 4f 62 6a 65 63 74 28 63 2e 74 29 28 74 29 3f 74 3a 7b 7d 3b 74 68 69 73 2e 5f 73 65 74 42 61 73 69 63 50 72 6f 70 65 72 74 69 65 73 28 6e 2c 65 29 2c 74 68 69 73 2e 5f 73 65 74 50 61 67 65 54 61 67 73 28 6e 2c 65 29 2c 6e 2e 69 73 4d 61 6e 75 61 6c 3d 21 65 2e 69 73 41 75 74 6f 2c 72 2e 62 65 68 61 76 69 6f 72 3d 74 68 69 73 2e 5f 67 65 74 42 65 68 61 76 69 6f 72 28 65 29 2c 72 2e 76 70 48 65 69 67 68 74 3d 65 2e 76 70 48 65 69 67 68 74 2c 72 2e 76 70 57 69 64 74 68 3d 65 2e 76 70 57 69 64 74 68 2c 72 2e 66 72 61 6d 65 77 6f 72 6b 3d 65 2e 66 72 61 6d 65 77 6f 72 6b 2c 72 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 3d 65 2e 73 79 73 74 65 6d 54 69 6d 69 6e 67 2c 72 2e 63 Data Ascii: bject(c.t)(e)?e:{};var n={},r=Object(c.t)(t)?t:{};this._setBasicProperties(n,e),this._setPageTags(n,e),n.isManual=!e.isAuto,r.behavior=this._getBehavior(e),r.vpHeight=e.vpHeight,r.vpWidth=e.vpWidth,r.framework=e.framework,r.systemTiming=e.systemTiming,r.c
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 5d 29 2c 65 2e 65 6d 70 74 79 53 6e 69 70 70 65 74 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 29 7b 4f 62 6a 65 63 74 28 53 2e 73 29 28 6e 29 7c 7c 6e 2c 4f 62 6a 65 63 74 28 53 2e 43 29 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 69 66 28 4f 62 6a 65 63 74 28 53 2e 76 29 28 6e 29 26 26 21 4f 62 6a 65 63 74 28 53 2e 70 29 28 72 29 26 26 6e 26 26 22 5f 22 21 3d 3d 6e 5b 30 5d 26 26 2d 31 3d 3d 3d 4f 62 6a 65 63 74 28 53 2e 63 29 28 52 74 2c 6e 29 29 74 72 79 7b 74 5b 6e 5d 3d 72 7d 63 61 74 63 68 28 74 29 7b 4f 62 6a 65 63 74 28 66 2e 64 29 28 65 2e 6c 6f 67 67 65 72 2c 32 2c 35 31 34 2c 22 46 61 69 6c 65 64 20 74 6f 20 73 65 74 20 5b 22 2b 6e 2b 22 5d 20 64 75 72 69 6e Data Ascii: ]),e.emptySnippetQueue=function(t){try{if(function(){if(t){Object(S.s)(n)\|\|n,Object(S.C)(e,(function(n,r){if(Object(S.v)(n)&&!Object(S.p)(r)&&n&&"_"!==n[0]&&-1===Object(S.c)(Rt,n))try{t[n]=r}catch(t){Object(f.d)(e.logger,2,514,"Failed to set ["+n+"] durin
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 69 6e 64 65 78 4f 66 28 74 2c 6e 29 3b 76 61 72 20 72 3d 65 5b 61 2e 78 5d 2c 69 3d 6e 7c 7c 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 6f 3d 4d 61 74 68 2e 6d 61 78 28 69 3e 3d 30 3f 69 3a 72 2d 4d 61 74 68 2e 61 62 73 28 69 29 2c 30 29 3b 6f 3c 72 3b 6f 2b 2b 29 69 66 28 6f 20 69 6e 20 65 26 26 65 5b 6f 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6f 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 7b 69 66 28 65 2e 6d 61 70 29 72 65 74 75 72 6e 20 65 2e 6d 61 70 28 74 2c 6e 29 3b 76 61 72 20 69 3d 65 5b 61 2e 78 5d 2c 6f 3d 6e 7c 7c 65 3b 72 3d 6e 65 77 20 41 72 72 61 79 28 69 29 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 69 3b 63 2b 2b 29 63 20 Data Ascii: indexOf(t,n);var r=e[a.x],i=n\|\|0;try{for(var o=Math.max(i>=0?i:r-Math.abs(i),0);o<r;o++)if(o in e&&e[o]===t)return o}catch(e){}}return-1}function W(e,t,n){var r;if(e){if(e.map)return e.map(t,n);var i=e[a.x],o=n\|\|e;r=new Array(i);try{for(var c=0;c<i;c++)c
2024-03-28 14:09:32 UTC	3	IN	Data Raw: 5d 7c 7c Data Ascii: ]\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49756	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:32 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:32 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279731 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Thu, 28 Mar 2024 14:09:32 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (dce/26D0) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c081858c-401e-009f-738e-7e344e000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-03-28 14:09:32 UTC	15684	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-03-28 14:09:32 UTC	1490	IN	Data Raw: 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49757	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:32 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:32 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279712 Cache-Control: public, max-age=31536000 Content-MD5: eZ+IAUPxfkfE79uz/zWlTA== Content-Type: application/x-javascript Date: Thu, 28 Mar 2024 14:09:32 GMT Etag: 0x8DC2E5A3BC19A93 Last-Modified: Thu, 15 Feb 2024 19:13:46 GMT Server: ECAcc (dce/26EA) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d77b7cfa-b01e-00dc-448e-7e9a59000000 x-ms-version: 2009-09-19 Content-Length: 223759 Connection: close
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 30 21 3d 3d 28 6e 3d 65 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 2d 74 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 29 7c 7c 30 21 3d 3d 28 6e 3d 65 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 2d 74 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 29 3f 6e 3a 66 28 65 2e 6e 61 6d 65 2c 74 2e 6e 61 6d 65 29 7d 2c 74 2e 63 6f 6d 70 61 72 65 42 79 47 65 6e 65 72 61 74 65 64 50 6f 73 69 74 69 6f 6e 73 49 6e 66 6c 61 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 2d 74 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 3b 72 65 74 75 72 6e 20 30 21 3d 3d 72 7c 7c 30 21 3d 3d 28 72 3d 65 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 2d 74 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 29 7c 7c 30 21 3d 3d 28 Data Ascii: 0!==(n=e.originalLine-t.originalLine)\|\|0!==(n=e.originalColumn-t.originalColumn)?n:f(e.name,t.name)},t.compareByGeneratedPositionsInflated=function(e,t){var r=e.generatedLine-t.generatedLine;return 0!==r\|\|0!==(r=e.generatedColumn-t.generatedColumn)\|\|0!==(
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 67 74 68 3b 69 2b 3d 32 29 6f 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 5b 69 5d 2b 32 35 36 2a 6e 5b 69 2b 31 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 2c 72 29 7b 69 66 28 65 25 31 21 3d 30 7c 7c 65 3c 30 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 6f 66 66 73 65 74 20 69 73 20 6e 6f 74 20 75 69 6e 74 22 29 3b 69 66 28 65 2b 74 3e 72 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 54 72 79 69 6e 67 20 74 6f 20 61 63 63 65 73 73 20 62 65 79 6f 6e 64 20 62 75 66 66 65 72 20 6c 65 6e 67 74 68 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 74 2c 72 2c 6e 2c 6f 2c 69 29 7b 69 66 28 21 75 2e 69 73 42 75 66 66 65 72 28 65 29 29 74 68 72 6f 77 20 6e 65 Data Ascii: gth;i+=2)o+=String.fromCharCode(n[i]+256*n[i+1]);return o}function R(e,t,r){if(e%1!=0\|\|e<0)throw new RangeError("offset is not uint");if(e+t>r)throw new RangeError("Trying to access beyond buffer length")}function M(e,t,r,n,o,i){if(!u.isBuffer(e))throw ne
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 20 65 3d 74 68 69 73 3b 65 3d 65 2e 70 61 72 65 6e 74 3b 29 65 5b 68 5d 3d 21 31 7d 7d 7d 2c 7b 6b 65 79 3a 22 6e 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 70 61 72 65 6e 74 29 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 76 61 72 20 65 3d 74 68 69 73 2e 70 61 72 65 6e 74 2e 69 6e 64 65 78 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 2e 6e 6f 64 65 73 5b 65 2b 31 5d 7d 7d 2c 7b 6b 65 79 3a 22 70 6f 73 69 74 69 6f 6e 42 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 73 6f 75 72 63 65 2e 73 74 61 72 74 3b 69 66 28 65 2e 69 6e 64 65 78 29 72 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 49 6e 73 69 64 65 28 65 2e 69 6e 64 Data Ascii: e=this;e=e.parent;)e[h]=!1}}},{key:"next",value:function(){if(!this.parent)return undefined;var e=this.parent.index(this);return this.parent.nodes[e+1]}},{key:"positionBy",value:function(e,t){var r=this.source.start;if(e.index)r=this.positionInside(e.ind
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 70 61 72 73 65 28 29 7d 63 61 74 63 68 28 73 29 7b 74 68 72 6f 77 20 73 7d 72 65 74 75 72 6e 20 69 2e 72 6f 6f 74 7d 3b 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 74 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 35 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 28 72 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 29 2e 74 79 70 65 3d 22 63 6f 6d 6d 65 6e 74 22 2c 72 7d 72 65 74 75 72 6e 20 Data Ascii: parse()}catch(s){throw s}return i.root};t["default"]=s,e.exports=t["default"]},595:function(e,t,r){"use strict";var n;t.__esModule=!0,t["default"]=void 0;var o=function(e){var t,r;function n(t){var r;return(r=e.call(this,t)\|\|this).type="comment",r}return
2024-03-28 14:09:32 UTC	5	IN	Data Raw: 72 65 74 75 72 Data Ascii: retur
2024-03-28 14:09:32 UTC	16383	IN	Data Raw: 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 65 29 7d 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6e 28 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 76 61 72 20 73 3d 72 28 36 33 36 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 65 29 2c 74 68 Data Ascii: n a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"==n(t)?t:String(t)}var s=r(636),a=function(){function e(t,r,n){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,e),th
2024-03-28 14:09:33 UTC	16383	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 2e 74 68 65 6e 28 65 2c 65 29 7d 2c 66 2e 68 61 6e 64 6c 65 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 74 68 69 73 2e 65 72 72 6f 72 3d 65 2c 22 43 73 73 53 79 6e 74 61 78 45 72 72 6f 72 22 21 3d 3d 65 2e 6e 61 6d 65 7c 7c 65 2e 70 6c 75 67 69 6e 29 7b 69 66 28 74 2e 70 6f 73 74 63 73 73 56 65 72 73 69 6f 6e 29 3b 7d 65 6c 73 65 20 65 2e 70 6c 75 67 69 6e 3d 74 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 2c 65 2e 73 65 74 4d 65 73 73 61 67 65 28 29 7d 63 61 74 63 68 28 72 29 7b 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 72 29 7d 7d 2c 66 2e 61 73 79 6e 63 54 69 63 6b 3d 66 75 6e 63 Data Ascii: (e){return this.async().then(e,e)},f.handleError=function(e,t){try{if(this.error=e,"CssSyntaxError"!==e.name\|\|e.plugin){if(t.postcssVersion);}else e.plugin=t.postcssPlugin,e.setMessage()}catch(r){console&&console.error&&console.error(r)}},f.asyncTick=func
2024-03-28 14:09:33 UTC	16383	IN	Data Raw: 22 21 3d 74 79 70 65 6f 66 20 65 2e 72 61 77 73 2e 62 65 74 77 65 65 6e 29 72 65 74 75 72 6e 20 74 3d 65 2e 72 61 77 73 2e 62 65 74 77 65 65 6e 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 5c 73 3a 5d 2f 67 2c 22 22 29 2c 21 31 7d 29 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 72 61 77 45 6d 70 74 79 42 6f 64 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 65 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 6e 6f 64 65 73 26 26 30 3d 3d 3d 65 2e 6e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 28 74 3d 65 2e 72 61 77 73 2e 61 66 74 65 72 29 29 72 65 74 75 72 6e 21 31 7d 29 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 72 61 77 49 6e 64 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 Data Ascii: "!=typeof e.raws.between)return t=e.raws.between.replace(/[^\s:]/g,""),!1})),t}},{key:"rawEmptyBody",value:function(e){var t;return e.walk((function(e){if(e.nodes&&0===e.nodes.length&&void 0!==(t=e.raws.after))return!1})),t}},{key:"rawIndent",value:functi
2024-03-28 14:09:33 UTC	16383	IN	Data Raw: 6e 4f 6e 52 6f 6f 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 72 65 73 75 6c 74 2e 6c 61 73 74 50 6c 75 67 69 6e 3d 65 3b 74 72 79 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 64 28 65 29 26 26 65 2e 4f 6e 63 65 29 7b 69 66 28 22 64 6f 63 75 6d 65 6e 74 22 3d 3d 3d 74 68 69 73 2e 72 65 73 75 6c 74 2e 72 6f 6f 74 2e 74 79 70 65 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 72 65 73 75 6c 74 2e 72 6f 6f 74 2e 6e 6f 64 65 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 65 2e 4f 6e 63 65 28 72 2c 74 2e 68 65 6c 70 65 72 73 29 7d 29 29 3b 72 65 74 75 72 6e 20 50 28 72 5b 30 5d 29 3f 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 72 29 3a 72 7d 72 65 74 75 72 6e 20 65 2e 4f 6e 63 65 Data Ascii: nOnRoot",value:function(e){var t=this;this.result.lastPlugin=e;try{if("object"===d(e)&&e.Once){if("document"===this.result.root.type){var r=this.result.root.nodes.map((function(r){return e.Once(r,t.helpers)}));return P(r[0])?Promise.all(r):r}return e.Once

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49758	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:33 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:33 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279732 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Thu, 28 Mar 2024 14:09:33 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (dce/26D0) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c081858c-401e-009f-738e-7e344e000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-03-28 14:09:33 UTC	15684	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-03-28 14:09:33 UTC	1490	IN	Data Raw: 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: {L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49761	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:33 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:33 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279714 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Thu, 28 Mar 2024 14:09:33 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (dce/26D4) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cdd1a4ce-a01e-0051-4a8e-7e1217000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-03-28 14:09:33 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49759	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:33 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:33 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279817 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 28 Mar 2024 14:09:33 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (dce/26A2) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9e7622f3-501e-00c2-048e-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-03-28 14:09:33 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49760	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:33 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:33 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279843 Cache-Control: public, max-age=31536000 Content-MD5: V5EQEHVskNWHVMke8e4nZQ== Content-Type: application/x-javascript Date: Thu, 28 Mar 2024 14:09:33 GMT Etag: 0x8DC2E5A3CC5D827 Last-Modified: Thu, 15 Feb 2024 19:13:48 GMT Server: ECAcc (dce/26D1) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 72516383-301e-0014-298d-7e460c000000 x-ms-version: 2009-09-19 Content-Length: 113657 Connection: close
2024-03-28 14:09:33 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-03-28 14:09:33 UTC	16383	IN	Data Raw: 69 74 60 20 70 72 65 73 65 74 2c 20 63 61 6e 27 74 20 62 65 20 65 6d 70 74 79 22 29 3b 72 65 74 75 72 6e 20 65 2e 6f 70 74 69 6f 6e 73 26 26 72 2e 73 65 74 28 65 2e 6f 70 74 69 6f 6e 73 29 2c 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 26 26 72 5b 74 5d 2e 72 75 6c 65 72 2e 65 6e 61 62 6c 65 4f 6e 6c 79 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 29 2c 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 32 26 26 72 5b 74 5d 2e 72 75 6c 65 72 32 2e 65 6e 61 62 6c 65 4f 6e 6c 79 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d Data Ascii: it` preset, can't be empty");return e.options&&r.set(e.options),e.components&&Object.keys(e.components).forEach((function(t){e.components[t].rules&&r[t].ruler.enableOnly(e.components[t].rules),e.components[t].rules2&&r[t].ruler2.enableOnly(e.components[t]
2024-03-28 14:09:33 UTC	16383	IN	Data Raw: 75 30 33 66 30 22 2c 22 4b 63 65 64 69 6c 22 3a 22 5c 75 30 31 33 36 22 2c 22 6b 63 65 64 69 6c 22 3a 22 5c 75 30 31 33 37 22 2c 22 4b 63 79 22 3a 22 5c 75 30 34 31 61 22 2c 22 6b 63 79 22 3a 22 5c 75 30 34 33 61 22 2c 22 4b 66 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 30 65 22 2c 22 6b 66 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 32 38 22 2c 22 6b 67 72 65 65 6e 22 3a 22 5c 75 30 31 33 38 22 2c 22 4b 48 63 79 22 3a 22 5c 75 30 34 32 35 22 2c 22 6b 68 63 79 22 3a 22 5c 75 30 34 34 35 22 2c 22 4b 4a 63 79 22 3a 22 5c 75 30 34 30 63 22 2c 22 6b 6a 63 79 22 3a 22 5c 75 30 34 35 63 22 2c 22 4b 6f 70 66 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 34 32 22 2c 22 6b 6f 70 66 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 35 63 22 2c 22 4b 73 63 72 22 3a 22 5c 75 64 38 33 35 Data Ascii: u03f0","Kcedil":"\u0136","kcedil":"\u0137","Kcy":"\u041a","kcy":"\u043a","Kfr":"\ud835\udd0e","kfr":"\ud835\udd28","kgreen":"\u0138","KHcy":"\u0425","khcy":"\u0445","KJcy":"\u040c","kjcy":"\u045c","Kopf":"\ud835\udd42","kopf":"\ud835\udd5c","Kscr":"\ud835
2024-03-28 14:09:33 UTC	16383	IN	Data Raw: 53 63 61 72 6f 6e 22 3a 22 5c 75 30 31 36 30 22 2c 22 73 63 61 72 6f 6e 22 3a 22 5c 75 30 31 36 31 22 2c 22 53 63 22 3a 22 5c 75 32 61 62 63 22 2c 22 73 63 22 3a 22 5c 75 32 32 37 62 22 2c 22 73 63 63 75 65 22 3a 22 5c 75 32 32 37 64 22 2c 22 73 63 65 22 3a 22 5c 75 32 61 62 30 22 2c 22 73 63 45 22 3a 22 5c 75 32 61 62 34 22 2c 22 53 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 65 22 2c 22 73 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 66 22 2c 22 53 63 69 72 63 22 3a 22 5c 75 30 31 35 63 22 2c 22 73 63 69 72 63 22 3a 22 5c 75 30 31 35 64 22 2c 22 73 63 6e 61 70 22 3a 22 5c 75 32 61 62 61 22 2c 22 73 63 6e 45 22 3a 22 5c 75 32 61 62 36 22 2c 22 73 63 6e 73 69 6d 22 3a 22 5c 75 32 32 65 39 22 2c 22 73 63 70 6f 6c 69 6e 74 22 3a 22 5c 75 32 61 31 33 22 2c 22 73 63 73 Data Ascii: Scaron":"\u0160","scaron":"\u0161","Sc":"\u2abc","sc":"\u227b","sccue":"\u227d","sce":"\u2ab0","scE":"\u2ab4","Scedil":"\u015e","scedil":"\u015f","Scirc":"\u015c","scirc":"\u015d","scnap":"\u2aba","scnE":"\u2ab6","scnsim":"\u22e9","scpolint":"\u2a13","scs
2024-03-28 14:09:33 UTC	16383	IN	Data Raw: 3a 5b 5d 2c 63 3c 30 3f 6c 2e 70 75 73 68 28 5b 22 63 6c 61 73 73 22 2c 72 2e 6c 61 6e 67 50 72 65 66 69 78 2b 64 5d 29 3a 28 6c 5b 63 5d 3d 6c 5b 63 5d 2e 73 6c 69 63 65 28 29 2c 6c 5b 63 5d 5b 31 5d 2b 3d 22 20 22 2b 72 2e 6c 61 6e 67 50 72 65 66 69 78 2b 64 29 2c 70 3d 7b 61 74 74 72 73 3a 6c 7d 2c 22 3c 70 72 65 3e 3c 63 6f 64 65 22 2b 69 2e 72 65 6e 64 65 72 41 74 74 72 73 28 70 29 2b 22 3e 22 2b 61 2b 22 3c 2f 63 6f 64 65 3e 3c 2f 70 72 65 3e 5c 6e 22 29 3a 22 3c 70 72 65 3e 3c 63 6f 64 65 22 2b 69 2e 72 65 6e 64 65 72 41 74 74 72 73 28 68 29 2b 22 3e 22 2b 61 2b 22 3c 2f 63 6f 64 65 3e 3c 2f 70 72 65 3e 5c 6e 22 7d 2c 69 2e 69 6d 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 2c 73 29 7b 76 61 72 20 6f 3d 65 5b 74 5d 3b 72 65 74 75 72 Data Ascii: :[],c<0?l.push(["class",r.langPrefix+d]):(l[c]=l[c].slice(),l[c][1]+=" "+r.langPrefix+d),p={attrs:l},"<pre><code"+i.renderAttrs(p)+">"+a+"</code></pre>\n"):"<pre><code"+i.renderAttrs(h)+">"+a+"</code></pre>\n"},i.image=function(e,t,r,n,s){var o=e[t];retur
2024-03-28 14:09:33 UTC	16383	IN	Data Raw: 43 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 62 72 65 61 6b 3b 66 6f 72 28 4c 3d 21 31 2c 63 3d 30 2c 64 3d 7a 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 63 2b 2b 29 69 66 28 7a 5b 63 5d 28 65 2c 76 2c 72 2c 21 30 29 29 7b 4c 3d 21 30 3b 62 72 65 61 6b 7d 69 66 28 4c 29 62 72 65 61 6b 3b 69 66 28 68 29 7b 69 66 28 28 45 3d 6f 28 65 2c 76 29 29 3c 30 29 62 72 65 61 6b 3b 46 3d 65 2e 62 4d 61 72 6b 73 5b 76 5d 2b 65 2e 74 53 68 69 66 74 5b 76 5d 7d 65 6c 73 65 20 69 66 28 28 45 3d 73 28 65 2c 76 29 29 3c 30 29 62 72 65 61 6b 3b 69 66 28 5f 21 3d 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 45 2d 31 29 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 28 52 3d 68 3f 65 2e 70 75 73 68 28 22 6f 72 64 65 72 65 64 5f 6c 69 73 74 5f 63 6c 6f 73 Data Ascii: Count[t]-e.blkIndent>=4)break;for(L=!1,c=0,d=z.length;c<d;c++)if(z[c](e,v,r,!0)){L=!0;break}if(L)break;if(h){if((E=o(e,v))<0)break;F=e.bMarks[v]+e.tShift[v]}else if((E=s(e,v))<0)break;if(_!==e.src.charCodeAt(E-1))break}return(R=h?e.push("ordered_list_clos
2024-03-28 14:09:33 UTC	15359	IN	Data Raw: 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 3d 30 2c 73 3d 65 2e 74 6f 6b 65 6e 73 2c 6f 3d 65 2e 74 6f 6b 65 6e 73 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 74 3d 72 3d 30 3b 74 3c 6f 3b 74 2b 2b 29 73 5b 74 5d 2e 6e 65 73 74 69 6e 67 3c 30 26 26 6e 2d 2d 2c 73 5b 74 5d 2e 6c 65 76 65 6c 3d 6e 2c 73 5b 74 5d 2e 6e 65 73 74 69 6e 67 3e 30 26 26 6e 2b 2b 2c 22 74 65 78 74 22 3d 3d 3d 73 5b 74 5d 2e 74 79 70 65 26 26 74 2b 31 3c 6f 26 26 22 74 65 78 74 22 3d 3d 3d 73 5b 74 2b 31 5d 2e 74 79 70 65 3f 73 5b 74 2b 31 5d 2e 63 6f 6e 74 65 6e 74 3d 73 5b 74 5d 2e 63 6f 6e 74 65 6e 74 2b 73 5b 74 2b 31 5d 2e 63 6f 6e 74 65 6e 74 3a 28 74 21 3d 3d 72 26 26 28 73 5b 72 5d 3d 73 5b 74 5d 29 2c 72 2b 2b 29 3b 74 21 3d 3d 72 26 26 28 73 2e 6c 65 6e Data Ascii: s=function(e){var t,r,n=0,s=e.tokens,o=e.tokens.length;for(t=r=0;t<o;t++)s[t].nesting<0&&n--,s[t].level=n,s[t].nesting>0&&n++,"text"===s[t].type&&t+1<o&&"text"===s[t+1].type?s[t+1].content=s[t].content+s[t+1].content:(t!==r&&(s[r]=s[t]),r++);t!==r&&(s.len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49763	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:33 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:33 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279796 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 28 Mar 2024 14:09:33 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (dce/2683) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 243944fc-401e-00db-3d8e-7e4b57000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-03-28 14:09:33 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49765	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:36 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:36 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279820 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Thu, 28 Mar 2024 14:09:36 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (dce/26A2) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9e7622f3-501e-00c2-048e-7e8866000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-03-28 14:09:36 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49764	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:36 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:36 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279717 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Thu, 28 Mar 2024 14:09:36 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (dce/26D4) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: cdd1a4ce-a01e-0051-4a8e-7e1217000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-03-28 14:09:36 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49766	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:36 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:36 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279799 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Thu, 28 Mar 2024 14:09:36 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (dce/2683) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 243944fc-401e-00db-3d8e-7e4b57000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-03-28 14:09:36 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49775	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:45 UTC	622	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:45 UTC	747	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279850 Cache-Control: public, max-age=31536000 Content-MD5: aw0rzdLjmyywvatll+RFBQ== Content-Type: application/x-javascript Date: Thu, 28 Mar 2024 14:09:45 GMT Etag: 0x8DC2E5A3CD3F914 Last-Modified: Thu, 15 Feb 2024 19:13:48 GMT Server: ECAcc (dce/2685) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 13b7565f-101e-006e-508e-7eba19000000 x-ms-version: 2009-09-19 Content-Length: 4730 Connection: close
2024-03-28 14:09:45 UTC	4730	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49777	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:45 UTC	670	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:45 UTC	714	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279805 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Thu, 28 Mar 2024 14:09:45 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (dce/26A6) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 71d1e913-e01e-00b9-728e-7e5f71000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-03-28 14:09:45 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49776	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:45 UTC	664	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:45 UTC	714	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279708 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Thu, 28 Mar 2024 14:09:45 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (dce/26A1) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c7f4e1ce-401e-008f-048e-7e846c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-03-28 14:09:45 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49778	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:45 UTC	425	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:46 UTC	714	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279805 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Thu, 28 Mar 2024 14:09:45 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (dce/26A6) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 71d1e913-e01e-00b9-728e-7e5f71000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-03-28 14:09:46 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49779	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:45 UTC	419	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:46 UTC	714	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279708 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Thu, 28 Mar 2024 14:09:45 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (dce/26A1) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c7f4e1ce-401e-008f-048e-7e846c000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-03-28 14:09:46 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49781	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:46 UTC	669	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:46 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279848 Cache-Control: public, max-age=31536000 Content-MD5: b2jpiB3xj44lGrV9V4Yjmw== Content-Type: image/svg+xml Date: Thu, 28 Mar 2024 14:09:46 GMT Etag: 0x8DB5C3F4A04A56D Last-Modified: Wed, 24 May 2023 10:11:49 GMT Server: ECAcc (dce/26A3) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: aee07af9-401e-005f-0f8e-7eb00a000000 x-ms-version: 2009-09-19 Content-Length: 1378 Connection: close
2024-03-28 14:09:46 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 65 36 65 36 65 36 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 61 22 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 32 2e 35 2c 31 34 41 31 2e 34 39 32 2c 31 2e 34 39 32 2c 30 2c 30 2c 31 2c 33 34 2c 31 35 2e 35 56 33 38 2e 35 41 31 2e 34 39 34 2c 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49780	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:46 UTC	669	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:46 UTC	735	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 362226 Cache-Control: public, max-age=31536000 Content-MD5: hHpCErmbkHbuOTKLJM0wrw== Content-Type: image/svg+xml Date: Thu, 28 Mar 2024 14:09:46 GMT Etag: 0x8DB5C3F4A4E2B5D Last-Modified: Wed, 24 May 2023 10:11:50 GMT Server: ECAcc (dce/26CC) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d3a4c726-e01e-002d-5ece-7d140e000000 x-ms-version: 2009-09-19 Content-Length: 379 Connection: close
2024-03-28 14:09:46 UTC	379	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 20 66 69 6c 6c 3d 22 23 65 36 65 36 65 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 34 34 2c 33 36 68 31 2e 39 32 61 38 2e 36 34 2c 38 2e 36 34 2c 30 2c 31 2c 31 2c 31 37 2e 32 38 2c 30 68 31 2e 39 32 61 31 30 2e 35 37 33 2c 31 30 2e 35 37 33 2c 30 2c 30 2c 30 2d 36 2e 35 36 39 2d 39 2e 37 37 31 2c 37 2e 36 38 2c 37 2e 36 38 2c 30 2c 31 2c 30 2d 37 2e 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49782	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:46 UTC	424	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:46 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 279848 Cache-Control: public, max-age=31536000 Content-MD5: b2jpiB3xj44lGrV9V4Yjmw== Content-Type: image/svg+xml Date: Thu, 28 Mar 2024 14:09:46 GMT Etag: 0x8DB5C3F4A04A56D Last-Modified: Wed, 24 May 2023 10:11:49 GMT Server: ECAcc (dce/26A3) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: aee07af9-401e-005f-0f8e-7eb00a000000 x-ms-version: 2009-09-19 Content-Length: 1378 Connection: close
2024-03-28 14:09:46 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 65 36 65 36 65 36 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 61 22 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 32 2e 35 2c 31 34 41 31 2e 34 39 32 2c 31 2e 34 39 32 2c 30 2c 30 2c 31 2c 33 34 2c 31 35 2e 35 56 33 38 2e 35 41 31 2e 34 39 34 2c 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49783	152.199.4.44	443	3264	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:09:46 UTC	424	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:09:46 UTC	735	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 362226 Cache-Control: public, max-age=31536000 Content-MD5: hHpCErmbkHbuOTKLJM0wrw== Content-Type: image/svg+xml Date: Thu, 28 Mar 2024 14:09:46 GMT Etag: 0x8DB5C3F4A4E2B5D Last-Modified: Wed, 24 May 2023 10:11:50 GMT Server: ECAcc (dce/26CC) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d3a4c726-e01e-002d-5ece-7d140e000000 x-ms-version: 2009-09-19 Content-Length: 379 Connection: close
2024-03-28 14:09:46 UTC	379	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 20 66 69 6c 6c 3d 22 23 65 36 65 36 65 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 34 34 2c 33 36 68 31 2e 39 32 61 38 2e 36 34 2c 38 2e 36 34 2c 30 2c 31 2c 31 2c 31 37 2e 32 38 2c 30 68 31 2e 39 32 61 31 30 2e 35 37 33 2c 31 30 2e 35 37 33 2c 30 2c 30 2c 30 2d 36 2e 35 36 39 2d 39 2e 37 37 31 2c 37 2e 36 38 2c 37 2e 36 38 2c 30 2c 31 2c 30 2d 37 2e 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.9

Target ID:	0
Start time:	15:09:18
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	15:09:21
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 --field-trial-handle=2232,i,17876861822445243493,403250052627078713,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	15:09:23
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://cnytechnologies-my.sharepoint.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://cnytechnologies-my.sharepoint.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Static File Info

Windows Analysis Report
http://cnytechnologies-my.sharepoint.com