Edit tour

Windows Analysis Report
https://gcv.microsoft.us/kgRWagmalJ

Overview

General Information

Sample URL:	https://gcv.microsoft.us/kgRWagmalJ
Analysis ID:	1417061
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 1092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://gcv.microsoft.us/kgRWagmalJ MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1912,i,12631141012789215718,17048731869604151303,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.194
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.194
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.194
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.194
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.194
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.194
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.190.194
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88

Source: global traffic	HTTP traffic detected: GET /kgRWagmalJ HTTP/1.1Host: gcv.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D HTTP/1.1Host: customervoice.microsoft.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/dist/cv-response-page.min.css?v=b3c1eb4c85&ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Scripts/dists/ls-pro.en-us.18e0edc91.js?ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /FormsPro/Scripts/Vendors/combined/basics_osi_v5_j3_3997ff6.js?ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /FormsPro/Scripts/Vendors/combined/response_v2_5234a19.js?ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Scripts/dists/response-page-pro.cachegroup-nerve.min.js?v=b3c1eb4c85&ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Scripts/dists/response-page-pro.min.js?v=b3c1eb4c85&ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$expand=questions($expand=choices) HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0x-ms-form-request-ring: formsprogccsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonContextParams: {"First Name":"Chez "}__RequestVerificationToken: SIHUJP0J4jcJ9nI2RIqeMfX9-76tZexD-QfhSpl_0t2pxrn7apZX__XC5CfYVOTLLAY9MTwqW0ARoD2B7IxYziWSRm7Q0qghvZFzYscuh8c1sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Scripts/dists/response-page-pro.chunk.1ds.323a60b.js?ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$expand=questions($expand=choices) HTTP/1.1Host: customervoice.microsoft.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Scripts/dists/response-page-pro.chunk.utel.c1af5df.js?ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Scripts/dists/response-page-pro.chunk.postsubmit.b7eca17.js?ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Scripts/dists/response-page-pro.chunk.quiz.6dc4e0a.js?ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /cdn/scripts/dists/telemetry-worker.1.js HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Pages/ResponsePage.aspx/GetResourceStrings HTTP/1.1Host: customervoice.microsoft.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /FormsPro/Images/CustomerVoice/CustomerVoice.ico HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Scripts/dists/response-page-pro.chunk.638.3250f1d.js?ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Scripts/dists/response-page-pro.chunk.vendors.e0d6b00.js?ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /FormsPro/Images/CustomerVoice/CustomerVoice.ico HTTP/1.1Host: customervoice.microsoft.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$select=id,customCssFileName,customCSSInLineHeaderToggle,footerText HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-CorrelationId: c88ce182-a2e1-44cb-8902-572760b072bdX-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0x-ms-form-request-ring: formsprogccsec-ch-ua-mobile: ?0Authorization: OData-MaxVersion: 4.0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/jsonContextParams: {"First Name":"Chez "}__RequestVerificationToken: SIHUJP0J4jcJ9nI2RIqeMfX9-76tZexD-QfhSpl_0t2pxrn7apZX__XC5CfYVOTLLAY9MTwqW0ARoD2B7IxYziWSRm7Q0qghvZFzYscuh8c1x-ms-form-request-source: ms-formwebsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$select=id,customCssFileName,customCSSInLineHeaderToggle,footerText HTTP/1.1Host: customervoice.microsoft.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /formapi/api/privacy?ownerTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&currentUserTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&isAnonymous=true HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-CorrelationId: d76d5655-a51f-4ca6-b68d-555bd3ba18dbX-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0x-ms-form-request-ring: formsprogccsec-ch-ua-mobile: ?0Authorization: OData-MaxVersion: 4.0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: application/jsonContextParams: {"First Name":"Chez "}__RequestVerificationToken: SIHUJP0J4jcJ9nI2RIqeMfX9-76tZexD-QfhSpl_0t2pxrn7apZX__XC5CfYVOTLLAY9MTwqW0ARoD2B7IxYziWSRm7Q0qghvZFzYscuh8c1x-ms-form-request-source: ms-formwebsec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Scripts/dists/response-page-pro.chunk.cvheadertheme.ce22c68.js?ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /Scripts/dists/response-page-pro.chunk.cvtitlerender.65b951b.js?ring=UsGovGccProduction HTTP/1.1Host: customervoice.microsoft.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /formapi/api/privacy?ownerTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&currentUserTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&isAnonymous=true HTTP/1.1Host: customervoice.microsoft.usConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=oKH7AKaDOEfh6P5&MD=PlelZS9N HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: 60X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=-60; StandardBias=0; TimeZoneKeyName=W. Europe Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAW3qyTdwQuptWR9Ey%2B4YsPQCwEgYbIhQ5k%2BuSZMHY2RAPXgrB9S2QxDZ8JdvVzuO3U9YAQiTv7GSi2wL9GsIqgnhvhB3obPDRIz5FzmusEo0JzTqouYgoWI6ChC96B9lPF/CWvjDik/4T5gF8NkaJg7HcCap4YDmcojPWMPPQM6gE5ZM2cfQnrDQ1AOuB8wJmVokZ2be5EksJZ%2BFtY/7AkZFm9JN2wEvZ/XqIUHtTSBpMLDwp6htEB5Og0eEO2b5wVaEV0JeY%2BHYZ%2BCzZbxfaSFnsYALo9NGT/VQmtWM7KD7HLPZvjSo/HMhCaNK7YNpbamGF1txFr/LoBYEYD5HiYUDZgAACOJrP89Dvnm5qAG3orzwOexsxXp39x2y9YU6Voww%2BWWDmGNbG9gXRZUKQ6CPt3yNUSStKuvrX6P3nBsiVVydmlauGRm%2Bd4V0ptF8bijXl6doHUNgdSfa9tmZdxZOJVpIl/%2BlWoNJFD/waVHfrm4P2U8UX7l6QWd1fFIglHFyyv6X2DdQe12Mbs0H3H9KuTryHCEiVy31PBPz1ttpBqU4JnrI0cVPe4meYPrCbFm/s1HKyMgbICLeMI3g3%2Bv8Ad4oql2iqiWjojiMfM1JKuo6879mgMUE8REyE6inyzgZVTNvJZTgdz5hjqvepIk/89U8wyf6hrybnEHlF2WL02xZlDvN3/SzppJJVizO0oEDQ7QIHug4YgqQkwuJsxEwrHYdNdlba/x2bLuCBmCoe12NzYOarwhrffx8k8VmUtmcK/RZ4DGGJMArwmLnzpgbZmH0IEHMOPRl43ojFVnqD1ulXId/I1T8wdUwJi24%2BNu1J1dy6rcmujvdOadLzXgZNxHefmpA3V6Id3DqxTW4nKl9znii3r92O7e1KHucBwN6K4Xeja%2BdIDDyj6UoIfeJfXxwYWV72QE%3D%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1711635269User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: 78167B19EE174DA3B1267413266BEA7DX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=oKH7AKaDOEfh6P5&MD=PlelZS9N HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: unknown

DNS traffic detected: queries for: gcv.microsoft.us

Source: unknown

HTTP traffic detected: POST /Pages/ResponsePage.aspx/GetResourceStrings HTTP/1.1Host: customervoice.microsoft.usConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-CorrelationId: 611afbb5-1c7d-470e-9ee4-455f6159fddcX-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0sec-ch-ua-mobile: ?0formspro: enabledUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/json; charset=utf-8x-ms-form-request-source: ms-formwebsec-ch-ua-platform: "Windows"Accept: */*Origin: https://customervoice.microsoft.usSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7DAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1

Source: chromecache_96.1.dr	String found in binary or memory: http://amsul.ca
Source: chromecache_96.1.dr	String found in binary or memory: http://amsul.github.io/pickadate.js
Source: chromecache_96.1.dr	String found in binary or memory: http://amsul.github.io/pickadate.js/date.htm
Source: chromecache_97.1.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_97.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_97.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_90.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_115.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.cachegroup-nerve.min.js
Source: chromecache_116.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.1ds.323a60b.js.ma
Source: chromecache_99.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.638.3250f1d.js.ma
Source: chromecache_101.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvheadertheme.ce2
Source: chromecache_112.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvtitlerender.65b
Source: chromecache_93.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.postsubmit.b7eca1
Source: chromecache_106.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.quiz.6dc4e0a.js.m
Source: chromecache_102.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.utel.c1af5df.js.m
Source: chromecache_91.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.vendors.e0d6b00.j
Source: chromecache_97.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.min.js.map/72d2a4ad6536
Source: chromecache_92.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/telemetry-worker.1.js.map/2fc1de80443abf8
Source: chromecache_87.1.dr, chromecache_111.1.dr	String found in binary or memory: https://cloudflare-ipfs.com/ipfs/QmX4WG9i6svNo7QbAwn7yb2Tk6a5rFAhM5XvSGusSr18f8
Source: chromecache_90.1.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: chromecache_87.1.dr, chromecache_111.1.dr	String found in binary or memory: https://gcv.microsoft.us/JWWGOUYU5N
Source: chromecache_108.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_108.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/customize/)
Source: chromecache_96.1.dr	String found in binary or memory: https://github.com/SoapBox/linkifyjs
Source: chromecache_108.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_99.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_99.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_99.1.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_111.1.dr	String found in binary or memory: https://lists.gcc.osi.office365.us/Images/f8c813f9-acbb-4b18-bb10-10729643538d/1b5da865-0b25-4d96-82
Source: chromecache_87.1.dr, chromecache_111.1.dr	String found in binary or memory: https://pub-67b1238eb6e243dc93f415a9f97faade.r2.dev/df-invest.html
Source: chromecache_97.1.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_90.1.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_99.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_90.1.dr	String found in binary or memory: https://underscorejs.org

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702

Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.17:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.17:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.190.190.194:443 -> 192.168.2.17:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.17:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.17:49765 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@14/62@12/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://gcv.microsoft.us/kgRWagmalJ
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1912,i,12631141012789215718,17048731869604151303,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1912,i,12631141012789215718,17048731869604151303,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_108.1.dr

Binary or memory string: '}.ms-Icon--ConnectVirtualMachine::before{content:'

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://gcv.microsoft.us/kgRWagmalJ	0%	Avira URL Cloud	safe
https://gcv.microsoft.us/kgRWagmalJ	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
http://amsul.github.io/pickadate.js	0%	URL Reputation	safe
http://amsul.github.io/pickadate.js/date.htm	0%	URL Reputation	safe
https://js.foundation/	0%	URL Reputation	safe
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.1ds.323a60b.js?ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/cdn/scripts/dists/telemetry-worker.1.js	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/Pages/ResponsePage.aspx/GetResourceStrings	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.postsubmit.b7eca17.js?ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/Scripts/dists/ls-pro.en-us.18e0edc91.js?ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.quiz.6dc4e0a.js?ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/FormsPro/Scripts/Vendors/combined/basics_osi_v5_j3_3997ff6.js?ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.638.3250f1d.js?ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.cvheadertheme.ce22c68.js?ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/css/dist/cv-response-page.min.css?v=b3c1eb4c85&ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/FormsPro/Scripts/Vendors/combined/response_v2_5234a19.js?ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.utel.c1af5df.js?ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	0%	Virustotal		Browse
https://cloudflare-ipfs.com/ipfs/QmX4WG9i6svNo7QbAwn7yb2Tk6a5rFAhM5XvSGusSr18f8	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$select=id,customCssFileName,customCSSInLineHeaderToggle,footerText	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.cvtitlerender.65b951b.js?ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://cloudflare-ipfs.com/ipfs/QmX4WG9i6svNo7QbAwn7yb2Tk6a5rFAhM5XvSGusSr18f8	19%	Virustotal		Browse
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.cachegroup-nerve.min.js?v=b3c1eb4c85&ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://pub-67b1238eb6e243dc93f415a9f97faade.r2.dev/df-invest.html	100%	Avira URL Cloud	phishing
https://customervoice.microsoft.us/formapi/api/privacy?ownerTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&currentUserTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&isAnonymous=true	0%	Avira URL Cloud	safe
https://gcv.microsoft.us/JWWGOUYU5N	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/FormsPro/Images/CustomerVoice/CustomerVoice.ico	0%	Avira URL Cloud	safe
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.min.js?v=b3c1eb4c85&ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://gcv.microsoft.us/JWWGOUYU5N	0%	Virustotal		Browse
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.vendors.e0d6b00.js?ring=UsGovGccProduction	0%	Avira URL Cloud	safe
https://pub-67b1238eb6e243dc93f415a9f97faade.r2.dev/df-invest.html	2%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
eafd-3p-profile.usgovtrafficmanager.net	20.140.48.70	true	false	unknown
osiusgcc-usge-teal-001.usgovvirginia.cloudapp.usgovcloudapi.net	52.127.240.65	true	false	high
www.google.com	172.253.62.105	true	false	high
customervoice.microsoft.us	unknown	unknown	false	unknown
lists.gcc.osi.office365.us	unknown	unknown	false	high
gcv.microsoft.us	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.1ds.323a60b.js?ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/cdn/scripts/dists/telemetry-worker.1.js	false	Avira URL Cloud: safe	unknown
https://gcv.microsoft.us/kgRWagmalJ	false		unknown
https://customervoice.microsoft.us/Pages/ResponsePage.aspx/GetResourceStrings	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D	false		unknown
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.postsubmit.b7eca17.js?ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/Scripts/dists/ls-pro.en-us.18e0edc91.js?ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.quiz.6dc4e0a.js?ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/FormsPro/Scripts/Vendors/combined/basics_osi_v5_j3_3997ff6.js?ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.638.3250f1d.js?ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.cvheadertheme.ce22c68.js?ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/css/dist/cv-response-page.min.css?v=b3c1eb4c85&ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/FormsPro/Scripts/Vendors/combined/response_v2_5234a19.js?ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.utel.c1af5df.js?ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$select=id,customCssFileName,customCSSInLineHeaderToggle,footerText	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.cvtitlerender.65b951b.js?ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.cachegroup-nerve.min.js?v=b3c1eb4c85&ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/formapi/api/privacy?ownerTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&currentUserTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&isAnonymous=true	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/FormsPro/Images/CustomerVoice/CustomerVoice.ico	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.min.js?v=b3c1eb4c85&ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown
https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.vendors.e0d6b00.js?ring=UsGovGccProduction	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jquery.org/license	chromecache_97.1.dr	false		high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.min.js.map/72d2a4ad6536	chromecache_97.1.dr	false		high
http://amsul.ca	chromecache_96.1.dr	false		high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvheadertheme.ce2	chromecache_101.1.dr	false		high
http://jqueryui.com	chromecache_97.1.dr	false		high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.postsubmit.b7eca1	chromecache_93.1.dr	false		high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.utel.c1af5df.js.m	chromecache_102.1.dr	false		high
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	chromecache_97.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://github.com/SoapBox/linkifyjs	chromecache_96.1.dr	false		high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvtitlerender.65b	chromecache_112.1.dr	false		high
https://underscorejs.org	chromecache_90.1.dr	false		high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.cachegroup-nerve.min.js	chromecache_115.1.dr	false		high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.1ds.323a60b.js.ma	chromecache_116.1.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_90.1.dr	false		high
https://getbootstrap.com/docs/3.4/customize/)	chromecache_108.1.dr	false		high
http://amsul.github.io/pickadate.js	chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_90.1.dr	false		high
http://api.jqueryui.com/category/ui-core/	chromecache_97.1.dr	false		high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.quiz.6dc4e0a.js.m	chromecache_106.1.dr	false		high
https://getbootstrap.com/)	chromecache_108.1.dr	false		high
https://cloudflare-ipfs.com/ipfs/QmX4WG9i6svNo7QbAwn7yb2Tk6a5rFAhM5XvSGusSr18f8	chromecache_87.1.dr, chromecache_111.1.dr	false	19%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://jquery.org/license	chromecache_99.1.dr	false		high
https://jquery.com/	chromecache_99.1.dr	false		high
https://pub-67b1238eb6e243dc93f415a9f97faade.r2.dev/df-invest.html	chromecache_87.1.dr, chromecache_111.1.dr	false	2%, Virustotal, Browse Avira URL Cloud: phishing	unknown
http://amsul.github.io/pickadate.js/date.htm	chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_108.1.dr	false		high
https://fb.me/react-polyfills	chromecache_90.1.dr	false		high
https://gcv.microsoft.us/JWWGOUYU5N	chromecache_87.1.dr, chromecache_111.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.638.3250f1d.js.ma	chromecache_99.1.dr	false		high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.vendors.e0d6b00.j	chromecache_91.1.dr	false		high
https://lists.gcc.osi.office365.us/Images/f8c813f9-acbb-4b18-bb10-10729643538d/1b5da865-0b25-4d96-82	chromecache_111.1.dr	false		high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/telemetry-worker.1.js.map/2fc1de80443abf8	chromecache_92.1.dr	false		high
https://sizzlejs.com/	chromecache_99.1.dr	false		high
https://js.foundation/	chromecache_99.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
20.140.48.70	eafd-3p-profile.usgovtrafficmanager.net	United States	8070	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.127.240.65	osiusgcc-usge-teal-001.usgovvirginia.cloudapp.usgovcloudapi.net	United States	8070	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.253.62.105	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417061
Start date and time:	2024-03-28 15:13:39 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://gcv.microsoft.us/kgRWagmalJ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@14/62@12/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, RuntimeBroker.exe, SIHClient.exe, backgroundTaskHost.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.111.94, 172.253.62.84, 172.253.63.138, 172.253.63.102, 172.253.63.100, 172.253.63.113, 172.253.63.139, 172.253.63.101, 34.104.35.123, 51.132.193.105, 52.127.240.59, 20.50.80.209, 172.253.122.94, 142.251.167.138, 142.251.167.101, 142.251.167.102, 142.251.167.139, 142.251.167.100, 142.251.167.113
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, onedscolprdneu02.northeurope.cloudapp.azure.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, gcc.lists.osi.office365.us.akadns.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, browser.events.data.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, onedscolprduks05.uksouth.cloudapp.azure.com, login.live.com, evoke-windowsservices-tas.msedge.net, update.googleapis.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:14:12 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9977127329769213
Encrypted:	false
SSDEEP:	48:8NPydhTi7vIHNidAKZdA1JehwiZUklqehly+3:8lEou+y
MD5:	81DE67E54B46587DC545ED29607797F6
SHA1:	689A8EC4FC1F1DABD00DD23189C9AF98DA13C4E0
SHA-256:	D47475512A6B0377E9430FF23FB837DF2DEA4A08B5D2A25354A6BA57FA597593
SHA-512:	6AF7986826E983DD331AFAEF6818EE76D7F6F8EFF56BB9C6DA596A711DB2F0CC5963F71A92CE6960FB02976F2D1AF6BEC27A864569B6A12966A67B7698137907
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....pR#5........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I\|X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V\|X.q....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V\|X.q...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V\|X.q...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:14:12 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.013734695832535
Encrypted:	false
SSDEEP:	48:8jPydhTi7vIHNidAKZdA10eh/iZUkAQkqehuy+2:87Eoc9Qny
MD5:	307DC005E8C8A10DCA6A1964F07F5CB6
SHA1:	96AF5844E505CB91F7487084A18C69F2AA9E8D9C
SHA-256:	45C96798B8D4D4115699BECAEC5CE422C546160E190C3F70F00257FA8ACECC5A
SHA-512:	E415A5A8490B0CA23D3E47DC329DE5FEC1147940AFEE6FF2997CFCB3733816098A8B272BC14F3B42F53F5C38253702CDFC8635E01A573B3A326743256624BEFF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......5........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I\|X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V\|X.q....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V\|X.q...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V\|X.q...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.021982807422477
Encrypted:	false
SSDEEP:	48:8eydhTi7vjHNidAKZdA14tIeh7sFiZUkmgqeh7s4y+BX:8eEodnSy
MD5:	F62D4DFCDA3B7693DC9815C7A2E3C741
SHA1:	31964DDB3CEC3BF97F358F5F9314CE9D14243361
SHA-256:	D034382BB36D599299CC058536E9F32616DEF21E1D2D1128A7475FF56A06CE4C
SHA-512:	EADB9225FFF106ED953174C5925CCB8D0DA605DBF3BF52C2846CAE208EE835B43E3E2CDB04E8B14E111A98A82B933805FA9FCE3EFBA02655FBA930353FDD782A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I\|X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V\|X.q....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V\|X.q...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:14:12 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.012978594149133
Encrypted:	false
SSDEEP:	48:8qydhTi7vIHNidAKZdA1behDiZUkwqehqy+R:8qEoXQy
MD5:	C0288B6D973F22B9AAF19982D0ECEC64
SHA1:	2D044ACCC8B077BD7612AED8C4F0A6A750A43A06
SHA-256:	B7077D277C30433F93E3243EE8BBD3342B5E0C454347774B52A1AD3897254725
SHA-512:	8E6D6196429625E20DEE544188E039F36580D66A2E8D18CE88CC4F2DFAA77A740DF9B590E9ECE6329CA3136D0CA52D4AF471AF2F39E8B2164D84F270C6E862E1
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......5........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I\|X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V\|X.q....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V\|X.q...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V\|X.q...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:14:12 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.003743507638731
Encrypted:	false
SSDEEP:	48:8MydhTi7vIHNidAKZdA1VehBiZUk1W1qehcy+C:8MEon98y
MD5:	EE5FD37A7101BA3FCA9F0FCFF59FCB02
SHA1:	3DC1654AB5C8F8BF733C2BFC067217B1BCE9FDAC
SHA-256:	A1FB37A386373D55C360AB7DCE2929B0BA94F82C3C4387F83379936060DA11A5
SHA-512:	44A57C3A8CF9C053DD761E0ECABE9E0AFD1E734FC5726109502EE3DD73151C2E8E27C051A05B3A5C4EA5EBB9E0F21CDF1F64297473B62E680E3C2E6A6B95179D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....N".5........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I\|X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V\|X.q....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V\|X.q...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V\|X.q...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:14:11 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.0132996646434735
Encrypted:	false
SSDEEP:	48:81ydhTi7vIHNidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbSy+yT+:81EojTTTbxWOvTbSy7T
MD5:	0C48A64E47BDAFC35968420DFBC758D4
SHA1:	13D4335F140FFB0F7A6BADC885E22998EB41B64D
SHA-256:	76B45632B7170CC42CC4F8287B8A133FC928A510E1A986F01313E6F49617AE2D
SHA-512:	3811FA39CC6DA99BCB4781D025FB7EDF7A5D868FB587581018501A509EB49F7FB32713CE905F76C9849CED5953B0088F978EBA49FA4AAE84D4A2F0E331A1BA02
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....e..5........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I\|X.q....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V\|X.q....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V\|X.q....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V\|X.q...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V\|X.q...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17
Entropy (8bit):	3.4992275471326932
Encrypted:	false
SSDEEP:	3:YVXMTvciJHw:Y9M74
MD5:	AF469AC6ABAAF7DA1ACC59F7292E6671
SHA1:	75ACAD50ED8287D26D5EA2C7380B09B6095DA453
SHA-256:	AC8EA734A33366EF42F62398D95B4A9D912043522CF945405FD691F7AA342FED
SHA-512:	7422A346D1B74D672EB6DBEC85D63F3A6D8C394FA8318F128E9594469DFC4FDEAA190DE5426224BDB1B77C53E73CD29BA8A42780683B6B586C717F4AB3D8CE02
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/formapi/api/privacy?ownerTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&currentUserTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&isAnonymous=true
Preview:	{"privacyUrl":""}

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23932)
Category:	downloaded
Size (bytes):	24184
Entropy (8bit):	5.318925777353684
Encrypted:	false
SSDEEP:	384:kiirZE/ggg4gJg9g0g1g1g8gegmvgkgdg1g+gBKHKxg/gL9gpgLg5gkLgDgkgcEm:dq2ZtCQZsWZbjvRU2t+KHKxCu9KUSZLE
MD5:	955B3780D94E04954A81D2BACA687D35
SHA1:	B3F3234B6BEB96B1B5E1AD69FA22CE398220D715
SHA-256:	9382E22FD7683906612A6416A12ECB81B1318B03CBB3A3E009A5A49687155B81
SHA-512:	1A8A349812A2EDA14636414A13F30A687FEF3F76B256EC3B361911992562F260B89C2E0E6E4FCA16EC5126A74792148B86E9C09AF000E294660E3361FC601E07
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.cvheadertheme.ce22c68.js?ring=UsGovGccProduction
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[264],{22184:function(o,e,r){r.d(e,{D4:function(){return m},K9:function(){return t},O8:function(){return d},YR:function(){return i},cL:function(){return l},el:function(){return f},f8:function(){return p},pP:function(){return c},t3:function(){return n}});var t=.5,i=1.5,c=4.5,n=3,f=1.5,a=[{BackgroundColor:"#eee6f2",BackgroundImage:null,Name:"CV_HBG_Professional",PrimaryColor:"#21052e",SecondaryColor:"#0f0214",Thumbnail:null},{BackgroundColor:"#e6eff2",BackgroundImage:null,Name:"CV_HBG_Friendly",PrimaryColor:"#185b75",SecondaryColor:"#13475b",Thumbnail:null},{BackgroundColor:"#e6f2eb",BackgroundImage:null,Name:"CV_HBG_Playful",PrimaryColor:"#237547",SecondaryColor:"#1b5b38",Thumbnail:null},{BackgroundColor:"#f2ece6",BackgroundImage:null,Name:"CV_HBG_Relaxed",PrimaryColor:"#68503c",SecondaryColor:"#4f3c2d",Thumbnail:null},{BackgroundColor:"#e6ecf2",BackgroundImage:null,Name:"CV_HBG_3DMolecules",PrimaryColor:"#416083",SecondaryCol

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29782)
Category:	downloaded
Size (bytes):	30016
Entropy (8bit):	5.358356223830344
Encrypted:	false
SSDEEP:	384:eHUPgSAjoykGCxol+z46HIklkXFEQ8P0HqFWSwDZUoAPLpXswMAW4diiw:SJjuGCSlNkqFZHBr09/hLdrw
MD5:	C84F161AC3232BC00553A19A9043D7A2
SHA1:	7487D80415B1E1EBE3B1454CE6B8EAC1701E4550
SHA-256:	E0362CF9EE3665EA471A69CF31D723630899D6CF8F0A907655B32578C690262D
SHA-512:	7CC9856D975B55E24B984CC3C63D5FC4BBCDA3AF0DC695CDDB79B8AC6D51582A60552EE766B380C1730C4D789FCA1554548C3532174989AA231879ED379CFFEF
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.utel.c1af5df.js?ring=UsGovGccProduction
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[824],{7728:function(e,t,n){n.r(t),n.d(t,{initializeTelemetryLogger:function(){return $e}});var i,a=n(92560),s=n(63061),o=n(60211),r=n(5809),u=function(e){for(var t=[],n=1;n<arguments.length;n++)t[n-1]=arguments[n]},c=n(10836),l=n(5699),d=n(59312),p=n(26261);!function(e){e.DataClassification={EssentialServiceMetadata:1,AccountData:2,SystemMetadata:4,OrganizationIdentifiableInformation:8,EndUserIdentifiableInformation:16,CustomerContent:32,AccessControl:64,PublicNonPersonalData:128,EndUserPseudonymousInformation:256,PublicPersonalData:512,SupportData:1024,DirectMeasurementData:2048,Everything:65535},e.DataFieldType={String:0,Boolean:1,Int64:2,Double:3,Guid:4},e.SamplingPolicy={NotSet:0,Measure:1,Diagnostics:2,CriticalBusinessImpact:191,CriticalCensus:192,CriticalExperimentation:193,CriticalUsage:194},e.PersistencePriority={NotSet:0,Normal:1,High:2},e.CostPriority={NotSet:0,Normal:1,High:2},e.DataCategories={NotSet:0,SoftwareSe

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 572x233, components 3
Category:	dropped
Size (bytes):	39813
Entropy (8bit):	7.6964344998051875
Encrypted:	false
SSDEEP:	768:hA76jYxwDa19zPT9Hf6E/HMSvLWUXRsu6mvcB0vCfRNHlZP9oue1v8BA0l/6:hY1z/HMmCUXRsu6maW1sFg
MD5:	E71534E10B1241216874F6C9FAEAD237
SHA1:	55E373F4F85AEC2E48AF6A225D4FD67B42DFBAFD
SHA-256:	D38383C47693B251562296E1B8366AF11454BFCA4CCEA558895C946F180DD003
SHA-512:	757FE3CD0810AD020227C42A8D1603185A677C92E5231E4E2B8A3E3E4DB64607AEAA0A76417447CD4E6D808C138D1CE448750CC990C85CB586CF5DD0D1F38176
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`....."Exif..MM..........................C....................................................................C.........................................................................<.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..w.Gk\|...'.I.....Vc^..........o...c......W.<5e..T...2....[.'...a..pq..}...\|..s....,~1].-"..yI.....[l...w.7..o.,..e.`4.e....zo.._k..._....m\|F?...}9......P.......O..F.a..........8...k......z_.p....K.~......y......6+.........+

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	5.790142327810594
Encrypted:	false
SSDEEP:	48:SPVe3xrp8vtSgzZwuOhNYBIakka4sSSSSgU0B/4QL/d54hUHy5c59fHIre1YHyph:SPVUBpozOsBn+4Y0B/4QhuWw29foKWw
MD5:	EE2B357FA5FBA69AF238168E3A1A27E1
SHA1:	B5DD4606BEDBF1D705A01F833802248E03D01518
SHA-256:	0FD813BAE48835570858A2508D9C29900B8A4CDDEBFF4A250E79AD12F8ACBDCB
SHA-512:	EC00810F1DAD54D6036359386C7A205953CF1E8F81909471376EA7F77786BAABCF2EBB37A68CEB63531147A92080195EF64D93FE750380038E0AA00797DFCBDA
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/FormsPro/Images/CustomerVoice/CustomerVoice.ico
Preview:	...... .... .........(... ...@..... .......................................................................................................................................................................................................p...{@..\|o..x...x...w...wo..s@..........................................................................................`..}...}...\|...{...{...y...x...x...v...w ........]e.`\d..[b..Ze.`......................................................`...........~...~...}...p...^...R...W...]...V.^f..^f..\e..]e..\d..[d..Zd............................................ ....................[...1...!... ...!...!...!.]f.._h..^g..^g..]e..]e..\e..\d..\d....................................0.................\|...E...!...!..."...!..."..."... .Zb.._h..^g..^g..^g..^g..]f..]e..\e..\f.P..........................0.....................3...#...#...#...#...#...#...$.x...`i..`i..`i..`i.._h.._h.._h..^g..]f..^g..`h .................. ....................G...

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	89
Entropy (8bit):	5.252206992881218
Encrypted:	false
SSDEEP:	3:YMw1sJl41OjKYnjSchNSK6rw0PUUVyDJxyCXLYn:YMwUOyBzSK6rZPV+Jxpcn
MD5:	2544E12C996BF24471362B93F0DA41F3
SHA1:	A86BF135AB32EFD7D71F9D608A6ADF970446E945
SHA-256:	5066B03C47885E634492DD13D9D4CD86EBB62D4B6603FA5DD249E0DA603B4F76
SHA-512:	996BD40F9124BAAF345E0F63C5FF9525FE577207B0D505AEB8F602CBB1AF522F5434A92B40B80DB2AAEAE39E44EE9370BDFB2C52DCF68E6532553C7265270D9D
Malicious:	false
Reputation:	low
Preview:	{"id":"-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u"}

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2530)
Category:	downloaded
Size (bytes):	2764
Entropy (8bit):	5.353085253295088
Encrypted:	false
SSDEEP:	48:ic4VJPGrMCGy7aYa9bEkW9vmS0/eLbZcKMhzMEM+iMUYGbEfKMhzMEMUMpeiMUYp:IJla5QbEkW9c/eLbZixMX+VUYGbEFxMy
MD5:	1D91B187A32745D330A2077FDADD872B
SHA1:	055D7BB0CF69E295C06346221B784359FA9199E2
SHA-256:	2453F3D239A982DCF75B5DFA55261BC8BF77D04591F331847784AC4982E62F7E
SHA-512:	D05DB41A901DA52397F7EC77E72B5D68697F45DA6505A29EFE26443DB299FFE5F29EB4C9E8FF4F67E327A8EEB385B83D0BB94BE3F28CFC78BD0F4A770CB0307E
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.quiz.6dc4e0a.js?ring=UsGovGccProduction
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[541],{85451:function(e,t,r){r.r(t),r.d(t,{createResultContainerInternal:function(){return a},validateQuizPoint:function(){return u}});var o=r(87363),n=r(7645),i=r(65863);function a(e){var t=function(e){if(e.state.IsStudentViewMode){var t=e.props.Response.Feedback;if(t){var r=(0,n.pm)().RuntimeView_FormComment.format(t),a=(0,i.q)({Text:r,ContainsHtml:!0,RenderMode:"RichText"});return o.createElement("div",{className:"office-form-formcomment-container"},o.createElement("div",{className:"office-form-formcomment office-form-theme-primary-foreground"},a))}return}}(e),r=function(e){var t=0,r=0,i=0,a=0,s=!1;(4===e.state.SubmitState\|\|e.state.IsStudentViewMode)&&e.formRuntimeMaster.TopQuestionRuntimeMasters().forEach((function(o){var n=o.Question.Model,m=o.Question;if(n.IsQuiz)if(m.hasCorrectAnswers(o.Model.QuizResult)&&++i,r+=n.Point\|\|0,a+=o.Model.QuizResult&&o.Model.QuizResult.IsAnswerCorrect?1:0,4===e.state.SubmitState)t+=o.Model.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64954), with CRLF line terminators
Category:	downloaded
Size (bytes):	213684
Entropy (8bit):	5.088778087762516
Encrypted:	false
SSDEEP:	1536:1IuiHlqxqvT5Rbs+Vv/HTwhb2CyUueSRboS2aaY9hiiAH:tAT5Ns+VXTwhbRq1QaRM
MD5:	416B512C6FF81B7E3BD675E455905146
SHA1:	9F96EE2E55FDBED40B31BE7C24A97008A044404B
SHA-256:	C400728CA705268C42BAFCADB6FD5E3AEA844F950E145C6F7E835D08E4C22259
SHA-512:	4875EEE2972328A6653F3A83AB354647B74FA445E4E075C3D2651E453DDEC2967737626CD0E0BCC5D39A116F4C31AC20E5A58E03196382DB43B8E6269D3BF1A8
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/css/dist/cv-response-page.min.css?v=b3c1eb4c85&ring=UsGovGccProduction
Preview:	@charset 'UTF-8';/!.. Generated using the Bootstrap Customizer (https://getbootstrap.com/docs/3.4/customize/).. //!.. * Bootstrap v3.4.1 (https://getbootstrap.com/).. * Copyright 2011-2019 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:none;text-decoration:underline;text-decoration:underline dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17
Entropy (8bit):	3.4992275471326932
Encrypted:	false
SSDEEP:	3:YVXMTvciJHw:Y9M74
MD5:	AF469AC6ABAAF7DA1ACC59F7292E6671
SHA1:	75ACAD50ED8287D26D5EA2C7380B09B6095DA453
SHA-256:	AC8EA734A33366EF42F62398D95B4A9D912043522CF945405FD691F7AA342FED
SHA-512:	7422A346D1B74D672EB6DBEC85D63F3A6D8C394FA8318F128E9594469DFC4FDEAA190DE5426224BDB1B77C53E73CD29BA8A42780683B6B586C717F4AB3D8CE02
Malicious:	false
Reputation:	low
Preview:	{"privacyUrl":""}

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9175
Entropy (8bit):	5.377501835135704
Encrypted:	false
SSDEEP:	192:KBVSqgXnFpVEGWKMG+/wJfCFuzklw4jF4Z:6VctSsqucI
MD5:	4DFB8996E4AB461C9E53550C8BE0D44D
SHA1:	5A3C43FF00E91091BD3CE2CD2D940576761EE769
SHA-256:	B717D3DB791C57E7248B01B022970F5F691E9B149957F5344E5C032BCB3F7718
SHA-512:	F53DB3E3B5650E52899B6362ED3C44190D586D2F97F93A4EB18126E0D5E3437F40C4B707B647A9856D712B9F27EAE76D86A9777C5FFCA110EB408C8B4EC87689
Malicious:	false
Reputation:	low
Preview:	{"description":null,"onlineSafetyLevel":0,"reputationTier":1,"background":{"altText":null,"contentType":"image/jpeg","fileIdentifier":"02b744e6-d92e-45cf-9ae5-9fecbeb50914","originalFileName":"47494f20-d03a-49e4-a394-b4a40de41b5d","resourceId":"6685daff-ccf3-485c-b628-8e1f6f534e44","resourceUrl":"https://lists.gcc.osi.office365.us/Images/f8c813f9-acbb-4b18-bb10-10729643538d/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/TA6WWQ8PGWAHV6JWR9SX5GB2A4/6685daff-ccf3-485c-b628-8e1f6f534e44","height":null,"width":null,"size":null},"header":{"altText":null,"contentType":"image/jpeg","fileIdentifier":"6056f839-2737-4a53-9b72-bb7cf1d3aa87","originalFileName":"2ec7c477-1653-40ce-a26d-d1dd9b655047","resourceId":"e88bc255-d6b4-4f67-8eee-0315d61af2d3","resourceUrl":"https://lists.gcc.osi.office365.us/Images/f8c813f9-acbb-4b18-bb10-10729643538d/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/TA6WWQ8PGWAHV6JWR9SX5GB2A4/e88bc255-d6b4-4f67-8eee-0315d61af2d3","height":null,"width":null,"size":null},"logo":{"altText":"Burwood

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14182)
Category:	downloaded
Size (bytes):	14434
Entropy (8bit):	5.41253474392622
Encrypted:	false
SSDEEP:	384:f2iiKZFdoncvMo9gXuDxCmb6OgrOgor5mM:fPrronYMo9PFyO4Ojr7
MD5:	39FE53EB9274BE422813B6756D3951E8
SHA1:	5E7E1AA6347DD66A7B52BB3AC94EC50BB0BEC9E5
SHA-256:	E91EBC90763C7B778FC6FD26FC0524D9D8584DE71A1A6E2ABB6D54492D3472D8
SHA-512:	AFD23FA265FBE11DFF9750901524E272E6261AFBDE6B680C005F67BCBBBF8F3D96E594D4C7381C6652BF1E70871AE37C5D0D9B4F084AAAD0E5D377645CC12227
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.cvtitlerender.65b951b.js?ring=UsGovGccProduction
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[581],{22184:function(e,o,t){t.d(o,{D4:function(){return c},K9:function(){return r},O8:function(){return m},YR:function(){return i},cL:function(){return u},el:function(){return l},f8:function(){return p},pP:function(){return a},t3:function(){return n}});var r=.5,i=1.5,a=4.5,n=3,l=1.5,s=[{BackgroundColor:"#eee6f2",BackgroundImage:null,Name:"CV_HBG_Professional",PrimaryColor:"#21052e",SecondaryColor:"#0f0214",Thumbnail:null},{BackgroundColor:"#e6eff2",BackgroundImage:null,Name:"CV_HBG_Friendly",PrimaryColor:"#185b75",SecondaryColor:"#13475b",Thumbnail:null},{BackgroundColor:"#e6f2eb",BackgroundImage:null,Name:"CV_HBG_Playful",PrimaryColor:"#237547",SecondaryColor:"#1b5b38",Thumbnail:null},{BackgroundColor:"#f2ece6",BackgroundImage:null,Name:"CV_HBG_Relaxed",PrimaryColor:"#68503c",SecondaryColor:"#4f3c2d",Thumbnail:null},{BackgroundColor:"#e6ecf2",BackgroundImage:null,Name:"CV_HBG_3DMolecules",PrimaryColor:"#416083",SecondaryCol

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	159491
Entropy (8bit):	7.972237230603438
Encrypted:	false
SSDEEP:	3072:bQsXSLOXTQ/vAX6PMm+yseu/xji8IhpAgWJ0k0vZeF0fbDSB9vx9:bQ9iXTQXw6PMm+BF/xLSAg5QFyDQ9J9
MD5:	3ED3B2FB3E64AFC87CF38EE4BB74A415
SHA1:	488783638E3D903C1B890876AF57264036B85D22
SHA-256:	39E9110E7481C09A6C3DD85AC244848BE1517E17BC109852C12B062BA8F0C881
SHA-512:	A723182EBD451E7091216DCD64B269305CF5F2C447464F90A7C989A3DD345FA5EF6AD590439CF3E92B4923118FAEB4C589B9E1908834924FA2B2424796CA20B4
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.............................................$ $.5--5@99@QMQjj....C.............................................$ $.5--5@99@QMQjj.......8...."................................................. ...h.D......................h.................................$.................................. ...................................@................D...........*.....(....... ...5.s@....5..(...........4.....P...................".....".......... ..........4................@..................@h.... .......#...(.4...DDDD...........'G...........................".4........U...\..+.QE.P.... ..............u..........5.\...........T...........E@..EU...D...UE....TEh5..kQ..........'P...k............T.................. ...TP.9@.T.@..PQA.."5.j...........,........p........................QP....W=..........(...T...kZ................EPD. ..\..4..................................p.".E......Z.Q.................+..F...........4......". .... .......\...p..........h. . .4...8

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	159491
Entropy (8bit):	7.972237230603438
Encrypted:	false
SSDEEP:	3072:bQsXSLOXTQ/vAX6PMm+yseu/xji8IhpAgWJ0k0vZeF0fbDSB9vx9:bQ9iXTQXw6PMm+BF/xLSAg5QFyDQ9J9
MD5:	3ED3B2FB3E64AFC87CF38EE4BB74A415
SHA1:	488783638E3D903C1B890876AF57264036B85D22
SHA-256:	39E9110E7481C09A6C3DD85AC244848BE1517E17BC109852C12B062BA8F0C881
SHA-512:	A723182EBD451E7091216DCD64B269305CF5F2C447464F90A7C989A3DD345FA5EF6AD590439CF3E92B4923118FAEB4C589B9E1908834924FA2B2424796CA20B4
Malicious:	false
Reputation:	low
URL:	https://lists.gcc.osi.office365.us/Images/f8c813f9-acbb-4b18-bb10-10729643538d/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/TA6WWQ8PGWAHV6JWR9SX5GB2A4/6685daff-ccf3-485c-b628-8e1f6f534e44
Preview:	......JFIF.............C.............................................$ $.5--5@99@QMQjj....C.............................................$ $.5--5@99@QMQjj.......8...."................................................. ...h.D......................h.................................$.................................. ...................................@................D...........*.....(....... ...5.s@....5..(...........4.....P...................".....".......... ..........4................@..................@h.... .......#...(.4...DDDD...........'G...........................".4........U...\..+.QE.P.... ..............u..........5.\...........T...........E@..EU...D...UE....TEh5..kQ..........'P...k............T.................. ...TP.9@.T.@..PQA.."5.j...........,........p........................QP....W=..........(...T...kZ................EPD. ..\..4..................................p.".E......Z.Q.................+..F...........4......". .... .......\...p..........h. . .4...8

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63096)
Category:	downloaded
Size (bytes):	63334
Entropy (8bit):	5.118629744435472
Encrypted:	false
SSDEEP:	768:I1DM9912UNwiqfDjIiNHCcUpX17X6lbidguoSSZpC8w7fDqA5sHjgKmZbBgs33r4:UC2UNCDjopXNrguoM5ZbBgC3A5SNC
MD5:	2F2B6883DF506FA11029D1E46167C453
SHA1:	B0F9C2613CC01C3EE9B10F12E298CC815D149A05
SHA-256:	9FFB74A4DFB18D0DD5132133F104C008A15540DA87EF94A41F7B4C542D7F03C5
SHA-512:	9E03ADD5BDE740B30434CC44F0A120E5D7B8AFF97CC9CF464FC3122CA5502DE2E36CC46113D2E9F11A6FE65283A0E0461F57393DC3346AF06C4427EBF88956D2
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/Scripts/dists/response-page-pro.cachegroup-nerve.min.js?v=b3c1eb4c85&ring=UsGovGccProduction
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[527],{41293:function(n,t,r){function i(n,t){n\|\|(console.assert(n,"Nerve - "+t),s("assert failed: ".concat(t)))}function e(n){return s("TODO: ".concat(n))}function u(){return s("to be overridden.")}function o(n){if(n="Nerve - warning: ".concat(n),console.warn(n),c){var t=new Error(n).stack;c(t)}}r.d(t,{ZK:function(){return o},_y:function(){return s},ct:function(){return u},hu:function(){return i},ys:function(){return e}});var c=null;function s(n){throw Error("Nerve - "+n)}},42874:function(n,t,r){r.d(t,{k:function(){return e},s:function(){return u}});var i=r(36630),e=function(){return function(n){void 0===n&&(n={}),u(this,n)}}();function u(n,t,r){void 0===r&&(r=!1),(0,i.zO)(n,"__nerve__",t,r)}},39923:function(n,t,r){r.d(t,{J4:function(){return w},bn:function(){return a},f4:function(){return h},u9:function(){return l}});var i=r(26203),e=r(41293),u=r(42874),o=r(36630),c="Spec",s=Object.freeze({IsKeyField:!1,IsLocalField:!1,IsNum

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47337)
Category:	downloaded
Size (bytes):	106570
Entropy (8bit):	5.4234875389706785
Encrypted:	false
SSDEEP:	1536:cCfbmnZGtKWWnG0E4wyXvEs/23KQdjcBw1x0d+aK:czUKdE1yXvEs/uKBw1x0d+aK
MD5:	0627D9EF086A17447095E99090FD9AFA
SHA1:	584B355FA3F176BF0658A87C6267D0B95F3CA34A
SHA-256:	B2A2FBED29B3EE7A0BE695ADC0A7C45C7EFAE9F958030D77E0944A9C9C7672D2
SHA-512:	AF41386B0CF7ED67C7FAF0D9A96C8C6DAEF83EEE8337DEBCABC1FCBC17A26E80E142E1BF5D55A8163BF1B187B429810AB9AA2F3F02CEA3FC2BD781E6A3589E4E
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.1ds.323a60b.js?ring=UsGovGccProduction
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[641],{43626:function(n,e,t){t.d(e,{Z:function(){return D}});var r=t(49577),i=t(71106),o=t(55028),u=t(14270),a=t(96933),c=t(28185),s=t(70390),f=t(52863),l=t(60503),d=t(51616),v=t(79498),p=500;function h(n,e,t){e&&(0,a.kJ)(e)&&e[s.R5]>0&&(e=e.sort((function(n,e){return n[l.yi]-e[l.yi]})),(0,a.tO)(e,(function(n){n[l.yi]<p&&(0,a._y)("Channel has invalid priority - "+n[s.pZ])})),n[s.MW]({queue:(0,a.FL)(e),chain:(0,d.jV)(e,t[s.TC],t)}))}var g=t(10015),m=t(68886),y=t(51108),C=function(n){function e(){var t,r,u=n.call(this)\|\|this;function f(){t=0,r=[]}return u.identifier="TelemetryInitializerPlugin",u.priority=199,f(),(0,i.Z)(e,u,(function(n,e){n.addTelemetryInitializer=function(n){var e={id:t++,fn:n};return r[s.MW](e),{remove:function(){(0,a.tO)(r,(function(n,t){if(n.id===e.id)return r[s.cb](t,1),-1}))}}},n[l.hL]=function(e,t){for(var i=!1,u=r[s.R5],f=0;f<u;++f){var l=r[f];if(l)try{if(!1===l.fn[s.ZV](null,[e])){i=!0;break}}catch(n)

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 572x233, components 3
Category:	downloaded
Size (bytes):	39813
Entropy (8bit):	7.6964344998051875
Encrypted:	false
SSDEEP:	768:hA76jYxwDa19zPT9Hf6E/HMSvLWUXRsu6mvcB0vCfRNHlZP9oue1v8BA0l/6:hY1z/HMmCUXRsu6maW1sFg
MD5:	E71534E10B1241216874F6C9FAEAD237
SHA1:	55E373F4F85AEC2E48AF6A225D4FD67B42DFBAFD
SHA-256:	D38383C47693B251562296E1B8366AF11454BFCA4CCEA558895C946F180DD003
SHA-512:	757FE3CD0810AD020227C42A8D1603185A677C92E5231E4E2B8A3E3E4DB64607AEAA0A76417447CD4E6D808C138D1CE448750CC990C85CB586CF5DD0D1F38176
Malicious:	false
Reputation:	low
URL:	https://lists.gcc.osi.office365.us/Images/f8c813f9-acbb-4b18-bb10-10729643538d/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/TA6WWQ8PGWAHV6JWR9SX5GB2A4/b4cdba6e-3dc1-425b-a078-40786f3cc831
Preview:	......JFIF.....`.`....."Exif..MM..........................C....................................................................C.........................................................................<.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..w.Gk\|...'.I.....Vc^..........o...c......W.<5e..T...2....[.'...a..pq..}...\|..s....,~1].-"..yI.....[l...w.7..o.,..e.`4.e....zo.._k..._....m\|F?...}9......P.......O..F.a..........8...k......z_.p....K.~......y......6+.........+

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (379), with CRLF line terminators
Category:	downloaded
Size (bytes):	3420
Entropy (8bit):	4.770180438067068
Encrypted:	false
SSDEEP:	96:4+3sq2exgj/BH61acPXBJHuXghGDHuWtkR:h3sqJxgj/txikg8HT6R
MD5:	0F7CCE9368A5285559D7EF3E641F18A4
SHA1:	0E25DA9ABEC63112710CAEB14123215D24A84876
SHA-256:	BC1832CD33B67E74FE000BDBCADB002EB3B6D47F403CD56972545898474EAF0F
SHA-512:	7602E887F299D9A5CC35844755AB7F2012CA782B2ADCC489DB28CF3B9F7540D6D800139B92CCC3475933890CD36F1BB576B5CAE5E5437C99D8B16DCDD15B1F30
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/Scripts/dists/ls-pro.en-us.18e0edc91.js?ring=UsGovGccProduction
Preview:	<!DOCTYPE html>..<html>.. <head>.. <title>Runtime Error</title>.. <meta name="viewport" content="width=device-width" />.. <style>.. body {font-family:"Verdana";font-weight:normal;font-size: .7em;color:black;} .. p {font-family:"Verdana";font-weight:normal;color:black;margin-top: -5px}.. b {font-family:"Verdana";font-weight:bold;color:black;margin-top: -5px}.. H1 { font-family:"Verdana";font-weight:normal;font-size:18pt;color:red }.. H2 { font-family:"Verdana";font-weight:normal;font-size:14pt;color:maroon }.. pre {font-family:"Consolas","Lucida Console",Monospace;font-size:11pt;margin:0;padding:0.5em;line-height:14pt}.. .marker {font-weight: bold; color: black;text-decoration: none;}.. .version {color: gray;}.. .error {margin-bottom: 10px;}.. .expandable { text-decoration:underline; font-weight:bold; color:navy; cursor:hand; }.. @media screen and (max-width: 639px) {..

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 222x125, components 3
Category:	dropped
Size (bytes):	5725
Entropy (8bit):	7.92620627627236
Encrypted:	false
SSDEEP:	96:whFEkjniVEMYaF+WBQOXlSBymEe/x5z+OKaBHq4Du2bA4N8GNJMyplUPZICva9E2:WFjnQEMYaFvycS8ve7lKYq4tbfN8GoyX
MD5:	EBF3D590FAEEE30CDF81929303672548
SHA1:	30BB5C412260A896CFE7E66FB33878452C3ACEC4
SHA-256:	868D4ADAD4D4283F069E47683B80FF579F3B00941739820B74CAF999991FCA6E
SHA-512:	C5D2F4E8D72719B30F704137E74D41C8D847126D551795B9720A627C70BC30CACBF446724290A1D958A6B06BDF116D037DFAC5C6BECA0CC7A0D53CCBBE1EBFC9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......}...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Z).b..Xn(.YH......SK....S. ...M..N.i\|.E..(.<.zw.G0r..*c...M>d.VEIS.M..z9.r..J..zp.})s!....9..Uh......9\..Y..c<g..E......O...........Y....Q....JBq ..q.L..6.(.....#.4..U.d.Ni.F.8..1.)......y..=..8\.jg.s..as.....9d.4....4...ir).......Z........@.d..I@.7Rn.f..~.L.(..=h...<M...P....$dF....k.5.GU.Suq,...[.?.V.K.o.:...4..p.............Z.\|.M...(....W.j.;3..

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	9227
Entropy (8bit):	5.377265486856382
Encrypted:	false
SSDEEP:	192:KBVSqgXnFpVEGWKMG+/wJfCFuzklw4jO4Z:6VctSsqucL
MD5:	B659D679D2ABF51FAC56C0076E9398CA
SHA1:	0F789E0F6D7992F1AB452F25601835038E7508B7
SHA-256:	E977D42ACDAAFB0355E9CCBBEB80E6D95B8D463C1DF837E6C07B4A79702BE92F
SHA-512:	AED1495FBE790A218FEA1EC92FF2139CAC0AAF501A3D7600F5714EAD4C47015FFCE99F5E9C804F82CFEED3BF6EFB50729F7429E9816041804498CA12C521A911
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$expand=questions($expand=choices)
Preview:	{"description":null,"onlineSafetyLevel":0,"reputationTier":1,"background":{"altText":null,"contentType":"image/jpeg","fileIdentifier":"02b744e6-d92e-45cf-9ae5-9fecbeb50914","originalFileName":"47494f20-d03a-49e4-a394-b4a40de41b5d","resourceId":"6685daff-ccf3-485c-b628-8e1f6f534e44","resourceUrl":"https://lists.gcc.osi.office365.us/Images/f8c813f9-acbb-4b18-bb10-10729643538d/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/TA6WWQ8PGWAHV6JWR9SX5GB2A4/6685daff-ccf3-485c-b628-8e1f6f534e44","height":null,"width":null,"size":null},"header":{"altText":null,"contentType":"image/jpeg","fileIdentifier":"6056f839-2737-4a53-9b72-bb7cf1d3aa87","originalFileName":"2ec7c477-1653-40ce-a26d-d1dd9b655047","resourceId":"e88bc255-d6b4-4f67-8eee-0315d61af2d3","resourceUrl":"https://lists.gcc.osi.office365.us/Images/f8c813f9-acbb-4b18-bb10-10729643538d/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/TA6WWQ8PGWAHV6JWR9SX5GB2A4/e88bc255-d6b4-4f67-8eee-0315d61af2d3","height":null,"width":null,"size":null},"logo":{"altText":"Burwood

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 572x233, components 3
Category:	dropped
Size (bytes):	39813
Entropy (8bit):	7.6964344998051875
Encrypted:	false
SSDEEP:	768:hA76jYxwDa19zPT9Hf6E/HMSvLWUXRsu6mvcB0vCfRNHlZP9oue1v8BA0l/6:hY1z/HMmCUXRsu6maW1sFg
MD5:	E71534E10B1241216874F6C9FAEAD237
SHA1:	55E373F4F85AEC2E48AF6A225D4FD67B42DFBAFD
SHA-256:	D38383C47693B251562296E1B8366AF11454BFCA4CCEA558895C946F180DD003
SHA-512:	757FE3CD0810AD020227C42A8D1603185A677C92E5231E4E2B8A3E3E4DB64607AEAA0A76417447CD4E6D808C138D1CE448750CC990C85CB586CF5DD0D1F38176
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`....."Exif..MM..........................C....................................................................C.........................................................................<.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..w.Gk\|...'.I.....Vc^..........o...c......W.<5e..T...2....[.'...a..pq..}...\|..s....,~1].-"..yI.....[l...w.7..o.,..e.`4.e....zo.._k..._....m\|F?...}9......P.......O..F.a..........8...k......z_.p....K.~......y......6+.........+

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	5.790142327810594
Encrypted:	false
SSDEEP:	48:SPVe3xrp8vtSgzZwuOhNYBIakka4sSSSSgU0B/4QL/d54hUHy5c59fHIre1YHyph:SPVUBpozOsBn+4Y0B/4QhuWw29foKWw
MD5:	EE2B357FA5FBA69AF238168E3A1A27E1
SHA1:	B5DD4606BEDBF1D705A01F833802248E03D01518
SHA-256:	0FD813BAE48835570858A2508D9C29900B8A4CDDEBFF4A250E79AD12F8ACBDCB
SHA-512:	EC00810F1DAD54D6036359386C7A205953CF1E8F81909471376EA7F77786BAABCF2EBB37A68CEB63531147A92080195EF64D93FE750380038E0AA00797DFCBDA
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .......................................................................................................................................................................................................p...{@..\|o..x...x...w...wo..s@..........................................................................................`..}...}...\|...{...{...y...x...x...v...w ........]e.`\d..[b..Ze.`......................................................`...........~...~...}...p...^...R...W...]...V.^f..^f..\e..]e..\d..[d..Zd............................................ ....................[...1...!... ...!...!...!.]f.._h..^g..^g..]e..]e..\e..\d..\d....................................0.................\|...E...!...!..."...!..."..."... .Zb.._h..^g..^g..^g..^g..]f..]e..\e..\f.P..........................0.....................3...#...#...#...#...#...#...$.x...`i..`i..`i..`i.._h.._h.._h..^g..]f..^g..`h .................. ....................G...

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47421), with CRLF line terminators
Category:	downloaded
Size (bytes):	369103
Entropy (8bit):	5.381338995618774
Encrypted:	false
SSDEEP:	6144:dMy8G6RujcHX6MQ47GK4C/YG7jtogSPiRoUQrwYq4UKHZeSY8/sLy9:qywRuI36TCIPiRoUqKMZZ/aW
MD5:	6E9386843C22345A256F324692D627F2
SHA1:	FEF7FADB3A27032695AAB726682A340D583BFC51
SHA-256:	D40E9F33813211AA5DFABEEBF4A1571D488E56878954DE4D513A25B3525B3988
SHA-512:	C90E8A26A10AFA84C74C1D4828466E75D0FB24E826BB984EE0C50C96E44488031D4F43068614559A77967BE58E63E5BB12D3BF0999F763725BC7E1C0BF75C6BB
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/FormsPro/Scripts/Vendors/combined/basics_osi_v5_j3_3997ff6.js?ring=UsGovGccProduction
Preview:	!function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var i=t();for(var n in i)("object"==typeof exports?exports:e)[n]=i[n]}}(this,function(){return function(e){function t(n){if(i[n])return i[n].exports;var r=i[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,t),r.l=!0,r.exports}var i={};return t.m=e,t.c=i,t.i=function(e){return e},t.d=function(e,i,n){t.o(e,i)\|\|Object.defineProperty(e,i,{configurable:!1,enumerable:!0,get:n})},t.n=function(e){var i=e&&e.e?function(){return e.default}:function(){return e};return t.d(i,"a",i),i},t.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},t.p="",t(t.s=30)}([function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0});!function(e){e[e.Unspecified=0]="Unspecified",e[e.String=1]="String",e[e.Int64=2]="Int64",e[e.Double=3]="Double",e[e.Boolean=4]="Boolean",e[e.Date=5]="Date"}(t.AWTPropertyType\|\|(t.AWTProperty

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	106748
Entropy (8bit):	5.6788269547528785
Encrypted:	false
SSDEEP:	1536:l5tOOQk8HuJkYcgKWaBXJYHa/ZR6NeenCoWbKxKJBmSsPgMgAzkSV/0iLinkQVaW:l5tOOQk82a1LTgWb19A4mInkQVa2RBn
MD5:	4D5CEEE45615E16FF9E5B59F07F06782
SHA1:	0117F6F4AAE69E34983830D95B99D240778EE2F0
SHA-256:	6FADE40437BEBEE439457D5683A1F6EAD708562697E7AD2F0C7A2148BC73F34E
SHA-512:	C74EBAEA4F1D9F8575E3931DBFCE3D427B07D265A772C8B1E986A1A07759CB30F516280EE018BEC2E126F4DD027BE47C121004267BAE903F8EC57CCBCA92D812
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.vendors.e0d6b00.js?ring=UsGovGccProduction
Preview:	(self.webpackChunk=self.webpackChunk\|\|[]).push([[216],{47119:function(e,t,r){var n={version:{major:4,minor:0,build:1}};n.utils=r(93784),n.xml=r(95650),n.oData=r(33518),n.utils.inBrowser()&&(window.odatajs=n),n.node="node",e.exports=n},33518:function(e,t,r){"use strict";var n=r(93784),a=t.utils=r(35),o=t.handler=r(70701),i=t.metadata=r(29044),l=r(89412),s=t.net=n.inBrowser()?l:r(6126),u=t.json=r(20945);t.batch=r(97510);var c=n.assigned,d=(n.defined,n.throwErrorCallback),p=(a.invokeRequest,o.MAX_DATA_SERVICE_VERSION),f=(a.prepareRequest,i.metadataParser),m=[u.jsonHandler,o.textHandler];function h(e,t,r){var n,a;for(n=0,a=m.length;n<a&&!m[n][e](t,r);n++);if(n===a)throw{message:"no handler for data"}}t.defaultSuccess=function(e){window.alert(window.JSON.stringify(e))},t.defaultError=d,t.defaultHandler={read:function(e,t){e&&c(e.body)&&e.headers["Content-Type"]&&h("read",e,t)},write:function(e,t){h("write",e,t)},maxDataServiceVersion:p,accept:"application/json;q=0.9, /;q=0.1"},t.defaultMe

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (58457)
Category:	downloaded
Size (bytes):	102484
Entropy (8bit):	5.3424671715330785
Encrypted:	false
SSDEEP:	1536:CQD/aUdH0WNURKTnXtwRjACn8g+CY8kmcuI:+UuNRKLuTn1+CYHmcuI
MD5:	62D1545FCE12E0397582E4D900A89EFD
SHA1:	D4B3BE160044C01E25B12F76973760386CEE2CA2
SHA-256:	8C677EE4A629FA0473A019BBA10B46E8BE2FD926705E2649BC743BD97839C57C
SHA-512:	E9DAC464E3678527ECFBEF8496BDA12C0F8FB34F055414C53B49D484DB734C81D74743838FD9D16BC7B6BE117E24F861F58E0970E00E8FDA4EAAD77A25A457BD
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/cdn/scripts/dists/telemetry-worker.1.js
Preview:	!function(){"use strict";var n={};n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(n){if("object"==typeof window)return window}}();var t="function",r="object",e="undefined",i=Object,u=i.prototype,o=i.assign,a=i.create,f=i.defineProperty,c=u.hasOwnProperty,v=null;function s(t){void 0===t&&(t=!0);var r=!1===t?null:v;return r\|\|(typeof globalThis!==e&&(r=globalThis),r\|\|typeof self===e\|\|(r=self),r\|\|typeof window===e\|\|(r=window),r\|\|typeof n.g===e\|\|(r=n.g),v=r),r}function l(n){throw new TypeError(n)}function d(n){if(a)return a(n);if(null==n)return{};var e=typeof n;function i(){}return e!==r&&e!==t&&l("Object prototype may only be an Object:"+n),i.prototype=n,new i}(s()\|\|{}).Symbol,(s()\|\|{}).Reflect;var h,p=function(n,t){return p=i.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(n,t){n.__proto__=t}\|\|function(n,t){for(var r in t)t.hasOwnProperty(r)&&(n[r]=t[r])},p(n,t)};function y(n,r){function e(){this.constructor=n}t

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	108465
Entropy (8bit):	5.40389353056747
Encrypted:	false
SSDEEP:	1536:mbsQQcCZjuxl9NBKZgwHj5DpWVg1WG7t/4Zat/OBJRPkWO6H/JnivgTJUQE:dPJixl9NBG1+/fW6xXT6Z
MD5:	DA69DB81907CC110600C8989D38BB9D5
SHA1:	1CA81D11BCF858BC2774FD6C5414D83F06618406
SHA-256:	1D95A437A2BF9545D8B862A9C7CF8E8B9A38D6520258BCBED8BE63EB54455689
SHA-512:	BEF9FBCA4CB8F05615E8BDE3AE20BEE9F052129BF62FB82A5ED7C289ECB04704754A5A32E481DC4343FF276228CC0FCC683CF817D948B9BDF85C50A006ADBA72
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.postsubmit.b7eca17.js?ring=UsGovGccProduction
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[653],{65690:function(e,t,r){function n(e){i!==e&&(i=e)}function o(){return void 0===i&&(i="undefined"!=typeof document&&!!document.documentElement&&"rtl"===document.documentElement.getAttribute("dir")),i}var i;function a(){return{rtl:o()}}r.d(t,{Eo:function(){return a},ok:function(){return n}}),i=o()},36178:function(e,t,r){r.d(t,{Y:function(){return c},q:function(){return i}});var n,o=r(59312),i={none:0,insertNode:1,appendChild:2},a="undefined"!=typeof navigator&&/rv:11.0/.test(navigator.userAgent),s={};try{s=window\|\|{}}catch(e){}var c=function(){function e(e,t){var r,n,a,s,c,u;this._rules=[],this._preservedRules=[],this._counter=0,this._keyToClassName={},this._onInsertRuleCallbacks=[],this._onResetCallbacks=[],this._classNameToArgs={},this._config=(0,o.pi)({injectionMode:"undefined"==typeof document?i.none:i.insertNode,defaultPrefix:"css",namespace:void 0,cspSettings:void 0},e),this._classNameToArgs=null!==(r=null==t?void 0

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 572x233, components 3
Category:	downloaded
Size (bytes):	39813
Entropy (8bit):	7.6964344998051875
Encrypted:	false
SSDEEP:	768:hA76jYxwDa19zPT9Hf6E/HMSvLWUXRsu6mvcB0vCfRNHlZP9oue1v8BA0l/6:hY1z/HMmCUXRsu6maW1sFg
MD5:	E71534E10B1241216874F6C9FAEAD237
SHA1:	55E373F4F85AEC2E48AF6A225D4FD67B42DFBAFD
SHA-256:	D38383C47693B251562296E1B8366AF11454BFCA4CCEA558895C946F180DD003
SHA-512:	757FE3CD0810AD020227C42A8D1603185A677C92E5231E4E2B8A3E3E4DB64607AEAA0A76417447CD4E6D808C138D1CE448750CC990C85CB586CF5DD0D1F38176
Malicious:	false
Reputation:	low
URL:	https://lists.gcc.osi.office365.us/Images/f8c813f9-acbb-4b18-bb10-10729643538d/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/TA6WWQ8PGWAHV6JWR9SX5GB2A4/e88bc255-d6b4-4f67-8eee-0315d61af2d3
Preview:	......JFIF.....`.`....."Exif..MM..........................C....................................................................C.........................................................................<.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(..w.Gk\|...'.I.....Vc^..........o...c......W.<5e..T...2....[.'...a..pq..}...\|..s....,~1].-"..yI.....[l...w.7..o.,..e.`4.e....zo.._k..._....m\|F?...}9......P.......O..F.a..........8...k......z_.p....K.~......y......6+.........+

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	89
Entropy (8bit):	5.252206992881218
Encrypted:	false
SSDEEP:	3:YMw1sJl41OjKYnjSchNSK6rw0PUUVyDJxyCXLYn:YMwUOyBzSK6rZPV+Jxpcn
MD5:	2544E12C996BF24471362B93F0DA41F3
SHA1:	A86BF135AB32EFD7D71F9D608A6ADF970446E945
SHA-256:	5066B03C47885E634492DD13D9D4CD86EBB62D4B6603FA5DD249E0DA603B4F76
SHA-512:	996BD40F9124BAAF345E0F63C5FF9525FE577207B0D505AEB8F602CBB1AF522F5434A92B40B80DB2AAEAE39E44EE9370BDFB2C52DCF68E6532553C7265270D9D
Malicious:	false
Reputation:	low
URL:	"https://customervoice.microsoft.us/formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$select=id,customCssFileName,customCSSInLineHeaderToggle,footerText"
Preview:	{"id":"-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u"}

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19569), with CRLF line terminators
Category:	downloaded
Size (bytes):	52547
Entropy (8bit):	5.360332468600038
Encrypted:	false
SSDEEP:	768:GJdE/g/UkYPHHAEOY/Pz+TPkoo0PsH6p91U1k8UweSLn6ptu5go+fZmDVn80Y:8UHHA4LcQe91U1kuMtu5go+BgnlY
MD5:	162890ADA98A5DEF6640BBE57DA52EB9
SHA1:	06A3D551F9718164171E7517F18577B73F13B390
SHA-256:	DA599489D3F86D69769A1D310A5E59838D7E72EAD0BCFE94851D0084318FCDC2
SHA-512:	DDA7B8F4C63FABFCA8646CC059E6B3D50298985AFEE866680106B4610ADAFA58D078AF31EA8F81C2AE9FB2AD8BC579E64B7F4EC3B23987F278ADB410E24DBBBA
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/FormsPro/Scripts/Vendors/combined/response_v2_5234a19.js?ring=UsGovGccProduction
Preview:	/!.. linkify.js v2.1.8.. * https://github.com/SoapBox/linkifyjs.. * Copyright (c) 2014 SoapBox Innovations Inc... * Licensed under the MIT license.. */..!function(){"use strict";var n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(n){return typeof n}:function(n){return n&&"function"==typeof Symbol&&n.constructor===Symbol&&n!==Symbol.prototype?"symbol":typeof n};!function(e){function a(n,e){var a=arguments.length>2&&void 0!==arguments[2]?arguments[2]:{},t=Object.create(n.prototype);for(var o in a)t[o]=a[o];return t.constructor=e,e.prototype=t,e}function t(n){n=n\|\|{},this.defaultProtocol=n.hasOwnProperty("defaultProtocol")?n.defaultProtocol:h.defaultProtocol,this.events=n.hasOwnProperty("events")?n.events:h.events,this.format=n.hasOwnProperty("format")?n.format:h.format,this.formatHref=n.hasOwnProperty("formatHref")?n.formatHref:h.formatHref,this.nl2br=n.hasOwnProperty("nl2br")?n.nl2br:h.nl2br,this.tagName=n.hasOwnProperty("tagName")?n.tagName:h.tagName,this.targ

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (40515)
Category:	downloaded
Size (bytes):	782465
Entropy (8bit):	5.372785999511648
Encrypted:	false
SSDEEP:	6144:7+9FFM5fQa/PDSGf+4o6UnAaBGAaQa1kcoLIyLGCeEaxDIitbqJpvgXAV3r/+2av:7+FohnfKyQdeClP4
MD5:	0C6F020C2EAAA68CA998AA158720EDFD
SHA1:	C5582182A53E63DD95F2B3AA2BE10D37F86078A7
SHA-256:	A61962B6B38FBF8A4806E6F476F800520C2D0D184983D226511D180E173FBDEF
SHA-512:	CFF8CB5FF82260512A11213BDE5A538CFEF0CA428FAC1C04FD0BB3D4D366CA7F1F615DCAE553292D032C7A0A10FFBED9F021126F583B2285874CCCA47E0B5889
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/Scripts/dists/response-page-pro.min.js?v=b3c1eb4c85&ring=UsGovGccProduction
Preview:	(function(){var __webpack_modules__={26261:function(n,t,e){"use strict";e.d(t,{Vw:function(){return h},cS:function(){return c},cl:function(){return p},gV:function(){return d},iH:function(){return v},n5:function(){return f},oe:function(){return l},z_:function(){return m}});var r=e(63061);function i(n,t){return n?n+"."+t:t}function o(n,t,e,o,u){void 0===u&&(u=4),o&&n.push((0,r.dt)("".concat(i(t,e)),o,u))}function u(n,t,e,o){"boolean"==typeof o&&n.push((0,r.UL)("".concat(i(t,e)),o))}function s(n,t,e,o){"number"==typeof o&&n.push((0,r.Kq)("".concat(i(t,e)),o))}var a=function(n){var t="Activity.Result",e=[];return s(e,t,"Code",n.code),o(e,t,"Type",n.type),s(e,t,"Tag",n.tag),u(e,t,"IsExpected",n.isExpected),e.push((0,r.dt)("zC.Activity.Result","Office.System.Result")),e},c={contractName:"Office.System.Activity",getFields:function(n){var t="Activity",e=[];return o(e,t,"CV",n.cV),s(e,t,"Duration",n.duration),s(e,t,"Count",n.count),s(e,t,"AggMode",n.aggMode),u(e,t,"Success",n.success),n.result&

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 222x125, components 3
Category:	downloaded
Size (bytes):	5725
Entropy (8bit):	7.92620627627236
Encrypted:	false
SSDEEP:	96:whFEkjniVEMYaF+WBQOXlSBymEe/x5z+OKaBHq4Du2bA4N8GNJMyplUPZICva9E2:WFjnQEMYaFvycS8ve7lKYq4tbfN8GoyX
MD5:	EBF3D590FAEEE30CDF81929303672548
SHA1:	30BB5C412260A896CFE7E66FB33878452C3ACEC4
SHA-256:	868D4ADAD4D4283F069E47683B80FF579F3B00941739820B74CAF999991FCA6E
SHA-512:	C5D2F4E8D72719B30F704137E74D41C8D847126D551795B9720A627C70BC30CACBF446724290A1D958A6B06BDF116D037DFAC5C6BECA0CC7A0D53CCBBE1EBFC9
Malicious:	false
Reputation:	low
URL:	https://lists.gcc.osi.office365.us/Images/f8c813f9-acbb-4b18-bb10-10729643538d/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/TA6WWQ8PGWAHV6JWR9SX5GB2A4/6685daff-ccf3-485c-b628-8e1f6f534e44_mo
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222......}...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Z).b..Xn(.YH......SK....S. ...M..N.i\|.E..(.<.zw.G0r..*c...M>d.VEIS.M..z9.r..J..zp.})s!....9..Uh......9\..Y..c<g..E......O...........Y....Q....JBq ..q.L..6.(.....#.4..U.d.Ni.F.8..1.)......y..=..8\.jg.s..as.....9d.4....4...ir).......Z........@.d..I@.7Rn.f..~.L.(..=h...<M...P....$dF....k.5.GU.Suq,...[.?.V.K.o.:...4..p.............Z.\|.M...(....W.j.;3..

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (60976)
Category:	downloaded
Size (bytes):	91082
Entropy (8bit):	5.304507031022989
Encrypted:	false
SSDEEP:	1536:kLi6M9GIr+b5z24bx60BWDkubX8Tahi3kpG5r+At/sEVsIOBLRhwxhh7bcfkkQCo:bFhi3kpG5XZIZ2qQCYB
MD5:	2F5D48A71CBEE9ABABF1C9B78B8FD892
SHA1:	65141885EE4988A9006E2D8583DBE2EB7DA2AC84
SHA-256:	629F4CC6CEA0E185B7315CDAAF59192A34C2F4AC122396C3CCAAC6A2B6A9E0E0
SHA-512:	F35147554C83DD7D9E16EF80CA414B295BE95A7C9C088B5D2D5859A678073BB2FED517BACBE76D1905D4B197592545B99569E2F53B7116AD660E195D3EFA6B61
Malicious:	false
Reputation:	low
URL:	https://customervoice.microsoft.us/Scripts/dists/response-page-pro.chunk.638.3250f1d.js?ring=UsGovGccProduction
Preview:	(self.webpackChunk=self.webpackChunk\|\|[]).push([[638],{65638:function(e,t){var n;./!. jQuery JavaScript Library v3.6.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright OpenJS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2022-08-26T17:52Z. */!function(t,n){"use strict";"object"==typeof e.exports?e.exports=t.document?n(t,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return n(e)}:n(t)}("undefined"!=typeof window?window:this,(function(r,i){"use strict";var o,a=[],s=Object.getPrototypeOf,u=a.slice,l=a.flat?function(e){return a.flat.call(e)}:function(e){return a.concat.apply([],e)},c=a.push,f=a.indexOf,p={},d=p.toString,h=p.hasOwnProperty,g=h.toString,v=g.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},b=r.document;function w(e){re

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 15:14:10.724127054 CET	49678	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:10.724131107 CET	49677	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:10.724152088 CET	49676	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:10.732848883 CET	49702	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:10.732883930 CET	443	49702	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:10.732964993 CET	49702	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:10.733205080 CET	49702	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:10.733216047 CET	443	49702	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:10.733536959 CET	49703	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:10.733565092 CET	443	49703	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:10.733630896 CET	49703	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:10.733793020 CET	49703	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:10.733805895 CET	443	49703	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.203207016 CET	443	49703	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.203489065 CET	49703	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.203520060 CET	443	49703	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.204598904 CET	443	49703	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.204668045 CET	49703	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.205818892 CET	49703	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.205893040 CET	443	49703	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.206000090 CET	49703	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.206012964 CET	443	49703	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.227112055 CET	443	49702	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.227370977 CET	49702	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.227396965 CET	443	49702	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.228494883 CET	443	49702	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.228559971 CET	49702	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.228903055 CET	49702	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.228964090 CET	443	49702	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.251087904 CET	49703	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.282082081 CET	49702	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.282099962 CET	443	49702	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.329133987 CET	49702	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.695916891 CET	443	49703	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.696022034 CET	443	49703	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.696135044 CET	49703	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.696643114 CET	49703	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:11.696664095 CET	443	49703	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:11.903796911 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:11.903835058 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:11.903918028 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:11.904211998 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:11.904230118 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.216022968 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.216398954 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.216417074 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.217577934 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.217662096 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.218683004 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.218756914 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.218848944 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.218858004 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.271136045 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.328411102 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.328438044 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.328493118 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.328500032 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.328541040 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.328547001 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.328593969 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.328620911 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.328640938 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.328676939 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.427973986 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.428029060 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.428164005 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.428167105 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.428191900 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.428212881 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.428240061 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.428299904 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.428354025 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.428360939 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.428397894 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.428435087 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.428508997 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.428536892 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.428577900 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.428584099 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.428630114 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.428672075 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.428761005 CET	49704	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.428774118 CET	443	49704	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.432643890 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.432688951 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.432775021 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.433617115 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.433630943 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.433995008 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.434030056 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.434099913 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.434509993 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.434530020 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.434804916 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.434828997 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.434891939 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.435381889 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.435414076 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.435462952 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.435563087 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.435575962 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.435784101 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.435817003 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.435875893 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.436041117 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.436070919 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.436129093 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.436199903 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.436222076 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.436378956 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.436391115 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.436508894 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.436522961 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.663047075 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.663373947 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.663374901 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.663400888 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.663543940 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.663568020 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.664484024 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.664577961 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.664732933 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.664797068 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.664860010 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.664937973 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.665122032 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.665210009 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.665270090 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.665283918 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.665321112 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.665327072 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.691325903 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.691611052 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.691632986 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.692173004 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.692317963 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.692332029 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.692344904 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.692498922 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.692526102 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.692836046 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.692893028 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.692910910 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.693265915 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.693355083 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.693465948 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.693530083 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.693670034 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.693737030 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.693830013 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.693886995 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.693938971 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.693945885 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.694025040 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.694199085 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.694211960 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.717135906 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.717139959 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.736236095 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.746218920 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.746566057 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.746591091 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.746984005 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.747306108 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.747370005 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.747432947 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.748102903 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.748219967 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.792234898 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.854757071 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.854784012 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.854893923 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.854916096 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.854931116 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.854967117 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.854974985 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.855000973 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.855182886 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.855227947 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.855235100 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.855281115 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.907151937 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.907171011 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.907243967 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.907255888 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.907269001 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.907305002 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.907330036 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.908257961 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.908276081 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.908299923 CET	49709	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.908310890 CET	443	49709	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.908337116 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.908354998 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.908401012 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.908607960 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.908663034 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.912326097 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.912364006 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.912440062 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.912821054 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.912833929 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.930593967 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.930618048 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.930670023 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.930687904 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.930746078 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.930773020 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.930824995 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.931015968 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.931071997 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.931441069 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.931459904 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.931514978 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.931529999 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.931581020 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.931603909 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.931653976 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.932312012 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.932329893 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.932385921 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.932410002 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.932457924 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.932459116 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.932471991 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.932502985 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.953872919 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.953967094 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.954087019 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.954144001 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.954340935 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.954389095 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.954618931 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.954662085 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.954969883 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.955017090 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.955219984 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.955264091 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.955492020 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.955543995 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.955745935 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:12.955797911 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:12.984112978 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.007169962 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.007240057 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.007292986 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.007348061 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.007667065 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.007716894 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.007983923 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.008038998 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.008411884 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.008447886 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.008460045 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.008475065 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.008493900 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.008524895 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.029949903 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.030039072 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.035490990 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.035598993 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.035656929 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.035710096 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.035974979 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.036032915 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.036334991 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.036391020 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.036644936 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.036699057 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.036777020 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.036840916 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.036976099 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.037031889 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.037225008 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.037272930 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.037687063 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.037753105 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.038096905 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.038163900 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.038851976 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.038916111 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.039093971 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.039107084 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.039149046 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.039248943 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.039313078 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.039426088 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.039479971 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.039880991 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.039946079 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.041600943 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.041668892 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.042031050 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.042099953 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.057102919 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.057209015 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.057316065 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.057364941 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.057548046 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.057606936 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.057749987 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.057794094 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.057909966 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.057964087 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.058084011 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.058131933 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.058314085 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.058368921 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.058501005 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.058553934 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.058713913 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.058759928 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.058912992 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.058960915 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.059288979 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.059340000 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.059551001 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.059602976 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.059803963 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.059863091 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.060061932 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.060120106 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.060389996 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.060444117 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.106554985 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.106686115 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.106699944 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.106734037 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.106751919 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.106782913 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.106854916 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.106916904 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.107068062 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.107131958 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.107280016 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.107326984 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.107551098 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.107605934 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.107824087 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.107876062 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.108133078 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.108186960 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.108362913 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.108412027 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.108632088 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.108685017 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.108861923 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.108920097 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.109065056 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.109116077 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.115324974 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.115556955 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.115573883 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.115978956 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.116286993 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.116355896 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.116455078 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.129153967 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.129261017 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.129547119 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.129607916 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.132982969 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.133075953 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.134599924 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.134665966 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.135006905 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.135081053 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.135552883 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.135622978 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.135991096 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.136048079 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.136059046 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.136096954 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.136147022 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.136197090 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.136210918 CET	443	49708	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.136234045 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.136259079 CET	49708	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.136495113 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.136555910 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.136727095 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.136775970 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.137049913 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.137099981 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.137366056 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.137418985 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.137628078 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.137686014 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.137878895 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.137933016 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.138130903 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.138185024 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.138408899 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.138458967 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.138741970 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.138796091 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.139015913 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.139091015 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.139242887 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.139307976 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.139496088 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.139545918 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.139833927 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.139895916 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.140239954 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.140300989 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.140568972 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.140620947 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.140635967 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.140682936 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.141005039 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.141084909 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.141089916 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.141138077 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.141213894 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.141236067 CET	443	49706	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.141246080 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.141275883 CET	49706	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.158512115 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.158586979 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.158740997 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.158788919 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.159183025 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.159235001 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.159390926 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.159437895 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.159687996 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.159740925 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.159919024 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.159965038 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.160244942 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.160326958 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.160382032 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.160665989 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.160721064 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.160868883 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.160916090 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.161191940 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.161245108 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.161453009 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.161500931 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.161798000 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.161861897 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.162230968 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.162288904 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.162579060 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.162631989 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.162949085 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.163008928 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.163733959 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.163770914 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.163796902 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.163808107 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.163821936 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.163830042 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.163880110 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.163886070 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.163919926 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.164041042 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.164098024 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.164264917 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.164308071 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.164472103 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.164516926 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.164679050 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.164725065 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.164910078 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.164953947 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.165256977 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.165307045 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.165402889 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.165447950 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.165605068 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.165649891 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.205805063 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.205871105 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.206015110 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.206079960 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.206330061 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.206372023 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.206475973 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.206527948 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.206851006 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.206909895 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.207046032 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.207106113 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.207320929 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.207384109 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.207596064 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.207648993 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.207902908 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.207961082 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.208364964 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.208404064 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.208425999 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.208437920 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.208451986 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.208656073 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.208702087 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.208713055 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.208758116 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.208762884 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.208775997 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.208813906 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.208960056 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.209007978 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.209220886 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.209276915 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.209427118 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.209486008 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.209896088 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.209947109 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.209959030 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.210002899 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.210382938 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.210433960 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.235930920 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.236016035 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.236201048 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.236255884 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.236501932 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.236551046 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.236790895 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.236846924 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.237059116 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.237122059 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.237272024 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.237323046 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.237576008 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.237638950 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.237761974 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.237811089 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.237927914 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.237974882 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.238060951 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.238116026 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.238360882 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.238419056 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.238512993 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.238568068 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.238753080 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.238809109 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.238974094 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.239022970 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.239228010 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.239280939 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.239444971 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.239502907 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.239666939 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.239725113 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.239888906 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.239942074 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.240195036 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.240242004 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.250510931 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.250600100 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.253925085 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.253993034 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.261636972 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.261751890 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.261898041 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.261953115 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.262130976 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.262176037 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.262412071 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.262464046 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.262687922 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.262739897 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.262868881 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.262917042 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.263032913 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.263079882 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.263339996 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.263398886 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.264452934 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.264512062 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.269221067 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.269279957 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.269391060 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.269438982 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.269635916 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.269685030 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.269890070 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.269947052 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.270328999 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.270382881 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.270582914 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.270633936 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.270832062 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.270879984 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.271070004 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.271111012 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.271363020 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.271414042 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.271697998 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.271773100 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.271899939 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.271945000 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.272190094 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.272236109 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.272391081 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.272439003 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.272671938 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.272727966 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.272954941 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.273005009 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.273183107 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.273236036 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.273493052 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.273546934 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.273796082 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.273847103 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.274046898 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.274101019 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.274394035 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.274451971 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.274611950 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.274660110 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.274863958 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.274918079 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.275114059 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.275165081 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.275501966 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.275553942 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.275774002 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.275827885 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.276098013 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.276154041 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.276283026 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.276331902 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.276551962 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.276602030 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.277055025 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.277126074 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.277303934 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.277355909 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.277609110 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.277662039 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.277877092 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.277925968 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.278131962 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.278183937 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.278525114 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.278582096 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.278759956 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.278808117 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.279222012 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.279287100 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.279427052 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.279473066 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.279683113 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.279736042 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.280237913 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.280292034 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.280484915 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.280530930 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.280750036 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.280801058 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.281166077 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.281219959 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.281461954 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.281517029 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.281996965 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.282066107 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.285305977 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.285373926 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.305295944 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.305418015 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.305536985 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.305596113 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.305840969 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.305893898 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.306078911 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.306129932 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.306503057 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.306559086 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.306787014 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.306839943 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.307034016 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.307095051 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.307327032 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.307384014 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.307598114 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.307651043 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.307823896 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.307876110 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.308064938 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.308120012 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.308130980 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.308168888 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.308181047 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.308283091 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.308346987 CET	49707	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.308361053 CET	443	49707	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.333236933 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.333259106 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.333338022 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.333353996 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.333400965 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.333884954 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.333913088 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.333942890 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.333951950 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.333992958 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.334088087 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.334132910 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.334367990 CET	49712	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.334383965 CET	443	49712	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.336066008 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.336173058 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.336385965 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.336457014 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.336704016 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.336764097 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.337023973 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.337085009 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.337326050 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.337382078 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.337627888 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.337680101 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.337868929 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.337932110 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.338128090 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.338181019 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.338385105 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.338440895 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.338655949 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.338713884 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.338967085 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.339021921 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.339221001 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.339274883 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.339519978 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.339571953 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.339742899 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.339797020 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.340193987 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.340250015 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.340436935 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.340490103 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.340730906 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.340790987 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.340909958 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.340961933 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.341178894 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.341242075 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.341772079 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.341835976 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.342024088 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.342084885 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.342236996 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.342282057 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.342470884 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.342530966 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.342719078 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.342777014 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.343055010 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.343110085 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.343275070 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.343327045 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.343455076 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.343508959 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.343951941 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.344012976 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.344238997 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.344293118 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.344423056 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.344482899 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.344758034 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.344819069 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.344986916 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.345037937 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.345213890 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.345271111 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.345432043 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.345482111 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.345777988 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.345837116 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.345962048 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.346015930 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.346240997 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.346302032 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.346513033 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.346566916 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.346762896 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.346822977 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.360770941 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.360877991 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.360964060 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.361025095 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.361644983 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.361706018 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.361962080 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.362015963 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.362222910 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.362272978 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.362795115 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.362870932 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.367681026 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.367768049 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.368772984 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.368839979 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.369837999 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.369894981 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.371004105 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.371079922 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.373352051 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.373425007 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.374145031 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.374207973 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.374975920 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.375058889 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.375508070 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.375566006 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.375973940 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.376023054 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.376211882 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.376264095 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.376409054 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.376462936 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.376641035 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.376692057 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.377159119 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.377217054 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.378056049 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.378115892 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.378633976 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.378698111 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.378920078 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.378971100 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.379497051 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.379578114 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.380310059 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.380381107 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.380692005 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.380754948 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.380884886 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.380939960 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.381148100 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.381328106 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.381628990 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.381688118 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.381972075 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.382028103 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.382255077 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.382304907 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.382648945 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.382714987 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.382957935 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.383024931 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.383316994 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.383371115 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.383574009 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.383625031 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.383826017 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.383879900 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.384146929 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.384212017 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.384362936 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.384411097 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.384736061 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.384805918 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.385092020 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.385149956 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.385445118 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.385505915 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.385833979 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.385894060 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.386168003 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.386219978 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.386456966 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.386523962 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.386704922 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.386764050 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.387095928 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.387175083 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.387342930 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.387396097 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.387813091 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.387882948 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.388333082 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.388396978 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.388632059 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.388688087 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.388926983 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.388989925 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.389153957 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.389202118 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.389595985 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.389656067 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.389853954 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.389914036 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.390163898 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.390239954 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.390465975 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.390522957 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.390772104 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.390822887 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.391283035 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.391336918 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.391618013 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.391666889 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.391973972 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.392045975 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.392261028 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.392324924 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.392656088 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.392712116 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.393066883 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.393135071 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.393471956 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.393536091 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.393851995 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.393909931 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.394134045 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.394181967 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.394364119 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.394417048 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.394747019 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.394798040 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.395026922 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.395086050 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.395205021 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.395251989 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.395566940 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.395620108 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.395781040 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.395836115 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.396233082 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.396282911 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.396440029 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.396488905 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.396732092 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.396781921 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.397078037 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.397129059 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.397355080 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.397403955 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.397557974 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.397604942 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.397890091 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.397960901 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.398345947 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.398406982 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.399216890 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.399280071 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.401145935 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.401213884 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.401609898 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.401669025 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.401842117 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.401911974 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.402097940 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.402152061 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.402565956 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.402621984 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.402970076 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.403024912 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.403038979 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.403126955 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.403170109 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.403325081 CET	49705	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.403342009 CET	443	49705	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.403400898 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.403465033 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.403666019 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.403718948 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.436465979 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.436599016 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.436867952 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.436928988 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.437834024 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.437912941 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.439883947 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.439950943 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.440226078 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.440308094 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.440504074 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.440571070 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.440798044 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.440865040 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.441103935 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.441175938 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.441373110 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.441431999 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.441441059 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.441478014 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.441485882 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.441530943 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.441574097 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.441726923 CET	49710	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.441742897 CET	443	49710	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.518421888 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.518467903 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.518560886 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.518683910 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.518718004 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.518799067 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.518918991 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.518934965 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.519130945 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.519144058 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.520028114 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.520052910 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.520138979 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.520313025 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.520328045 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.522921085 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.522967100 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.523049116 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.523236036 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.523248911 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.543935061 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.543981075 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.544081926 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.544385910 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.544399977 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.577172995 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.577214003 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.577313900 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.577524900 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.577538013 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.846189022 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.846498013 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.846524954 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.846926928 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.847304106 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.847381115 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.847388983 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.868174076 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.868448973 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.868463993 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.869554996 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.869642973 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.869894028 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.869950056 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.870014906 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.888149023 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.888160944 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.916233063 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.917943001 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.918226957 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.918240070 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.919598103 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.919675112 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.919944048 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.920049906 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.920058012 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.920136929 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.920147896 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.927067995 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.927529097 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.927581072 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.928807020 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.929016113 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.929037094 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.929085970 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.929299116 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.929316998 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.929367065 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.929429054 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.929699898 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.929704905 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.929764986 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.929970980 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.930038929 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.930059910 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.930068016 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.930151939 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.930161953 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.930210114 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.930448055 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.930504084 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.930530071 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.964231014 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.968110085 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.968118906 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.968174934 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.972229004 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.972558022 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.972579002 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.972651958 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.972660065 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.972712040 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.972745895 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.972754002 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.972796917 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.973040104 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.973047972 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.973134995 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.976233006 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:13.983110905 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.983243942 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:13.983268023 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.015113115 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.027908087 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.027925968 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.028043985 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.028053999 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.028099060 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.028105021 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.028110027 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.028132915 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.028147936 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.028156042 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.028178930 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.028263092 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.028341055 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.029055119 CET	49718	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.029069901 CET	443	49718	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.031112909 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.032417059 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.032437086 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.032491922 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.032500982 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.032550097 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.033042908 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.033096075 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.033322096 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.033366919 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.071798086 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.071815968 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.071949959 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.072026968 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.072094917 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.072184086 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.072235107 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.072402000 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.072462082 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.072643995 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.072690010 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.072788000 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.072849035 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.072945118 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.073014021 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.073191881 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.073278904 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.093900919 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.093920946 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.094036102 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.094052076 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.094067097 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.094121933 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.094844103 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.094904900 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.094913006 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.094997883 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.132162094 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.132209063 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.132241964 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.132263899 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.132292986 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.132324934 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.132503986 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.132561922 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.132730007 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.132780075 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.132781029 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.132793903 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.132833958 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.132842064 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.132904053 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.132949114 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.133136034 CET	49715	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.133152008 CET	443	49715	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.172518015 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.172544956 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.172633886 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.172657013 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.172698975 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.172774076 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.172821045 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.172842026 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.172885895 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.173222065 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.173312902 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.173379898 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.173440933 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.173715115 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.173783064 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.173943996 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.174055099 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.174232006 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.174309969 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.174350023 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.174458027 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.174664021 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.174717903 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.174865007 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.174937963 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.175101995 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.175175905 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.175326109 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.175374985 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.175477982 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.175566912 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.175688982 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.175735950 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.175889015 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.175971031 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.176086903 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.176131964 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.176390886 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.176448107 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.176456928 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.176505089 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.176513910 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.176570892 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.176635027 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.178524971 CET	49716	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.178540945 CET	443	49716	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.195945024 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.195962906 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.196044922 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.196058035 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.196114063 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.196630955 CET	49717	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.196645021 CET	443	49717	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.199502945 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.199639082 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.199743032 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.199820042 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.199876070 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.199980974 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.200037003 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.200098991 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.200357914 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.200422049 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.200540066 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.200598955 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.200606108 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.200680971 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.200725079 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.200778008 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.200778008 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.200793028 CET	443	49714	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.200845957 CET	49714	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.203149080 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.203183889 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.203250885 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.203471899 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.203485012 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.211752892 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.211791992 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.211869955 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.211997986 CET	49721	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.212037086 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.212094069 CET	49721	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.212289095 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.212306023 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.212507963 CET	49721	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.212521076 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.213329077 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.213342905 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.213403940 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.213572979 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.213604927 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.213663101 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.213763952 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.213782072 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.213896990 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.213916063 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.271693945 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.271800041 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.271919012 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.271975040 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.272324085 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.272382021 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.272738934 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.272788048 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.272988081 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.273036003 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.273132086 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.273183107 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.273827076 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.273880959 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.274113894 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.274178982 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.371151924 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.371299028 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.371372938 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.371454954 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.371615887 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.371681929 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.371875048 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.371923923 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.372200012 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.372258902 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.372448921 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.372503996 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.372708082 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.372762918 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.372952938 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.373004913 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.373223066 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.373277903 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.373581886 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.373639107 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.373852968 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.373915911 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.374090910 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.374150038 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.374423027 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.374471903 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.374643087 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.374695063 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.374995947 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.375053883 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.375130892 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.375174999 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.375185013 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.375210047 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.375222921 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.375263929 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.375344992 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.375359058 CET	443	49713	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.375370026 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.375411034 CET	49713	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.450036049 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.450318098 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.450337887 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.451253891 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.451647997 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.451811075 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.451818943 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.451870918 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.494123936 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.510792971 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.511189938 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.511207104 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.511584997 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.511885881 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.511945963 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.512094021 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.548027039 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.548326015 CET	49721	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.548352003 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.548727036 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.549069881 CET	49721	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.549149036 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.549207926 CET	49721	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.556231022 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.558882952 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.559079885 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.559104919 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.559971094 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.560183048 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.560197115 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.560266972 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.560429096 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.560659885 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.560722113 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.560810089 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.562088966 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.562203884 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.562468052 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.562573910 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.562573910 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.590131044 CET	49721	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.590159893 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.604242086 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.606112003 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.606117010 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.606122017 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.606146097 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.619824886 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.619860888 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.619929075 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.619945049 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.619981050 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.619997978 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.620002985 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.620014906 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.620028019 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.620074034 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.620083094 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.650702953 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.650727034 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.650855064 CET	49721	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.650882006 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.650896072 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.650949955 CET	49721	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.651472092 CET	49721	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.651485920 CET	443	49721	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.654017925 CET	49724	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.654047012 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.654134989 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.654160023 CET	49724	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.654162884 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.654504061 CET	49724	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.654515028 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.663085938 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.663103104 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.663172007 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.663181067 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.663196087 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.663229942 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.663238049 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.663260937 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.663507938 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.663558006 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.663564920 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.663609028 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.664006948 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.664027929 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.664109945 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.664108992 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.664119005 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.664140940 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.664158106 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.664572001 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.664630890 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.664638042 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.664681911 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.670094013 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.719690084 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.719798088 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.719866037 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.719942093 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.719943047 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.719954967 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.719999075 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.720271111 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.720433950 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.720451117 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.720514059 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.720551968 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.720612049 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.720642090 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.720689058 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.720730066 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.720745087 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.720752001 CET	443	49719	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.720773935 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.720787048 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.720810890 CET	49719	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.748608112 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.748627901 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.748687029 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.748704910 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.748722076 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.748755932 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.748764038 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.748800039 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.762181997 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.762290001 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.762314081 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.762368917 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.763621092 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.763693094 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.763819933 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.763886929 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.764038086 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.764084101 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.764178991 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.764235020 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.764312029 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.764367104 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.764394999 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.764446020 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.764662027 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.764719009 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.764868975 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.764929056 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.765075922 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.765134096 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.765367031 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.765424967 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.765508890 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.765603065 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.765686035 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.765738964 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.765877008 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.765939951 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.766051054 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.766102076 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.798289061 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.848057032 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.848067999 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.848120928 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.848170996 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.848190069 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.848233938 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.848251104 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.848429918 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.848490000 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.848696947 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.848752975 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.849003077 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.849075079 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.849148035 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.849205017 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.861867905 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.861974955 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.862035990 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.862108946 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.862195015 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.862246037 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.863470078 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.863562107 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.863701105 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.863754988 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.863996983 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.864056110 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.864152908 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.864211082 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.864368916 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.864423990 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.864656925 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.864710093 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.865082979 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.865135908 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.865627050 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.865690947 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.865710974 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.865755081 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.865767956 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.865814924 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.865859985 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.866065979 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.866111040 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.866137981 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.866151094 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.866177082 CET	49722	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.866177082 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.866188049 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.866190910 CET	443	49722	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.866200924 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.866240978 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.866262913 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.866270065 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.866287947 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.866312027 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.866317034 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.866327047 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.866367102 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.866383076 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.866388083 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.866417885 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.866436005 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.867290020 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.867366076 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.867367983 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.867381096 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.867408991 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.867423058 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.867429018 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.867453098 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.867511988 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.867511988 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.867520094 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.867563009 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.867928028 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.867993116 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.868015051 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.868083000 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.868172884 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.868232012 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.869254112 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.869292021 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.869324923 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.869330883 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.869357109 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.869406939 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.869452953 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.869812965 CET	49723	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.869837999 CET	443	49723	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.873927116 CET	49726	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.873965979 CET	443	49726	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.874049902 CET	49726	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.874260902 CET	49726	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.874275923 CET	443	49726	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.947227001 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.947276115 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.947309971 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.947318077 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.947340965 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.947380066 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.947578907 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.947616100 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.947624922 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.947635889 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.947688103 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.947698116 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.947751999 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.947865963 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.947938919 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.947956085 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.948015928 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.948035002 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.948086023 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.948138952 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.948195934 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.948275089 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.948331118 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.962454081 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.962748051 CET	49724	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.962764025 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.963133097 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.963433981 CET	49724	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.963498116 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.963576078 CET	49724	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:14.991750002 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:14.991856098 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.008232117 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.046705961 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.046833038 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.046838045 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.046849012 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.046885967 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.046902895 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.046992064 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.047046900 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.047194004 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.047249079 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.047369003 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.047419071 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.047441006 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.047488928 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.047494888 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.047534943 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.047534943 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.047590971 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.047786951 CET	49720	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.047806978 CET	443	49720	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.064759016 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.064780951 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.064857960 CET	49724	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.064872026 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.064915895 CET	49724	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.064922094 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.064932108 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.064966917 CET	49724	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.066698074 CET	49724	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.066714048 CET	443	49724	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.188354969 CET	443	49726	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.188591957 CET	49726	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.188622952 CET	443	49726	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.189006090 CET	443	49726	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.189305067 CET	49726	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.189363003 CET	443	49726	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.189491987 CET	49726	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.189513922 CET	443	49726	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.438657999 CET	443	49726	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.438751936 CET	443	49726	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.438811064 CET	49726	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.439404964 CET	49726	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.439421892 CET	443	49726	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.442193985 CET	49729	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.442244053 CET	443	49729	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.442313910 CET	49729	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.442589998 CET	49729	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.442606926 CET	443	49729	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.457197905 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.457253933 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.457317114 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.457645893 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.457660913 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.457966089 CET	49731	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.457999945 CET	443	49731	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.458055019 CET	49731	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.458283901 CET	49731	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.458297014 CET	443	49731	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.477982044 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.477998972 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.478060007 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.478458881 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.478466034 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.538110018 CET	49733	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:14:15.538139105 CET	443	49733	172.253.62.105	192.168.2.17
Mar 28, 2024 15:14:15.538208961 CET	49733	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:14:15.538495064 CET	49733	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:14:15.538508892 CET	443	49733	172.253.62.105	192.168.2.17
Mar 28, 2024 15:14:15.644505024 CET	443	49729	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.644745111 CET	49729	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.644762039 CET	443	49729	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.645112038 CET	443	49729	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.645395994 CET	49729	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.645462036 CET	443	49729	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.645528078 CET	49729	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.661001921 CET	443	49731	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.661189079 CET	49731	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.661210060 CET	443	49731	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.661556005 CET	443	49731	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.661825895 CET	49731	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.661895037 CET	443	49731	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.661936045 CET	49731	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.692250013 CET	443	49729	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.703188896 CET	49731	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.703219891 CET	443	49731	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.759488106 CET	443	49733	172.253.62.105	192.168.2.17
Mar 28, 2024 15:14:15.759779930 CET	49733	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:14:15.759804010 CET	443	49733	172.253.62.105	192.168.2.17
Mar 28, 2024 15:14:15.760863066 CET	443	49733	172.253.62.105	192.168.2.17
Mar 28, 2024 15:14:15.760940075 CET	49733	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:14:15.761904955 CET	49733	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:14:15.762012005 CET	443	49733	172.253.62.105	192.168.2.17
Mar 28, 2024 15:14:15.766922951 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.767123938 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.767134905 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.767477989 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.767771959 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.767834902 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.767888069 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.785661936 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.785904884 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.785917044 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.786967039 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.787053108 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.787338972 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.787395954 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.787441969 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.812233925 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.815133095 CET	49733	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:14:15.815148115 CET	443	49733	172.253.62.105	192.168.2.17
Mar 28, 2024 15:14:15.832232952 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.832331896 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.832340956 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.863121986 CET	49733	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:14:15.865408897 CET	443	49731	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.865494967 CET	443	49731	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.865559101 CET	49731	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.866166115 CET	49731	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.866184950 CET	443	49731	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.868619919 CET	49736	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.868655920 CET	443	49736	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.868725061 CET	49736	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.868957043 CET	49736	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.868972063 CET	443	49736	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.869251966 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.869277954 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.869333029 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.869342089 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.869388103 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.869456053 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.869510889 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.869633913 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.869685888 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.878142118 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.888583899 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.888602972 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.888689995 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.888695955 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.888748884 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.888760090 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.888766050 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.888806105 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.888902903 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.888952017 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.888957024 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.888967991 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.888988972 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.888993025 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.889043093 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.889046907 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.889130116 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.889431000 CET	49732	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.889441967 CET	443	49732	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.896498919 CET	443	49729	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.896578074 CET	443	49729	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.896630049 CET	49729	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.897135019 CET	49729	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.897149086 CET	443	49729	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.968616009 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.968673944 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.968688965 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.968698978 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.968744040 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.968774080 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.968818903 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.968825102 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.968846083 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:15.968864918 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.968908072 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.969192028 CET	49730	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:15.969202995 CET	443	49730	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:16.059627056 CET	443	49702	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:16.059691906 CET	443	49702	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:16.059762001 CET	49702	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:16.175867081 CET	443	49736	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:16.176230907 CET	49736	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:16.176242113 CET	443	49736	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:16.176645041 CET	443	49736	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:16.176958084 CET	49736	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:16.177021027 CET	443	49736	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:16.177252054 CET	49736	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:16.224230051 CET	443	49736	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:16.260811090 CET	49702	443	192.168.2.17	20.140.48.70
Mar 28, 2024 15:14:16.260827065 CET	443	49702	20.140.48.70	192.168.2.17
Mar 28, 2024 15:14:16.281523943 CET	443	49736	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:16.281666040 CET	443	49736	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:16.281760931 CET	49736	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:16.282298088 CET	49736	443	192.168.2.17	52.127.240.65
Mar 28, 2024 15:14:16.282320976 CET	443	49736	52.127.240.65	192.168.2.17
Mar 28, 2024 15:14:21.223315954 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:21.223356009 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:21.223440886 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:21.225411892 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:21.225442886 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:21.644754887 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:21.644906044 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:21.647135973 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:21.647145033 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:21.647526026 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:21.698132038 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:21.701844931 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:21.744234085 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:22.042625904 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:22.042650938 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:22.042659998 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:22.042670965 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:22.042700052 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:22.042742968 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:22.042761087 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:22.042793036 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:22.042825937 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:22.042834997 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:22.042859077 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:22.042866945 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:22.042905092 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:22.053272963 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:22.053272963 CET	49752	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:22.053296089 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:22.053308010 CET	443	49752	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:25.775774956 CET	443	49733	172.253.62.105	192.168.2.17
Mar 28, 2024 15:14:25.775846004 CET	443	49733	172.253.62.105	192.168.2.17
Mar 28, 2024 15:14:25.775907993 CET	49733	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:14:26.504482031 CET	49675	443	192.168.2.17	204.79.197.203
Mar 28, 2024 15:14:26.793684006 CET	49733	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:14:26.793721914 CET	443	49733	172.253.62.105	192.168.2.17
Mar 28, 2024 15:14:26.808166981 CET	49675	443	192.168.2.17	204.79.197.203
Mar 28, 2024 15:14:27.410299063 CET	49675	443	192.168.2.17	204.79.197.203
Mar 28, 2024 15:14:28.617183924 CET	49675	443	192.168.2.17	204.79.197.203
Mar 28, 2024 15:14:28.784019947 CET	49756	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:28.784046888 CET	443	49756	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:28.784151077 CET	49756	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:28.785165071 CET	49756	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:28.785176039 CET	443	49756	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.151000977 CET	443	49756	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.151113033 CET	49756	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.153773069 CET	49756	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.153791904 CET	443	49756	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.154031038 CET	443	49756	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.189493895 CET	49756	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.232244015 CET	443	49756	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.502151966 CET	443	49756	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.502219915 CET	443	49756	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.502278090 CET	49756	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.502336979 CET	49756	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.502352953 CET	443	49756	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.502366066 CET	49756	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.502372026 CET	443	49756	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.546772003 CET	49757	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.546813965 CET	443	49757	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.546976089 CET	49757	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.547375917 CET	49757	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.547385931 CET	443	49757	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.913291931 CET	443	49757	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.913381100 CET	49757	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.914823055 CET	49757	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.914833069 CET	443	49757	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.915113926 CET	443	49757	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:29.916518927 CET	49757	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:29.931334019 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:29.931366920 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:29.931443930 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:29.931754112 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:29.931768894 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:29.964240074 CET	443	49757	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:30.263992071 CET	443	49757	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:30.264090061 CET	443	49757	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:30.264173985 CET	49757	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:30.264909983 CET	49757	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:30.264910936 CET	49757	443	192.168.2.17	23.54.46.90
Mar 28, 2024 15:14:30.264929056 CET	443	49757	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:30.264940023 CET	443	49757	23.54.46.90	192.168.2.17
Mar 28, 2024 15:14:30.401158094 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.401190996 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.401261091 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.410892963 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:30.411082029 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:30.426271915 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:30.426297903 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:30.426637888 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:30.427148104 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:30.427149057 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:30.427174091 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:30.439842939 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.439861059 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.673531055 CET	49680	443	192.168.2.17	20.189.173.13
Mar 28, 2024 15:14:30.754548073 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.754628897 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.757462978 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.757472992 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.757791996 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.797108889 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.807287931 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:30.807310104 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:30.807348013 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:30.807409048 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:30.807410955 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:30.807424068 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:30.807466984 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:30.807657003 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:30.807657003 CET	49758	443	192.168.2.17	20.190.190.194
Mar 28, 2024 15:14:30.807679892 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:30.807692051 CET	443	49758	20.190.190.194	192.168.2.17
Mar 28, 2024 15:14:30.844239950 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.932991982 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.933151007 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.933248997 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.933275938 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.933372974 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.933466911 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.933475971 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.933598042 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.933702946 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.933769941 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.933779001 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.933846951 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.933888912 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.933922052 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.942038059 CET	49759	443	192.168.2.17	13.107.5.88
Mar 28, 2024 15:14:30.942059040 CET	443	49759	13.107.5.88	192.168.2.17
Mar 28, 2024 15:14:30.950042963 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:30.950078964 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:30.950195074 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:30.952693939 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:30.952707052 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:30.974179983 CET	49680	443	192.168.2.17	20.189.173.13
Mar 28, 2024 15:14:31.021186113 CET	49675	443	192.168.2.17	204.79.197.203
Mar 28, 2024 15:14:31.285022020 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:31.285115004 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:31.285914898 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:31.285972118 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:31.328830004 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:31.328847885 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:31.329176903 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:31.329252958 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:31.331090927 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:31.331118107 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:31.542325974 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:31.542395115 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:31.542408943 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:31.542422056 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:31.542467117 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:31.542469025 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:31.545206070 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:31.550673962 CET	49760	443	192.168.2.17	204.79.197.200
Mar 28, 2024 15:14:31.550684929 CET	443	49760	204.79.197.200	192.168.2.17
Mar 28, 2024 15:14:31.577192068 CET	49680	443	192.168.2.17	20.189.173.13
Mar 28, 2024 15:14:32.784183979 CET	49680	443	192.168.2.17	20.189.173.13
Mar 28, 2024 15:14:35.199202061 CET	49680	443	192.168.2.17	20.189.173.13
Mar 28, 2024 15:14:35.822216034 CET	49675	443	192.168.2.17	204.79.197.203
Mar 28, 2024 15:14:39.113356113 CET	49682	80	192.168.2.17	192.229.211.108
Mar 28, 2024 15:14:39.417238951 CET	49682	80	192.168.2.17	192.229.211.108
Mar 28, 2024 15:14:40.009284019 CET	49680	443	192.168.2.17	20.189.173.13
Mar 28, 2024 15:14:40.025398970 CET	49682	80	192.168.2.17	192.229.211.108
Mar 28, 2024 15:14:41.237222910 CET	49682	80	192.168.2.17	192.229.211.108
Mar 28, 2024 15:14:43.650276899 CET	49682	80	192.168.2.17	192.229.211.108
Mar 28, 2024 15:14:45.436305046 CET	49675	443	192.168.2.17	204.79.197.203
Mar 28, 2024 15:14:48.465301037 CET	49682	80	192.168.2.17	192.229.211.108
Mar 28, 2024 15:14:49.613384962 CET	49680	443	192.168.2.17	20.189.173.13
Mar 28, 2024 15:14:56.583554029 CET	49696	80	192.168.2.17	104.97.85.183
Mar 28, 2024 15:14:56.688021898 CET	80	49696	104.97.85.183	192.168.2.17
Mar 28, 2024 15:14:56.688136101 CET	49696	80	192.168.2.17	104.97.85.183
Mar 28, 2024 15:14:58.068432093 CET	49682	80	192.168.2.17	192.229.211.108
Mar 28, 2024 15:14:58.457890034 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:58.457942963 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:58.458036900 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:58.458472013 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:58.458489895 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:58.873066902 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:58.873184919 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:58.875269890 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:58.875291109 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:58.875560999 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:58.876950979 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:58.924238920 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:59.279731035 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:59.279758930 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:59.279774904 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:59.279901028 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:59.279922962 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:59.279942036 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:59.279977083 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:59.279984951 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:59.280005932 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:59.280014992 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:59.280025005 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:59.280051947 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:59.283504009 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:59.283544064 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:14:59.283559084 CET	49765	443	192.168.2.17	13.85.23.86
Mar 28, 2024 15:14:59.283567905 CET	443	49765	13.85.23.86	192.168.2.17
Mar 28, 2024 15:15:15.485909939 CET	49767	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:15:15.485959053 CET	443	49767	172.253.62.105	192.168.2.17
Mar 28, 2024 15:15:15.486066103 CET	49767	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:15:15.486376047 CET	49767	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:15:15.486392975 CET	443	49767	172.253.62.105	192.168.2.17
Mar 28, 2024 15:15:15.703521013 CET	443	49767	172.253.62.105	192.168.2.17
Mar 28, 2024 15:15:15.704051018 CET	49767	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:15:15.704070091 CET	443	49767	172.253.62.105	192.168.2.17
Mar 28, 2024 15:15:15.704389095 CET	443	49767	172.253.62.105	192.168.2.17
Mar 28, 2024 15:15:15.704715967 CET	49767	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:15:15.704768896 CET	443	49767	172.253.62.105	192.168.2.17
Mar 28, 2024 15:15:15.756516933 CET	49767	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:15:25.768243074 CET	443	49767	172.253.62.105	192.168.2.17
Mar 28, 2024 15:15:25.768316031 CET	443	49767	172.253.62.105	192.168.2.17
Mar 28, 2024 15:15:25.768394947 CET	49767	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:15:26.796446085 CET	49767	443	192.168.2.17	172.253.62.105
Mar 28, 2024 15:15:26.796477079 CET	443	49767	172.253.62.105	192.168.2.17
Mar 28, 2024 15:15:49.574273109 CET	49698	80	192.168.2.17	192.229.211.108
Mar 28, 2024 15:15:49.668510914 CET	80	49698	192.229.211.108	192.168.2.17
Mar 28, 2024 15:15:49.668833017 CET	49698	80	192.168.2.17	192.229.211.108
Mar 28, 2024 15:15:58.282741070 CET	443	49690	204.79.197.200	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 28, 2024 15:14:10.580245972 CET	50301	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:10.581005096 CET	57481	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:10.670815945 CET	53	51995	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:10.685430050 CET	53	52961	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:10.723200083 CET	53	50301	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:10.732346058 CET	53	57481	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:11.307369947 CET	53	62299	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:11.700192928 CET	56312	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:11.700361013 CET	63308	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:11.865658045 CET	53	56312	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:11.994781971 CET	53	63308	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:13.337865114 CET	54806	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:13.338005066 CET	56445	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:13.569715977 CET	53	54806	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:13.576562881 CET	53	56445	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:15.419064045 CET	62150	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:15.419274092 CET	54823	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:15.469495058 CET	55541	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:15.469638109 CET	50621	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:15.514296055 CET	53	54823	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:15.515978098 CET	53	62150	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:15.579488039 CET	53	50621	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:16.048825979 CET	65229	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:16.048959970 CET	55770	53	192.168.2.17	1.1.1.1
Mar 28, 2024 15:14:16.164813995 CET	53	55770	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:28.255013943 CET	53	61487	1.1.1.1	192.168.2.17
Mar 28, 2024 15:14:47.183747053 CET	53	57950	1.1.1.1	192.168.2.17
Mar 28, 2024 15:15:09.917668104 CET	53	54145	1.1.1.1	192.168.2.17
Mar 28, 2024 15:15:10.668795109 CET	53	51996	1.1.1.1	192.168.2.17
Mar 28, 2024 15:15:27.885902882 CET	138	138	192.168.2.17	192.168.2.255
Mar 28, 2024 15:15:37.846839905 CET	53	52505	1.1.1.1	192.168.2.17

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 28, 2024 15:14:11.994913101 CET	192.168.2.17	1.1.1.1	c2c5	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 28, 2024 15:14:10.580245972 CET	192.168.2.17	1.1.1.1	0x9bf7	Standard query (0)	gcv.microsoft.us	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:10.581005096 CET	192.168.2.17	1.1.1.1	0x6970	Standard query (0)	gcv.microsoft.us	65	IN (0x0001)	false
Mar 28, 2024 15:14:11.700192928 CET	192.168.2.17	1.1.1.1	0x8107	Standard query (0)	customervoice.microsoft.us	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:11.700361013 CET	192.168.2.17	1.1.1.1	0x57df	Standard query (0)	customervoice.microsoft.us	65	IN (0x0001)	false
Mar 28, 2024 15:14:13.337865114 CET	192.168.2.17	1.1.1.1	0x3102	Standard query (0)	customervoice.microsoft.us	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:13.338005066 CET	192.168.2.17	1.1.1.1	0x1fd8	Standard query (0)	customervoice.microsoft.us	65	IN (0x0001)	false
Mar 28, 2024 15:14:15.419064045 CET	192.168.2.17	1.1.1.1	0xa44a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:15.419274092 CET	192.168.2.17	1.1.1.1	0xa154	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 28, 2024 15:14:15.469495058 CET	192.168.2.17	1.1.1.1	0xc9f7	Standard query (0)	lists.gcc.osi.office365.us	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:15.469638109 CET	192.168.2.17	1.1.1.1	0x124f	Standard query (0)	lists.gcc.osi.office365.us	65	IN (0x0001)	false
Mar 28, 2024 15:14:16.048825979 CET	192.168.2.17	1.1.1.1	0xe6b2	Standard query (0)	lists.gcc.osi.office365.us	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:16.048959970 CET	192.168.2.17	1.1.1.1	0x32ec	Standard query (0)	lists.gcc.osi.office365.us	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 28, 2024 15:14:10.723200083 CET	1.1.1.1	192.168.2.17	0x9bf7	No error (0)	gcv.microsoft.us	msformspro.azurefd.us		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:10.723200083 CET	1.1.1.1	192.168.2.17	0x9bf7	No error (0)	msformspro.azurefd.us	t-0001.msedge.azure.us		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:10.723200083 CET	1.1.1.1	192.168.2.17	0x9bf7	No error (0)	t-0001.msedge.azure.us	eafd-3p-profile.usgovtrafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:10.723200083 CET	1.1.1.1	192.168.2.17	0x9bf7	No error (0)	eafd-3p-profile.usgovtrafficmanager.net		20.140.48.70	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:10.723200083 CET	1.1.1.1	192.168.2.17	0x9bf7	No error (0)	eafd-3p-profile.usgovtrafficmanager.net		20.141.12.34	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:10.732346058 CET	1.1.1.1	192.168.2.17	0x6970	No error (0)	gcv.microsoft.us	msformspro.azurefd.us		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:10.732346058 CET	1.1.1.1	192.168.2.17	0x6970	No error (0)	msformspro.azurefd.us	t-0001.msedge.azure.us		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:10.732346058 CET	1.1.1.1	192.168.2.17	0x6970	No error (0)	t-0001.msedge.azure.us	eafd-3p-profile.usgovtrafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:11.865658045 CET	1.1.1.1	192.168.2.17	0x8107	No error (0)	customervoice.microsoft.us	usge-001.forms.gcc.osi.office365.us		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:11.865658045 CET	1.1.1.1	192.168.2.17	0x8107	No error (0)	usge-001.forms.gcc.osi.office365.us	osiusgcc-usge-teal-001.usgovvirginia.cloudapp.usgovcloudapi.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:11.865658045 CET	1.1.1.1	192.168.2.17	0x8107	No error (0)	osiusgcc-usge-teal-001.usgovvirginia.cloudapp.usgovcloudapi.net		52.127.240.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:11.994781971 CET	1.1.1.1	192.168.2.17	0x57df	No error (0)	customervoice.microsoft.us	usge-001.forms.gcc.osi.office365.us		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:11.994781971 CET	1.1.1.1	192.168.2.17	0x57df	No error (0)	usge-001.forms.gcc.osi.office365.us	osiusgcc-usge-teal-001.usgovvirginia.cloudapp.usgovcloudapi.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:13.569715977 CET	1.1.1.1	192.168.2.17	0x3102	No error (0)	customervoice.microsoft.us	usge-001.forms.gcc.osi.office365.us		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:13.569715977 CET	1.1.1.1	192.168.2.17	0x3102	No error (0)	usge-001.forms.gcc.osi.office365.us	osiusgcc-usge-teal-001.usgovvirginia.cloudapp.usgovcloudapi.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:13.569715977 CET	1.1.1.1	192.168.2.17	0x3102	No error (0)	osiusgcc-usge-teal-001.usgovvirginia.cloudapp.usgovcloudapi.net		52.127.240.65	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:13.576562881 CET	1.1.1.1	192.168.2.17	0x1fd8	No error (0)	customervoice.microsoft.us	usge-001.forms.gcc.osi.office365.us		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:13.576562881 CET	1.1.1.1	192.168.2.17	0x1fd8	No error (0)	usge-001.forms.gcc.osi.office365.us	osiusgcc-usge-teal-001.usgovvirginia.cloudapp.usgovcloudapi.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:15.514296055 CET	1.1.1.1	192.168.2.17	0xa154	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 28, 2024 15:14:15.515978098 CET	1.1.1.1	192.168.2.17	0xa44a	No error (0)	www.google.com		172.253.62.105	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:15.515978098 CET	1.1.1.1	192.168.2.17	0xa44a	No error (0)	www.google.com		172.253.62.104	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:15.515978098 CET	1.1.1.1	192.168.2.17	0xa44a	No error (0)	www.google.com		172.253.62.106	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:15.515978098 CET	1.1.1.1	192.168.2.17	0xa44a	No error (0)	www.google.com		172.253.62.99	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:15.515978098 CET	1.1.1.1	192.168.2.17	0xa44a	No error (0)	www.google.com		172.253.62.103	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:15.515978098 CET	1.1.1.1	192.168.2.17	0xa44a	No error (0)	www.google.com		172.253.62.147	A (IP address)	IN (0x0001)	false
Mar 28, 2024 15:14:15.579488039 CET	1.1.1.1	192.168.2.17	0x124f	No error (0)	lists.gcc.osi.office365.us	gcc.lists.osi.office365.us.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:15.580743074 CET	1.1.1.1	192.168.2.17	0xc9f7	No error (0)	lists.gcc.osi.office365.us	gcc.lists.osi.office365.us.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:16.144673109 CET	1.1.1.1	192.168.2.17	0xe6b2	No error (0)	lists.gcc.osi.office365.us	gcc.lists.osi.office365.us.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 28, 2024 15:14:16.164813995 CET	1.1.1.1	192.168.2.17	0x32ec	No error (0)	lists.gcc.osi.office365.us	gcc.lists.osi.office365.us.akadns.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

gcv.microsoft.us

customervoice.microsoft.us

https:

slscr.update.microsoft.com

fs.microsoft.com

evoke-windowsservices-tas.msedge.net

www.bing.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49703	20.140.48.70	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:11 UTC	669	OUT	GET /kgRWagmalJ HTTP/1.1 Host: gcv.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:14:11 UTC	507	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 28 Mar 2024 14:14:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache Pragma: no-cache Expires: -1 Location: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Delay: 1.2004 X-Powered-By: ASP.NET x-azure-ref: 20240328T141411Z-yyxfbqbqz954x64tcpfxahfv300000000v50000000000yev X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49704	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:12 UTC	821	OUT	GET /Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-28 14:14:12 UTC	1176	IN	HTTP/1.1 200 OK Content-Length: 35408 Connection: close Content-Type: text/html; charset=utf-8 Date: Thu, 28 Mar 2024 14:14:12 GMT Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache Set-Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1; path=/; samesite=none; secure; HttpOnly Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 X-RoutingCorrelationId: 7dbb945c-acbf-4308-93f1-b1eaae7705b6 X-CorrelationId: 7dbb945c-acbf-4308-93f1-b1eaae7705b6 X-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 X-OfficeFE: FormsSingleBox_IN_0 X-OfficeVersion: 16.0.17519.42500 X-OfficeCluster: usge-001.forms.gcc.osi.office365.us P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-FailureReason: Unknown X-Robots-Tag: noindex, nofollow X-Content-Type-Options: nosniff
2024-03-28 14:14:12 UTC	2920	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-us"> <head> <meta charset="utf-8" /> <meta http-equiv="x-ua-compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width, init
2024-03-28 14:14:12 UTC	317	IN	Data Raw: 41 67 65 6e 74 3b 21 45 6e 61 62 6c 65 4e 67 70 44 61 74 61 41 67 65 6e 74 54 65 73 74 43 6f 6d 6d 61 6e 64 3b 41 73 73 69 67 6e 6d 65 6e 74 73 43 6f 6d 6d 65 6e 74 4f 62 73 65 72 76 65 72 45 6e 61 62 6c 65 64 3b 21 45 6e 61 62 6c 65 44 65 66 61 75 6c 74 4c 6f 63 61 6c 65 46 6f 72 45 78 70 6f 72 74 3b 21 41 73 73 69 67 6e 6d 65 6e 74 73 51 75 65 73 74 69 6f 6e 4f 62 73 65 72 76 65 72 45 6e 61 62 6c 65 64 3b 21 47 6f 76 47 61 74 69 6e 67 3b 21 45 6e 61 62 6c 65 52 65 73 70 6f 6e 73 65 53 65 6e 74 69 6d 65 6e 74 49 6e 73 69 67 68 74 3b 21 53 64 73 44 61 74 61 53 79 6e 63 4f 62 73 65 72 76 65 72 3b 21 45 6e 61 62 6c 65 47 72 6f 75 70 43 68 65 63 6b 46 6f 72 46 46 49 6e 52 50 3b 21 48 61 6e 64 6c 65 53 65 72 76 69 63 65 42 75 73 51 75 65 75 65 45 78 70 69 72 Data Ascii: Agent;!EnableNgpDataAgentTestCommand;AssignmentsCommentObserverEnabled;!EnableDefaultLocaleForExport;!AssignmentsQuestionObserverEnabled;!GovGating;!EnableResponseSentimentInsight;!SdsDataSyncObserver;!EnableGroupCheckForFFInRP;!HandleServiceBusQueueExpir
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 6c 65 63 74 69 6f 6e 3b 21 47 65 74 43 44 42 54 61 62 6c 65 44 65 66 56 31 30 3b 21 55 73 65 50 72 65 6d 69 75 6d 53 65 72 76 69 63 65 42 75 73 46 6f 72 57 65 62 68 6f 6f 6b 3b 21 55 70 67 72 61 64 65 55 78 53 74 61 74 65 4d 6f 64 65 6c 3b 21 41 73 73 69 67 6e 6d 65 6e 74 73 52 65 73 70 6f 6e 73 65 55 70 64 61 74 65 64 44 69 73 61 62 6c 65 64 3b 21 44 61 74 61 53 79 6e 63 52 65 73 70 6f 6e 73 65 49 64 44 65 74 65 63 74 69 6f 6e 50 4f 43 3b 21 41 73 73 69 67 6e 6d 65 6e 74 73 49 46 72 61 6d 65 4c 69 6d 69 74 50 61 72 65 6e 74 48 65 61 64 65 72 73 3b 21 53 64 73 4c 6f 63 61 6c 65 52 65 73 6f 75 72 63 65 3b 21 45 6e 61 62 6c 65 41 73 73 69 67 6e 6d 65 6e 74 73 57 65 62 68 6f 6f 6b 52 65 64 69 72 65 63 74 3b 21 53 64 73 53 79 6e 63 51 75 69 7a 52 65 73 75 6c Data Ascii: lection;!GetCDBTableDefV10;!UsePremiumServiceBusForWebhook;!UpgradeUxStateModel;!AssignmentsResponseUpdatedDisabled;!DataSyncResponseIdDetectionPOC;!AssignmentsIFrameLimitParentHeaders;!SdsLocaleResource;!EnableAssignmentsWebhookRedirect;!SdsSyncQuizResul
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 68 74 6b 6f 2c 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 65 6d 62 65 64 2f 77 45 69 32 73 77 42 4e 34 2d 55 25 32 32 2c 25 32 32 45 78 70 6f 72 74 43 73 76 53 65 72 76 69 63 65 45 6e 64 70 6f 69 6e 74 25 32 32 3a 25 32 32 68 74 74 70 73 3a 2f 2f 75 73 65 72 61 63 74 69 6f 6e 73 65 72 76 69 63 65 2e 67 63 63 2e 66 6f 72 6d 73 70 72 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 75 73 2f 25 32 32 2c 25 32 32 43 75 73 74 6f 6d 65 72 56 6f 69 63 65 53 75 72 76 65 79 55 49 53 65 72 76 69 63 65 45 6e 64 70 6f 69 6e 74 25 32 32 3a 25 32 32 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 65 72 76 6f 69 63 65 73 65 72 76 69 63 65 2e 67 63 63 2e 66 6f 72 6d 73 70 72 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 75 73 2f 25 32 32 2c 25 32 32 43 56 50 61 75 73 65 Data Ascii: htko,https://www.youtube.com/embed/wEi2swBN4-U%22,%22ExportCsvServiceEndpoint%22:%22https://useractionservice.gcc.formspro.microsoft.us/%22,%22CustomerVoiceSurveyUIServiceEndpoint%22:%22https://customervoiceservice.gcc.formspro.microsoft.us/%22,%22CVPause
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 37 34 66 22 2c 22 70 72 6f 6a 65 63 74 2d 70 6f 72 74 61 6c 2d 70 61 67 65 2e 6d 69 6e 2e 63 73 73 22 3a 22 39 39 36 31 36 38 65 22 2c 22 70 72 6f 6a 65 63 74 2d 70 6f 72 74 61 6c 2d 70 61 67 65 2e 72 74 6c 2e 6d 69 6e 2e 63 73 73 22 3a 22 32 34 65 39 34 35 30 22 2c 22 72 65 65 78 70 6f 72 74 2d 74 6f 2d 78 6c 2e 6d 69 6e 2e 63 73 73 22 3a 22 36 32 30 66 34 34 31 22 2c 22 72 65 65 78 70 6f 72 74 2d 74 6f 2d 78 6c 2e 72 74 6c 2e 6d 69 6e 2e 63 73 73 22 3a 22 63 37 37 33 61 35 37 22 2c 22 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2d 63 75 73 74 6f 6d 69 7a 65 2d 66 61 62 72 69 63 2d 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3a 22 62 38 31 36 30 38 36 22 2c 22 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2d 63 75 73 74 6f 6d 69 7a 65 2d 66 61 62 72 69 63 Data Ascii: 74f","project-portal-page.min.css":"996168e","project-portal-page.rtl.min.css":"24e9450","reexport-to-xl.min.css":"620f441","reexport-to-xl.rtl.min.css":"c773a57","response-page-customize-fabric-bootstrap.min.css":"b816086","response-page-customize-fabric
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 6c 69 67 68 74 2d 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2e 6d 69 6e 2e 63 73 73 22 3a 22 34 66 65 63 38 36 31 22 2c 22 6c 69 67 68 74 2d 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2e 6d 69 6e 2e 6a 73 22 3a 22 33 32 62 64 34 64 38 22 2c 22 6c 69 67 68 74 2d 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2e 72 74 6c 2e 6d 69 6e 2e 63 73 73 22 3a 22 37 31 66 31 32 66 64 22 2c 22 6c 69 67 68 74 2d 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2e 68 63 2e 6d 69 6e 2e 63 73 73 22 3a 22 33 64 39 33 65 33 37 22 2c 22 6c 69 67 68 74 2d 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2e 72 74 6c 2e 68 63 2e 6d 69 6e 2e 63 73 73 22 3a 22 63 38 63 66 32 31 66 22 2c 22 6c 69 67 68 74 2d 73 68 61 72 65 66 6f 72 6d 2d 70 61 67 65 2e 6d 69 6e 2e 63 73 73 22 3a 22 32 64 32 34 39 63 33 22 2c 22 6c Data Ascii: light-response-page.min.css":"4fec861","light-response-page.min.js":"32bd4d8","light-response-page.rtl.min.css":"71f12fd","light-response-page.hc.min.css":"3d93e37","light-response-page.rtl.hc.min.css":"c8cf21f","light-shareform-page.min.css":"2d249c3","l
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 65 2e 63 68 75 6e 6b 2e 6c 72 70 5f 70 6f 6c 6c 2e 6a 73 22 3a 22 35 63 32 65 38 33 36 22 2c 22 6e 65 6f 2d 64 65 73 69 67 6e 2d 70 61 67 65 2e 63 68 75 6e 6b 2e 6c 72 70 5f 70 72 61 63 74 69 63 65 6d 6f 64 65 2e 6a 73 22 3a 22 33 37 35 31 61 39 63 22 2c 22 6e 65 6f 2d 64 65 73 69 67 6e 2d 70 61 67 65 2e 63 68 75 6e 6b 2e 6c 72 70 5f 63 6f 76 65 72 2e 6a 73 22 3a 22 62 37 34 39 35 30 64 22 2c 22 6e 65 6f 2d 64 65 73 69 67 6e 2d 70 61 67 65 2e 63 68 75 6e 6b 2e 66 6c 75 65 6e 74 2e 6a 73 22 3a 22 39 34 30 65 32 39 37 22 2c 22 6e 65 6f 2d 64 65 73 69 67 6e 2d 70 61 67 65 2e 63 68 75 6e 6b 2e 70 72 65 66 69 6c 6c 2d 64 69 61 6c 6f 67 2e 6a 73 22 3a 22 39 34 33 36 34 31 63 22 2c 22 6e 65 6f 2d 64 65 73 69 67 6e 2d 70 61 67 65 2e 63 68 75 6e 6b 2e 68 69 67 68 Data Ascii: e.chunk.lrp_poll.js":"5c2e836","neo-design-page.chunk.lrp_practicemode.js":"3751a9c","neo-design-page.chunk.lrp_cover.js":"b74950d","neo-design-page.chunk.fluent.js":"940e297","neo-design-page.chunk.prefill-dialog.js":"943641c","neo-design-page.chunk.high
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 61 67 65 2e 63 68 75 6e 6b 2e 73 63 2e 6a 73 22 3a 22 34 65 64 63 64 32 66 22 2c 22 74 65 61 6d 73 2d 70 6f 6c 6c 2d 62 75 62 62 6c 65 2d 70 61 67 65 2e 63 61 63 68 65 67 72 6f 75 70 2d 64 65 70 73 2e 6d 69 6e 2e 6a 73 22 3a 22 37 32 34 31 39 65 61 22 2c 22 74 65 61 6d 73 2d 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2e 6d 69 6e 2e 6a 73 22 3a 22 36 64 35 31 61 32 63 22 2c 22 74 65 61 6d 73 2d 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2e 63 61 63 68 65 67 72 6f 75 70 2d 6e 65 72 76 65 2e 6d 69 6e 2e 6a 73 22 3a 22 33 34 65 63 37 38 33 22 2c 22 74 65 61 6d 73 2d 74 61 73 6b 2d 6d 6f 64 75 6c 65 2d 70 61 67 65 2e 6d 69 6e 2e 6a 73 22 3a 22 66 38 36 64 62 64 34 22 2c 22 75 6e 69 6f 6e 2d 70 72 65 66 65 74 63 68 65 72 2e 6d 69 6e 2e 6a 73 22 3a 22 36 65 61 30 62 34 Data Ascii: age.chunk.sc.js":"4edcd2f","teams-poll-bubble-page.cachegroup-deps.min.js":"72419ea","teams-response-page.min.js":"6d51a2c","teams-response-page.cachegroup-nerve.min.js":"34ec783","teams-task-module-page.min.js":"f86dbd4","union-prefetcher.min.js":"6ea0b4
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 7b 72 65 74 75 72 6e 20 72 28 61 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6f 3d 6e 2e 68 61 73 28 61 29 3f 6e 2e 67 65 74 28 61 29 3a 32 3b 69 66 28 6f 3c 31 29 7b 76 61 72 20 69 3d 65 28 61 29 3b 74 68 72 6f 77 20 72 2e 6d 65 73 73 61 67 65 3d 22 4c 6f 61 64 69 6e 67 20 63 68 75 6e 6b 20 22 2b 61 2b 22 20 66 61 69 6c 65 64 20 61 66 74 65 72 20 32 20 72 65 74 72 69 65 73 2e 5c 6e 28 22 2b 69 2b 22 29 22 2c 72 2e 72 65 71 75 65 73 74 3d 69 2c 72 7d 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 22 63 61 63 68 65 2d 62 75 73 74 3d 74 72 75 65 22 2b 28 22 26 72 65 74 72 79 2d 61 74 74 65 6d Data Ascii: {return r(a).catch((function(r){var o=n.has(a)?n.get(a):2;if(o<1){var i=e(a);throw r.message="Loading chunk "+a+" failed after 2 retries.\n("+i+")",r.request=i,r}return new Promise((function(e){setTimeout((function(){var r="cache-bust=true"+("&retry-attem
2024-03-28 14:14:12 UTC	3499	IN	Data Raw: 72 73 6f 6e 61 6c 69 7a 65 64 4c 69 6e 6b 56 61 6c 69 64 61 74 69 6f 6e 54 6f 6b 65 6e 3b 77 26 26 6c 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 56 61 6c 69 64 61 74 69 6f 6e 54 6f 6b 65 6e 22 2c 77 29 3b 76 61 72 20 62 3d 74 28 29 2e 63 6f 6e 74 65 78 74 50 61 72 61 6d 73 3b 62 26 26 6c 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 78 74 50 61 72 61 6d 73 22 2c 62 29 3b 76 61 72 20 76 3d 74 28 29 2e 72 65 67 61 72 64 69 6e 67 50 61 72 61 6d 73 3b 76 26 26 6c 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 52 65 67 61 72 64 69 6e 67 50 61 72 61 6d 73 22 2c 76 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 66 7c 7c 61 2e 65 72 72 6f 72 43 61 6c 6c 62 61 63 6b 26 26 28 66 3d 21 30 2c 61 2e 65 72 72 6f 72 43 61 Data Ascii: rsonalizedLinkValidationToken;w&&l.setRequestHeader("ValidationToken",w);var b=t().contextParams;b&&l.setRequestHeader("ContextParams",b);var v=t().regardingParams;v&&l.setRequestHeader("RegardingParams",v)}function h(){f\|\|a.errorCallback&&(f=!0,a.errorCa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49707	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:12 UTC	918	OUT	GET /css/dist/cv-response-page.min.css?v=b3c1eb4c85&ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:12 UTC	609	IN	HTTP/1.1 200 OK Content-Length: 213684 Connection: close Content-Type: text/css Date: Thu, 28 Mar 2024 14:14:12 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 58ab6b0f-6748-4f44-8d11-21ef68c63e2b X-RoutingCorrelationId: 9d1688a4-76eb-4320-8f89-98f79bd79b10 X-Content-Type-Options: nosniff
2024-03-28 14:14:12 UTC	3487	IN	Data Raw: 40 63 68 61 72 73 65 74 20 27 55 54 46 2d 38 27 3b 2f 2a 21 0d 0a 20 2a 20 47 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 42 6f 6f 74 73 74 72 61 70 20 43 75 73 74 6f 6d 69 7a 65 72 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 64 6f 63 73 2f 33 2e 34 2f 63 75 73 74 6f 6d 69 7a 65 2f 29 0d 0a 20 2a 2f 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 Data Ascii: @charset 'UTF-8';/! Generated using the Bootstrap Customizer (https://getbootstrap.com/docs/3.4/customize/) //! * Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs
2024-03-28 14:14:12 UTC	317	IN	Data Raw: 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 7d 2e 73 72 2d 6f 6e 6c 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6c 69 70 3a 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 62 6f 72 64 65 72 3a 30 7d 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 61 63 74 69 76 65 2c 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 66 6f 63 75 73 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a Data Ascii: x;margin-bottom:20px;border:0;border-top:1px solid #eee}.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);border:0}.sr-only-focusable:active,.sr-only-focusable:focus{position:static;width:auto;height:
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 70 6f 69 6e 74 65 72 7d 66 69 65 6c 64 73 65 74 7b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 23 33 33 33 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 Data Ascii: pointer}fieldset{min-width:0;padding:0;margin:0;border:0}legend{display:block;width:100%;padding:0;margin-bottom:20px;font-size:21px;line-height:inherit;color:#333;border:0;border-bottom:1px solid #e5e5e5}label{display:inline-block;max-width:100%;margin-b
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 2e 69 6e 70 75 74 2d 73 6d 7b 68 65 69 67 68 74 3a 33 30 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 73 65 6c 65 63 74 2e 69 6e 70 75 74 2d 73 6d 7b 68 65 69 67 68 74 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 7d 73 65 6c 65 63 74 5b 6d 75 6c 74 69 70 6c 65 5d 2e 69 6e 70 75 74 2d 73 6d 2c 74 65 78 74 61 72 65 61 2e 69 6e 70 75 74 2d 73 6d 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 66 6f 72 6d 2d 67 72 6f 75 70 2d 73 6d 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 33 30 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a Data Ascii: .input-sm{height:30px;padding:5px 10px;font-size:12px;line-height:1.5;border-radius:3px}select.input-sm{height:30px;line-height:30px}select[multiple].input-sm,textarea.input-sm{height:auto}.form-group-sm .form-control{height:30px;padding:5px 10px;font-siz
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 6e 2d 74 6f 70 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 63 6f 6c 6f 72 3a 23 37 33 37 33 37 33 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 61 75 74 6f 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 6f 6e Data Ascii: n-top:5px;margin-bottom:10px;color:#737373}@media (min-width:768px){.form-inline .form-group{display:inline-block;margin-bottom:0;vertical-align:middle}.form-inline .form-control{display:inline-block;width:auto;vertical-align:middle}.form-inline .form-con
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 6f 6e 52 69 67 68 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 9d ac 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 68 65 76 72 6f 6e 52 69 67 68 74 4d 65 64 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a5 b4 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 68 65 76 72 6f 6e 52 69 67 68 74 53 6d 61 6c 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a5 b0 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 68 65 76 72 6f 6e 55 70 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 9c 8e 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 68 72 6f 6d 65 43 6c 6f 73 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a2 bb 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 6c 6f 63 6b 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a4 97 27 7d 2e 6d 73 Data Ascii: onRight::before{content:''}.ms-Icon--ChevronRightMed::before{content:''}.ms-Icon--ChevronRightSmall::before{content:''}.ms-Icon--ChevronUp::before{content:''}.ms-Icon--ChromeClose::before{content:''}.ms-Icon--Clock::before{content:''}.ms
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 6e 74 65 6e 74 3a 27 ee 9f a9 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 54 61 73 6b 4c 6f 67 6f 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ef 92 93 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 54 65 6c 65 6d 61 72 6b 65 74 65 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 9e b9 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 54 65 6d 70 6f 72 61 72 79 55 73 65 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee b9 98 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 54 65 78 74 44 6f 63 75 6d 65 6e 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ef 80 a9 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 54 65 78 74 44 6f 63 75 6d 65 6e 74 53 68 61 72 65 64 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ef 80 ab 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 54 65 78 74 46 Data Ascii: ntent:''}.ms-Icon--TaskLogo::before{content:''}.ms-Icon--Telemarketer::before{content:''}.ms-Icon--TemporaryUser::before{content:''}.ms-Icon--TextDocument::before{content:''}.ms-Icon--TextDocumentShared::before{content:''}.ms-Icon--TextF
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 3a 41 63 74 69 76 65 42 6f 72 64 65 72 7d 2e 6d 71 2d 65 64 69 74 61 62 6c 65 2d 66 69 65 6c 64 2e 6d 71 2d 65 6d 70 74 79 3a 61 66 74 65 72 2c 2e 6d 71 2d 65 64 69 74 61 62 6c 65 2d 66 69 65 6c 64 2e 6d 71 2d 74 65 78 74 2d 6d 6f 64 65 3a 61 66 74 65 72 2c 2e 6d 71 2d 6d 61 74 68 2d 6d 6f 64 65 20 2e 6d 71 2d 65 6d 70 74 79 3a 61 66 74 65 72 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 63 6f 6e 74 65 6e 74 3a 27 63 27 7d 2e 6d 71 2d 65 64 69 74 61 62 6c 65 2d 66 69 65 6c 64 20 2e 6d 71 2d 63 75 72 73 6f 72 3a 6f 6e 6c 79 2d 63 68 69 6c 64 3a 61 66 74 65 72 2c 2e 6d 71 2d 65 64 69 74 61 62 6c 65 2d 66 69 65 6c 64 20 2e 6d 71 2d 74 65 78 74 61 72 65 61 2b 2e 6d 71 2d 63 75 72 73 6f 72 3a 6c 61 73 74 2d 63 68 69 6c 64 3a 61 66 74 65 72 7b 76 69 Data Ascii: :ActiveBorder}.mq-editable-field.mq-empty:after,.mq-editable-field.mq-text-mode:after,.mq-math-mode .mq-empty:after{visibility:hidden;content:'c'}.mq-editable-field .mq-cursor:only-child:after,.mq-editable-field .mq-textarea+.mq-cursor:last-child:after{vi
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 74 68 2d 6d 6f 64 65 20 2e 6d 71 2d 73 71 72 74 2d 70 72 65 66 69 78 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 2e 31 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 2d 6f 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 7d 2e 6d 71 2d 6d 61 74 68 2d 6d 6f 64 65 20 2e 6d 71 2d 73 71 72 74 2d 73 74 65 6d 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c Data Ascii: th-mode .mq-sqrt-prefix{padding-top:0;position:relative;top:.1em;vertical-align:top;-webkit-transform-origin:top;-moz-transform-origin:top;-ms-transform-origin:top;-o-transform-origin:top;transform-origin:top}.mq-math-mode .mq-sqrt-stem{border-top:1px sol
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 2c 31 32 30 2c 31 32 34 2c 2e 32 29 7d 33 37 2e 35 25 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2d 32 2e 36 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 31 2e 38 65 6d 20 2d 31 2e 38 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 35 29 2c 32 2e 35 65 6d 20 30 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 37 29 2c 31 2e 37 35 65 6d 20 31 2e 37 35 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 30 20 32 2e 35 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 2d 31 2e 38 65 6d 20 31 2e 38 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 2d 32 2e 36 65 6d 20 30 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 Data Ascii: ,120,124,.2)}37.5%{box-shadow:0 -2.6em 0 0 rgba(3,120,124,.2),1.8em -1.8em 0 0 rgba(3,120,124,.5),2.5em 0 0 0 rgba(3,120,124,.7),1.75em 1.75em 0 0 rgba(3,120,124,.2),0 2.5em 0 0 rgba(3,120,124,.2),-1.8em 1.8em 0 0 rgba(3,120,124,.2),-2.6em 0 0 0 rgba(3,12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49709	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:12 UTC	938	OUT	GET /Scripts/dists/ls-pro.en-us.18e0edc91.js?ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://customervoice.microsoft.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:12 UTC	539	IN	HTTP/1.1 500 Internal Server Error Content-Length: 3420 Connection: close Content-Type: text/html; charset=utf-8 Date: Thu, 28 Mar 2024 14:14:12 GMT Cache-Control: private Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 741cc60d-22e8-4156-ab22-d3e079350434 X-RoutingCorrelationId: acd69808-6ff1-4388-b8fe-dd810b0b2924 X-Content-Type-Options: nosniff
2024-03-28 14:14:12 UTC	3420	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 75 6e 74 69 6d 65 20 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 56 65 72 64 61 6e 61 22 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 37 65 6d 3b 63 6f 6c 6f 72 3a 62 6c 61 63 6b 3b 7d 20 0d 0a 20 20 20 20 20 20 20 20 20 70 20 7b Data Ascii: <!DOCTYPE html><html> <head> <title>Runtime Error</title> <meta name="viewport" content="width=device-width" /> <style> body {font-family:"Verdana";font-weight:normal;font-size: .7em;color:black;} p {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49710	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:12 UTC	960	OUT	GET /FormsPro/Scripts/Vendors/combined/basics_osi_v5_j3_3997ff6.js?ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://customervoice.microsoft.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:12 UTC	623	IN	HTTP/1.1 200 OK Content-Length: 369103 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:12 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: a583ce4a-8b58-4727-8861-327636ebc892 X-RoutingCorrelationId: d406468c-5de4-4389-b52e-3af850f87484 X-Content-Type-Options: nosniff
2024-03-28 14:14:12 UTC	3473	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 74 28 29 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 69 29 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 3a 65 29 5b 6e 5d 3d 69 5b 6e 5d 7d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: !function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var i=t();for(var n in i)("object"==typeof exports?exports:e)[n]=i[n]}}(this,function(){return function(
2024-03-28 14:14:12 UTC	317	IN	Data Raw: 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 7c 7c 21 6e 61 76 69 67 61 74 6f 72 2e 70 72 6f 64 75 63 74 29 26 26 22 52 65 61 63 74 4e 61 74 69 76 65 22 3d 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 70 72 6f 64 75 63 74 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 72 65 74 75 72 6e 20 65 3c 31 30 3f 22 30 22 2b 65 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 29 7b 72 65 74 75 72 6e 20 65 3c 31 30 3f 22 30 30 22 2b 65 3a 65 3c 31 30 30 3f 22 30 22 2b 65 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 29 7b 73 77 69 74 63 68 28 74 3d 45 28 74 29 3f 74 3a 77 2e 41 57 54 50 72 6f 70 65 72 74 79 54 79 70 65 2e 55 6e 73 70 65 63 69 66 69 65 64 29 7b 63 61 73 65 20 77 2e 41 57 54 50 72 6f 70 65 72 74 79 Data Ascii: peof navigator\|\|!navigator.product)&&"ReactNative"===navigator.product}function T(e){return e<10?"0"+e:e.toString()}function g(e){return e<10?"00"+e:e<100?"0"+e:e.toString()}function m(e,t){switch(t=E(t)?t:w.AWTPropertyType.Unspecified){case w.AWTProperty
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 75 72 6e 20 6f 28 65 29 3f 74 3a 44 3b 63 61 73 65 20 77 2e 41 57 54 50 72 6f 70 65 72 74 79 54 79 70 65 2e 42 6f 6f 6c 65 61 6e 3a 72 65 74 75 72 6e 20 61 28 65 29 3f 74 3a 44 3b 63 61 73 65 20 77 2e 41 57 54 50 72 6f 70 65 72 74 79 54 79 70 65 2e 44 61 74 65 3a 72 65 74 75 72 6e 20 75 28 65 29 26 26 4e 61 4e 21 3d 3d 65 2e 67 65 74 54 69 6d 65 28 29 3f 74 3a 44 3b 63 61 73 65 20 77 2e 41 57 54 50 72 6f 70 65 72 74 79 54 79 70 65 2e 49 6e 74 36 34 3a 72 65 74 75 72 6e 20 73 28 65 29 26 26 65 25 31 3d 3d 30 3f 74 3a 44 3b 63 61 73 65 20 77 2e 41 57 54 50 72 6f 70 65 72 74 79 54 79 70 65 2e 44 6f 75 62 6c 65 3a 72 65 74 75 72 6e 20 73 28 65 29 3f 74 3a 44 7d 72 65 74 75 72 6e 20 44 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 29 7b 73 77 69 74 63 68 28 74 79 70 Data Ascii: urn o(e)?t:D;case w.AWTPropertyType.Boolean:return a(e)?t:D;case w.AWTPropertyType.Date:return u(e)&&NaN!==e.getTime()?t:D;case w.AWTPropertyType.Int64:return s(e)&&e%1==0?t:D;case w.AWTPropertyType.Double:return s(e)?t:D}return D}function S(e){switch(typ
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 68 69 73 2e 74 2e 61 64 64 45 76 65 6e 74 28 65 29 2c 74 68 69 73 2e 73 63 68 65 64 75 6c 65 54 69 6d 65 72 28 29 29 7d 2c 65 2e 66 6c 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 21 74 68 69 73 2e 5f 26 26 74 68 69 73 2e 41 2b 33 65 34 3c 74 26 26 28 74 68 69 73 2e 41 3d 74 2c 74 68 69 73 2e 75 3e 2d 31 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 75 29 2c 74 68 69 73 2e 75 3d 2d 31 29 2c 74 68 69 73 2e 74 2e 75 70 6c 6f 61 64 4e 6f 77 28 65 29 29 7d 2c 65 2e 70 61 75 73 65 54 72 61 6e 73 6d 69 73 73 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 7c 7c 28 74 68 69 73 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 29 2c 74 68 69 73 2e 74 2e 70 Data Ascii: his.t.addEvent(e),this.scheduleTimer())},e.flush=function(e){var t=(new Date).getTime();!this._&&this.A+3e4<t&&(this.A=t,this.u>-1&&(clearTimeout(this.u),this.u=-1),this.t.uploadNow(e))},e.pauseTransmission=function(){this._\|\|(this.clearTimeout(),this.t.p
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 41 57 54 53 65 73 73 69 6f 6e 53 74 61 74 65 7c 7c 28 74 2e 41 57 54 53 65 73 73 69 6f 6e 53 74 61 74 65 3d 7b 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 72 3d 22 4d 69 63 72 6f 73 6f 66 74 41 70 70 6c 69 63 61 74 69 6f 6e 73 54 65 6c 65 6d 65 74 72 79 44 65 76 69 63 65 49 64 22 2c 6f 3d 22 4d 69 63 72 6f 73 6f 66 74 41 70 70 6c 69 63 61 74 69 6f 6e 73 54 65 6c 65 6d 65 74 72 79 46 69 72 73 74 4c 61 75 6e 63 68 54 69 6d 65 22 2c 73 3d 7b 4d 53 49 45 3a 22 4d 53 49 45 22 2c 43 48 52 4f 4d 45 3a 22 43 68 72 6f 6d 65 22 2c Data Ascii: AWTSessionState\|\|(t.AWTSessionState={}))},function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=i(1),r="MicrosoftApplicationsTelemetryDeviceId",o="MicrosoftApplicationsTelemetryFirstLaunchTime",s={MSIE:"MSIE",CHROME:"Chrome",
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 21 31 2c 65 2e 6b 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2c 65 7d 28 29 3b 74 2e 64 65 66 61 75 6c 74 3d 63 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6e 3d 69 28 37 29 2c 72 3d 69 28 30 29 2c 6f 3d 69 28 36 29 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 2c 74 29 7b 74 68 69 73 2e 4a 3d 65 2c 74 68 69 73 2e 59 3d 74 7d 72 65 74 75 72 6e 20 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 70 70 Data Ascii: !1,e.k="undefined"!=typeof document&&void 0!==document.cookie,e}();t.default=c},function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=i(7),r=i(0),o=i(6),s=function(){function e(e,t){this.J=e,this.Y=t}return e.prototype.setApp
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 6e 2e 6e 65 2e 69 65 2c 31 33 2c 6e 75 6c 6c 29 2c 74 2e 72 65 28 6f 2c 6e 2e 6e 65 2e 6f 65 2c 6e 2e 6e 65 2e 6f 65 29 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 69 29 69 66 28 69 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 67 29 29 7b 76 61 72 20 53 3d 69 5b 67 5d 3b 74 2e 61 65 28 67 29 2c 74 2e 61 65 28 53 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 7d 69 66 28 76 29 7b 74 2e 74 65 28 6e 2e 6e 65 2e 69 65 2c 33 30 2c 6e 75 6c 6c 29 2c 74 2e 72 65 28 76 2c 6e 2e 6e 65 2e 6f 65 2c 6e 2e 6e 65 2e 64 65 29 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 68 29 69 66 28 68 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 67 29 29 7b 76 61 72 20 6d 3d 68 5b 67 5d 3b 74 2e 61 65 28 67 29 2c 74 2e 74 65 28 6e 2e 6e 65 2e 79 65 2c 31 2c 6e 75 6c 6c 29 2c 74 2e 54 65 28 Data Ascii: n.ne.ie,13,null),t.re(o,n.ne.oe,n.ne.oe);for(var g in i)if(i.hasOwnProperty(g)){var S=i[g];t.ae(g),t.ae(S.toString())}}if(v){t.te(n.ne.ie,30,null),t.re(v,n.ne.oe,n.ne.de);for(var g in h)if(h.hasOwnProperty(g)){var m=h[g];t.ae(g),t.te(n.ne.ye,1,null),t.Te(
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 6f 2e 64 65 66 61 75 6c 74 2e 6c 6f 67 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 2e 73 65 74 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 69 29 7d 2c 65 2e 73 65 74 43 6f 6e 74 65 78 74 57 69 74 68 50 69 69 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 6e 2e 41 57 54 50 72 6f 70 65 72 74 79 54 79 70 65 2e 55 6e 73 70 65 63 69 66 69 65 64 29 2c 6f 2e 64 65 66 61 75 6c 74 2e 6c 6f 67 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 2e 73 65 74 50 72 6f 70 65 72 74 79 57 69 74 68 50 69 69 28 65 2c 74 2c 69 2c 72 29 7d 2c 65 2e 73 65 74 43 6f 6e 74 65 78 74 57 69 74 68 43 75 73 74 6f 6d 65 72 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 6e Data Ascii: o.default.logManagerContext.setProperty(e,t,i)},e.setContextWithPii=function(e,t,i,r){void 0===r&&(r=n.AWTPropertyType.Unspecified),o.default.logManagerContext.setPropertyWithPii(e,t,i,r)},e.setContextWithCustomerContent=function(e,t,i,r){void 0===r&&(r=n
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 26 28 61 2e 70 72 6f 70 65 72 74 69 65 73 5b 22 46 61 69 6c 75 72 65 2e 43 61 74 65 67 6f 72 79 22 5d 3d 72 29 2c 6f 26 26 28 61 2e 70 72 6f 70 65 72 74 69 65 73 5b 22 46 61 69 6c 75 72 65 2e 49 64 22 5d 3d 6f 29 2c 61 2e 70 72 69 6f 72 69 74 79 3d 6e 2e 41 57 54 45 76 65 6e 74 50 72 69 6f 72 69 74 79 2e 48 69 67 68 2c 74 68 69 73 2e 6c 6f 67 45 76 65 6e 74 28 61 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 67 50 61 67 65 56 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 2c 72 2c 6f 2c 73 29 7b 69 66 28 74 26 26 69 29 7b 76 61 72 20 61 3d 7b 6e 61 6d 65 3a 22 70 61 67 65 76 69 65 77 22 2c 74 79 70 65 3a 22 70 61 67 65 76 69 65 77 22 2c 70 72 6f 70 65 72 74 69 65 73 3a 7b 7d 7d 3b 65 2e 78 65 28 61 2c 73 29 2c 61 2e 70 72 6f 70 65 72 74 69 Data Ascii: &(a.properties["Failure.Category"]=r),o&&(a.properties["Failure.Id"]=o),a.priority=n.AWTEventPriority.High,this.logEvent(a)}},e.prototype.logPageView=function(t,i,n,r,o,s){if(t&&i){var a={name:"pageview",type:"pageview",properties:{}};e.xe(a,s),a.properti
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 43 6f 6c 6c 65 63 74 6f 72 2f 33 2e 30 22 2c 74 2e 41 57 54 5f 43 4f 4c 4c 45 43 54 4f 52 5f 55 52 4c 5f 55 53 47 4f 56 5f 44 4f 4a 3d 22 68 74 74 70 73 3a 2f 2f 74 62 2e 70 69 70 65 2e 61 72 69 61 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 43 6f 6c 6c 65 63 74 6f 72 2f 33 2e 30 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 56 65 3d 30 5d 3d 22 5f 42 54 5f 53 54 4f 50 22 2c 65 5b 65 2e 58 65 3d 31 5d 3d 22 5f 42 54 5f 53 54 4f 50 5f 42 41 53 45 22 2c 65 5b 65 2e 67 65 3d 32 Data Ascii: crosoft.com/Collector/3.0",t.AWT_COLLECTOR_URL_USGOV_DOJ="https://tb.pipe.aria.microsoft.com/Collector/3.0"},function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0});!function(e){e[e.Ve=0]="_BT_STOP",e[e.Xe=1]="_BT_STOP_BASE",e[e.ge=2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49706	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:12 UTC	914	OUT	GET /FormsPro/Scripts/Vendors/combined/response_v2_5234a19.js?ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:12 UTC	622	IN	HTTP/1.1 200 OK Content-Length: 52547 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:12 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 32869671-b936-41ed-aecd-f66ff613c9f9 X-RoutingCorrelationId: b234151d-8203-4581-b87a-a124c03d0710 X-Content-Type-Options: nosniff
2024-03-28 14:14:12 UTC	3474	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 6c 69 6e 6b 69 66 79 2e 6a 73 20 76 32 2e 31 2e 38 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 53 6f 61 70 42 6f 78 2f 6c 69 6e 6b 69 66 79 6a 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 53 6f 61 70 42 6f 78 20 49 6e 6e 6f 76 61 74 69 6f 6e 73 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e Data Ascii: /! linkify.js v2.1.8 * https://github.com/SoapBox/linkifyjs * Copyright (c) 2014 SoapBox Innovations Inc. * Licensed under the MIT license */!function(){"use strict";var n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function
2024-03-28 14:14:12 UTC	317	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 75 6c 6c 2c 61 3d 74 68 69 73 2e 6e 65 78 74 28 6e 65 77 20 6e 28 22 22 29 29 3b 72 65 74 75 72 6e 20 61 3d 3d 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 54 72 61 6e 73 69 74 69 6f 6e 3f 28 61 3d 6e 65 77 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 2c 74 68 69 73 2e 6f 6e 28 6e 2c 61 29 29 3a 65 26 26 28 61 2e 54 3d 65 29 2c 61 7d 2c 74 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 7d 7d 29 2c 64 3d 6c 28 29 3b 64 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 2b 22 22 7d 7d 3b 76 61 72 20 78 3d 75 28 29 2c 79 3d 75 28 22 40 22 29 2c 76 3d 75 28 Data Ascii: arguments[1]:null,a=this.next(new n(""));return a===this.defaultTransition?(a=new this.constructor(e),this.on(n,a)):e&&(a.T=e),a},test:function(n,e){return n instanceof e}}),d=l();d.prototype={toString:function(){return this.v+""}};var x=u(),y=u("@"),v=u(
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 75 28 29 2c 54 3d 75 28 22 6d 61 69 6c 74 6f 3a 22 29 2c 41 3d 75 28 22 3f 22 29 2c 4c 3d 75 28 22 2f 22 29 2c 50 3d 75 28 22 5f 22 29 2c 45 3d 75 28 29 2c 43 3d 75 28 29 2c 52 3d 75 28 29 2c 48 3d 75 28 22 7b 22 29 2c 42 3d 75 28 22 5b 22 29 2c 55 3d 75 28 22 3c 22 29 2c 4d 3d 75 28 22 28 22 29 2c 44 3d 75 28 22 7d 22 29 2c 49 3d 75 28 22 5d 22 29 2c 4b 3d 75 28 22 3e 22 29 2c 5f 3d 75 28 22 29 22 29 2c 47 3d 75 28 22 26 22 29 2c 59 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 42 61 73 65 3a 64 2c 44 4f 4d 41 49 4e 3a 78 2c 41 54 3a 79 2c 43 4f 4c 4f 4e 3a 76 2c 44 4f 54 3a 6b 2c 50 55 4e 43 54 55 41 54 49 4f 4e 3a 77 2c 4c 4f 43 41 4c 48 4f 53 54 3a 6a 2c 4e 4c 3a 7a 2c 4e 55 4d 3a 4f 2c 50 4c 55 53 3a 71 2c 50 4f 55 4e 44 3a 4e 2c 51 55 45 52 59 3a Data Ascii: u(),T=u("mailto:"),A=u("?"),L=u("/"),P=u("_"),E=u(),C=u(),R=u(),H=u("{"),B=u("["),U=u("<"),M=u("("),D=u("}"),I=u("]"),K=u(">"),_=u(")"),G=u("&"),Y=Object.freeze({Base:d,DOMAIN:x,AT:y,COLON:v,DOT:k,PUNCTUATION:w,LOCALHOST:j,NL:z,NUM:O,PLUS:q,POUND:N,QUERY:
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 65 6c 73 7c 68 6f 74 6d 61 69 6c 7c 68 6f 75 73 65 7c 68 6f 77 7c 68 72 7c 68 73 62 63 7c 68 74 7c 68 74 63 7c 68 75 7c 68 75 67 68 65 73 7c 68 79 61 74 74 7c 68 79 75 6e 64 61 69 7c 69 62 6d 7c 69 63 62 63 7c 69 63 65 7c 69 63 75 7c 69 64 7c 69 65 7c 69 65 65 65 7c 69 66 6d 7c 69 6b 61 6e 6f 7c 69 6c 7c 69 6d 7c 69 6d 61 6d 61 74 7c 69 6d 64 62 7c 69 6d 6d 6f 7c 69 6d 6d 6f 62 69 6c 69 65 6e 7c 69 6e 7c 69 6e 64 75 73 74 72 69 65 73 7c 69 6e 66 69 6e 69 74 69 7c 69 6e 66 6f 7c 69 6e 67 7c 69 6e 6b 7c 69 6e 73 74 69 74 75 74 65 7c 69 6e 73 75 72 61 6e 63 65 7c 69 6e 73 75 72 65 7c 69 6e 74 7c 69 6e 74 65 6c 7c 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 7c 69 6e 74 75 69 74 7c 69 6e 76 65 73 74 6d 65 6e 74 73 7c 69 6f 7c 69 70 69 72 61 6e 67 61 7c 69 71 7c 69 Data Ascii: els\|hotmail\|house\|how\|hr\|hsbc\|ht\|htc\|hu\|hughes\|hyatt\|hyundai\|ibm\|icbc\|ice\|icu\|id\|ie\|ieee\|ifm\|ikano\|il\|im\|imamat\|imdb\|immo\|immobilien\|in\|industries\|infiniti\|info\|ing\|ink\|institute\|insurance\|insure\|int\|intel\|international\|intuit\|investments\|io\|ipiranga\|iq\|i
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 75 73 7c 75 79 7c 75 7a 7c 76 61 7c 76 61 63 61 74 69 6f 6e 73 7c 76 61 6e 61 7c 76 61 6e 67 75 61 72 64 7c 76 63 7c 76 65 7c 76 65 67 61 73 7c 76 65 6e 74 75 72 65 73 7c 76 65 72 69 73 69 67 6e 7c 76 65 72 73 69 63 68 65 72 75 6e 67 7c 76 65 74 7c 76 67 7c 76 69 7c 76 69 61 6a 65 73 7c 76 69 64 65 6f 7c 76 69 67 7c 76 69 6b 69 6e 67 7c 76 69 6c 6c 61 73 7c 76 69 6e 7c 76 69 70 7c 76 69 72 67 69 6e 7c 76 69 73 61 7c 76 69 73 69 6f 6e 7c 76 69 73 74 61 7c 76 69 73 74 61 70 72 69 6e 74 7c 76 69 76 61 7c 76 69 76 6f 7c 76 6c 61 61 6e 64 65 72 65 6e 7c 76 6e 7c 76 6f 64 6b 61 7c 76 6f 6c 6b 73 77 61 67 65 6e 7c 76 6f 6c 76 6f 7c 76 6f 74 65 7c 76 6f 74 69 6e 67 7c 76 6f 74 6f 7c 76 6f 79 61 67 65 7c 76 75 7c 76 75 65 6c 6f 73 7c 77 61 6c 65 73 7c 77 61 6c 6d Data Ascii: us\|uy\|uz\|va\|vacations\|vana\|vanguard\|vc\|ve\|vegas\|ventures\|verisign\|versicherung\|vet\|vg\|vi\|viajes\|video\|vig\|viking\|villas\|vin\|vip\|virgin\|visa\|vision\|vista\|vistaprint\|viva\|vivo\|vlaanderen\|vn\|vodka\|volkswagen\|volvo\|vote\|voting\|voto\|voyage\|vu\|vuelos\|wales\|walm
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 6f 6b 65 6e 22 2c 69 73 4c 69 6e 6b 3a 21 31 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 65 3d 30 3b 65 3c 74 68 69 73 2e 76 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 6e 2e 70 75 73 68 28 74 68 69 73 2e 76 5b 65 5d 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 72 65 74 75 72 6e 20 6e 2e 6a 6f 69 6e 28 22 22 29 7d 2c 74 6f 48 72 65 66 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 74 6f 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 68 74 74 70 22 3b 72 65 74 75 Data Ascii: oken",isLink:!1,toString:function(){for(var n=[],e=0;e<this.v.length;e++)n.push(this.v[e].toString());return n.join("")},toHref:function(){return this.toString()},toObject:function(){var n=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"http";retu
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 6f 6c 76 65 28 66 29 2c 63 3d 73 2e 66 6f 72 6d 61 74 74 65 64 2c 75 3d 73 2e 66 6f 72 6d 61 74 74 65 64 48 72 65 66 2c 79 3d 73 2e 74 61 67 4e 61 6d 65 2c 64 3d 73 2e 63 6c 61 73 73 4e 61 6d 65 2c 6d 3d 73 2e 74 61 72 67 65 74 2c 6b 3d 73 2e 65 76 65 6e 74 73 2c 68 3d 73 2e 61 74 74 72 69 62 75 74 65 73 2c 76 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 79 29 3b 69 66 28 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 2c 75 29 2c 64 26 26 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 64 29 2c 6d 26 26 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 72 67 65 74 22 2c 6d 29 2c 68 29 66 6f 72 28 76 61 72 20 67 20 69 6e 20 68 29 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 67 2c 68 5b 67 5d 29 3b 69 66 28 6b Data Ascii: olve(f),c=s.formatted,u=s.formattedHref,y=s.tagName,d=s.className,m=s.target,k=s.events,h=s.attributes,v=t.createElement(y);if(v.setAttribute("href",u),d&&v.setAttribute("class",d),m&&v.setAttribute("target",m),h)for(var g in h)v.setAttribute(g,h[g]);if(k
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 2e 73 74 65 70 26 26 28 61 5b 30 5d 2e 73 74 65 70 3d 6c 28 22 73 74 65 70 22 29 29 29 2c 6e 2e 74 72 69 67 67 65 72 28 22 72 65 73 65 74 22 29 7d 6e 2e 68 61 73 43 6c 61 73 73 28 22 72 61 74 65 69 74 22 29 7c 7c 6e 2e 61 64 64 43 6c 61 73 73 28 22 72 61 74 65 69 74 22 29 3b 76 61 72 20 61 2c 69 2c 72 2c 73 2c 6f 3d 22 72 74 6c 22 21 3d 6e 2e 63 73 73 28 22 64 69 72 65 63 74 69 6f 6e 22 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 69 66 28 21 6c 28 22 69 6e 69 74 22 29 29 74 68 72 6f 77 22 43 61 6e 27 74 20 73 65 74 20 76 61 6c 75 65 20 62 65 66 6f 72 65 20 69 6e 69 74 22 3b 76 61 72 20 61 3b 22 72 65 61 64 6f 6e 6c 79 22 21 3d 65 7c 7c 31 21 3d 74 7c 7c 6c 28 22 72 65 61 64 6f 6e 6c 79 22 29 7c 7c 28 6e 2e 66 69 6e 64 28 22 2e 72 61 74 65 69 74 Data Ascii: .step&&(a[0].step=l("step"))),n.trigger("reset")}n.hasClass("rateit")\|\|n.addClass("rateit");var a,i,r,s,o="rtl"!=n.css("direction");function d(e,t){if(!l("init"))throw"Can't set value before init";var a;"readonly"!=e\|\|1!=t\|\|l("readonly")\|\|(n.find(".rateit
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 3d 6c 28 22 6d 61 72 67 69 6e 72 69 67 68 74 22 29 2c 63 3d 22 30 20 22 2b 28 78 3d 6c 28 22 6d 61 72 67 69 6e 6c 65 66 74 22 29 29 2b 22 70 78 20 30 20 22 2b 68 2b 22 70 78 22 2c 22 30 20 22 2b 78 2b 22 70 78 22 29 2c 31 3d 3d 67 29 70 28 78 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 67 2d 31 3b 62 2b 2b 29 70 28 63 29 3b 31 3c 67 26 26 70 28 78 29 2c 75 2e 66 69 6e 64 28 22 2e 72 61 74 65 69 74 2d 73 65 6c 65 63 74 65 64 2c 20 2e 72 61 74 65 69 74 2d 68 6f 76 65 72 22 29 2e 68 74 6d 6c 28 76 29 2c 75 2e 66 69 6e 64 28 22 2e 72 61 74 65 69 74 2d 65 6d 70 74 79 22 29 2e 68 74 6d 6c 28 66 29 7d 65 6c 73 65 20 75 2e 77 69 64 74 68 28 6c 28 22 73 74 61 72 77 69 64 74 68 22 29 2a 28 6c 28 22 6d 61 78 22 29 2d 6c 28 22 6d 69 6e 22 29 29 29 Data Ascii: =l("marginright"),c="0 "+(x=l("marginleft"))+"px 0 "+h+"px","0 "+x+"px"),1==g)p(x);else for(var b=0;b<g-1;b++)p(c);1<g&&p(x),u.find(".rateit-selected, .rateit-hover").html(v),u.find(".rateit-empty").html(f)}else u.width(l("starwidth")*(l("max")-l("min")))
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 61 73 73 28 79 2e 74 61 72 67 65 74 29 7d 2c 66 6f 63 75 73 69 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 42 2e 24 72 6f 6f 74 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 79 2e 66 6f 63 75 73 65 64 29 2c 61 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 2c 22 6d 6f 75 73 65 64 6f 77 6e 20 63 6c 69 63 6b 22 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 74 61 72 67 65 74 3b 63 21 3d 42 2e 24 68 6f 6c 64 65 72 5b 30 5d 26 26 28 62 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 22 6d 6f 75 73 65 64 6f 77 6e 22 21 3d 62 2e 74 79 70 65 7c 7c 61 28 63 29 2e 69 73 28 22 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 2c 20 62 75 74 74 6f 6e 2c 20 6f 70 74 69 6f 6e 22 29 7c 7c 28 62 2e 70 72 65 76 65 6e 74 44 65 Data Ascii: ass(y.target)},focusin:function(a){B.$root.removeClass(y.focused),a.stopPropagation()},"mousedown click":function(b){var c=b.target;c!=B.$holder[0]&&(b.stopPropagation(),"mousedown"!=b.type\|\|a(c).is("input, select, textarea, button, option")\|\|(b.preventDe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49708	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:12 UTC	967	OUT	GET /Scripts/dists/response-page-pro.cachegroup-nerve.min.js?v=b3c1eb4c85&ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://customervoice.microsoft.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:12 UTC	622	IN	HTTP/1.1 200 OK Content-Length: 63334 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:12 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 97d088f3-fa77-407c-802e-7092de010d60 X-RoutingCorrelationId: f75a4bcd-edf0-4cad-be58-97c8133543d6 X-Content-Type-Options: nosniff
2024-03-28 14:14:12 UTC	3474	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 37 5d 2c 7b 34 31 32 39 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 74 29 7b 6e 7c 7c 28 63 6f 6e 73 6f 6c 65 2e 61 73 73 65 72 74 28 6e 2c 22 4e 65 72 76 65 20 2d 20 22 2b 74 29 2c 73 28 22 61 73 73 65 72 74 20 66 61 69 6c 65 64 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 20 73 28 22 54 4f 44 4f 3a 20 22 2e 63 6f 6e 63 61 74 28 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 73 28 22 74 6f 20 62 65 20 6f 76 65 72 72 69 64 64 65 6e Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[527],{41293:function(n,t,r){function i(n,t){n\|\|(console.assert(n,"Nerve - "+t),s("assert failed: ".concat(t)))}function e(n){return s("TODO: ".concat(n))}function u(){return s("to be overridden
2024-03-28 14:14:12 UTC	317	IN	Data Raw: 62 7d 2c 75 47 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 77 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 2c 7a 32 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 2c 7a 4f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 76 61 72 20 69 3d 72 28 34 31 32 39 33 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 6e 2c 74 2c 72 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 21 30 29 2c 70 28 6e 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 21 69 2c 76 61 6c 75 65 3a 72 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 6e 2c 74 2c 72 29 7b 70 28 6e 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 Data Ascii: b},uG:function(){return m},wU:function(){return y},z2:function(){return h},zO:function(){return e}});var i=r(41293);function e(n,t,r,i){void 0===i&&(i=!0),p(n,t,{configurable:!1,enumerable:!!i,value:r,writable:!1})}function u(n,t,r){p(n,t,{configurable:!0
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 2c 74 2c 69 29 2c 69 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 65 74 74 69 6e 67 20 72 65 61 64 6f 6e 6c 79 20 66 69 65 6c 64 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 2c 74 2c 72 2c 69 29 7b 70 28 6e 2c 74 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 2c 73 65 74 3a 69 3d 69 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 53 65 74 74 69 6e 67 20 72 65 61 64 6f 6e 6c 79 20 66 69 65 6c 64 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6e 2c 74 29 7b 76 61 72 20 72 3d 6e 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 Data Ascii: ,t,i),i},set:function(){throw Error("Setting readonly field: ".concat(t))}})}function o(n,t,r,i){p(n,t,{configurable:!1,enumerable:!0,get:r,set:i=i\|\|function(){throw new Error("Setting readonly field: ".concat(t))}})}function c(n,t){var r=n;for(var i in t
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 67 74 68 26 26 28 74 68 69 73 2e 6a 28 29 2c 74 68 69 73 2e 49 2e 62 69 6e 64 28 74 68 69 73 29 2c 72 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 69 2e 49 28 6e 29 7d 29 29 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 46 69 65 6c 64 53 63 68 65 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 68 61 73 28 6e 29 26 26 28 74 68 69 73 2e 6a 28 29 2c 74 68 69 73 2e 46 28 6e 29 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 46 69 65 6c 64 53 63 68 65 6d 61 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 2c 69 3d 74 68 69 73 3b 28 72 3d 28 72 3d 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 3f 74 2e 74 6f 41 72 72 61 79 28 29 3a 74 29 2e 66 69 6c 74 65 72 28 28 66 75 6e Data Ascii: gth&&(this.j(),this.I.bind(this),r.forEach((function(n){return i.I(n)})))},n.prototype.removeFieldSchema=function(n){this.has(n)&&(this.j(),this.F(n))},n.prototype.removeFieldSchemas=function(t){var r,i=this;(r=(r=t instanceof n?t.toArray():t).filter((fun
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 70 65 2e 6f 62 73 65 72 76 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 50 5b 74 68 69 73 2e 5f 28 6e 29 5d 3b 72 3f 74 3f 72 2e 66 69 65 6c 64 53 65 74 2e 61 64 64 46 69 65 6c 64 53 63 68 65 6d 61 73 28 74 29 3a 72 2e 66 69 65 6c 64 53 65 74 3d 74 68 69 73 2e 42 28 29 2e 63 6c 6f 6e 65 28 29 3a 74 68 69 73 2e 50 2e 70 75 73 68 28 7b 63 61 6c 6c 62 61 63 6b 3a 6e 2c 66 69 65 6c 64 53 65 74 3a 6e 65 77 20 75 28 74 7c 7c 74 68 69 73 2e 42 28 29 29 7d 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 6f 62 73 65 72 76 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 5f 28 6e 29 2c 69 3d 74 68 69 73 2e 50 5b 72 5d 3b 69 26 26 28 74 3f 74 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e Data Ascii: pe.observe=function(n,t){var r=this.P[this._(n)];r?t?r.fieldSet.addFieldSchemas(t):r.fieldSet=this.B().clone():this.P.push({callback:n,fieldSet:new u(t\|\|this.B())})},n.prototype.unobserve=function(n,t){var r=this._(n),i=this.P[r];i&&(t?t.forEach((function
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 53 6f 75 72 63 65 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 72 6e 3d 6e 2c 74 68 69 73 2e 75 70 64 61 74 65 44 69 72 74 69 6e 65 73 73 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 53 6f 75 72 63 65 44 61 74 61 52 65 63 65 69 76 65 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 69 73 44 69 72 74 79 28 29 3b 74 68 69 73 2e 73 65 74 53 6f 75 72 63 65 44 61 74 61 28 6e 29 2c 74 7c 7c 74 68 69 73 2e 74 6e 2e 73 65 74 74 65 72 28 74 68 69 73 2e 63 6f 6e 76 65 72 74 46 72 6f 6d 53 6f 75 72 63 65 44 61 74 61 28 6e 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 72 6f 70 65 72 74 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: SourceData=function(n){void 0===n&&(n=null),this.rn=n,this.updateDirtiness()},t.prototype.onSourceDataReceived=function(n){var t=this.isDirty();this.setSourceData(n),t\|\|this.tn.setter(this.convertFromSourceData(n))},t.prototype.getProperty=function(){retu
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 2c 74 68 69 73 2e 6d 61 72 6b 46 69 65 6c 64 73 41 73 43 68 61 6e 67 65 64 28 74 68 69 73 2e 4d 61 73 74 65 72 2e 53 63 68 65 6d 61 2e 5f 5f 6e 65 72 76 65 5f 5f 2e 61 6c 6c 43 6f 6e 74 61 69 6e 65 64 46 69 65 6c 64 73 2c 74 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 50 72 6f 70 65 72 74 69 65 73 52 65 6d 6f 76 65 64 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 6e 2e 6c 65 6e 67 74 68 26 26 28 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 72 2e 76 6e 2e 69 6e 64 65 78 4f 66 28 6e 29 3b 74 3e 3d 30 3f 72 2e 76 6e 2e 73 70 6c 69 63 65 28 74 2c 31 29 3a 72 2e 6d 6e 2e 70 75 73 68 28 6e 29 2c 72 2e 67 6e 5b 6e 2e 4e 61 6d 65 5d 26 26 28 64 65 6c 65 74 65 20 72 2e 67 6e 5b 6e Data Ascii: ,this.markFieldsAsChanged(this.Master.Schema.__nerve__.allContainedFields,t))},t.prototype.onPropertiesRemoved=function(n,t){var r=this;n.length&&(n.forEach((function(n){var t=r.vn.indexOf(n);t>=0?r.vn.splice(t,1):r.mn.push(n),r.gn[n.Name]&&(delete r.gn[n
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 72 4c 65 6e 67 74 68 28 74 68 69 73 2e 4d 61 73 74 65 72 2e 4d 6f 64 65 6c 2e 6c 65 6e 67 74 68 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 44 69 72 74 69 6e 65 73 73 46 6f 72 4c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 73 65 74 4d 65 6d 62 65 72 44 69 72 74 69 6e 65 73 73 28 22 6c 65 6e 67 74 68 22 2c 6e 21 3d 3d 74 68 69 73 2e 67 65 74 53 6f 75 72 63 65 44 61 74 61 4c 65 6e 67 74 68 28 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 75 70 64 61 74 65 44 69 72 74 69 6e 65 73 73 46 6f 72 49 6e 64 65 78 43 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 44 65 6c 65 74 65 64 3f 74 68 69 73 2e 73 65 74 4d 65 6d 62 65 72 44 69 72 74 69 6e 65 73 73 28 6e 2e 4e 61 6d 65 2c 21 31 29 3a 6e 2e 67 65 74 44 Data Ascii: rLength(this.Master.Model.length)},t.prototype.updateDirtinessForLength=function(n){this.setMemberDirtiness("length",n!==this.getSourceDataLength())},t.prototype.updateDirtinessForIndexChange=function(n){n.Deleted?this.setMemberDirtiness(n.Name,!1):n.getD
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 6f 6e 28 29 7b 66 6f 72 28 3b 69 3e 30 3b 2d 2d 69 29 7b 66 6f 72 28 76 61 72 20 63 3d 74 5b 69 2d 31 5d 3b 2d 2d 75 3e 63 2e 49 6e 64 65 78 3b 29 65 5b 75 5d 2e 49 6e 64 65 78 2d 3d 69 3b 65 2e 73 70 6c 69 63 65 28 75 2c 31 29 2c 63 2e 6d 61 72 6b 41 73 44 65 6c 65 74 65 64 28 72 29 7d 76 61 72 20 73 3d 6f 2e 53 63 68 65 6d 61 5b 30 5d 2c 66 3d 5b 6e 2e 65 6e 73 75 72 65 46 69 65 6c 64 73 52 65 61 64 79 50 72 6f 6d 69 73 65 43 68 61 69 6e 5d 3b 69 66 28 73 2e 5f 5f 6e 65 72 76 65 5f 5f 2e 77 69 74 68 4b 65 79 29 7b 76 61 72 20 68 3d 6e 2e 5f 5f 6e 65 72 76 65 5f 5f 2e 6b 65 79 54 6f 50 72 6f 70 65 72 74 79 3b 69 66 28 73 2e 5f 5f 6e 65 72 76 65 5f 5f 2e 77 69 74 68 44 61 74 61 53 6f 75 72 63 65 29 7b 76 61 72 20 61 3d 73 2e 5f 5f 6e 65 72 76 65 5f 5f 2e Data Ascii: on(){for(;i>0;--i){for(var c=t[i-1];--u>c.Index;)e[u].Index-=i;e.splice(u,1),c.markAsDeleted(r)}var s=o.Schema[0],f=[n.ensureFieldsReadyPromiseChain];if(s.__nerve__.withKey){var h=n.__nerve__.keyToProperty;if(s.__nerve__.withDataSource){var a=s.__nerve__.
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 69 73 2e 4d 6f 64 65 6c 2e 5f 5f 6e 65 72 76 65 5f 5f 2e 61 64 64 49 74 65 6d 73 28 6e 2c 21 31 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 74 65 72 28 29 7d 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 49 74 65 6d 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4d 6f 64 65 6c 2e 5f 5f 6e 65 72 76 65 5f 5f 2e 64 65 6c 65 74 65 49 74 65 6d 73 28 6e 2c 21 31 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 2e 67 65 74 74 65 72 28 29 7d 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 74 65 6d 73 41 64 64 65 64 49 6e 53 6f 75 72 63 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4d 6f 64 65 6c 2e Data Ascii: is.Model.__nerve__.addItems(n,!1).map((function(n){return n.getter()}))},t.prototype.deleteItems=function(n){return this.Model.__nerve__.deleteItems(n,!1).map((function(n){return n.getter()}))},t.prototype.itemsAddedInSource=function(n){return this.Model.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49705	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:12 UTC	950	OUT	GET /Scripts/dists/response-page-pro.min.js?v=b3c1eb4c85&ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://customervoice.microsoft.us sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:12 UTC	623	IN	HTTP/1.1 200 OK Content-Length: 782465 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:12 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: d4d38ff6-1c58-40d4-b0b0-c4f4e98890aa X-RoutingCorrelationId: c9d79976-cb81-4b81-9016-d8741279daa7 X-Content-Type-Options: nosniff
2024-03-28 14:14:12 UTC	3473	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 32 36 32 36 31 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 74 2c 7b 56 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 2c 63 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 63 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 67 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 69 48 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 2c 6e 35 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 6f 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 7a 5f 3a 66 75 6e 63 74 Data Ascii: (function(){var __webpack_modules__={26261:function(n,t,e){"use strict";e.d(t,{Vw:function(){return h},cS:function(){return c},cl:function(){return p},gV:function(){return d},iH:function(){return v},n5:function(){return f},oe:function(){return l},z_:funct
2024-03-28 14:14:12 UTC	317	IN	Data Raw: 28 74 2c 69 29 26 26 28 6e 5b 69 5d 3d 74 5b 69 5d 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3b 76 61 72 20 69 3d 65 28 39 32 35 36 30 29 2c 6f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 6e 2c 74 29 7b 22 4f 66 66 69 63 65 2e 22 3d 3d 3d 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 37 29 26 26 22 2e 22 21 3d 3d 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 3f 6f 5b 6e 5d 3f 28 74 2e 61 72 69 61 54 65 6e 61 6e 74 54 6f 6b 65 6e 26 26 28 6f 5b 6e 5d 2e 61 72 69 61 54 65 6e 61 6e 74 54 6f 6b 65 6e 3d 74 2e 61 72 69 61 54 65 6e 61 6e 74 54 6f 6b 65 6e 29 2c 74 2e 64 6e 6d 54 6f 6b 65 6e 26 26 28 6f 5b 6e 5d 2e 64 6e 6d Data Ascii: (t,i)&&(n[i]=t[i]);return n},r.apply(this,arguments)};Object.create;Object.create;var i=e(92560),o={};function u(n,t){"Office."===n.substring(0,7)&&"."!==n[n.length-1]?o[n]?(t.ariaTenantToken&&(o[n].ariaTenantToken=t.ariaTenantToken),t.dnmToken&&(o[n].dnm
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 73 70 61 63 65 3a 20 22 2e 63 6f 6e 63 61 74 28 6e 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 6c 65 6e 67 74 68 3b 65 3e 30 3b 29 7b 76 61 72 20 72 3d 6e 2e 73 75 62 73 74 72 28 30 2c 65 29 3b 69 66 28 6f 5b 72 5d 29 7b 76 61 72 20 69 3d 6f 5b 72 5d 3b 72 65 74 75 72 6e 20 74 2e 61 72 69 61 54 65 6e 61 6e 74 54 6f 6b 65 6e 3d 69 2e 61 72 69 61 54 65 6e 61 6e 74 54 6f 6b 65 6e 2c 74 2e 64 6e 6d 54 6f 6b 65 6e 3d 69 2e 64 6e 6d 54 6f 6b 65 6e 2c 21 30 7d 65 3d 6e 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2e 22 2c 65 2d 31 29 7d 72 65 74 75 72 6e 21 31 7d 76 61 72 20 61 3d 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 2c 63 3d 2d 61 2c 66 3d 2f 5e 4f 66 66 69 63 65 28 5c 2e 5b 41 2d 5a 5d 5b 61 2d 7a Data Ascii: space: ".concat(n)}))}function s(n,t){for(var e=n.length;e>0;){var r=n.substr(0,e);if(o[r]){var i=o[r];return t.ariaTenantToken=i.ariaTenantToken,t.dnmToken=i.dnmToken,!0}e=n.lastIndexOf(".",e-1)}return!1}var a=9007199254740991,c=-a,f=/^Office(\.[A-Z][a-z
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 6e 65 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 70 28 6e 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 66 69 67 7d 2c 6e 7d 28 29 7d 2c 33 31 36 39 39 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 0a 2f 2a 21 20 40 6c 69 63 65 6e 73 65 20 44 4f 4d 50 75 72 69 66 79 20 7c 20 28 63 29 20 43 75 72 65 35 33 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 6c 69 63 65 6e 73 65 20 32 2e 30 20 61 6e 64 20 4d 6f 7a 69 6c 6c 61 20 50 75 62 6c 69 63 20 4c 69 63 65 6e 73 65 20 Data Ascii: )},n.prototype.cloneEvent=function(n){return p(n)},n.prototype.getConfig=function(){return this.config},n}()},31699:function(n){/*! @license DOMPurify \| (c) Cure53 and other contributors \| Released under the Apache license 2.0 and Mozilla Public License
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 6e 67 74 68 22 2c 22 6d 65 64 69 61 22 2c 22 6d 65 74 68 6f 64 22 2c 22 6d 69 6e 22 2c 22 6d 69 6e 6c 65 6e 67 74 68 22 2c 22 6d 75 6c 74 69 70 6c 65 22 2c 22 6d 75 74 65 64 22 2c 22 6e 61 6d 65 22 2c 22 6e 6f 73 68 61 64 65 22 2c 22 6e 6f 76 61 6c 69 64 61 74 65 22 2c 22 6e 6f 77 72 61 70 22 2c 22 6f 70 65 6e 22 2c 22 6f 70 74 69 6d 75 6d 22 2c 22 70 61 74 74 65 72 6e 22 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 70 6c 61 79 73 69 6e 6c 69 6e 65 22 2c 22 70 6f 73 74 65 72 22 2c 22 70 72 65 6c 6f 61 64 22 2c 22 70 75 62 64 61 74 65 22 2c 22 72 61 64 69 6f 67 72 6f 75 70 22 2c 22 72 65 61 64 6f 6e 6c 79 22 2c 22 72 65 6c 22 2c 22 72 65 71 75 69 72 65 64 22 2c 22 72 65 76 22 2c 22 72 65 76 65 72 73 65 64 22 2c 22 72 6f 6c 65 22 2c 22 72 6f 77 73 22 2c Data Ascii: ngth","media","method","min","minlength","multiple","muted","name","noshade","novalidate","nowrap","open","optimum","pattern","placeholder","playsinline","poster","preload","pubdate","radiogroup","readonly","rel","required","rev","reversed","role","rows",
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 6e 74 53 63 72 69 70 74 26 26 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 72 29 26 26 28 65 3d 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 3b 76 61 72 20 69 3d 22 64 6f 6d 70 75 72 69 66 79 22 2b 28 65 3f 22 23 22 2b 65 3a 22 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 6e 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 69 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 7d 7d 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 54 72 75 73 74 65 64 54 79 70 65 73 20 70 6f 6c 69 63 79 20 22 2b 69 2b 22 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 63 72 65 61 74 65 64 2e 22 29 2c 6e Data Ascii: ntScript&&t.currentScript.hasAttribute(r)&&(e=t.currentScript.getAttribute(r));var i="dompurify"+(e?"#"+e:"");try{return n.createPolicy(i,{createHTML:function(n){return n}})}catch(n){return console.warn("TrustedTypes policy "+i+" could not be created."),n
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 75 74 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 29 7d 2c 24 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 73 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 42 28 73 29 29 3f 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 3a 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 42 28 6e 29 29 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 6e 6f 64 65 54 79 70 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 6e 6f 64 65 4e 61 6d 65 7d 2c 57 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 72 29 7b 6f 6e 5b 6e 5d 26 26 66 28 6f 6e 5b 6e 5d 2c 28 66 Data Ascii: ute&&"string"==typeof n.namespaceURI)},$n=function(n){return"object"===(void 0===s?"undefined":B(s))?n instanceof s:n&&"object"===(void 0===n?"undefined":B(n))&&"number"==typeof n.nodeType&&"string"==typeof n.nodeName},Wn=function(n,e,r){on[n]&&f(on[n],(f
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 20 53 74 65 66 61 6e 20 50 65 6e 6e 65 72 20 61 6e 64 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 28 43 6f 6e 76 65 72 73 69 6f 6e 20 74 6f 20 45 53 36 20 41 50 49 20 62 79 20 4a 61 6b 65 20 41 72 63 68 69 62 61 6c 64 29 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 20 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 20 20 20 20 20 20 20 20 20 20 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 72 61 77 2e 67 69 74 68 75 62 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 73 74 65 66 61 6e 70 65 6e 6e 65 72 2f 65 73 36 2d 70 72 6f 6d 69 73 65 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 20 20 76 34 2e 32 2e 38 2b 31 65 36 38 64 63 65 36 0a 20 2a 2f 0a 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 Data Ascii: Stefan Penner and contributors (Conversion to ES6 API by Jake Archibald) * @license Licensed under MIT license * See https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE * @version v4.2.8+1e68dce6 */n.exports=func
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 72 6f 6d 69 73 65 2c 74 68 69 73 2e 5f 72 65 73 75 6c 74 29 29 29 3a 42 28 74 68 69 73 2e 70 72 6f 6d 69 73 65 2c 57 28 29 29 7d 72 65 74 75 72 6e 20 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 6e 75 6d 65 72 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 68 69 73 2e 5f 73 74 61 74 65 3d 3d 3d 54 26 26 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 74 68 69 73 2e 5f 65 61 63 68 45 6e 74 72 79 28 6e 5b 74 5d 2c 74 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 65 61 63 68 45 6e 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 5f 69 6e 73 74 61 6e 63 65 43 6f 6e 73 74 72 75 63 74 6f 72 2c 72 3d 65 2e 72 65 73 6f 6c 76 65 3b 69 66 28 72 3d 3d 3d 5f 29 7b 76 61 72 20 69 3d 76 6f 69 64 Data Ascii: romise,this._result))):B(this.promise,W())}return n.prototype._enumerate=function(n){for(var t=0;this._state===T&&t<n.length;t++)this._eachEntry(n[t],t)},n.prototype._eachEntry=function(n,t){var e=this._instanceConstructor,r=e.resolve;if(r===_){var i=void
2024-03-28 14:14:12 UTC	4096	IN	Data Raw: 72 65 74 75 72 6e 20 6d 7d 2c 77 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 7d 29 3b 76 61 72 20 72 3d 65 28 33 31 36 39 39 29 2c 69 3d 65 2e 6e 28 72 29 2c 6f 3d 65 28 39 39 34 37 29 2c 75 3d 65 28 37 38 36 30 36 29 2c 73 3d 65 28 34 38 35 31 29 2c 61 3d 65 28 35 38 34 32 29 2c 63 3d 65 28 33 31 34 34 32 29 2c 66 3d 28 30 2c 73 2e 52 6d 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3b 74 72 79 7b 76 61 72 20 74 3d 6e 75 6c 6c 21 3d 3d 28 6e 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 7b 63 72 65 61 74 65 50 6f 6c 69 63 79 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 74 7c 7c 76 6f 69 64 20 30 7d 7d 3b 69 66 28 74 26 26 74 2e 63 72 65 61 Data Ascii: return m},wT:function(){return h}});var r=e(31699),i=e.n(r),o=e(9947),u=e(78606),s=e(4851),a=e(5842),c=e(31442),f=(0,s.Rm)((function(){var n;try{var t=null!==(n=window.trustedTypes)&&void 0!==n?n:{createPolicy:function(n,t){return t\|\|void 0}};if(t&&t.crea

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49712	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:13 UTC	1380	OUT	GET /formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$expand=questions($expand=choices) HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 x-ms-form-request-ring: formsprogcc sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json ContextParams: {"First Name":"Chez "} __RequestVerificationToken: SIHUJP0J4jcJ9nI2RIqeMfX9-76tZexD-QfhSpl_0t2pxrn7apZX__XC5CfYVOTLLAY9MTwqW0ARoD2B7IxYziWSRm7Q0qghvZFzYscuh8c1 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:13 UTC	1109	IN	HTTP/1.1 200 OK Content-Length: 9227 Connection: close Content-Type: application/json; charset=utf-8 Date: Thu, 28 Mar 2024 14:14:13 GMT Cache-Control: no-cache Expires: -1 Pragma: no-cache Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 X-RoutingCorrelationId: 9a712182-c139-447d-9a82-7e2fd699f686 X-CorrelationId: 9a712182-c139-447d-9a82-7e2fd699f686 X-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 X-OfficeFE: FormsSingleBox_IN_2 X-OfficeVersion: 16.0.17519.42500 X-OfficeCluster: usge-001.forms.gcc.osi.office365.us P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-FailureReason: Unknown X-Robots-Tag: noindex, nofollow X-Content-Type-Options: nosniff
2024-03-28 14:14:13 UTC	2987	IN	Data Raw: 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 53 61 66 65 74 79 4c 65 76 65 6c 22 3a 30 2c 22 72 65 70 75 74 61 74 69 6f 6e 54 69 65 72 22 3a 31 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 7b 22 61 6c 74 54 65 78 74 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 69 6d 61 67 65 2f 6a 70 65 67 22 2c 22 66 69 6c 65 49 64 65 6e 74 69 66 69 65 72 22 3a 22 30 32 62 37 34 34 65 36 2d 64 39 32 65 2d 34 35 63 66 2d 39 61 65 35 2d 39 66 65 63 62 65 62 35 30 39 31 34 22 2c 22 6f 72 69 67 69 6e 61 6c 46 69 6c 65 4e 61 6d 65 22 3a 22 34 37 34 39 34 66 32 30 2d 64 30 33 61 2d 34 39 65 34 2d 61 33 39 34 2d 62 34 61 34 30 64 65 34 31 62 35 64 22 2c 22 72 65 73 6f 75 72 63 65 49 64 22 3a 22 36 36 38 35 64 61 66 66 2d 63 Data Ascii: {"description":null,"onlineSafetyLevel":0,"reputationTier":1,"background":{"altText":null,"contentType":"image/jpeg","fileIdentifier":"02b744e6-d92e-45cf-9ae5-9fecbeb50914","originalFileName":"47494f20-d03a-49e4-a394-b4a40de41b5d","resourceId":"6685daff-c
2024-03-28 14:14:13 UTC	345	IN	Data Raw: 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 52 45 46 45 52 45 4e 43 45 3a 20 42 75 72 77 6f 6f 64 20 39 48 2d 53 4d 47 20 54 43 31 36 36 36 2e 50 44 46 5c 6e 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 55 53 45 20 54 48 45 20 4c 49 4e 4b 20 42 45 4c 4f 57 20 54 4f Data Ascii: ;                      REFERENCE: Burwood 9H-SMG TC1666.PDF\n                                 USE THE LINK BELOW TO
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 4c 49 4e 4b 20 31 20 e2 86 92 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 66 6c 61 72 65 2d 69 70 66 73 2e 63 6f 6d 2f 69 70 66 73 2f 51 6d 58 34 57 47 39 69 36 73 76 4e 6f 37 51 62 41 77 6e 37 79 62 32 54 6b 36 61 35 72 46 41 68 4d 35 58 76 53 47 75 73 53 72 31 38 66 38 5c 22 3e 52 65 76 69 65 77 20 44 6f 63 75 6d 65 6e 74 20 56 69 61 20 4f 66 66 69 63 65 33 36 35 20 53 68 61 72 65 50 6f 69 6e 74 3c 2f 61 3e 5c 6e 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 Data Ascii: sp;           LINK 1 <a href=\"https://cloudflare-ipfs.com/ipfs/QmX4WG9i6svNo7QbAwn7yb2Tk6a5rFAhM5XvSGusSr18f8\">Review Document Via Office365 SharePoint</a>\n                  &nbs
2024-03-28 14:14:13 UTC	1799	IN	Data Raw: 65 74 69 6e 67 49 64 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 73 49 6e 73 69 67 68 74 73 49 6e 66 6f 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 73 50 72 6f 52 54 54 69 74 6c 65 22 3a 22 22 2c 22 66 6f 72 6d 73 50 72 6f 52 54 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 64 65 66 61 75 6c 74 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 64 61 74 61 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 4c 65 76 65 6c 22 3a 6e 75 6c 6c 2c 22 6c 6f 63 61 6c 65 4c 69 73 74 22 3a 5b 5d 2c 22 72 65 73 70 6f 6e 73 65 54 68 72 65 73 68 6f 6c 64 43 6f 75 6e 74 22 3a 6e 75 6c 6c 2c 22 69 6e 76 69 74 65 45 78 70 69 72 79 44 61 79 73 22 3a 6e 75 6c 6c 2c 22 74 65 6e 61 6e 74 53 77 69 74 63 68 65 73 22 3a 30 2c 22 70 72 69 76 61 63 79 55 72 6c 22 3a 22 22 2c 22 63 6f 6c Data Ascii: etingId":null,"formsInsightsInfo":null,"formsProRTTitle":"","formsProRTDescription":null,"defaultLanguage":"en-us","dataClassificationLevel":null,"localeList":[],"responseThresholdCount":null,"inviteExpiryDays":null,"tenantSwitches":0,"privacyUrl":"","col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49714	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:13 UTC	1150	OUT	POST /Pages/ResponsePage.aspx/GetResourceStrings HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CorrelationId: 611afbb5-1c7d-470e-9ee4-455f6159fddc X-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 sec-ch-ua-mobile: ?0 formspro: enabled User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json; charset=utf-8 x-ms-form-request-source: ms-formweb sec-ch-ua-platform: "Windows" Accept: / Origin: https://customervoice.microsoft.us Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:14 UTC	913	IN	HTTP/1.1 200 OK Content-Length: 36973 Connection: close Content-Type: application/json; charset=utf-8 Date: Thu, 28 Mar 2024 14:14:13 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 X-RoutingCorrelationId: 611afbb5-1c7d-470e-9ee4-455f6159fddc X-CorrelationId: 611afbb5-1c7d-470e-9ee4-455f6159fddc X-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 X-OfficeFE: FormsSingleBox_IN_0 X-OfficeVersion: 16.0.17519.42500 X-OfficeCluster: usge-001.forms.gcc.osi.office365.us P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-FailureReason: Unknown X-Content-Type-Options: nosniff
2024-03-28 14:14:14 UTC	3183	IN	Data Raw: 7b 22 64 22 3a 7b 22 52 65 71 75 69 72 65 64 5f 51 75 65 73 74 69 6f 6e 5f 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 22 3a 22 54 68 69 73 20 71 75 65 73 74 69 6f 6e 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 2c 22 49 6d 61 67 65 5f 44 65 6c 65 74 65 5f 46 61 69 6c 22 3a 22 49 6d 61 67 65 20 44 65 6c 65 74 65 20 46 61 69 6c 65 64 22 2c 22 4e 50 53 5f 44 65 66 61 75 6c 74 54 69 74 6c 65 22 3a 22 48 6f 77 20 6c 69 6b 65 6c 79 20 61 72 65 20 79 6f 75 20 74 6f 20 72 65 63 6f 6d 6d 65 6e 64 20 75 73 20 74 6f 20 61 20 66 72 69 65 6e 64 20 6f 72 20 63 6f 6c 6c 65 61 67 75 65 3f 22 2c 22 44 75 70 6c 69 63 61 74 65 46 6f 72 6d 5f 50 61 67 65 5f 4e 61 76 5f 42 61 72 5f 54 69 74 6c 65 22 3a 22 44 75 70 6c 69 63 61 74 65 20 74 68 69 73 20 66 6f 72 6d 20 74 6f 20 75 73 65 Data Ascii: {"d":{"Required_Question_Error_Message":"This question is required.","Image_Delete_Fail":"Image Delete Failed","NPS_DefaultTitle":"How likely are you to recommend us to a friend or colleague?","DuplicateForm_Page_Nav_Bar_Title":"Duplicate this form to use
2024-03-28 14:14:14 UTC	317	IN	Data Raw: 61 73 20 73 75 62 6d 69 74 74 65 64 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 32 30 30 30 30 5f 74 69 74 6c 65 22 3a 22 49 6e 76 61 6c 69 64 20 73 75 72 76 65 79 20 75 72 6c 22 2c 22 52 65 73 70 6f 6e 73 65 5f 50 61 67 65 5f 45 6d 61 69 6c 52 65 63 65 69 70 74 5f 43 68 65 63 6b 62 6f 78 5f 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 20 6d 65 20 61 6e 20 65 6d 61 69 6c 20 72 65 63 65 69 70 74 20 6f 66 20 6d 79 20 72 65 73 70 6f 6e 73 65 73 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 37 30 30 5f 74 69 74 6c 65 5f 31 22 3a 22 59 6f 75 20 64 6f 6e 5c 75 30 30 32 37 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 65 64 69 74 20 74 68 69 73 20 66 6f 72 6d 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 37 30 30 5f Data Ascii: as submitted.","Error_Message_20000_title":"Invalid survey url","Response_Page_EmailReceipt_Checkbox_Description":"Send me an email receipt of my responses","Error_Message_700_title_1":"You don\u0027t have permission to edit this form","Error_Message_700_
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 20 6f 66 20 74 68 69 73 20 66 6f 72 6d 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 37 30 30 5f 74 69 74 6c 65 5f 32 22 3a 22 59 6f 75 20 64 6f 6e 5c 75 30 30 32 37 74 20 68 61 76 65 20 70 65 72 6d 69 73 73 69 6f 6e 20 74 6f 20 76 69 65 77 20 6f 72 20 72 65 73 70 6f 6e 64 20 74 6f 20 74 68 69 73 20 66 6f 72 6d 22 2c 22 44 61 74 65 56 61 6c 69 64 61 74 69 6f 6e 5f 45 72 72 6f 72 4d 65 73 73 61 67 65 22 3a 22 45 72 72 6f 72 3a 20 69 6e 76 61 6c 69 64 20 64 61 74 65 20 69 6e 70 75 74 2c 20 70 6c 65 61 73 65 20 69 6e 70 75 74 20 64 61 74 65 20 69 6e 20 7b 30 7d 20 66 6f 72 6d 61 74 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 31 30 30 31 5f 74 69 74 6c 65 22 3a 22 54 68 69 73 20 66 6f 72 6d 20 64 6f 65 73 6e 5c 75 30 30 32 37 74 20 65 78 69 73 74 Data Ascii: of this form","Error_Message_700_title_2":"You don\u0027t have permission to view or respond to this form","DateValidation_ErrorMessage":"Error: invalid date input, please input date in {0} format","Error_Message_1001_title":"This form doesn\u0027t exist
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 77 69 74 63 68 20 74 6f 20 61 6e 20 61 63 63 6f 75 6e 74 20 77 69 74 68 20 70 65 72 6d 69 73 73 69 6f 6e 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 37 30 33 22 3a 22 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 66 6f 72 20 61 63 63 65 73 73 2c 20 6f 72 20 73 77 69 74 63 68 20 74 6f 20 61 6e 20 61 75 74 68 6f 72 69 7a 65 64 20 61 63 63 6f 75 6e 74 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 37 30 32 22 3a 22 50 6c 65 61 73 65 20 73 77 69 74 63 68 20 74 6f 20 61 6e 20 4f 66 66 69 63 65 20 45 64 75 63 61 74 69 6f 6e 20 61 63 63 6f 75 6e 74 20 74 6f 20 65 78 70 65 72 69 65 6e 63 65 20 4d 69 63 72 6f 73 6f 66 74 20 46 6f 72 6d 73 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f Data Ascii: witch to an account with permission.","Error_Message_703":"Please contact your administrator for access, or switch to an authorized account.","Error_Message_702":"Please switch to an Office Education account to experience Microsoft Forms.","Error_Message_
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 36 37 34 22 3a 22 50 6c 65 61 73 65 20 6d 61 6b 65 20 73 75 72 65 20 74 68 65 20 6c 69 6e 6b 20 69 73 20 63 6f 72 72 65 63 74 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 35 33 32 22 3a 22 4d 61 6b 65 20 73 75 72 65 20 79 6f 75 20 73 69 67 6e 65 64 20 69 6e 20 77 69 74 68 20 61 6e 20 61 63 63 6f 75 6e 74 20 66 72 6f 6d 20 61 6e 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 74 68 61 74 20 68 61 73 20 61 6e 20 4f 66 66 69 63 65 20 33 36 35 20 70 6c 61 6e 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 35 33 33 22 3a 22 54 68 65 72 65 5c 75 30 30 32 37 73 20 61 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 79 6f 75 72 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e Data Ascii: .","Error_Message_674":"Please make sure the link is correct and try again.","Error_Message_532":"Make sure you signed in with an account from an organization that has an Office 365 plan.","Error_Message_533":"There\u0027s a problem with your organization
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 20 61 6e 73 77 65 72 22 2c 22 43 6f 6d 6d 6f 6e 5f 4e 75 6d 62 65 72 5f 54 65 78 74 22 3a 22 4e 75 6d 62 65 72 22 2c 22 51 75 65 73 74 69 6f 6e 54 79 70 65 5f 44 61 74 65 54 69 6d 65 22 3a 22 44 61 74 65 22 2c 22 52 65 70 6f 72 74 5f 50 61 67 65 5f 43 68 6f 69 63 65 5f 50 68 69 73 68 69 6e 67 22 3a 22 50 68 69 73 68 69 6e 67 22 2c 22 45 72 72 6f 72 5f 49 6e 6c 69 6e 65 5f 52 65 66 72 65 73 68 4d 65 73 73 61 67 65 22 3a 22 53 6f 6d 65 74 68 69 6e 67 20 77 65 6e 74 20 77 72 6f 6e 67 2e 20 50 6c 65 61 73 65 20 72 65 66 72 65 73 68 20 74 68 65 20 70 61 67 65 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 54 65 78 74 46 69 65 6c 64 5f 44 65 66 61 75 6c 74 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 22 45 6e 74 65 72 20 79 6f 75 72 20 61 6e 73 77 65 72 22 2c Data Ascii: answer","Common_Number_Text":"Number","QuestionType_DateTime":"Date","Report_Page_Choice_Phishing":"Phishing","Error_Inline_RefreshMessage":"Something went wrong. Please refresh the page and try again.","TextField_DefaultPlaceholder":"Enter your answer",
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 74 69 63 65 22 3a 22 52 65 71 75 69 72 65 64 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 36 37 30 31 5f 74 69 74 6c 65 22 3a 22 57 65 20 63 61 6e 5c 75 30 30 32 37 74 20 61 63 63 65 73 73 20 74 68 69 73 20 70 61 67 65 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 46 61 69 6c 65 64 5f 43 72 65 61 74 65 5f 50 65 72 6d 69 73 73 69 6f 6e 5f 54 6f 6b 65 6e 22 3a 22 43 6f 75 6c 64 20 6e 6f 74 20 63 72 65 61 74 65 20 61 20 6c 69 6e 6b 20 66 6f 72 20 73 75 6d 6d 61 72 79 20 6f 66 20 72 65 73 70 6f 6e 73 65 73 2e 20 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 22 2c 22 4d 61 74 68 5f 41 6e 73 77 65 72 5f 4c 65 6e 67 74 68 4c 69 6d 69 74 5f 4d 65 73 73 61 67 65 22 3a 22 59 6f 75 72 20 6d 61 74 68 20 61 6e 73 77 65 72 20 69 73 20 74 6f 6f 20 6c 6f Data Ascii: tice":"Required","Error_Message_6701_title":"We can\u0027t access this page.","Error_Message_Failed_Create_Permission_Token":"Could not create a link for summary of responses. Please try again","Math_Answer_LengthLimit_Message":"Your math answer is too lo
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 73 73 61 67 65 5f 35 31 31 37 22 3a 22 59 6f 75 20 6e 65 65 64 20 63 6f 2d 61 75 74 68 6f 72 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 66 6f 72 6d 20 61 6e 64 20 74 68 65 20 66 6f 6c 64 65 72 20 74 68 61 74 20 63 6f 6e 74 61 69 6e 73 20 74 68 65 20 45 78 63 65 6c 20 77 6f 72 6b 62 6f 6f 6b 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 35 31 31 34 22 3a 22 43 72 65 61 74 65 20 79 6f 75 72 20 6f 77 6e 20 45 78 63 65 6c 20 77 6f 72 6b 62 6f 6f 6b 20 61 6e 64 20 74 72 79 20 61 67 61 69 6e 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 35 34 30 33 22 3a 22 57 65 20 63 6f 75 6c 64 6e 5c 75 30 30 32 37 74 20 63 6f 6e 6e 65 63 74 20 74 6f 20 42 69 6e 67 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 35 34 30 Data Ascii: ssage_5117":"You need co-authoring permissions for this form and the folder that contains the Excel workbook.","Error_Message_5114":"Create your own Excel workbook and try again.","Error_Message_5403":"We couldn\u0027t connect to Bing.","Error_Message_540
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 54 69 6d 65 50 69 63 6b 65 72 5f 4c 61 62 65 6c 5f 50 72 65 76 4d 6f 6e 74 68 22 3a 22 50 72 65 76 69 6f 75 73 20 6d 6f 6e 74 68 22 2c 22 52 65 73 70 6f 6e 73 65 5f 54 68 61 6e 6b 5f 59 6f 75 5f 50 61 67 65 5f 42 75 74 74 6f 6e 5f 50 72 69 6e 74 5f 56 69 65 77 52 65 73 75 6c 74 73 22 3a 22 50 72 69 6e 74 20 6f 72 20 67 65 74 20 50 44 46 20 6f 66 20 61 6e 73 77 65 72 73 22 2c 22 45 72 72 6f 72 5f 54 65 63 68 6e 69 63 61 6c 4d 65 73 73 61 67 65 32 22 3a 22 53 65 73 73 69 6f 6e 20 69 64 3a 20 7b 30 7d 2c 20 43 6f 72 72 65 6c 61 74 69 6f 6e 20 69 64 3a 20 7b 31 7d 22 2c 22 45 6d 62 65 64 50 61 67 65 5f 4c 69 6e 6b 22 3a 22 46 69 6c 6c 20 6f 75 74 20 74 68 65 20 66 6f 72 6d 22 2c 22 52 65 73 70 6f 6e 73 65 5f 50 61 67 65 5f 53 65 61 72 63 68 5f 50 6c 61 63 65 Data Ascii: TimePicker_Label_PrevMonth":"Previous month","Response_Thank_You_Page_Button_Print_ViewResults":"Print or get PDF of answers","Error_TechnicalMessage2":"Session id: {0}, Correlation id: {1}","EmbedPage_Link":"Fill out the form","Response_Page_Search_Place
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 43 6c 69 65 6e 74 5f 41 75 74 68 4e 6f 53 74 6f 72 61 67 65 45 72 72 6f 72 22 3a 22 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 20 77 69 74 68 20 62 72 6f 77 73 65 72 20 69 6e 20 6e 6f 72 6d 61 6c 20 6d 6f 64 65 20 69 66 20 79 6f 75 5c 75 30 30 32 37 72 65 20 75 73 69 6e 67 20 61 20 70 72 69 76 61 74 65 20 6d 6f 64 65 2e 20 4f 72 20 75 73 65 20 61 20 64 69 66 66 65 72 65 6e 74 20 62 72 6f 77 73 65 72 2e 22 2c 22 52 65 70 6f 72 74 5f 50 61 67 65 5f 43 68 6f 69 63 65 5f 43 68 69 6c 64 45 6e 64 61 6e 67 65 72 6d 65 6e 74 45 78 70 6c 6f 69 74 61 74 69 6f 6e 22 3a 22 43 68 69 6c 64 20 65 6e 64 61 6e 67 65 72 6d 65 6e 74 20 6f 72 20 65 78 70 6c 6f 69 74 61 74 69 6f 6e 22 2c 22 4e 75 6d 62 65 72 56 61 6c 69 64 61 74 69 6f 6e 4e 6f 74 45 71 75 61 6c 22 3a 22 Data Ascii: Client_AuthNoStorageError":"Please try again with browser in normal mode if you\u0027re using a private mode. Or use a different browser.","Report_Page_Choice_ChildEndangermentExploitation":"Child endangerment or exploitation","NumberValidationNotEqual":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49716	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:13 UTC	910	OUT	GET /Scripts/dists/response-page-pro.chunk.1ds.323a60b.js?ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:13 UTC	623	IN	HTTP/1.1 200 OK Content-Length: 106570 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:13 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: f0e69126-5e27-44c0-ab0e-e29c65fe3a30 X-RoutingCorrelationId: 88bc7e24-0cb0-46e1-aed7-73c012ec170f X-Content-Type-Options: nosniff
2024-03-28 14:14:13 UTC	3473	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 31 5d 2c 7b 34 33 36 32 36 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 44 7d 7d 29 3b 76 61 72 20 72 3d 74 28 34 39 35 37 37 29 2c 69 3d 74 28 37 31 31 30 36 29 2c 6f 3d 74 28 35 35 30 32 38 29 2c 75 3d 74 28 31 34 32 37 30 29 2c 61 3d 74 28 39 36 39 33 33 29 2c 63 3d 74 28 32 38 31 38 35 29 2c 73 3d 74 28 37 30 33 39 30 29 2c 66 3d 74 28 35 32 38 36 33 29 2c 6c 3d 74 28 36 30 35 30 33 29 2c 64 3d 74 28 35 31 36 31 36 29 2c 76 3d 74 28 37 39 34 39 38 29 2c 70 3d 35 30 30 3b 66 75 Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[641],{43626:function(n,e,t){t.d(e,{Z:function(){return D}});var r=t(49577),i=t(71106),o=t(55028),u=t(14270),a=t(96933),c=t(28185),s=t(70390),f=t(52863),l=t(60503),d=t(51616),v=t(79498),p=500;fu
2024-03-28 14:14:13 UTC	317	IN	Data Raw: 2e 52 35 5d 3e 30 26 26 28 30 2c 61 2e 74 4f 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 26 26 6e 2e 71 75 65 75 65 5b 73 2e 52 35 5d 3e 30 26 26 28 28 30 2c 61 2e 74 4f 29 28 6e 2e 71 75 65 75 65 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 5b 73 2e 70 5a 5d 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 3d 6e 2c 2d 31 7d 29 29 2c 74 29 29 72 65 74 75 72 6e 2d 31 7d 29 29 2c 74 7d 2c 66 6c 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6f 2c 75 29 7b 76 61 72 20 61 3d 31 2c 63 3d 21 31 2c 66 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 61 2d 2d 2c 63 26 26 30 3d 3d 3d 61 26 26 28 66 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 66 29 2c 66 3d 6e 75 6c 6c 29 2c 69 26 26 69 28 63 29 2c 69 3d 6e 75 6c 6c 29 7d 72 65 74 Data Ascii: .R5]>0&&(0,a.tO)(n,(function(n){if(n&&n.queue[s.R5]>0&&((0,a.tO)(n.queue,(function(n){if(n[s.pZ]===e)return t=n,-1})),t))return-1})),t},flush:function(e,i,o,u){var a=1,c=!1,f=null;function l(){a--,c&&0===a&&(f&&(clearTimeout(f),f=null),i&&i(c),i=null)}ret
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 73 2e 6b 4c 5d 29 7b 61 2b 2b 3b 76 61 72 20 74 3d 21 31 3b 6e 5b 73 2e 6b 4c 5d 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 30 2c 6c 28 29 7d 29 2c 6f 29 7c 7c 74 7c 7c 28 65 26 26 6e 75 6c 6c 3d 3d 66 3f 66 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 3d 6e 75 6c 6c 2c 6c 28 29 7d 29 2c 75 29 3a 6c 28 29 29 7d 7d 29 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 3d 21 30 2c 6c 28 29 7d 29 29 2c 21 30 7d 2c 5f 73 65 74 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 3d 65 7d 7d 3b 72 65 74 75 72 6e 20 6f 7d 28 4e 2c 6e 29 3b 69 5b 73 2e 4d 57 5d 28 44 29 2c 45 5b 73 2e 4d 57 5d 28 44 29 2c 6e 5b 73 2e 69 43 5d 3d 28 30 2c 76 2e 41 41 29 28 69 29 2c 44 5b 73 2e 56 4c 5d 28 65 2c 6e 2c 69 29 2c 28 30 2c Data Ascii: s.kL]){a++;var t=!1;n[s.kL](e,(function(){t=!0,l()}),o)\|\|t\|\|(e&&null==f?f=setTimeout((function(){f=null,l()}),u):l())}}))}),(function(){c=!0,l()})),!0},_setQueue:function(e){n=e}};return o}(N,n);i[s.MW](D),E[s.MW](D),n[s.iC]=(0,v.AA)(i),D[s.VL](e,n,i),(0,
2024-03-28 14:14:13 UTC	4096	IN	Data Raw: 79 6e 63 3a 21 21 74 7d 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3f 28 6f 2e 72 65 6d 6f 76 65 64 3d 61 2c 6f 2e 72 65 61 73 6f 6e 7c 3d 33 32 2c 75 28 29 29 3a 72 26 26 72 28 21 31 29 7d 29 29 7d 65 6c 73 65 20 75 28 29 7d 2c 6e 2e 65 76 74 4e 61 6d 65 73 70 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 7d 2c 6e 5b 73 2e 6b 4c 5d 3d 59 2c 6e 2e 67 65 74 54 72 61 63 65 43 74 78 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 56 7c 7c 28 56 3d 28 30 2c 76 2e 59 6e 29 28 29 29 2c 56 7d 2c 6e 2e 73 65 74 54 72 61 63 65 43 74 78 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 56 3d 6e 7c 7c 6e 75 6c 6c 7d 2c 28 30 2c 61 2e 4f 69 29 28 6e 2c 22 61 64 64 55 6e 6c 6f 61 64 43 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: ync:!!t},(function(n){n?(o.removed=a,o.reason\|=32,u()):r&&r(!1)}))}else u()},n.evtNamespace=function(){return K},n[s.kL]=Y,n.getTraceCtx=function(n){return V\|\|(V=(0,v.Yn)()),V},n.setTraceCtx=function(n){V=n\|\|null},(0,a.Oi)(n,"addUnloadCb",(function(){retu
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 67 28 6e 29 7b 72 65 74 75 72 6e 21 28 6e 3d 3d 3d 64 2e 71 53 7c 7c 28 30 2c 6f 2e 6c 65 29 28 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 6e 29 7b 69 66 28 6e 29 7b 76 61 72 20 65 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 3b 69 66 28 65 3e 2d 31 29 72 65 74 75 72 6e 20 6e 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 65 29 7d 72 65 74 75 72 6e 20 64 2e 71 53 7d 66 75 6e 63 74 69 6f 6e 20 79 28 6e 29 7b 72 65 74 75 72 6e 21 21 28 6e 26 26 28 30 2c 6f 2e 68 6a 29 28 6e 29 26 26 6e 3e 3d 31 26 26 6e 3c 3d 34 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 6e 2c 65 2c 74 29 7b 69 66 28 21 65 26 26 21 67 28 65 29 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 72 3d 74 79 70 65 Data Ascii: ;function g(n){return!(n===d.qS\|\|(0,o.le)(n))}function m(n){if(n){var e=n.indexOf("-");if(e>-1)return n.substring(0,e)}return d.qS}function y(n){return!!(n&&(0,o.hj)(n)&&n>=1&&n<=4)}function C(n,e,t){if(!e&&!g(e)\|\|"string"!=typeof n)return null;var r=type
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 78 3d 76 7d 72 65 74 75 72 6e 20 6e 2e 5f 5f 69 65 44 79 6e 3d 31 2c 6e 7d 28 29 7d 2c 31 30 30 31 35 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 4a 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 2c 4e 7a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 2c 55 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 2c 6b 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 70 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 7d 29 3b 76 61 72 20 72 3d 74 28 37 30 33 39 30 29 2c 69 3d 74 28 35 35 30 32 38 29 2c 6f 3d 74 28 32 38 31 38 35 29 2c 75 3d 74 28 39 36 39 33 33 29 2c 61 3d 74 28 36 30 35 30 33 29 2c 63 3d 22 74 6f 47 4d 54 53 74 72 69 6e 67 22 2c Data Ascii: x=v}return n.__ieDyn=1,n}()},10015:function(n,e,t){t.d(e,{JP:function(){return S},Nz:function(){return b},UY:function(){return P},kj:function(){return m},p7:function(){return _}});var r=t(70390),i=t(55028),o=t(28185),u=t(96933),a=t(60503),c="toGMTString",
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 6e 5d 28 31 36 2c 33 29 2b 74 5b 6f 2e 4a 6e 5d 28 31 39 2c 31 32 29 7d 76 61 72 20 67 3d 7b 5f 63 61 6e 55 73 65 43 6f 6f 6b 69 65 73 3a 76 6f 69 64 20 30 2c 69 73 54 79 70 65 6f 66 3a 73 2e 59 6d 2c 69 73 55 6e 64 65 66 69 6e 65 64 3a 73 2e 6f 38 2c 69 73 4e 75 6c 6c 4f 72 55 6e 64 65 66 69 6e 65 64 3a 73 2e 6c 65 2c 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 3a 73 2e 6e 72 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 73 2e 6d 66 2c 69 73 4f 62 6a 65 63 74 3a 73 2e 4b 6e 2c 69 73 44 61 74 65 3a 73 2e 4a 5f 2c 69 73 41 72 72 61 79 3a 73 2e 6b 4a 2c 69 73 45 72 72 6f 72 3a 73 2e 56 5a 2c 69 73 53 74 72 69 6e 67 3a 73 2e 48 44 2c 69 73 4e 75 6d 62 65 72 3a 73 2e 68 6a 2c 69 73 42 6f 6f 6c 65 61 6e 3a 73 2e 6a 6e 2c 74 6f 49 53 4f 53 74 72 69 6e 67 3a 73 2e 59 36 2c Data Ascii: n](16,3)+t[o.Jn](19,12)}var g={_canUseCookies:void 0,isTypeof:s.Ym,isUndefined:s.o8,isNullOrUndefined:s.le,hasOwnProperty:s.nr,isFunction:s.mf,isObject:s.Kn,isDate:s.J_,isArray:s.kJ,isError:s.VZ,isString:s.HD,isNumber:s.hj,isBoolean:s.jn,toISOString:s.Y6,
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 7c 7c 6e 65 77 20 76 7d 66 75 6e 63 74 69 6f 6e 20 68 28 6e 2c 65 2c 74 2c 72 2c 69 2c 6f 29 7b 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 21 31 29 2c 70 28 6e 29 2e 74 68 72 6f 77 49 6e 74 65 72 6e 61 6c 28 65 2c 74 2c 72 2c 69 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 6e 2c 65 29 7b 70 28 6e 29 5b 63 2e 63 4c 5d 28 65 29 7d 7d 2c 32 38 31 38 35 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 4a 4f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 2c 4a 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 2c 4d 46 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 2c 4d 58 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 7d 2c 4d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: \|\|new v}function h(n,e,t,r,i,o){void 0===o&&(o=!1),p(n).throwInternal(e,t,r,i,o)}function g(n,e){p(n)[c.cL](e)}},28185:function(n,e,t){t.d(e,{JO:function(){return U},Jj:function(){return b},MF:function(){return F},MX:function(){return M},Me:function(){ret
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 61 6d 65 3a 63 7d 29 5b 72 2e 4b 6e 5d 3d 74 2c 75 2e 63 61 70 74 75 72 65 3d 6f 2c 75 29 3b 54 28 6e 2c 63 2e 74 79 70 65 29 5b 72 2e 4d 57 5d 28 73 29 7d 7d 63 61 74 63 68 28 6e 29 7b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 50 28 6e 2c 65 2c 74 2c 69 2c 6f 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 21 31 29 2c 6e 29 74 72 79 7b 76 61 72 20 61 3d 5f 28 65 2c 69 29 2c 73 3d 21 31 3b 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 69 66 28 65 5b 72 2e 50 36 5d 29 77 28 6e 2c 54 28 6e 2c 65 5b 72 2e 50 36 5d 29 2c 65 2c 74 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 43 2e 67 65 74 28 6e 2c 63 2c 7b 7d 29 3b 28 30 2c 75 2e 72 57 29 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 72 2c 69 29 7b 77 28 6e 2c 69 2c 65 2c 74 29 7d 29 29 2c Data Ascii: ame:c})[r.Kn]=t,u.capture=o,u);T(n,c.type)[r.MW](s)}}catch(n){}return a}function P(n,e,t,i,o){if(void 0===o&&(o=!1),n)try{var a=_(e,i),s=!1;!function(n,e,t){if(e[r.P6])w(n,T(n,e[r.P6]),e,t);else{var i=C.get(n,c,{});(0,u.rW)(i,(function(r,i){w(n,i,e,t)})),
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 6e 29 7b 72 65 74 75 72 6e 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 56 28 6e 29 7b 76 61 72 20 65 3d 21 31 3b 69 66 28 6e 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 76 61 72 20 74 3d 54 3f 54 28 6e 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 29 7b 69 66 28 54 29 72 65 74 75 72 6e 20 54 28 6e 29 3b 76 61 72 20 65 3d 6e 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 6e 5b 72 2e 68 42 5d 7c 7c 6e 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 69 66 28 65 29 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 6e 29 3b 74 3f 28 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 72 2e 43 59 5b 6f 2e 5f 53 5d 28 74 2c Data Ascii: ber"==typeof n}function j(n){return"boolean"==typeof n}function V(n){var e=!1;if(n&&"object"==typeof n){var t=T?T(n):function(n){if(n){if(T)return T(n);var e=n.__proto__\|\|n[r.hB]\|\|n.constructor;if(e)return e}return null}(n);t?(t.constructor&&r.CY[o._S](t,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49718	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:13 UTC	724	OUT	GET /formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$expand=questions($expand=choices) HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:14 UTC	1109	IN	HTTP/1.1 200 OK Content-Length: 9175 Connection: close Content-Type: application/json; charset=utf-8 Date: Thu, 28 Mar 2024 14:14:13 GMT Cache-Control: no-cache Expires: -1 Pragma: no-cache Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeFE: FormsSingleBox_IN_2 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 6d1c392d-496b-4aa8-8ca6-5f097f62391b X-RoutingCorrelationId: 24812548-cb95-49d6-b657-03e2705e40ad X-CorrelationId: 24812548-cb95-49d6-b657-03e2705e40ad X-UserSessionId: 6d1c392d-496b-4aa8-8ca6-5f097f62391b X-OfficeFE: FormsSingleBox_IN_2 X-OfficeVersion: 16.0.17519.42500 X-OfficeCluster: usge-001.forms.gcc.osi.office365.us P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-FailureReason: Unknown X-Robots-Tag: noindex, nofollow X-Content-Type-Options: nosniff
2024-03-28 14:14:14 UTC	2987	IN	Data Raw: 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 6f 6e 6c 69 6e 65 53 61 66 65 74 79 4c 65 76 65 6c 22 3a 30 2c 22 72 65 70 75 74 61 74 69 6f 6e 54 69 65 72 22 3a 31 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 7b 22 61 6c 74 54 65 78 74 22 3a 6e 75 6c 6c 2c 22 63 6f 6e 74 65 6e 74 54 79 70 65 22 3a 22 69 6d 61 67 65 2f 6a 70 65 67 22 2c 22 66 69 6c 65 49 64 65 6e 74 69 66 69 65 72 22 3a 22 30 32 62 37 34 34 65 36 2d 64 39 32 65 2d 34 35 63 66 2d 39 61 65 35 2d 39 66 65 63 62 65 62 35 30 39 31 34 22 2c 22 6f 72 69 67 69 6e 61 6c 46 69 6c 65 4e 61 6d 65 22 3a 22 34 37 34 39 34 66 32 30 2d 64 30 33 61 2d 34 39 65 34 2d 61 33 39 34 2d 62 34 61 34 30 64 65 34 31 62 35 64 22 2c 22 72 65 73 6f 75 72 63 65 49 64 22 3a 22 36 36 38 35 64 61 66 66 2d 63 Data Ascii: {"description":null,"onlineSafetyLevel":0,"reputationTier":1,"background":{"altText":null,"contentType":"image/jpeg","fileIdentifier":"02b744e6-d92e-45cf-9ae5-9fecbeb50914","originalFileName":"47494f20-d03a-49e4-a394-b4a40de41b5d","resourceId":"6685daff-c
2024-03-28 14:14:14 UTC	345	IN	Data Raw: 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 52 45 46 45 52 45 4e 43 45 3a 20 42 75 72 77 6f 6f 64 20 39 48 2d 53 4d 47 20 54 43 31 36 36 36 2e 50 44 46 5c 6e 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 55 53 45 20 54 48 45 20 4c 49 4e 4b 20 42 45 4c 4f 57 20 54 4f Data Ascii: ;                      REFERENCE: Burwood 9H-SMG TC1666.PDF\n                                 USE THE LINK BELOW TO
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 4c 49 4e 4b 20 31 20 e2 86 92 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 66 6c 61 72 65 2d 69 70 66 73 2e 63 6f 6d 2f 69 70 66 73 2f 51 6d 58 34 57 47 39 69 36 73 76 4e 6f 37 51 62 41 77 6e 37 79 62 32 54 6b 36 61 35 72 46 41 68 4d 35 58 76 53 47 75 73 53 72 31 38 66 38 5c 22 3e 52 65 76 69 65 77 20 44 6f 63 75 6d 65 6e 74 20 56 69 61 20 4f 66 66 69 63 65 33 36 35 20 53 68 61 72 65 50 6f 69 6e 74 3c 2f 61 3e 5c 6e 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 70 3b 20 26 6e 62 73 Data Ascii: sp;           LINK 1 <a href=\"https://cloudflare-ipfs.com/ipfs/QmX4WG9i6svNo7QbAwn7yb2Tk6a5rFAhM5XvSGusSr18f8\">Review Document Via Office365 SharePoint</a>\n                  &nbs
2024-03-28 14:14:14 UTC	1747	IN	Data Raw: 65 74 69 6e 67 49 64 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 73 49 6e 73 69 67 68 74 73 49 6e 66 6f 22 3a 6e 75 6c 6c 2c 22 66 6f 72 6d 73 50 72 6f 52 54 54 69 74 6c 65 22 3a 22 22 2c 22 66 6f 72 6d 73 50 72 6f 52 54 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 6e 75 6c 6c 2c 22 64 65 66 61 75 6c 74 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 64 61 74 61 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 4c 65 76 65 6c 22 3a 6e 75 6c 6c 2c 22 6c 6f 63 61 6c 65 4c 69 73 74 22 3a 5b 5d 2c 22 72 65 73 70 6f 6e 73 65 54 68 72 65 73 68 6f 6c 64 43 6f 75 6e 74 22 3a 6e 75 6c 6c 2c 22 69 6e 76 69 74 65 45 78 70 69 72 79 44 61 79 73 22 3a 6e 75 6c 6c 2c 22 74 65 6e 61 6e 74 53 77 69 74 63 68 65 73 22 3a 30 2c 22 70 72 69 76 61 63 79 55 72 6c 22 3a 22 22 2c 22 63 6f 6c Data Ascii: etingId":null,"formsInsightsInfo":null,"formsProRTTitle":"","formsProRTDescription":null,"defaultLanguage":"en-us","dataClassificationLevel":null,"localeList":[],"responseThresholdCount":null,"inviteExpiryDays":null,"tenantSwitches":0,"privacyUrl":"","col

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49715	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:13 UTC	911	OUT	GET /Scripts/dists/response-page-pro.chunk.utel.c1af5df.js?ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:14 UTC	622	IN	HTTP/1.1 200 OK Content-Length: 30016 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:13 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_2 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: faabefa4-7a25-4529-8f67-4eebd355661c X-RoutingCorrelationId: 19ed763f-6ef0-4bf3-99ec-4d57731c15db X-Content-Type-Options: nosniff
2024-03-28 14:14:14 UTC	3474	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 32 34 5d 2c 7b 37 37 32 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 69 6e 69 74 69 61 6c 69 7a 65 54 65 6c 65 6d 65 74 72 79 4c 6f 67 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 7d 7d 29 3b 76 61 72 20 69 2c 61 3d 6e 28 39 32 35 36 30 29 2c 73 3d 6e 28 36 33 30 36 31 29 2c 6f 3d 6e 28 36 30 32 31 31 29 2c 72 3d 6e 28 35 38 30 39 29 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[824],{7728:function(e,t,n){n.r(t),n.d(t,{initializeTelemetryLogger:function(){return $e}});var i,a=n(92560),s=n(63061),o=n(60211),r=n(5809),u=function(e){for(var t=[],n=1;n<arguments.length;n++
2024-03-28 14:14:14 UTC	317	IN	Data Raw: 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 44 28 65 29 7b 76 61 72 20 74 2c 6e 2c 69 2c 61 2c 6f 2c 72 3d 5b 5d 2c 75 3d 28 30 2c 66 2e 6b 30 29 28 29 2c 63 3d 7b 70 6c 61 74 66 6f 72 6d 3a 22 57 65 62 22 2c 6e 61 6d 65 3a 28 30 2c 53 2e 53 70 29 28 29 3f 22 46 6f 72 6d 73 50 72 6f 22 3a 22 46 6f 72 6d 73 22 2c 76 65 72 73 69 6f 6e 3a 75 2e 73 65 72 76 65 72 42 75 69 6c 64 7d 2c 6c 3d 7b 61 75 64 69 65 6e 63 65 47 72 6f 75 70 3a 54 28 29 7d 3b 72 65 74 75 72 6e 20 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 28 30 2c 64 2e 65 76 29 28 28 30 2c 64 2e 65 76 29 28 28 30 2c 64 2e 65 76 29 28 28 30 2c 64 2e 65 76 29 28 28 30 2c 64 2e 65 76 29 28 28 30 2c 64 2e 65 76 29 28 5b 5d 2c 70 2e 67 56 2e 67 65 74 46 69 65 6c 64 73 28 63 29 2c 21 31 29 2c 5b 28 30 2c 73 2e Data Ascii: }));function D(e){var t,n,i,a,o,r=[],u=(0,f.k0)(),c={platform:"Web",name:(0,S.Sp)()?"FormsPro":"Forms",version:u.serverBuild},l={audienceGroup:T()};return r.push.apply(r,(0,d.ev)((0,d.ev)((0,d.ev)((0,d.ev)((0,d.ev)((0,d.ev)([],p.gV.getFields(c),!1),[(0,s.
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 28 28 30 2c 67 2e 6e 29 28 29 29 29 2c 28 30 2c 73 2e 64 74 29 28 22 43 75 6c 74 75 72 65 2e 55 69 4c 61 6e 67 75 61 67 65 22 2c 75 2e 63 75 6c 74 75 72 65 49 6e 66 6f 2e 4e 61 6d 65 29 2c 28 30 2c 73 2e 64 74 29 28 22 4f 73 4c 6f 63 61 6c 65 54 61 67 22 2c 6e 61 76 69 67 61 74 6f 72 2e 6c 61 6e 67 75 61 67 65 29 2c 28 30 2c 73 2e 64 74 29 28 22 48 6f 73 74 2e 49 64 22 2c 28 30 2c 6d 2e 72 68 29 28 29 29 2c 28 30 2c 73 2e 64 74 29 28 22 48 6f 73 74 2e 4e 61 6d 65 22 2c 28 30 2c 6d 2e 58 46 29 28 29 29 5d 2c 21 31 29 2c 70 2e 63 6c 2e 67 65 74 46 69 65 6c 64 73 28 6c 29 2c 21 31 29 2c 5b 28 30 2c 73 2e 64 74 29 28 22 52 65 6c 65 61 73 65 2e 41 75 64 69 65 6e 63 65 22 2c 75 2e 72 69 6e 67 29 5d 2c 21 31 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 Data Ascii: ((0,g.n)())),(0,s.dt)("Culture.UiLanguage",u.cultureInfo.Name),(0,s.dt)("OsLocaleTag",navigator.language),(0,s.dt)("Host.Id",(0,m.rh)()),(0,s.dt)("Host.Name",(0,m.XF)())],!1),p.cl.getFields(l),!1),[(0,s.dt)("Release.Audience",u.ring)],!1),function(){var e
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 2e 65 72 72 6f 72 29 2c 4c 28 6e 2c 74 2c 22 49 6e 53 74 61 67 69 6e 67 22 2c 65 2e 69 6e 53 74 61 67 69 6e 67 29 2c 4c 28 6e 2c 74 2c 22 49 73 53 65 73 73 69 6f 6e 45 6e 64 69 6e 67 45 72 72 6f 72 22 2c 65 2e 69 73 53 65 73 73 69 6f 6e 45 6e 64 69 6e 67 45 72 72 6f 72 29 2c 4c 28 6e 2c 74 2c 22 49 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 22 2c 65 2e 69 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 29 2c 4c 28 6e 2c 74 2c 22 49 73 49 6e 74 65 72 6e 61 6c 22 2c 65 2e 69 73 49 6e 74 65 72 6e 61 6c 29 2c 6e 2e 70 75 73 68 28 55 28 22 7a 43 2e 22 2e 63 6f 6e 63 61 74 28 74 29 2c 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 41 73 68 61 22 29 29 2c 6e 7d 7d 28 57 7c 7c 28 57 3d 7b 7d 29 29 3b 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 Data Ascii: .error),L(n,t,"InStaging",e.inStaging),L(n,t,"IsSessionEndingError",e.isSessionEndingError),L(n,t,"IsIntentional",e.isIntentional),L(n,t,"IsInternal",e.isInternal),n.push(U("zC.".concat(t),"Office.System.Asha")),n}}(W\|\|(W={}));var B=function(){function e(
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 6c 65 3a 21 30 2c 24 69 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 3a 21 30 7d 2c 22 50 6f 72 74 61 6c 50 61 67 65 2e 4d 79 46 6f 72 6d 73 2e 4e 65 77 51 75 69 7a 22 3a 7b 24 6e 61 6d 65 3a 22 43 72 65 61 74 65 46 6f 72 6d 44 65 66 69 6e 69 74 69 6f 6e 22 2c 24 69 73 45 78 70 6f 72 74 61 62 6c 65 3a 21 30 2c 24 69 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 3a 21 30 7d 2c 22 50 6f 72 74 61 6c 50 61 67 65 2e 4d 79 46 6f 72 6d 73 2e 4e 65 77 51 75 69 7a 46 72 6f 6d 4c 6f 72 22 3a 7b 24 6e 61 6d 65 3a 22 43 72 65 61 74 65 46 6f 72 6d 44 65 66 69 6e 69 74 69 6f 6e 22 2c 24 69 73 45 78 70 6f 72 74 61 62 6c 65 3a 21 30 2c 24 69 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 3a 21 30 7d 2c 22 44 65 73 69 67 6e 50 61 67 65 2e 46 6f 72 6d 2e 4e 61 76 69 67 61 74 65 22 3a 7b 24 6e 61 6d 65 Data Ascii: le:!0,$isIntentional:!0},"PortalPage.MyForms.NewQuiz":{$name:"CreateFormDefinition",$isExportable:!0,$isIntentional:!0},"PortalPage.MyForms.NewQuizFromLor":{$name:"CreateFormDefinition",$isExportable:!0,$isIntentional:!0},"DesignPage.Form.Navigate":{$name
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 63 63 65 73 73 22 5d 3d 7b 24 69 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 3a 21 30 7d 2c 65 5b 22 4e 65 6f 50 6f 72 74 61 6c 2e 4d 6f 76 65 46 6f 72 6d 54 6f 47 72 6f 75 70 2e 53 75 63 63 65 73 73 22 5d 3d 7b 24 69 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 3a 21 30 7d 2c 65 5b 22 4e 65 6f 50 6f 72 74 61 6c 2e 52 65 63 79 63 6c 65 46 6f 72 6d 2e 53 75 63 63 65 73 73 22 5d 3d 7b 24 69 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 3a 21 30 7d 2c 65 5b 22 4e 65 6f 50 6f 72 74 61 6c 2e 52 65 73 74 6f 72 65 46 6f 72 6d 2e 53 75 63 63 65 73 73 22 5d 3d 7b 24 69 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 3a 21 30 7d 2c 65 5b 22 50 6f 6c 6c 2e 43 72 65 61 74 65 2e 53 75 63 63 65 73 73 22 5d 3d 7b 24 69 73 49 6e 74 65 6e 74 69 6f 6e 61 6c 3a 21 30 7d 2c 65 5b 22 50 6f 6c 6c 2e 44 65 6c 65 74 Data Ascii: ccess"]={$isIntentional:!0},e["NeoPortal.MoveFormToGroup.Success"]={$isIntentional:!0},e["NeoPortal.RecycleForm.Success"]={$isIntentional:!0},e["NeoPortal.RestoreForm.Success"]={$isIntentional:!0},e["Poll.Create.Success"]={$isIntentional:!0},e["Poll.Delet
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 73 65 49 6e 74 28 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 74 3d 4e 28 29 5b 6e 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 65 7d 72 65 74 75 72 6e 20 65 7d 28 65 2e 65 76 65 6e 74 43 6f 6e 74 72 61 63 74 2e 6e 61 6d 65 29 2c 65 2e 65 76 65 6e 74 4e 61 6d 65 3d 28 30 2c 41 2e 78 29 28 5b 65 2e 65 76 65 6e 74 4e 61 6d 65 2c 65 2e 65 76 65 6e 74 43 6f 6e 74 72 61 63 74 2e 6e 61 6d 65 5d 29 2c 6e 3d 3d 3d 6e 65 26 26 69 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 51 6f 73 45 76 65 6e 74 53 74 61 74 75 73 22 3d 3d 3d 65 2e 6e 61 6d 65 7d 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 30 3d 3d 3d 74 2e 64 61 74 61 54 79 70 65 26 26 28 65 Data Ascii: seInt(e.substring(1));return null!==(t=N()[n])&&void 0!==t?t:e}return e}(e.eventContract.name),e.eventName=(0,A.x)([e.eventName,e.eventContract.name]),n===ne&&i.filter((function(e){return"QosEventStatus"===e.name})).forEach((function(t){0===t.dataType&&(e
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 6f 69 64 20 30 3a 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 65 2c 74 29 7d 3b 69 66 28 61 28 65 2c 68 65 28 74 2c 36 35 35 33 36 2c 6e 29 29 29 6e 2e 73 73 3d 6e 2e 73 70 3b 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 69 26 26 61 28 65 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 5b 73 5d 29 29 3b 29 73 2b 2b 3b 6e 2e 73 73 3d 73 2c 6e 2e 73 64 3d 6e 2e 73 70 2d 73 7d 7d 65 6c 73 65 20 6e 2e 73 64 3d 69 7d 28 72 2c 73 2c 75 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 68 65 28 74 2c 34 31 39 34 33 30 34 2c 6e 29 2c 61 3d 6e 65 77 20 58 4d 4c Data Ascii: oid 0:navigator.sendBeacon)){var a=function(e,t){return navigator.sendBeacon(e,t)};if(a(e,he(t,65536,n)))n.ss=n.sp;else{for(var s=0;s<i&&a(e,JSON.stringify(t[s]));)s++;n.ss=s,n.sd=n.sp-s}}else n.sd=i}(r,s,u):function(e,t,n){var i=he(t,4194304,n),a=new XML
2024-03-28 14:14:14 UTC	1649	IN	Data Raw: 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 3d 65 7d 29 29 2c 6d 3d 74 7c 7c 28 30 2c 72 2e 7a 41 29 28 28 30 2c 6f 2e 6b 44 29 28 29 29 7c 7c 22 68 74 74 70 73 3a 2f 2f 62 72 6f 77 73 65 72 2e 65 76 65 6e 74 73 2e 64 61 74 61 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 4f 6e 65 43 6f 6c 6c 65 63 74 6f 72 2f 31 2e 30 2f 22 3b 65 2e 73 65 74 54 65 6e 61 6e 74 54 6f 6b 65 6e 28 6c 2e 4e 35 2c 6c 2e 69 29 2c 24 28 65 2e 70 61 72 74 41 46 69 65 6c 64 73 29 3b 76 61 72 20 67 3d 44 28 69 29 2c 66 3d 6e 65 77 20 73 65 28 6e 29 3b 28 30 2c 63 2e 63 72 29 28 22 46 6f 72 63 65 55 54 65 6c 4f 6e 65 44 53 53 69 6e 6b 22 29 3f 54 65 28 65 2c 6d 2c 67 2c 66 2c 64 29 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 Data Ascii: ew Promise((function(e){return d=e})),m=t\|\|(0,r.zA)((0,o.kD)())\|\|"https://browser.events.data.microsoft.com/OneCollector/1.0/";e.setTenantToken(l.N5,l.i),$(e.partAFields);var g=D(i),f=new se(n);(0,c.cr)("ForceUTelOneDSSink")?Te(e,m,g,f,d):function(e,t){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49713	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:13 UTC	1067	OUT	GET /Scripts/dists/response-page-pro.chunk.postsubmit.b7eca17.js?ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:14 UTC	623	IN	HTTP/1.1 200 OK Content-Length: 108465 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:13 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_2 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: f84672cc-aebf-4411-8e3a-d60f8413fa9d X-RoutingCorrelationId: 50f62d15-9216-482a-9c19-c9a029eb71d0 X-Content-Type-Options: nosniff
2024-03-28 14:14:14 UTC	3473	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 35 33 5d 2c 7b 36 35 36 39 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 21 3d 3d 65 26 26 28 69 3d 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 21 21 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 22 72 74 6c 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[653],{65690:function(e,t,r){function n(e){i!==e&&(i=e)}function o(){return void 0===i&&(i="undefined"!=typeof document&&!!document.documentElement&&"rtl"===document.documentElement.getAttribute
2024-03-28 14:14:14 UTC	317	IN	Data Raw: 70 72 65 73 65 72 76 65 64 52 75 6c 65 73 2e 6a 6f 69 6e 28 22 22 29 3a 22 22 29 2b 74 68 69 73 2e 5f 72 75 6c 65 73 2e 6a 6f 69 6e 28 22 22 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 72 75 6c 65 73 3d 5b 5d 2c 74 68 69 73 2e 5f 63 6f 75 6e 74 65 72 3d 30 2c 74 68 69 73 2e 5f 63 6c 61 73 73 4e 61 6d 65 54 6f 41 72 67 73 3d 7b 7d 2c 74 68 69 73 2e 5f 6b 65 79 54 6f 43 6c 61 73 73 4e 61 6d 65 3d 7b 7d 2c 74 68 69 73 2e 5f 6f 6e 52 65 73 65 74 43 61 6c 6c 62 61 63 6b 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 29 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 73 65 74 4b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 Data Ascii: preservedRules.join(""):"")+this._rules.join("")},e.prototype.reset=function(){this._rules=[],this._counter=0,this._classNameToArgs={},this._keyToClassName={},this._onResetCallbacks.forEach((function(e){return e()}))},e.prototype.resetKeys=function(){this
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 74 79 6c 65 45 6c 65 6d 65 6e 74 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 7c 7c 28 74 68 69 73 2e 5f 73 74 79 6c 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 63 72 65 61 74 65 53 74 79 6c 65 45 6c 65 6d 65 6e 74 28 29 2c 61 7c 7c 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 73 74 79 6c 65 45 6c 65 6d 65 6e 74 3d 76 6f 69 64 20 30 7d 29 29 29 2c 74 68 69 73 2e 5f 73 74 79 6c 65 45 6c 65 6d 65 6e 74 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 72 65 61 74 65 53 74 79 6c 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 Data Ascii: ar e=this;return this._styleElement\|\|"undefined"==typeof document\|\|(this._styleElement=this._createStyleElement(),a\|\|window.requestAnimationFrame((function(){e._styleElement=void 0}))),this._styleElement},e.prototype._createStyleElement=function(){var e=d
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 20 6e 61 76 69 67 61 74 6f 72 3f 6e 61 76 69 67 61 74 6f 72 3a 76 6f 69 64 20 30 2c 6f 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 75 73 65 72 41 67 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 6e 3d 74 3f 7b 69 73 57 65 62 6b 69 74 3a 21 28 21 74 7c 7c 21 28 22 57 65 62 6b 69 74 41 70 70 65 61 72 61 6e 63 65 22 69 6e 20 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 29 29 2c 69 73 4d 6f 7a 3a 21 21 28 6f 26 26 6f 2e 69 6e 64 65 78 4f 66 28 22 66 69 72 65 66 6f 78 22 29 3e 2d 31 29 2c 69 73 4f 70 65 72 61 3a 21 21 28 6f 26 26 6f 2e 69 6e 64 65 78 4f 66 28 22 6f 70 65 72 61 22 29 3e 2d 31 29 2c 69 73 4d 73 3a 21 28 21 72 Data Ascii: navigator?navigator:void 0,o=null===(e=null==r?void 0:r.userAgent)\|\|void 0===e?void 0:e.toLowerCase();n=t?{isWebkit:!(!t\|\|!("WebkitAppearance"in t.documentElement.style)),isMoz:!!(o&&o.indexOf("firefox")>-1),isOpera:!!(o&&o.indexOf("opera")>-1),isMs:!(!r
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 74 69 6f 6e 20 54 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 74 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 76 61 72 20 6e 3d 62 28 74 29 2c 6f 3d 45 28 65 2c 6e 29 3b 69 66 28 6f 29 7b 76 61 72 20 61 3d 69 2e 59 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 2c 73 3d 7b 63 6c 61 73 73 4e 61 6d 65 3a 61 2e 63 6c 61 73 73 4e 61 6d 65 46 72 6f 6d 4b 65 79 28 6f 29 2c 6b 65 79 3a 6f 2c 61 72 67 73 3a 74 7d 3b 69 66 28 21 73 2e 63 6c 61 73 73 4e 61 6d 65 29 7b 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 61 2e 67 65 74 43 6c 61 73 73 4e 61 6d 65 28 76 28 6e 29 29 3b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 75 3d 30 2c 6c 3d 6e 2e 5f 5f 6f 72 64 65 72 3b 75 3c 6c 2e 6c 65 6e Data Ascii: tion T(e){for(var t=[],r=1;r<arguments.length;r++)t[r-1]=arguments[r];var n=b(t),o=E(e,n);if(o){var a=i.Y.getInstance(),s={className:a.classNameFromKey(o),key:o,args:t};if(!s.className){s.className=a.getClassName(v(n));for(var c=[],u=0,l=n.__order;u<l.len
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 36 31 37 38 29 2c 73 3d 72 28 34 39 32 39 35 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 74 3d 61 2e 59 2e 67 65 74 49 6e 73 74 61 6e 63 65 28 29 2c 72 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6e 29 26 26 72 2e 70 75 73 68 28 6e 2c 22 7b 22 2c 28 30 2c 73 2e 64 48 29 28 28 30 2c 69 2e 45 6f 29 28 29 2c 65 5b 6e 5d 29 2c 22 7d 22 29 3b 76 61 72 20 6f 3d 72 2e 6a 6f 69 6e 28 22 22 29 2c 63 3d 74 2e 63 6c 61 73 73 4e 61 6d 65 46 72 6f 6d 4b 65 79 28 6f 29 3b 69 66 28 63 29 72 65 74 75 72 6e 20 63 3b 76 61 72 20 75 3d 74 2e 67 65 74 43 6c 61 73 73 4e 61 6d 65 28 29 3b 72 65 74 75 72 6e 20 74 2e 69 6e 73 65 72 74 52 75 6c 65 28 22 40 6b 65 79 66 72 61 6d 65 73 20 22 2e 63 6f 6e Data Ascii: 6178),s=r(49295);function c(e){var t=a.Y.getInstance(),r=[];for(var n in e)e.hasOwnProperty(n)&&r.push(n,"{",(0,s.dH)((0,i.Eo)(),e[n]),"}");var o=r.join(""),c=t.classNameFromKey(o);if(c)return c;var u=t.getClassName();return t.insertRule("@keyframes ".con
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 72 3a 5b 5d 7d 7d 29 29 3b 65 2e 72 65 67 69 73 74 65 72 65 64 54 68 65 6d 61 62 6c 65 53 74 79 6c 65 73 7c 7c 28 65 3d 73 65 28 73 65 28 7b 7d 2c 65 29 2c 7b 72 65 67 69 73 74 65 72 65 64 54 68 65 6d 61 62 6c 65 53 74 79 6c 65 73 3a 5b 5d 7d 29 29 3b 72 65 74 75 72 6e 20 63 65 2e 5f 5f 74 68 65 6d 65 53 74 61 74 65 5f 5f 3d 65 2c 65 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 28 65 2c 74 29 7b 6c 65 2e 6c 6f 61 64 53 74 79 6c 65 73 3f 6c 65 2e 6c 6f 61 64 53 74 79 6c 65 73 28 6d 65 28 65 29 2e 73 74 79 6c 65 53 74 72 69 6e 67 2c 65 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d Data Ascii: r:[]}}));e.registeredThemableStyles\|\|(e=se(se({},e),{registeredThemableStyles:[]}));return ce.__themeState__=e,e}();function de(e,t){le.loadStyles?le.loadStyles(me(e).styleString,e):function(e){if("undefined"==typeof document)return;var t=document.getElem
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 20 74 26 26 74 3f 74 3a 7b 69 6e 73 65 74 3a 74 2c 70 6f 73 69 74 69 6f 6e 3a 72 2c 68 69 67 68 43 6f 6e 74 72 61 73 74 53 74 79 6c 65 3a 6e 2c 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 6f 2c 6f 75 74 6c 69 6e 65 43 6f 6c 6f 72 3a 69 2c 69 73 46 6f 63 75 73 65 64 4f 6e 6c 79 3a 61 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 73 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 3b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 3b 76 61 72 20 6f 3d 74 2e 62 6f 72 64 65 72 52 61 64 69 75 73 2c 69 3d 74 2e 69 6e 73 65 74 2c 61 3d 76 6f 69 64 20 30 3d 3d 3d 69 3f 30 3a 69 2c 73 3d 74 2e 77 69 64 74 68 2c 63 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 31 3a 73 2c 75 3d 74 2e 70 6f 73 69 74 69 6f 6e 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 75 3f Data Ascii: t&&t?t:{inset:t,position:r,highContrastStyle:n,borderColor:o,outlineColor:i,isFocusedOnly:a,borderRadius:s})}function Ze(e,t){var r,n;void 0===t&&(t={});var o=t.borderRadius,i=t.inset,a=void 0===i?0:i,s=t.width,c=void 0===s?1:s,u=t.position,l=void 0===u?
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 22 2c 22 2c 20 22 29 2e 63 6f 6e 63 61 74 28 73 2c 22 20 30 25 2c 20 22 29 2e 63 6f 6e 63 61 74 28 69 2c 22 20 31 30 30 25 29 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 77 69 64 74 68 22 3d 3d 3d 65 3f 22 68 6f 72 69 7a 6f 6e 74 61 6c 22 3d 3d 3d 74 3f 32 30 3a 22 31 30 30 25 22 3a 22 76 65 72 74 69 63 61 6c 22 3d 3d 3d 74 3f 22 35 30 25 22 3a 22 31 30 30 25 22 7d 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 72 65 74 75 72 6e 7b 73 65 6c 65 63 74 6f 72 73 3a 7b 22 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 65 2c 22 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 65 2c 22 3a 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 65 7d 7d 7d 76 61 72 20 76 74 3d 72 28 37 39 Data Ascii: ",", ").concat(s," 0%, ").concat(i," 100%)")}}function gt(e,t){return"width"===e?"horizontal"===t?20:"100%":"vertical"===t?"50%":"100%"}function ht(e){return{selectors:{"::placeholder":e,":-ms-input-placeholder":e,"::-ms-input-placeholder":e}}}var vt=r(79
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 5f 22 21 3d 3d 6e 26 26 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 21 3d 3d 6e 26 26 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 3d 6e 29 7b 76 61 72 20 6f 3d 74 5b 6e 5d 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 6f 7c 7c 6e 75 6c 6c 3d 3d 3d 6f 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6f 29 29 65 5b 6e 5d 3d 6f 3b 65 6c 73 65 7b 76 61 72 20 69 3d 72 2e 69 6e 64 65 78 4f 66 28 6f 29 3e 2d 31 3b 65 5b 6e 5d 3d 69 3f 6f 3a 73 28 65 5b 6e 5d 7c 7c 7b 7d 2c 6f 2c 72 29 7d 7d 72 65 74 75 72 6e 20 72 2e 70 6f 70 28 29 2c 65 7d 76 61 72 20 63 3d 72 28 35 39 33 31 32 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 2c 72 2c 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6f 26 26 28 6f 3d 21 31 29 2c 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: _"!==n&&"constructor"!==n&&"prototype"!==n){var o=t[n];if("object"!=typeof o\|\|null===o\|\|Array.isArray(o))e[n]=o;else{var i=r.indexOf(o)>-1;e[n]=i?o:s(e[n]\|\|{},o,r)}}return r.pop(),e}var c=r(59312);function u(e,t,r,n,o){return void 0===o&&(o=!1),function(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49717	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:13 UTC	1061	OUT	GET /Scripts/dists/response-page-pro.chunk.quiz.6dc4e0a.js?ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:14 UTC	621	IN	HTTP/1.1 200 OK Content-Length: 2764 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:13 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 635a8568-1fad-4004-8881-b2f66d4199fe X-RoutingCorrelationId: 98eb72fb-e1d4-4232-b27f-aff009540c72 X-Content-Type-Options: nosniff
2024-03-28 14:14:14 UTC	2764	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 34 31 5d 2c 7b 38 35 34 35 31 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 63 72 65 61 74 65 52 65 73 75 6c 74 43 6f 6e 74 61 69 6e 65 72 49 6e 74 65 72 6e 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 76 61 6c 69 64 61 74 65 51 75 69 7a 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 7d 29 3b 76 61 72 20 6f 3d 72 28 38 37 33 36 33 29 2c 6e 3d 72 28 37 36 34 35 29 2c 69 3d 72 28 36 35 38 36 33 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 76 61 72 20 74 3d 66 75 6e Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[541],{85451:function(e,t,r){r.r(t),r.d(t,{createResultContainerInternal:function(){return a},validateQuizPoint:function(){return u}});var o=r(87363),n=r(7645),i=r(65863);function a(e){var t=fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49720	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:14 UTC	877	OUT	GET /cdn/scripts/dists/telemetry-worker.1.js HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:14 UTC	933	IN	HTTP/1.1 200 OK Content-Length: 102484 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:14 GMT Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type Cache-Control: max-age=31536000 Content-MD5: YtFUX84S4Dl1guTZAKie/Q== ETag: 0x8DC4ED2DDFA4445 Expires: Fri, 28 Mar 2025 14:14:14 GMT Last-Modified: Thu, 28 Mar 2024 02:57:55 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: e027db52-3e8f-4af1-addf-0332eb93a6a2 X-RoutingCorrelationId: 1e0089d2-7da7-43d2-8bd2-b5fb0ed8c906 x-ms-request-id: 19c424cd-e01e-0007-2dc6-805f7c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Timing-Allow-Origin: *
2024-03-28 14:14:14 UTC	3163	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 7b 7d 3b 6e 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 29 72 65 74 75 72 6e 20 67 6c 6f 62 61 6c 54 68 69 73 3b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 7c 7c 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 74 68 69 73 22 29 28 29 7d 63 61 74 63 68 28 6e 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 7d 7d 28 29 3b 76 61 72 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 72 3d 22 6f 62 6a 65 63 74 22 2c 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 69 3d 4f 62 6a 65 63 74 2c 75 3d 69 2e 70 Data Ascii: !function(){"use strict";var n={};n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(n){if("object"==typeof window)return window}}();var t="function",r="object",e="undefined",i=Object,u=i.p
2024-03-28 14:14:14 UTC	267	IN	Data Raw: 44 79 6e 50 72 6f 78 79 3d 31 2c 72 7d 28 6e 2c 74 29 29 29 7d 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 5f 28 6e 2c 54 29 3f 6e 2e 6e 61 6d 65 7c 7c 74 7c 7c 77 3a 28 28 6e 7c 7c 7b 7d 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7c 7c 7b 7d 29 2e 6e 61 6d 65 7c 7c 74 7c 7c 77 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 6e 2c 74 2c 72 2c 65 29 7b 5f 28 6e 2c 54 29 7c 7c 6a 28 22 74 68 65 43 6c 61 73 73 20 69 73 20 61 6e 20 69 6e 76 61 6c 69 64 20 63 6c 61 73 73 20 64 65 66 69 6e 69 74 69 6f 6e 2e 22 29 3b 76 61 72 20 69 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3b 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 69 66 28 45 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 65 3d 78 28 74 29 3b 65 26 26 21 46 28 65 29 26 26 21 42 28 72 2c 65 29 Data Ascii: DynProxy=1,r}(n,t)))}))}}function V(n,t){return _(n,T)?n.name\|\|t\|\|w:((n\|\|{}).constructor\|\|{}).name\|\|t\|\|w}function z(n,t,r,e){_(n,T)\|\|j("theClass is an invalid class definition.");var i=n.prototype;(function(n,t){if(E){for(var r=[],e=x(t);e&&!F(e)&&!B(r,e)
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 72 65 74 75 72 6e 21 30 3b 72 2e 70 75 73 68 28 65 29 2c 65 3d 78 28 65 29 7d 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 29 28 69 2c 74 29 7c 7c 6a 28 22 5b 22 2b 56 28 6e 29 2b 22 5d 20 6e 6f 74 20 69 6e 20 68 69 65 72 61 72 63 68 79 20 6f 66 20 5b 22 2b 56 28 74 29 2b 22 5d 22 29 3b 76 61 72 20 75 3d 6e 75 6c 6c 3b 5f 28 69 2c 43 29 3f 75 3d 69 2e 5f 64 79 6e 43 6c 61 73 73 3a 28 75 3d 22 5f 64 79 6e 43 6c 73 24 22 2b 56 28 6e 2c 22 5f 22 29 2b 22 24 22 2b 44 2e 6e 2c 44 2e 6e 2b 2b 2c 69 2e 5f 64 79 6e 43 6c 61 73 73 3d 75 29 3b 76 61 72 20 6f 3d 7a 2e 5f 64 66 4f 70 74 73 2c 61 3d 21 21 6f 2e 75 73 65 42 61 73 65 49 6e 73 74 3b 61 26 26 65 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 75 73 65 42 61 73 65 49 6e 73 74 26 26 28 61 3d 21 21 65 2e 75 Data Ascii: return!0;r.push(e),e=x(e)}return!1}return!0})(i,t)\|\|j("["+V(n)+"] not in hierarchy of ["+V(t)+"]");var u=null;_(i,C)?u=i._dynClass:(u="_dynCls$"+V(n,"_")+"$"+D.n,D.n++,i._dynClass=u);var o=z._dfOpts,a=!!o.useBaseInst;a&&e&&void 0!==e.useBaseInst&&(a=!!e.u
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 74 65 50 65 72 66 4d 67 72 22 2c 43 6e 3d 22 65 78 74 65 6e 73 69 6f 6e 43 6f 6e 66 69 67 22 2c 77 6e 3d 22 65 76 65 6e 74 73 53 65 6e 74 22 2c 49 6e 3d 22 65 76 65 6e 74 73 44 69 73 63 61 72 64 65 64 22 2c 4d 6e 3d 22 65 76 65 6e 74 73 53 65 6e 64 52 65 71 75 65 73 74 22 2c 45 6e 3d 22 70 65 72 66 45 76 65 6e 74 22 2c 50 6e 3d 22 65 72 72 6f 72 54 6f 43 6f 6e 73 6f 6c 65 22 2c 4f 6e 3d 22 77 61 72 6e 54 6f 43 6f 6e 73 6f 6c 65 22 2c 41 6e 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 2c 4e 6e 3d 66 2c 44 6e 3d 69 2e 66 72 65 65 7a 65 2c 5f 6e 3d 28 69 2e 73 65 61 6c 2c 69 2e 6b 65 79 73 29 2c 6b 6e 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 46 6e 3d 6b 6e 2e 74 72 69 6d 2c 78 6e 3d 6b 6e 2e 65 6e 64 73 57 69 74 68 2c 55 6e 3d 6b 6e 2e 73 74 61 72 Data Ascii: tePerfMgr",Cn="extensionConfig",wn="eventsSent",In="eventsDiscarded",Mn="eventsSendRequest",En="perfEvent",Pn="errorToConsole",On="warnToConsole",An="constructor",Nn=f,Dn=i.freeze,_n=(i.seal,i.keys),kn=String.prototype,Fn=kn.trim,xn=kn.endsWith,Un=kn.star
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 7b 76 61 72 20 6c 3d 6f 5b 73 5d 2c 64 3d 65 74 28 6c 29 2c 68 3d 24 6e 28 6c 29 3b 66 6f 72 28 76 61 72 20 70 20 69 6e 20 6c 29 7b 76 61 72 20 79 3d 64 26 26 70 20 69 6e 20 6c 7c 7c 68 26 26 63 2e 63 61 6c 6c 28 6c 2c 70 29 3b 69 66 28 79 29 7b 76 61 72 20 6d 3d 6c 5b 70 5d 2c 67 3d 76 6f 69 64 20 30 3b 69 66 28 76 26 26 6d 26 26 28 28 67 3d 65 74 28 6d 29 29 7c 7c 66 74 28 6d 29 29 29 7b 76 61 72 20 53 3d 61 5b 70 5d 3b 67 3f 65 74 28 53 29 7c 7c 28 53 3d 5b 5d 29 3a 66 74 28 53 29 7c 7c 28 53 3d 7b 7d 29 2c 6d 3d 4e 74 28 76 2c 53 2c 6d 29 7d 76 6f 69 64 20 30 21 3d 3d 6d 26 26 28 61 5b 70 5d 3d 6d 29 7d 7d 7d 72 65 74 75 72 6e 20 61 7d 76 61 72 20 44 74 3d 22 77 69 6e 64 6f 77 22 2c 5f 74 3d 22 4a 53 4f 4e 22 2c 6b 74 3d 22 6d 73 69 65 22 2c 46 74 3d Data Ascii: {var l=o[s],d=et(l),h=$n(l);for(var p in l){var y=d&&p in l\|\|h&&c.call(l,p);if(y){var m=l[p],g=void 0;if(v&&m&&((g=et(m))\|\|ft(m))){var S=a[p];g?et(S)\|\|(S=[]):ft(S)\|\|(S={}),m=Nt(v,S,m)}void 0!==m&&(a[p]=m)}}}return a}var Dt="window",_t="JSON",kt="msie",Ft=
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 6f 69 64 20 30 3d 3d 3d 75 26 26 28 75 3d 21 31 29 2c 70 72 28 6e 29 2e 74 68 72 6f 77 49 6e 74 65 72 6e 61 6c 28 74 2c 72 2c 65 2c 69 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 72 28 6e 2c 74 29 7b 70 72 28 6e 29 2e 77 61 72 6e 54 6f 43 6f 6e 73 6f 6c 65 28 74 29 7d 76 61 72 20 67 72 3d 6e 75 6c 6c 2c 53 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 72 2c 65 29 7b 76 61 72 20 69 2c 75 3d 74 68 69 73 2c 6f 3d 21 31 3b 28 75 2e 73 74 61 72 74 3d 53 74 28 29 2c 75 2e 6e 61 6d 65 3d 74 2c 75 2e 69 73 41 73 79 6e 63 3d 65 2c 75 2e 69 73 43 68 69 6c 64 45 76 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 2c 5a 6e 28 72 29 29 26 26 28 6f 3d 79 74 28 75 2c 22 70 61 79 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e Data Ascii: oid 0===u&&(u=!1),pr(n).throwInternal(t,r,e,i,u)}function mr(n,t){pr(n).warnToConsole(t)}var gr=null,Sr=function(){function n(t,r,e){var i,u=this,o=!1;(u.start=St(),u.name=t,u.isAsync=e,u.isChildEvt=function(){return!1},Zn(r))&&(o=yt(u,"payload",(function
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 3f 6e 2e 67 65 74 4e 65 78 74 28 29 3a 6e 75 6c 6c 2c 21 6e 29 7b 76 61 72 20 74 3d 75 3b 74 26 26 74 2e 6c 65 6e 67 74 68 3e 30 26 26 28 76 74 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 72 79 7b 6e 2e 66 75 6e 63 2e 63 61 6c 6c 28 6e 2e 73 65 6c 66 2c 6e 2e 61 72 67 73 29 7d 63 61 74 63 68 28 6e 29 7b 79 72 28 72 2e 6c 6f 67 67 65 72 2c 32 2c 37 33 2c 22 55 6e 65 78 70 65 63 74 65 64 20 45 78 63 65 70 74 69 6f 6e 20 64 75 72 69 6e 67 20 6f 6e 43 6f 6d 70 6c 65 74 65 20 2d 20 22 2b 6e 72 28 6e 29 29 7d 7d 29 29 2c 75 3d 5b 5d 29 7d 72 65 74 75 72 6e 20 6e 7d 2c 63 74 78 3a 7b 63 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 64 69 61 67 4c 6f 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: ?n.getNext():null,!n){var t=u;t&&t.length>0&&(vt(t,(function(n){try{n.func.call(n.self,n.args)}catch(n){yr(r.logger,2,73,"Unexpected Exception during onComplete - "+nr(n))}})),u=[])}return n},ctx:{core:function(){return r},diagLog:function(){return functi
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 3b 69 66 28 61 26 26 28 21 74 7c 7c 61 3d 3d 3d 74 2e 63 6f 72 65 28 29 29 29 7b 76 61 72 20 66 2c 76 3d 21 31 2c 73 3d 74 7c 7c 6e 65 28 6e 75 6c 6c 2c 61 2c 65 26 26 65 2e 67 65 74 50 6c 75 67 69 6e 3f 65 2e 67 65 74 50 6c 75 67 69 6e 28 29 3a 65 29 2c 6c 3d 72 7c 7c 28 28 6f 3d 7b 72 65 61 73 6f 6e 3a 30 7d 29 2e 69 73 41 73 79 6e 63 3d 21 31 2c 6f 29 3b 72 65 74 75 72 6e 20 6e 2e 5f 64 6f 54 65 61 72 64 6f 77 6e 26 26 21 30 3d 3d 3d 6e 2e 5f 64 6f 54 65 61 72 64 6f 77 6e 28 73 2c 6c 2c 64 29 3f 66 3d 21 30 3a 64 28 29 2c 66 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 69 66 28 21 76 29 7b 76 3d 21 30 2c 69 2e 72 75 6e 28 73 2c 72 29 3b 76 61 72 20 6e 3d 75 3b 75 3d 5b 5d 2c 76 74 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 72 6d 28 29 7d 29 29 Data Ascii: ;if(a&&(!t\|\|a===t.core())){var f,v=!1,s=t\|\|ne(null,a,e&&e.getPlugin?e.getPlugin():e),l=r\|\|((o={reason:0}).isAsync=!1,o);return n._doTeardown&&!0===n._doTeardown(s,l,d)?f=!0:d(),f}function d(){if(!v){v=!0,i.run(s,r);var n=u;u=[],vt(n,(function(n){n.rm()}))
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 5a 5d 2f 67 2c 22 22 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 63 6f 6e 63 65 72 6e 3a 31 39 7d 29 7d 69 66 28 6e 2e 4d 61 63 68 69 6e 65 49 64 73 26 26 6e 2e 4d 61 63 68 69 6e 65 49 64 73 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 76 61 72 20 73 3d 30 2c 64 3d 6e 2e 4d 61 63 68 69 6e 65 49 64 73 3b 73 3c 64 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 73 5d 3b 74 2e 70 75 73 68 28 7b 73 74 72 69 6e 67 56 61 6c 75 65 3a 68 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 63 6f 6e 63 65 72 6e 3a 31 34 7d 29 7d 69 66 28 69 26 26 6e 2e 4f 75 74 4f 66 53 63 6f 70 65 49 64 65 6e 74 69 66 69 65 72 73 26 26 6e 2e 4f 75 74 4f 66 53 63 6f 70 65 49 64 65 6e 74 69 66 69 65 72 73 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 76 61 72 20 70 3d 30 2c 79 Data Ascii: Z]/g,"").toUpperCase(),concern:19})}if(n.MachineIds&&n.MachineIds.length>0)for(var s=0,d=n.MachineIds;s<d.length;s++){var h=d[s];t.push({stringValue:h.toUpperCase(),concern:14})}if(i&&n.OutOfScopeIdentifiers&&n.OutOfScopeIdentifiers.length>0)for(var p=0,y
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 65 72 73 63 6f 72 65 7c 7c 70 2e 68 61 73 50 65 72 63 65 6e 74 61 67 65 29 26 26 28 6d 3d 61 65 2e 74 65 73 74 28 70 2e 76 61 6c 75 65 54 6f 43 68 65 63 6b 29 29 29 7b 76 61 72 20 67 3d 70 2e 76 61 6c 75 65 54 6f 43 68 65 63 6b 2e 6d 61 74 63 68 28 61 65 29 5b 30 5d 3b 6d 26 26 63 2e 70 75 73 68 28 7b 43 6f 6e 63 65 72 6e 3a 64 28 67 29 2c 45 76 65 6e 74 4e 61 6d 65 3a 6e 2c 42 61 73 65 54 79 70 65 3a 72 2c 46 69 65 6c 64 4e 61 6d 65 3a 61 7d 29 7d 76 61 72 20 53 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 2c 69 29 7b 66 6f 72 28 76 61 72 20 75 3d 5b 5d 2c 6f 3d 21 31 2c 61 3d 30 3b 61 3c 74 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 66 3d 74 5b 61 5d 2c 63 3d 66 2e 73 74 72 69 6e 67 56 61 6c 75 65 3b 69 66 28 63 26 26 2d 31 21 3d 3d 69 2e 69 6e Data Ascii: erscore\|\|p.hasPercentage)&&(m=ae.test(p.valueToCheck))){var g=p.valueToCheck.match(ae)[0];m&&c.push({Concern:d(g),EventName:n,BaseType:r,FieldName:a})}var S=function(n,r,e,i){for(var u=[],o=!1,a=0;a<t.length;a++){var f=t[a],c=f.stringValue;if(c&&-1!==i.in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49719	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:14 UTC	537	OUT	GET /Pages/ResponsePage.aspx/GetResourceStrings HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:14 UTC	986	IN	HTTP/1.1 200 OK Content-Length: 34648 Connection: close Content-Type: text/html; charset=utf-8 Date: Thu, 28 Mar 2024 14:14:14 GMT Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Pragma: no-cache Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 07ee50ae-e427-4985-9015-2f2a9fd4629f X-RoutingCorrelationId: 37fe129e-c5ce-43a5-a809-ec4ed2481a81 X-CorrelationId: 37fe129e-c5ce-43a5-a809-ec4ed2481a81 X-UserSessionId: 07ee50ae-e427-4985-9015-2f2a9fd4629f X-OfficeFE: FormsSingleBox_IN_1 X-OfficeVersion: 16.0.17519.42500 X-OfficeCluster: usge-001.forms.gcc.osi.office365.us P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-FailureReason: Unknown X-Robots-Tag: noindex, nofollow X-Content-Type-Options: nosniff
2024-03-28 14:14:14 UTC	3110	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-us"> <head> <meta charset="utf-8" /> <meta http-equiv="x-ua-compatible" content="IE=edge" /> <meta name="viewport" content="width=device-width, init
2024-03-28 14:14:14 UTC	317	IN	Data Raw: 6e 63 4f 62 73 65 72 76 65 72 3b 21 45 6e 61 62 6c 65 47 72 6f 75 70 43 68 65 63 6b 46 6f 72 46 46 49 6e 52 50 3b 21 48 61 6e 64 6c 65 53 65 72 76 69 63 65 42 75 73 51 75 65 75 65 45 78 70 69 72 65 64 53 65 73 73 69 6f 6e 3b 21 46 6f 72 6d 49 6e 73 69 67 68 74 3b 21 44 61 74 61 43 6c 61 73 73 69 66 69 63 61 74 69 6f 6e 4d 56 50 31 3b 21 53 64 73 4d 75 6c 74 69 70 6c 65 43 6f 6c 6c 65 63 74 69 6f 6e 3b 21 47 65 74 43 44 42 54 61 62 6c 65 44 65 66 56 31 30 3b 21 55 73 65 50 72 65 6d 69 75 6d 53 65 72 76 69 63 65 42 75 73 46 6f 72 57 65 62 68 6f 6f 6b 3b 21 55 70 67 72 61 64 65 55 78 53 74 61 74 65 4d 6f 64 65 6c 3b 21 41 73 73 69 67 6e 6d 65 6e 74 73 52 65 73 70 6f 6e 73 65 55 70 64 61 74 65 64 44 69 73 61 62 6c 65 64 3b 21 44 61 74 61 53 79 6e 63 52 65 73 Data Ascii: ncObserver;!EnableGroupCheckForFFInRP;!HandleServiceBusQueueExpiredSession;!FormInsight;!DataClassificationMVP1;!SdsMultipleCollection;!GetCDBTableDefV10;!UsePremiumServiceBusForWebhook;!UpgradeUxStateModel;!AssignmentsResponseUpdatedDisabled;!DataSyncRes
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 6f 63 61 6c 65 52 65 73 6f 75 72 63 65 3b 21 45 6e 61 62 6c 65 41 73 73 69 67 6e 6d 65 6e 74 73 57 65 62 68 6f 6f 6b 52 65 64 69 72 65 63 74 3b 21 53 64 73 53 79 6e 63 51 75 69 7a 52 65 73 75 6c 74 73 3b 21 53 64 73 53 79 6e 63 41 64 64 69 74 69 6f 6e 61 6c 49 6e 66 6f 3b 21 53 64 73 53 68 6f 77 49 6d 61 67 65 41 6c 74 54 65 78 74 3b 21 45 6e 61 62 6c 65 41 6e 6f 6e 79 6d 6f 75 73 55 70 6c 6f 61 64 4c 69 6e 6b 3b 21 53 64 73 41 64 64 42 6f 6d 54 6f 43 73 76 3b 21 53 64 73 44 61 74 61 53 79 6e 63 44 69 73 61 62 6c 65 4d 53 41 55 73 65 72 73 3b 21 41 73 73 69 67 6e 6d 65 6e 74 73 55 73 65 4f 75 74 63 6f 6d 65 73 45 6e 64 70 6f 69 6e 74 3b 21 55 73 65 45 76 65 6e 74 41 75 74 68 6f 72 69 6e 67 50 72 6f 64 45 6e 64 70 6f 69 6e 74 3b 21 45 6e 61 62 6c 65 45 76 Data Ascii: ocaleResource;!EnableAssignmentsWebhookRedirect;!SdsSyncQuizResults;!SdsSyncAdditionalInfo;!SdsShowImageAltText;!EnableAnonymousUploadLink;!SdsAddBomToCsv;!SdsDataSyncDisableMSAUsers;!AssignmentsUseOutcomesEndpoint;!UseEventAuthoringProdEndpoint;!EnableEv
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 73 3a 2f 2f 63 75 73 74 6f 6d 65 72 76 6f 69 63 65 73 65 72 76 69 63 65 2e 67 63 63 2e 66 6f 72 6d 73 70 72 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 75 73 2f 25 32 32 2c 25 32 32 43 56 50 61 75 73 65 52 65 73 75 6d 65 53 65 72 76 69 63 65 25 32 32 3a 25 32 32 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 65 72 76 6f 69 63 65 73 65 72 76 69 63 65 2e 67 63 63 2e 66 6f 72 6d 73 70 72 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 75 73 2f 25 32 32 2c 25 32 32 50 72 6f 6a 65 63 74 41 6c 65 72 74 53 65 72 76 69 63 65 45 6e 64 50 6f 69 6e 74 25 32 32 3a 25 32 32 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 65 72 76 6f 69 63 65 73 65 72 76 69 63 65 2e 67 63 63 2e 66 6f 72 6d 73 70 72 6f 2e 6d 69 63 72 6f 73 6f 66 74 2e 75 73 2f 25 32 32 2c 25 32 32 44 69 73 74 72 69 62 75 74 69 6f 6e Data Ascii: s://customervoiceservice.gcc.formspro.microsoft.us/%22,%22CVPauseResumeService%22:%22https://customervoiceservice.gcc.formspro.microsoft.us/%22,%22ProjectAlertServiceEndPoint%22:%22https://customervoiceservice.gcc.formspro.microsoft.us/%22,%22Distribution
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 65 73 70 6f 6e 73 65 2d 70 61 67 65 2d 63 75 73 74 6f 6d 69 7a 65 2d 66 61 62 72 69 63 2d 62 6f 6f 74 73 74 72 61 70 2e 72 74 6c 2e 6d 69 6e 2e 63 73 73 22 3a 22 39 39 39 32 32 39 37 22 2c 22 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2e 6d 69 6e 2e 63 73 73 22 3a 22 33 35 66 34 66 66 62 22 2c 22 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2e 72 74 6c 2e 6d 69 6e 2e 63 73 73 22 3a 22 33 66 62 37 35 38 36 22 2c 22 73 68 61 72 65 64 2d 70 61 67 65 2e 6d 69 6e 2e 63 73 73 22 3a 22 33 36 61 39 32 32 32 22 2c 22 73 68 61 72 65 64 2d 70 61 67 65 2e 72 74 6c 2e 6d 69 6e 2e 63 73 73 22 3a 22 66 31 62 66 32 35 34 22 2c 22 74 65 61 6d 73 2d 62 6f 74 2d 6d 65 73 73 61 67 65 2d 65 78 74 65 6e 73 69 6f 6e 2d 63 6f 6e 66 69 67 2d 70 61 67 65 2e 6d 69 6e 2e 63 73 73 22 3a 22 38 Data Ascii: esponse-page-customize-fabric-bootstrap.rtl.min.css":"9992297","response-page.min.css":"35f4ffb","response-page.rtl.min.css":"3fb7586","shared-page.min.css":"36a9222","shared-page.rtl.min.css":"f1bf254","teams-bot-message-extension-config-page.min.css":"8
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 72 6d 2d 70 61 67 65 2e 6d 69 6e 2e 63 73 73 22 3a 22 32 64 32 34 39 63 33 22 2c 22 6c 69 67 68 74 2d 73 68 61 72 65 66 6f 72 6d 2d 70 61 67 65 2e 6d 69 6e 2e 6a 73 22 3a 22 36 30 31 64 32 63 38 22 2c 22 6c 69 67 68 74 2d 73 68 61 72 65 66 6f 72 6d 2d 70 61 67 65 2e 72 74 6c 2e 6d 69 6e 2e 63 73 73 22 3a 22 65 31 65 65 34 38 62 22 2c 22 6c 69 67 68 74 2d 73 68 65 6c 6c 2d 70 72 65 66 65 74 63 68 65 72 2e 6d 69 6e 2e 6a 73 22 3a 22 64 61 33 37 38 31 32 22 2c 22 6c 69 67 68 74 2d 74 65 61 6d 73 2d 72 65 73 70 6f 6e 73 65 2d 70 61 67 65 2e 6d 69 6e 2e 6a 73 22 3a 22 66 65 64 31 33 34 38 22 2c 22 6c 73 2d 74 65 61 6d 73 22 3a 22 36 65 31 66 64 35 31 61 30 22 2c 22 6c 73 2d 72 65 73 70 6f 6e 73 65 22 3a 22 38 38 34 36 62 38 38 31 32 22 2c 22 6c 73 2d 6f 70 74 Data Ascii: rm-page.min.css":"2d249c3","light-shareform-page.min.js":"601d2c8","light-shareform-page.rtl.min.css":"e1ee48b","light-shell-prefetcher.min.js":"da37812","light-teams-response-page.min.js":"fed1348","ls-teams":"6e1fd51a0","ls-response":"8846b8812","ls-opt
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 22 2c 22 6e 65 6f 2d 64 65 73 69 67 6e 2d 70 61 67 65 2e 63 68 75 6e 6b 2e 68 69 67 68 63 68 61 72 74 73 2e 6a 73 22 3a 22 36 31 32 66 66 61 61 22 2c 22 6e 65 6f 2d 64 65 73 69 67 6e 2d 70 61 67 65 2e 63 68 75 6e 6b 2e 70 65 6e 6d 6f 74 69 6f 6e 2e 6a 73 22 3a 22 65 35 36 63 36 39 38 22 2c 22 6e 65 6f 2d 64 65 73 69 67 6e 2d 70 61 67 65 2e 63 68 75 6e 6b 2e 63 6f 76 65 72 5f 70 61 67 65 2e 6a 73 22 3a 22 66 62 38 36 66 63 33 22 2c 22 6e 65 6f 2d 64 65 73 69 67 6e 2d 70 61 67 65 2e 63 68 75 6e 6b 2e 61 73 6b 5f 61 69 2e 6a 73 22 3a 22 38 35 37 31 30 64 33 22 2c 22 6e 65 6f 2d 64 65 73 69 67 6e 2d 70 61 67 65 2e 63 68 75 6e 6b 2e 72 65 73 70 6f 6e 73 65 65 78 74 2e 6a 73 22 3a 22 31 39 39 32 35 39 31 22 2c 22 6e 65 6f 2d 64 65 73 69 67 6e 2d 70 61 67 65 2e Data Ascii: ","neo-design-page.chunk.highcharts.js":"612ffaa","neo-design-page.chunk.penmotion.js":"e56c698","neo-design-page.chunk.cover_page.js":"fb86fc3","neo-design-page.chunk.ask_ai.js":"85710d3","neo-design-page.chunk.responseext.js":"1992591","neo-design-page.
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 6f 6e 2d 70 72 65 66 65 74 63 68 65 72 2e 6d 69 6e 2e 6a 73 22 3a 22 36 65 61 30 62 34 66 22 2c 22 64 65 73 69 67 6e 70 61 67 65 76 32 2d 76 65 6e 64 6f 72 73 22 3a 22 64 6c 6c 2d 72 65 61 63 74 2e 6d 69 6e 2e 6a 73 3b 64 6c 6c 2d 64 6f 6d 70 75 72 69 66 79 2e 6d 69 6e 2e 6a 73 22 2c 22 64 65 73 69 67 6e 70 61 67 65 76 32 2d 76 65 6e 64 6f 72 73 2d 73 77 69 74 63 68 22 3a 22 74 72 75 65 22 2c 22 72 65 73 70 6f 6e 73 65 70 61 67 65 2d 76 65 6e 64 6f 72 73 22 3a 22 64 6c 6c 2d 64 6f 6d 70 75 72 69 66 79 2e 6d 69 6e 2e 6a 73 22 2c 22 61 6e 61 6c 79 73 69 73 70 61 67 65 2d 76 65 6e 64 6f 72 73 22 3a 22 64 6c 6c 2d 72 65 61 63 74 2e 6d 69 6e 2e 6a 73 3b 64 6c 6c 2d 64 6f 6d 70 75 72 69 66 79 2e 6d 69 6e 2e 6a 73 3b 64 6c 6c 2d 6a 71 75 65 72 79 2e 6d 69 6e 2e Data Ascii: on-prefetcher.min.js":"6ea0b4f","designpagev2-vendors":"dll-react.min.js;dll-dompurify.min.js","designpagev2-vendors-switch":"true","responsepage-vendors":"dll-dompurify.min.js","analysispage-vendors":"dll-react.min.js;dll-dompurify.min.js;dll-jquery.min.
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 2e 22 29 7d 7d 29 3b 76 61 72 20 72 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 65 3d 77 69 6e 64 6f 77 2e 4f 66 66 69 63 65 46 6f 72 6d 53 65 72 76 65 72 49 6e 66 6f 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 7b 63 75 6c 74 75 72 65 49 6e 66 6f 3a 7b 4e 61 6d 65 3a 6e 61 76 69 67 61 74 6f 72 2e 6c 61 6e 67 75 61 67 65 7d 2c 65 6e 76 69 72 6f 6e 6d 65 6e 74 54 79 70 65 3a 22 57 57 50 72 6f 64 22 2c 73 65 72 76 65 72 49 6e 66 6f 46 72 6f 6d 50 61 67 65 48 65 61 64 65 72 73 3a 7b 7d 2c 75 73 65 72 49 6e 66 6f 3a 7b 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 21 30 29 2c 61 28 65 7c 7c 77 69 6e 64 6f 77 2e 6c 6f 63 Data Ascii: .")}});var r;function t(){var e;return null!==(e=window.OfficeFormServerInfo)&&void 0!==e?e:{cultureInfo:{Name:navigator.language},environmentType:"WWProd",serverInfoFromPageHeaders:{},userInfo:{}}}function n(e,r){return void 0===r&&(r=!0),a(e\|\|window.loc
2024-03-28 14:14:14 UTC	2549	IN	Data Raw: 68 45 6e 64 3d 28 44 61 74 65 2e 6e 6f 77 7c 7c 28 44 61 74 65 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 29 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 44 61 74 65 2e 6e 6f 77 28 29 29 29 2c 61 2e 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 26 26 61 2e 73 75 63 63 65 73 73 43 61 6c 6c 62 61 63 6b 28 29 29 3a 28 61 2e 73 74 61 74 65 3d 34 2c 61 2e 65 72 72 6f 72 3d 7b 6d 65 73 73 61 67 65 3a 22 48 54 54 50 20 72 65 71 75 65 73 74 20 66 61 69 6c 65 64 22 2c 72 65 73 70 6f 6e 73 65 3a 7b 62 6f 64 79 3a 6c 2e 72 65 73 70 6f 6e 73 65 2c 68 65 61 64 65 72 73 3a 65 2c 72 65 71 75 65 73 74 55 72 69 3a 72 2c 73 74 61 74 75 73 43 6f 64 65 3a 6c 2e 73 74 61 74 75 73 2c 73 74 61 74 75 73 Data Ascii: hEnd=(Date.now\|\|(Date.now=function(){return(new Date).getTime()}),Math.floor(Date.now())),a.successCallback&&a.successCallback()):(a.state=4,a.error={message:"HTTP request failed",response:{body:l.response,headers:e,requestUri:r,statusCode:l.status,status

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49721	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:14 UTC	941	OUT	GET /FormsPro/Images/CustomerVoice/CustomerVoice.ico HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:14 UTC	611	IN	HTTP/1.1 200 OK Content-Length: 4286 Connection: close Content-Type: image/x-icon Date: Thu, 28 Mar 2024 14:14:14 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 3d979908-e9df-44e9-81cb-9ae521f892ff X-RoutingCorrelationId: 31cbf345-3dd6-4591-ab8f-51a2561c9823 X-Content-Type-Options: nosniff
2024-03-28 14:14:14 UTC	3485	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cf df 70 10 d3 df 7b 40 d6 e3 7c 6f d4 df 78 90 d4 e2 78 9f d3 Data Ascii: ( @ p{@\|oxx
2024-03-28 14:14:14 UTC	317	IN	Data Raw: fe 71 7e 15 fe 71 7e 16 ff 71 7e 17 df 70 80 10 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ef f4 b3 2f ea f1 b2 ff e9 f1 b1 ff e9 f0 b0 ff e8 f0 af ff e9 f0 af ff e8 f0 ae ff e7 ef ac ff e1 e9 a3 ff 9f ad 3c ff ac bc 42 ff ad bc 42 ff ac bc 42 ff ad bc 43 ff 9e ad 37 ff 7f 8d 20 ff 74 81 15 fe 74 81 15 ff 73 80 15 ff 73 80 16 ff 73 80 16 ff 73 7f 17 bf 70 80 10 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb ef af 40 eb f1 b3 ef ea f1 b2 ff e9 f1 b1 ff e9 f0 b0 ff e8 f0 af df e6 ef ad 90 9d aa 48 60 83 90 1d ff 88 97 23 ff 86 94 23 ff 85 93 20 ff 7a 88 17 ff 76 83 15 ff 76 83 15 ff 75 82 15 fe 75 82 15 ff 75 82 15 ff 74 82 Data Ascii: q~q~q~p /<BBBC7 ttssssp @H`## zvvuuut
2024-03-28 14:14:14 UTC	484	IN	Data Raw: eb f2 b3 bf ec f2 b4 9f eb ef af 40 00 00 00 00 00 00 00 00 80 80 10 10 79 87 13 df 78 86 14 fe 78 85 14 fe 78 85 14 ff 77 84 14 fe 77 85 15 ff 76 84 14 fe 76 83 15 ff 76 83 16 af 76 83 13 5f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 80 10 10 78 85 15 60 78 86 14 7f 78 86 14 7f 77 85 14 80 76 83 13 50 77 83 14 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @yxxxwwvvvv_px`xxwvPw@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49722	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:14 UTC	910	OUT	GET /Scripts/dists/response-page-pro.chunk.638.3250f1d.js?ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:14 UTC	622	IN	HTTP/1.1 200 OK Content-Length: 91082 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:14 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_2 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 2153866e-d00d-407f-9678-7e174c53a487 X-RoutingCorrelationId: 072f5887-0012-49d0-b1af-0d3873c3f1c5 X-Content-Type-Options: nosniff
2024-03-28 14:14:14 UTC	3474	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 33 38 5d 2c 7b 36 35 36 33 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 36 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 Data Ascii: (self.webpackChunk=self.webpackChunk\|\|[]).push([[638],{65638:function(e,t){var n;/! jQuery JavaScript Library v3.6.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright OpenJS Foundation and other contributors *
2024-03-28 14:14:14 UTC	317	IN	Data Raw: 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 26 26 21 31 21 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 3b 72 2b 2b 29 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 41 28 4f 62 6a 65 63 74 28 65 29 29 3f 6b 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 63 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 Data Ascii: e.length;r<n&&!1!==t.call(e[r],r,e[r]);r++);else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(A(Object(e))?k.merge(n,"string"==typeof e?[e]:e):c.call(n,e)),n},inArray:function(e,t,n){return nu
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 41 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 69 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 Data Ascii: h,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(A(e))for(r=e.length;o<r;o++)null!=(i=t(e[o],o,n))&&a.pus
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 2d 2d 3b 29 68 5b 73 5d 3d 28 63 3f 22 23 22 2b 63 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 62 65 28 68 5b 73 5d 29 3b 79 3d 68 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 4f 2e 61 70 70 6c 79 28 72 2c 6d 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 79 29 29 2c 72 7d 63 61 74 63 68 28 74 29 7b 4e 28 65 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 63 3d 3d 3d 62 26 26 74 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 75 28 65 2e 72 65 70 6c 61 63 65 28 5f 2c 22 24 31 22 29 2c 74 2c 72 2c 69 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 74 28 6e 2c 69 29 7b 72 65 74 75 72 6e 20 65 2e 70 75 73 68 28 6e 2b Data Ascii: --;)h[s]=(c?"#"+c:":scope")+" "+be(h[s]);y=h.join(",")}try{return O.apply(r,m.querySelectorAll(y)),r}catch(t){N(e,!0)}finally{c===b&&t.removeAttribute("id")}}}return u(e.replace(_,"$1"),t,r,i)}function le(){var e=[];return function t(n,i){return e.push(n+
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 62 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 29 2c 66 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 77 28 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 29 3b 76 61 72 20 74 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 74 2e 73 65 74 41 Data Ascii: electorAll("a#"+b+"+*").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")})),fe((function(e){e.innerHTML=w("<a href='' disabled='disabled'></a><select disabled='disabled'><option/></select>");var t=d.createElement("input");t.setA
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 65 29 7b 76 61 72 20 74 3d 53 5b 65 2b 22 20 22 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2b 65 2b 22 28 22 2b 49 2b 22 7c 24 29 22 29 29 26 26 53 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 74 65 73 74 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 2e 63 6c 61 73 73 4e 61 6d 65 26 26 65 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 76 6f 69 64 20 30 21 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 29 7d 29 29 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 Data Ascii: e){var t=S[e+" "];return t\|\|(t=new RegExp("(^\|[\\x20\\t\\r\\n\\f])"+e+"("+I+"\|$)"))&&S(e,(function(e){return t.test("string"==typeof e.className&&e.className\|\|void 0!==e.getAttribute&&e.getAttribute("class")\|\|"")}))},ATTR:function(e,t,n){return function(r
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 77 65 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 64 69 72 2c 69 3d 74 2e 6e 65 78 74 2c 6f 3d 69 7c 7c 72 2c 61 3d 6e 26 26 22 70 61 72 65 6e 74 4e 6f 64 65 22 3d 3d 3d 6f 2c 73 3d 45 2b 2b 3b 72 65 74 75 72 6e 20 74 2e 66 69 72 73 74 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 66 6f 72 28 3b 74 3d 74 5b 72 5d 3b 29 69 66 28 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 7c 7c 61 29 72 65 74 75 72 6e 20 65 28 74 2c 6e 2c 69 29 3b 72 65 74 75 72 6e 21 31 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 75 29 7b 76 61 72 20 6c 2c 63 2c 66 2c 70 3d 5b 43 2c 73 5d 3b 69 66 28 75 29 7b 66 6f 72 28 3b 74 3d 74 5b 72 5d 3b 29 69 66 28 28 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 7c 7c 61 29 26 26 65 28 74 2c Data Ascii: eturn r}function we(e,t,n){var r=t.dir,i=t.next,o=i\|\|r,a=n&&"parentNode"===o,s=E++;return t.first?function(t,n,i){for(;t=t[r];)if(1===t.nodeType\|\|a)return e(t,n,i);return!1}:function(t,n,u){var l,c,f,p=[C,s];if(u){for(;t=t[r];)if((1===t.nodeType\|\|a)&&e(t,
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 3d 3d 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 7d 29 29 7c 7c 70 65 28 22 74 79 70 65 7c 68 72 65 66 7c 68 65 69 67 68 74 7c 77 69 64 74 68 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 22 74 79 70 65 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3f 31 3a 32 29 7d 29 29 2c 6e 2e 61 74 74 72 69 62 75 74 65 73 26 26 66 65 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 77 28 22 3c 69 6e 70 75 74 2f 3e 22 29 2c 65 2e 66 69 72 73 74 43 68 69 6c 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 76 61 6c 75 65 22 2c 22 22 29 2c 22 22 3d 3d 3d Data Ascii: ===e.firstChild.getAttribute("href")}))\|\|pe("type\|href\|height\|width",(function(e,t,n){if(!n)return e.getAttribute(t,"type"===t.toLowerCase()?1:2)})),n.attributes&&fe((function(e){return e.innerHTML=w("<input/>"),e.firstChild.setAttribute("value",""),""===
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 6e 29 7d 2c 73 69 62 6c 69 6e 67 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6a 28 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 7b 7d 29 2e 66 69 72 73 74 43 68 69 6c 64 2c 65 29 7d 2c 63 68 69 6c 64 72 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6a 28 65 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 2c 63 6f 6e 74 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 26 26 73 28 65 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 3f 65 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 3a 28 4c 28 65 2c 22 74 65 6d 70 6c 61 74 65 22 29 26 26 28 65 3d 65 2e 63 6f 6e 74 65 6e 74 7c 7c 65 29 2c 6b 2e Data Ascii: iousSibling",n)},siblings:function(e){return j((e.parentNode\|\|{}).firstChild,e)},children:function(e){return j(e.firstChild)},contents:function(e){return null!=e.contentDocument&&s(e.contentDocument)?e.contentDocument:(L(e,"template")&&(e=e.content\|\|e),k.
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 6e 20 6f 2e 70 72 6f 6d 69 73 65 28 29 7d 7d 29 3b 76 61 72 20 7a 3d 2f 5e 28 45 76 61 6c 7c 49 6e 74 65 72 6e 61 6c 7c 52 61 6e 67 65 7c 52 65 66 65 72 65 6e 63 65 7c 53 79 6e 74 61 78 7c 54 79 70 65 7c 55 52 49 29 45 72 72 6f 72 24 2f 3b 6b 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 2e 63 6f 6e 73 6f 6c 65 26 26 72 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 26 26 65 26 26 7a 2e 74 65 73 74 28 65 2e 6e 61 6d 65 29 26 26 72 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 20 65 78 63 65 70 74 69 6f 6e 3a 20 22 2b 65 2e 6d 65 73 73 61 67 65 2c 65 2e 73 74 61 63 6b 2c 74 29 7d 2c 6b 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 3d 66 75 6e 63 74 69 Data Ascii: n o.promise()}});var z=/^(Eval\|Internal\|Range\|Reference\|Syntax\|Type\|URI)Error$/;k.Deferred.exceptionHook=function(e,t){r.console&&r.console.warn&&e&&z.test(e.name)&&r.console.warn("jQuery.Deferred exception: "+e.message,e.stack,t)},k.readyException=functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49723	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:14 UTC	914	OUT	GET /Scripts/dists/response-page-pro.chunk.vendors.e0d6b00.js?ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:14 UTC	623	IN	HTTP/1.1 200 OK Content-Length: 106748 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:13 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_2 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 639b5e21-68a8-451f-99a9-d8a678403d2c X-RoutingCorrelationId: 37a165b1-ea00-42e5-bc1b-da03b6804cab X-Content-Type-Options: nosniff
2024-03-28 14:14:14 UTC	3473	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 36 5d 2c 7b 34 37 31 31 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 7b 76 65 72 73 69 6f 6e 3a 7b 6d 61 6a 6f 72 3a 34 2c 6d 69 6e 6f 72 3a 30 2c 62 75 69 6c 64 3a 31 7d 7d 3b 6e 2e 75 74 69 6c 73 3d 72 28 39 33 37 38 34 29 2c 6e 2e 78 6d 6c 3d 72 28 39 35 36 35 30 29 2c 6e 2e 6f 44 61 74 61 3d 72 28 33 33 35 31 38 29 2c 6e 2e 75 74 69 6c 73 2e 69 6e 42 72 6f 77 73 65 72 28 29 26 26 28 77 69 6e 64 6f 77 2e 6f 64 61 74 61 6a 73 3d 6e 29 2c 6e 2e 6e 6f 64 65 3d 22 6e 6f 64 65 22 2c 65 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 33 33 35 31 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 Data Ascii: (self.webpackChunk=self.webpackChunk\|\|[]).push([[216],{47119:function(e,t,r){var n={version:{major:4,minor:0,build:1}};n.utils=r(93784),n.xml=r(95650),n.oData=r(33518),n.utils.inBrowser()&&(window.odatajs=n),n.node="node",e.exports=n},33518:function(e,t,r
2024-03-28 14:14:14 UTC	317	IN	Data Raw: 73 70 6f 6e 73 65 3a 75 7d 7d 63 61 74 63 68 28 65 29 7b 75 3d 65 7d 6e 2e 70 75 73 68 28 75 29 7d 61 3d 65 2e 73 75 62 73 74 72 28 74 2e 70 6f 73 69 74 69 6f 6e 2c 32 29 2c 78 28 65 2c 74 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 61 2c 6f 3d 7b 7d 3b 64 6f 7b 61 3d 74 2e 70 6f 73 69 74 69 6f 6e 2c 6e 3d 78 28 65 2c 74 29 2c 6e 75 6c 6c 21 3d 3d 28 72 3d 67 2e 65 78 65 63 28 6e 29 29 3f 6f 5b 72 5b 31 5d 5d 3d 72 5b 32 5d 3a 74 2e 70 6f 73 69 74 69 6f 6e 3d 61 7d 77 68 69 6c 65 28 6e 26 26 72 29 3b 72 65 74 75 72 6e 20 70 28 6f 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 44 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 61 2c 6f 2c 69 3d 74 2e 70 6f 73 69 74 69 6f 6e 2c 6c 3d 68 2e 65 78 65 63 28 78 28 Data Ascii: sponse:u}}catch(e){u=e}n.push(u)}a=e.substr(t.position,2),x(e,t)}return n}function T(e,t){var r,n,a,o={};do{a=t.position,n=x(e,t),null!==(r=g.exec(n))?o[r[1]]=r[2]:t.position=a}while(n&&r);return p(o),o}function D(e,t,r){var n,a,o,i=t.position,l=h.exec(x(
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 74 61 74 75 73 43 6f 64 65 3a 6e 2c 73 74 61 74 75 73 54 65 78 74 3a 61 2c 68 65 61 64 65 72 73 3a 6f 2c 62 6f 64 79 3a 53 28 65 2c 74 2c 22 5c 72 5c 6e 22 2b 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 53 28 65 2c 74 2c 22 5c 72 5c 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 74 2e 70 6f 73 69 74 69 6f 6e 7c 7c 30 2c 61 3d 65 2e 6c 65 6e 67 74 68 3b 69 66 28 72 29 7b 69 66 28 2d 31 3d 3d 3d 28 61 3d 65 2e 69 6e 64 65 78 4f 66 28 72 2c 6e 29 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 2e 70 6f 73 69 74 69 6f 6e 3d 61 2b 72 2e 6c 65 6e 67 74 68 7d 65 6c 73 65 20 74 2e 70 6f 73 69 74 69 6f 6e 3d 61 3b 72 65 74 75 72 6e 20 65 2e 73 75 62 73 74 72 69 6e 67 28 6e 2c 61 29 7d 66 75 6e Data Ascii: tatusCode:n,statusText:a,headers:o,body:S(e,t,"\r\n"+r)}}function x(e,t){return S(e,t,"\r\n")}function S(e,t,r){var n=t.position\|\|0,a=e.length;if(r){if(-1===(a=e.indexOf(r,n)))return null;t.position=a+r.length}else t.position=a;return e.substring(n,a)}fun
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 6c 65 6e 67 74 68 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 64 3d 63 5b 6f 5d 3b 69 66 28 6c 28 64 5b 22 40 6f 64 61 74 61 2e 74 79 70 65 22 5d 29 29 7b 76 61 72 20 70 3d 64 5b 22 40 6f 64 61 74 61 2e 74 79 70 65 22 5d 2e 73 75 62 73 74 72 69 6e 67 28 31 29 2c 66 3d 76 28 70 2c 74 29 3b 73 3d 6a 28 64 2c 7b 63 6f 6e 74 65 6e 74 54 79 70 65 4f 64 61 74 61 3a 72 2e 63 6f 6e 74 65 6e 74 54 79 70 65 4f 64 61 74 61 2c 64 65 74 65 63 74 65 64 50 61 79 6c 6f 61 64 4b 69 6e 64 3a 72 2e 64 65 74 65 63 74 65 64 50 61 79 6c 6f 61 64 4b 69 6e 64 2c 6e 61 6d 65 3a 72 2e 6e 61 6d 65 2c 74 79 70 65 3a 66 2c 74 79 70 65 4e 61 6d 65 3a 70 7d 2c 6e 2c 74 2c 61 29 7d 65 6c 73 65 20 73 3d 6a 28 64 2c 72 2c 6e 2c 74 2c 61 29 3b 75 2e 70 75 73 68 28 73 29 7d 72 65 74 75 72 6e Data Ascii: length;o<i;o++){var d=c[o];if(l(d["@odata.type"])){var p=d["@odata.type"].substring(1),f=v(p,t);s=j(d,{contentTypeOdata:r.contentTypeOdata,detectedPayloadKind:r.detectedPayloadKind,name:r.name,type:f,typeName:p},n,t,a)}else s=j(d,r,n,t,a);u.push(s)}return
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 45 64 6d 2e 44 6f 75 62 6c 65 22 3a 72 65 74 75 72 6e 20 65 2b 22 44 22 3b 63 61 73 65 22 45 64 6d 2e 47 65 6f 67 72 61 70 68 79 22 3a 72 65 74 75 72 6e 22 67 65 6f 67 72 61 70 68 79 27 22 2b 65 2b 22 27 22 3b 63 61 73 65 22 45 64 6d 2e 47 65 6f 6d 65 74 72 79 22 3a 72 65 74 75 72 6e 22 67 65 6f 6d 65 74 72 79 27 22 2b 65 2b 22 27 22 3b 63 61 73 65 22 45 64 6d 2e 54 69 6d 65 22 3a 72 65 74 75 72 6e 22 74 69 6d 65 27 22 2b 65 2b 22 27 22 3b 63 61 73 65 22 45 64 6d 2e 53 74 72 69 6e 67 22 3a 72 65 74 75 72 6e 22 27 22 2b 65 2b 22 27 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 5b 22 40 6f 64 61 74 61 2e 63 6f 6e 74 65 78 74 22 5d 3b 69 66 28 21 72 7c 7c 22 73 74 72 69 6e 67 Data Ascii: Edm.Double":return e+"D";case"Edm.Geography":return"geography'"+e+"'";case"Edm.Geometry":return"geometry'"+e+"'";case"Edm.Time":return"time'"+e+"'";case"Edm.String":return"'"+e+"'";default:return e}}function Q(e,t){var r=e["@odata.context"];if(!r\|\|"string
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 4f 72 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 4e 6f 74 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 45 71 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 4e 65 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 47 74 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 47 65 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 4c 74 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 4c 65 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 42 69 6e 61 72 79 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 42 6f 6f 6c 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 43 61 73 74 3a 4e 28 5b 22 54 79 70 65 22 5d 2c 5b 22 50 61 74 68 2a 22 2c 22 41 6e 6e 6f 74 61 74 69 6f 6e 2a 22 5d 29 2c 43 Data Ascii: N(null,null,!0),Or:N(null,null,!0),Not:N(null,null,!0),Eq:N(null,null,!0),Ne:N(null,null,!0),Gt:N(null,null,!0),Ge:N(null,null,!0),Lt:N(null,null,!0),Le:N(null,null,!0),Binary:N(null,null,!0),Bool:N(null,null,!0),Cast:N(["Type"],["Path","Annotation"]),C
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 22 2c 22 42 61 73 65 54 65 72 6d 22 2c 22 44 65 66 61 75 6c 74 56 61 6c 75 65 20 22 2c 22 41 70 70 6c 69 65 73 54 6f 22 2c 22 4e 75 6c 6c 61 62 6c 65 22 2c 22 4d 61 78 4c 65 6e 67 74 68 22 2c 22 50 72 65 63 69 73 69 6f 6e 22 2c 22 53 63 61 6c 65 22 2c 22 53 52 49 44 22 5d 2c 5b 22 41 6e 6e 6f 74 61 74 69 6f 6e 2a 22 5d 29 2c 54 69 6d 65 4f 66 44 61 79 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 54 79 70 65 44 65 66 69 6e 69 74 69 6f 6e 3a 4e 28 5b 22 4e 61 6d 65 22 2c 22 55 6e 64 65 72 6c 79 69 6e 67 54 79 70 65 22 2c 22 4d 61 78 4c 65 6e 67 74 68 22 2c 22 55 6e 69 63 6f 64 65 22 2c 22 50 72 65 63 69 73 69 6f 6e 22 2c 22 53 63 61 6c 65 22 2c 22 53 52 49 44 22 5d 2c 5b 22 41 6e 6e 6f 74 61 74 69 6f 6e 2a 22 5d 29 2c 55 72 6c 52 65 66 3a 4e 28 6e 75 Data Ascii: ","BaseTerm","DefaultValue ","AppliesTo","Nullable","MaxLength","Precision","Scale","SRID"],["Annotation"]),TimeOfDay:N(null,null,!0),TypeDefinition:N(["Name","UnderlyingType","MaxLength","Unicode","Precision","Scale","SRID"],["Annotation"]),UrlRef:N(nu
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 65 20 74 68 72 6f 75 67 68 20 4a 53 4f 4e 50 2e 22 7d 3b 76 61 72 20 77 3d 69 3b 69 2b 3d 31 3b 76 61 72 20 54 2c 44 3d 77 2e 74 6f 53 74 72 69 6e 67 28 29 3b 67 3d 22 68 61 6e 64 6c 65 4a 53 4f 4e 50 5f 22 2b 44 2c 77 69 6e 64 6f 77 5b 67 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 73 3d 63 28 73 29 2c 68 7c 7c 28 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 54 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 64 65 6c 65 74 65 20 77 69 6e 64 6f 77 5b 65 5d 7d 63 61 74 63 68 28 72 29 7b 77 69 6e 64 6f 77 5b 65 5d 3d 76 6f 69 64 20 30 2c 74 3d 3d 3d 69 2d 31 26 26 28 69 2d 3d 31 29 7d 7d 28 67 2c 77 29 2c 77 69 6e 64 6f 77 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 26 26 28 65 3d 77 69 6e 64 6f 77 2e 4a 53 4f 4e 2e Data Ascii: e through JSONP."};var w=i;i+=1;var T,D=w.toString();g="handleJSONP_"+D,window[g]=function(e){var t;s=c(s),h\|\|(window.clearTimeout(T),function(e,t){try{delete window[e]}catch(r){window[e]=void 0,t===i-1&&(i-=1)}}(g,w),window.ActiveXObject&&(e=window.JSON.
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 3d 65 3f 65 3a 22 5a 22 7d 76 61 72 20 74 65 3d 2f 43 6f 6c 6c 65 63 74 69 6f 6e 5c 28 28 2e 2a 29 5c 29 2f 3b 66 75 6e 63 74 69 6f 6e 20 72 65 28 65 29 7b 72 65 74 75 72 6e 20 74 65 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 65 28 65 29 7b 72 65 74 75 72 6e 21 21 65 26 26 75 28 65 29 26 26 21 6c 28 65 29 26 26 21 73 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 65 29 7b 72 65 74 75 72 6e 22 45 64 6d 2e 44 61 74 65 54 69 6d 65 4f 66 66 73 65 74 22 3d 3d 3d 65 2e 5f 5f 65 64 6d 54 79 70 65 7c 7c 21 65 2e 5f 5f 65 64 6d 54 79 70 65 26 26 65 2e 5f 5f 6f 66 66 73 65 74 7d 66 75 6e 63 74 69 6f 6e 20 6f 65 28 65 29 7b 69 66 28 21 65 26 26 21 6e 65 28 65 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 74 3d 65 2e 5f 5f 6d 65 74 61 64 61 74 61 7c 7c Data Ascii: =e?e:"Z"}var te=/Collection$(.*)$/;function re(e){return te.test(e)}function ne(e){return!!e&&u(e)&&!l(e)&&!s(e)}function ae(e){return"Edm.DateTimeOffset"===e.__edmType\|\|!e.__edmType&&e.__offset}function oe(e){if(!e&&!ne(e))return!1;var t=e.__metadata\|\|
2024-03-28 14:14:14 UTC	4096	IN	Data Raw: 65 73 74 26 26 28 74 2e 72 65 71 75 65 73 74 3d 65 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 2e 72 65 73 70 6f 6e 73 65 26 26 28 74 2e 72 65 73 70 6f 6e 73 65 3d 61 29 2c 76 6f 69 64 20 72 28 74 29 7d 74 72 79 7b 74 28 61 2e 64 61 74 61 2c 61 29 7d 63 61 74 63 68 28 65 29 7b 74 68 72 6f 77 20 65 2e 62 49 73 53 75 63 63 65 73 73 48 61 6e 64 6c 65 72 45 72 72 6f 72 3d 21 30 2c 65 7d 7d 29 2c 72 29 7d 2c 74 2e 69 73 42 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 28 65 29 26 26 6c 28 65 2e 5f 5f 62 61 74 63 68 52 65 71 75 65 73 74 73 29 7d 2c 74 2e 69 73 43 6f 6c 6c 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 26 26 65 2e 72 65 73 75 6c 74 73 7c 7c 65 3b 72 65 74 75 72 6e 21 21 72 26 26 72 65 Data Ascii: est&&(t.request=e),void 0===t.response&&(t.response=a),void r(t)}try{t(a.data,a)}catch(e){throw e.bIsSuccessHandlerError=!0,e}}),r)},t.isBatch=function(e){return ne(e)&&l(e.__batchRequests)},t.isCollection=function(e,t){var r=e&&e.results\|\|e;return!!r&&re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49724	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:14 UTC	542	OUT	GET /FormsPro/Images/CustomerVoice/CustomerVoice.ico HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:15 UTC	611	IN	HTTP/1.1 200 OK Content-Length: 4286 Connection: close Content-Type: image/x-icon Date: Thu, 28 Mar 2024 14:14:14 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 837c658b-324e-4565-adbc-fa846fc19877 X-RoutingCorrelationId: 5ac882f1-192e-437a-bd44-2a5717719a98 X-Content-Type-Options: nosniff
2024-03-28 14:14:15 UTC	3485	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cf df 70 10 d3 df 7b 40 d6 e3 7c 6f d4 df 78 90 d4 e2 78 9f d3 Data Ascii: ( @ p{@\|oxx
2024-03-28 14:14:15 UTC	317	IN	Data Raw: fe 71 7e 15 fe 71 7e 16 ff 71 7e 17 df 70 80 10 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ef f4 b3 2f ea f1 b2 ff e9 f1 b1 ff e9 f0 b0 ff e8 f0 af ff e9 f0 af ff e8 f0 ae ff e7 ef ac ff e1 e9 a3 ff 9f ad 3c ff ac bc 42 ff ad bc 42 ff ac bc 42 ff ad bc 43 ff 9e ad 37 ff 7f 8d 20 ff 74 81 15 fe 74 81 15 ff 73 80 15 ff 73 80 16 ff 73 80 16 ff 73 7f 17 bf 70 80 10 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb ef af 40 eb f1 b3 ef ea f1 b2 ff e9 f1 b1 ff e9 f0 b0 ff e8 f0 af df e6 ef ad 90 9d aa 48 60 83 90 1d ff 88 97 23 ff 86 94 23 ff 85 93 20 ff 7a 88 17 ff 76 83 15 ff 76 83 15 ff 75 82 15 fe 75 82 15 ff 75 82 15 ff 74 82 Data Ascii: q~q~q~p /<BBBC7 ttssssp @H`## zvvuuut
2024-03-28 14:14:15 UTC	484	IN	Data Raw: eb f2 b3 bf ec f2 b4 9f eb ef af 40 00 00 00 00 00 00 00 00 80 80 10 10 79 87 13 df 78 86 14 fe 78 85 14 fe 78 85 14 ff 77 84 14 fe 77 85 15 ff 76 84 14 fe 76 83 15 ff 76 83 16 af 76 83 13 5f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 80 10 10 78 85 15 60 78 86 14 7f 78 86 14 7f 77 85 14 80 76 83 13 50 77 83 14 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @yxxxwwvvvv_px`xxwvPw@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49726	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:15 UTC	1527	OUT	GET /formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$select=id,customCssFileName,customCSSInLineHeaderToggle,footerText HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CorrelationId: c88ce182-a2e1-44cb-8902-572760b072bd X-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 x-ms-form-request-ring: formsprogcc sec-ch-ua-mobile: ?0 Authorization: OData-MaxVersion: 4.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json ContextParams: {"First Name":"Chez "} __RequestVerificationToken: SIHUJP0J4jcJ9nI2RIqeMfX9-76tZexD-QfhSpl_0t2pxrn7apZX__XC5CfYVOTLLAY9MTwqW0ARoD2B7IxYziWSRm7Q0qghvZFzYscuh8c1 x-ms-form-request-source: ms-formweb sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:15 UTC	1107	IN	HTTP/1.1 200 OK Content-Length: 89 Connection: close Content-Type: application/json; charset=utf-8 Date: Thu, 28 Mar 2024 14:14:14 GMT Cache-Control: no-cache Expires: -1 Pragma: no-cache Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 X-RoutingCorrelationId: c88ce182-a2e1-44cb-8902-572760b072bd X-CorrelationId: c88ce182-a2e1-44cb-8902-572760b072bd X-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 X-OfficeFE: FormsSingleBox_IN_2 X-OfficeVersion: 16.0.17519.42500 X-OfficeCluster: usge-001.forms.gcc.osi.office365.us P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-FailureReason: Unknown X-Robots-Tag: noindex, nofollow X-Content-Type-Options: nosniff
2024-03-28 14:14:15 UTC	89	IN	Data Raw: 7b 22 69 64 22 3a 22 2d 52 50 49 2d 4c 75 73 47 45 75 37 45 42 42 79 6c 6b 4e 54 6a 57 57 6f 58 52 73 6c 43 35 5a 4e 67 74 79 44 59 73 48 77 6f 5f 4e 55 51 54 5a 58 56 31 45 34 55 45 64 58 51 55 68 57 4e 6b 70 58 55 6a 6c 54 57 44 56 48 51 6a 4a 42 4e 43 34 75 22 7d Data Ascii: {"id":"-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49729	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:15 UTC	757	OUT	GET /formapi/api/f8c813f9-acbb-4b18-bb10-10729643538d/users/1b5da865-0b25-4d96-82dc-8362c1f0a3f3/light/runtimeForms('-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u')?$select=id,customCssFileName,customCSSInLineHeaderToggle,footerText HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:15 UTC	1107	IN	HTTP/1.1 200 OK Content-Length: 89 Connection: close Content-Type: application/json; charset=utf-8 Date: Thu, 28 Mar 2024 14:14:15 GMT Cache-Control: no-cache Expires: -1 Pragma: no-cache Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 9ed31692-4d1d-482b-9427-5b60a6fbacb6 X-RoutingCorrelationId: bf515bf4-743c-451e-a650-9c0b5f3fed42 X-CorrelationId: bf515bf4-743c-451e-a650-9c0b5f3fed42 X-UserSessionId: 9ed31692-4d1d-482b-9427-5b60a6fbacb6 X-OfficeFE: FormsSingleBox_IN_2 X-OfficeVersion: 16.0.17519.42500 X-OfficeCluster: usge-001.forms.gcc.osi.office365.us P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-FailureReason: Unknown X-Robots-Tag: noindex, nofollow X-Content-Type-Options: nosniff
2024-03-28 14:14:15 UTC	89	IN	Data Raw: 7b 22 69 64 22 3a 22 2d 52 50 49 2d 4c 75 73 47 45 75 37 45 42 42 79 6c 6b 4e 54 6a 57 57 6f 58 52 73 6c 43 35 5a 4e 67 74 79 44 59 73 48 77 6f 5f 4e 55 51 54 5a 58 56 31 45 34 55 45 64 58 51 55 68 57 4e 6b 70 58 55 6a 6c 54 57 44 56 48 51 6a 4a 42 4e 43 34 75 22 7d Data Ascii: {"id":"-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49731	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:15 UTC	1409	OUT	GET /formapi/api/privacy?ownerTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&currentUserTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&isAnonymous=true HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-CorrelationId: d76d5655-a51f-4ca6-b68d-555bd3ba18db X-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 x-ms-form-request-ring: formsprogcc sec-ch-ua-mobile: ?0 Authorization: OData-MaxVersion: 4.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: application/json ContextParams: {"First Name":"Chez "} __RequestVerificationToken: SIHUJP0J4jcJ9nI2RIqeMfX9-76tZexD-QfhSpl_0t2pxrn7apZX__XC5CfYVOTLLAY9MTwqW0ARoD2B7IxYziWSRm7Q0qghvZFzYscuh8c1 x-ms-form-request-source: ms-formweb sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:15 UTC	1053	IN	HTTP/1.1 200 OK Content-Length: 17 Connection: close Content-Type: application/json; charset=utf-8 Date: Thu, 28 Mar 2024 14:14:15 GMT Server: Microsoft-IIS/10.0 Server: Microsoft-IIS/10.0 Cache-Control: no-cache Expires: -1 Pragma: no-cache Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 X-RoutingCorrelationId: d76d5655-a51f-4ca6-b68d-555bd3ba18db X-CorrelationId: d76d5655-a51f-4ca6-b68d-555bd3ba18db X-UserSessionId: a3919d51-85c1-4c51-9e9d-a7542e522dd0 X-OfficeFE: FormsSingleBox_IN_1 X-OfficeFE: FormsSingleBox_IN_1 X-OfficeVersion: 16.0.17519.42500 X-OfficeCluster: usge-001.forms.gcc.osi.office365.us P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-FailureReason: Unknown X-Robots-Tag: noindex, nofollow X-Content-Type-Options: nosniff
2024-03-28 14:14:15 UTC	17	IN	Data Raw: 7b 22 70 72 69 76 61 63 79 55 72 6c 22 3a 22 22 7d Data Ascii: {"privacyUrl":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.17	49730	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:15 UTC	920	OUT	GET /Scripts/dists/response-page-pro.chunk.cvheadertheme.ce22c68.js?ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:15 UTC	622	IN	HTTP/1.1 200 OK Content-Length: 24184 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:15 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_1 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 20a05000-e44b-4ee5-b931-f7cf8c8f92d0 X-RoutingCorrelationId: dfa9a08e-4f6e-4b86-888b-db0e3696eb14 X-Content-Type-Options: nosniff
2024-03-28 14:14:15 UTC	3474	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 34 5d 2c 7b 32 32 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 65 2c 72 29 7b 72 2e 64 28 65 2c 7b 44 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 4b 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 2c 4f 38 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 59 52 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 63 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 2c 66 38 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[264],{22184:function(o,e,r){r.d(e,{D4:function(){return m},K9:function(){return t},O8:function(){return d},YR:function(){return i},cL:function(){return l},el:function(){return f},f8:function(){
2024-03-28 14:14:15 UTC	317	IN	Data Raw: 2c 6d 3d 72 28 38 31 32 39 31 29 2c 6c 3d 72 28 32 32 31 38 34 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 6f 29 7b 72 65 74 75 72 6e 20 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 73 2c 6f 29 7d 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 72 3d 6f 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 72 2e 6d 6f 75 6e 74 65 64 3d 21 30 2c 72 2e 69 6d 67 54 6f 4c 6f 61 64 42 61 63 6b 67 72 6f 75 6e 64 3d 6e 65 77 20 49 6d 61 67 65 2c 72 2e 69 73 4c 6f 67 6f 4d 69 73 73 69 6e 67 3d 72 2e 69 73 4c 6f 67 6f 4d 69 73 73 69 6e 67 2e 62 69 6e 64 28 72 29 2c 72 2e 69 73 54 69 74 6c 65 53 75 62 74 69 74 6c 65 4d 69 73 73 69 6e 67 3d 72 2e 69 73 54 69 74 6c 65 53 75 62 74 69 Data Ascii: ,m=r(81291),l=r(22184);function d(o){return i.createElement(s,o)}var s=function(o){function e(e){var r=o.call(this,e)\|\|this;return r.mounted=!0,r.imgToLoadBackground=new Image,r.isLogoMissing=r.isLogoMissing.bind(r),r.isTitleSubtitleMissing=r.isTitleSubti
2024-03-28 14:14:15 UTC	4096	IN	Data Raw: 57 69 6c 6c 4d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 74 68 69 73 2c 65 3d 74 68 69 73 2e 70 72 6f 70 73 2e 54 68 65 6d 65 4d 61 73 74 65 72 2c 72 3d 74 68 69 73 2e 70 72 6f 70 73 2e 46 6f 72 6d 4d 61 73 74 65 72 2e 54 68 65 6d 65 4d 61 73 74 65 72 3b 65 26 26 28 74 68 69 73 2e 6f 62 73 65 72 76 65 72 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 77 56 61 6c 75 65 73 2e 4e 61 6d 65 3d 3d 3d 6d 2e 78 39 26 26 65 2e 4e 65 77 56 61 6c 75 65 73 2e 48 65 61 64 65 72 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 21 3d 3d 6f 2e 73 74 61 74 65 2e 49 6d 61 67 65 55 72 6c 3f 6f 2e 73 65 74 53 74 61 74 65 28 7b 49 6d 61 67 65 55 72 6c 3a 65 2e 4e 65 77 56 61 6c 75 65 73 2e 48 65 61 64 65 72 42 61 63 6b 67 72 6f Data Ascii: WillMount=function(){var o=this,e=this.props.ThemeMaster,r=this.props.FormMaster.ThemeMaster;e&&(this.observerCallback=function(e){e.NewValues.Name===m.x9&&e.NewValues.HeaderBackgroundImage!==o.state.ImageUrl?o.setState({ImageUrl:e.NewValues.HeaderBackgro
2024-03-28 14:14:15 UTC	4096	IN	Data Raw: 6c 6f 72 20 7b 20 63 6f 6c 6f 72 3a 20 22 2e 63 6f 6e 63 61 74 28 69 2c 22 3b 20 7d 22 29 2c 72 2b 3d 22 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 68 65 6d 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 3a 68 6f 76 65 72 20 2a 7b 20 63 6f 6c 6f 72 3a 22 2e 63 6f 6e 63 61 74 28 69 2c 22 3b 20 7d 22 29 2c 72 2b 3d 22 2e 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 2d 68 65 61 64 65 72 2d 73 68 6f 77 2d 68 69 64 65 20 2e 74 6f 67 67 6c 65 2d 62 75 74 74 6f 6e 2e 61 63 74 69 76 65 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 41 38 38 38 36 3b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 38 41 38 38 38 36 3b 20 7d 22 2c 72 2b 3d 22 2e 64 65 73 69 67 6e 2d 71 75 65 73 74 69 6f 6e 2d 6d 61 74 72 69 78 2d 72 65 6d 6f 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2e 6f 66 66 Data Ascii: lor { color: ".concat(i,"; }"),r+=".office-form-theme-button-color:hover *{ color:".concat(i,"; }"),r+=".toggle-button-header-show-hide .toggle-button.active { background: #8A8886; border-color: #8A8886; }",r+=".design-question-matrix-remove-container.off
2024-03-28 14:14:15 UTC	4096	IN	Data Raw: 6e 59 7c 7c 6c 2e 63 4c 2e 4d 69 64 2c 79 3d 22 22 2e 63 6f 6e 63 61 74 28 67 29 2e 63 6f 6e 63 61 74 28 68 29 2c 6b 3d 22 22 2e 63 6f 6e 63 61 74 28 62 29 2e 63 6f 6e 63 61 74 28 78 29 2c 43 3d 22 35 70 78 20 32 30 70 78 20 35 70 78 20 35 30 70 78 22 2c 76 3d 22 32 30 70 78 20 32 30 70 78 20 31 30 30 70 78 20 35 30 70 78 22 2c 4d 3d 22 31 30 30 70 78 20 32 30 70 78 20 32 30 70 78 20 35 30 70 78 22 2c 53 3d 22 31 30 30 70 78 22 2c 46 3d 22 31 33 35 70 78 22 2c 42 3d 22 32 30 70 78 20 32 30 70 78 20 31 38 30 70 78 20 35 30 70 78 22 2c 50 3d 22 31 30 30 70 78 20 32 30 70 78 20 31 30 30 70 78 20 35 30 70 78 22 2c 54 3d 22 31 38 30 70 78 20 32 30 70 78 20 32 30 70 78 20 35 30 70 78 22 3b 64 7c 7c 28 50 3d 22 37 34 70 78 20 32 30 70 78 20 37 34 70 78 20 35 30 Data Ascii: nY\|\|l.cL.Mid,y="".concat(g).concat(h),k="".concat(b).concat(x),C="5px 20px 5px 50px",v="20px 20px 100px 50px",M="100px 20px 20px 50px",S="100px",F="135px",B="20px 20px 180px 50px",P="100px 20px 100px 50px",T="180px 20px 20px 50px";d\|\|(P="74px 20px 74px 50
2024-03-28 14:14:15 UTC	4096	IN	Data Raw: 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 3b 20 7d 22 2c 41 2b 3d 22 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 68 65 6d 65 2d 70 72 69 6d 61 72 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 65 6e 64 3b 20 7d 22 29 3a 41 2b 3d 22 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 68 65 6d 65 2d 70 72 69 6d 61 72 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 2d 62 6f 78 20 7b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a Data Ascii: flex-direction: row-reverse; }",A+=".office-form-theme-primary-background.office-form-title-container .office-form-title { text-align: end; }"):A+=".office-form-theme-primary-background.office-form-title-container .office-form-title-box { flex-direction:
2024-03-28 14:14:15 UTC	4009	IN	Data Raw: 6d 2d 74 69 74 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 20 22 2b 22 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 22 2e 63 6f 6e 63 61 74 28 46 2c 22 3b 20 7d 22 29 2c 41 2b 3d 22 2e 73 6d 61 6c 6c 2d 73 63 72 65 65 6e 2e 6d 6f 62 69 6c 65 2d 76 69 65 77 20 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 68 65 6d 65 2d 70 72 69 6d 61 72 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 20 22 2b 22 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 22 2e 63 6f 6e 63 61 Data Ascii: m-title-container .office-form-title "+"{ position: relative; margin-right: ".concat(F,"; }"),A+=".small-screen.mobile-view .office-form-theme-primary-background.office-form-title-container .office-form-title "+"{ position: relative; margin-right: ".conca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49732	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:15 UTC	920	OUT	GET /Scripts/dists/response-page-pro.chunk.cvtitlerender.65b951b.js?ring=UsGovGccProduction HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.us/Pages/ResponsePage.aspx?id=-RPI-LusGEu7EBBylkNTjWWoXRslC5ZNgtyDYsHwo_NUQTZXV1E4UEdXQUhWNkpXUjlTWDVHQjJBNC4u&ctx=%7B%22First%20Name%22%3A%22Chez%20%22%7D Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:15 UTC	622	IN	HTTP/1.1 200 OK Content-Length: 14434 Connection: close Content-Type: application/javascript Date: Thu, 28 Mar 2024 14:14:15 GMT Accept-Ranges: bytes Cache-Control: max-age=63072000 ETag: "099f677a779da1:0" Last-Modified: Tue, 19 Mar 2024 02:45:14 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_2 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 9b7d5bb5-6b89-42dc-84aa-1580d3295745 X-RoutingCorrelationId: fa6bea17-25ad-4d8f-809a-d6f17cec0fe8 X-Content-Type-Options: nosniff
2024-03-28 14:14:15 UTC	3474	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 31 5d 2c 7b 32 32 31 38 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 74 29 7b 74 2e 64 28 6f 2c 7b 44 34 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 4b 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 4f 38 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 59 52 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 63 4c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 65 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 66 38 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[581],{22184:function(e,o,t){t.d(o,{D4:function(){return c},K9:function(){return r},O8:function(){return m},YR:function(){return i},cL:function(){return u},el:function(){return l},f8:function(){
2024-03-28 14:14:15 UTC	317	IN	Data Raw: 29 2c 63 3d 74 28 39 30 37 31 30 29 2c 75 3d 74 28 36 38 37 29 2c 6d 3d 74 28 37 36 34 35 29 2c 64 3d 74 28 34 33 33 36 37 29 2c 70 3d 74 28 32 34 34 39 37 29 2c 68 3d 74 28 39 30 38 31 39 29 2c 67 3d 74 28 33 39 32 30 29 2c 66 3d 74 28 35 30 32 29 2c 43 3d 74 28 37 30 39 30 37 29 2c 79 3d 74 28 32 32 31 38 34 29 2c 4d 3d 74 28 31 32 36 31 31 29 2c 54 3d 74 28 36 30 32 31 31 29 2c 62 3d 74 28 32 39 35 35 39 29 2c 53 3d 74 28 37 37 33 35 36 29 2c 49 3d 74 28 36 30 32 39 39 29 2c 76 3d 74 28 36 34 32 39 30 29 2c 4c 3d 74 28 36 35 38 36 33 29 2c 78 3d 74 28 38 31 32 39 31 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6f 29 7b 76 61 72 20 74 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e Data Ascii: ),c=t(90710),u=t(687),m=t(7645),d=t(43367),p=t(24497),h=t(90819),g=t(3920),f=t(502),C=t(70907),y=t(22184),M=t(12611),T=t(60211),b=t(29559),S=t(77356),I=t(60299),v=t(64290),L=t(65863),x=t(81291),H=function(e){function o(o){var t=e.call(this,o)\|\|this;return
2024-03-28 14:14:15 UTC	4096	IN	Data Raw: 65 4d 61 73 74 65 72 3d 28 30 2c 61 2e 66 35 29 28 29 2c 74 2e 66 6f 72 6d 3d 74 2e 75 78 53 74 61 74 65 4d 61 73 74 65 72 2e 4d 6f 64 65 6c 2e 46 6f 72 6d 4d 61 73 74 65 72 2c 74 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 66 6f 72 63 65 55 70 64 61 74 65 28 29 7d 2c 74 2e 69 73 4c 6f 67 6f 55 70 3d 74 2e 69 73 4c 6f 67 6f 55 70 2e 62 69 6e 64 28 74 29 2c 74 2e 69 73 4c 6f 67 6f 44 6f 77 6e 3d 74 2e 69 73 4c 6f 67 6f 44 6f 77 6e 2e 62 69 6e 64 28 74 29 2c 74 2e 69 73 54 69 74 6c 65 53 75 62 74 69 74 6c 65 4d 69 73 73 69 6e 67 3d 74 2e 69 73 54 69 74 6c 65 53 75 62 74 69 74 6c 65 4d 69 73 73 69 6e 67 2e 62 69 6e 64 28 74 29 2c 74 2e 66 6f 72 6d 2e 6f 62 73 65 72 76 65 28 74 2e 75 70 64 61 74 65 2c 5b 6e 2e 78 2e 53 63 68 65 6d 61 2e 4f Data Ascii: eMaster=(0,a.f5)(),t.form=t.uxStateMaster.Model.FormMaster,t.update=function(){t.forceUpdate()},t.isLogoUp=t.isLogoUp.bind(t),t.isLogoDown=t.isLogoDown.bind(t),t.isTitleSubtitleMissing=t.isTitleSubtitleMissing.bind(t),t.form.observe(t.update,[n.x.Schema.O
2024-03-28 14:14:15 UTC	4096	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 70 72 6f 70 73 2e 53 75 62 54 69 74 6c 65 29 7b 76 61 72 20 65 3d 7b 52 65 6e 64 65 72 4d 6f 64 65 3a 22 52 69 63 68 54 65 78 74 22 2c 54 65 78 74 3a 74 68 69 73 2e 70 72 6f 70 73 2e 52 69 63 68 53 75 62 74 69 74 6c 65 7c 7c 74 68 69 73 2e 70 72 6f 70 73 2e 53 75 62 54 69 74 6c 65 2c 43 6f 6e 74 61 69 6e 73 48 74 6d 6c 3a 21 30 7d 3b 72 65 74 75 72 6e 20 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 73 75 62 74 69 74 6c 65 20 68 65 61 64 69 6e 67 2d 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 70 72 6f 70 73 2e 48 65 61 64 69 6e 67 7c 7c 31 29 2c 72 65 66 3a 74 68 69 73 2e 73 75 62 54 69 74 6c 65 52 65 66 7d 2c 69 2e Data Ascii: nction(){if(this.props.SubTitle){var e={RenderMode:"RichText",Text:this.props.RichSubtitle\|\|this.props.SubTitle,ContainsHtml:!0};return i.createElement("div",{className:"office-form-subtitle heading-".concat(this.props.Heading\|\|1),ref:this.subTitleRef},i.
2024-03-28 14:14:15 UTC	2451	IN	Data Raw: 64 69 76 22 2c 6e 75 6c 6c 2c 76 29 29 7d 2c 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 43 75 73 74 6f 6d 43 53 53 46 69 6c 65 4e 6f 74 45 78 69 73 74 4f 72 54 6f 67 67 6c 65 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 28 21 74 68 69 73 2e 70 72 6f 70 73 2e 46 6f 72 6d 2e 69 73 46 69 65 6c 64 52 65 61 64 79 28 6e 2e 78 2e 53 63 68 65 6d 61 2e 43 75 73 74 6f 6d 43 73 73 46 69 6c 65 4e 61 6d 65 29 7c 7c 21 28 21 74 68 69 73 2e 70 72 6f 70 73 2e 46 6f 72 6d 2e 4d 6f 64 65 6c 2e 43 75 73 74 6f 6d 43 73 73 46 69 6c 65 4e 61 6d 65 7c 7c 74 68 69 73 2e 70 72 6f 70 73 2e 46 6f 72 6d 2e 4d 6f 64 65 6c 2e 43 75 73 74 6f 6d 43 73 73 46 69 6c 65 4e 61 6d 65 26 26 74 68 69 73 2e 70 72 6f 70 73 2e 46 6f 72 6d 2e 69 73 46 69 65 6c 64 52 Data Ascii: div",null,v))},o.prototype.isCustomCSSFileNotExistOrToggleEnabled=function(){return!(!this.props.Form.isFieldReady(n.x.Schema.CustomCssFileName)\|\|!(!this.props.Form.Model.CustomCssFileName\|\|this.props.Form.Model.CustomCssFileName&&this.props.Form.isFieldR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.17	49736	52.127.240.65	443	4392	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:16 UTC	639	OUT	GET /formapi/api/privacy?ownerTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&currentUserTenantId=f8c813f9-acbb-4b18-bb10-10729643538d&isAnonymous=true HTTP/1.1 Host: customervoice.microsoft.us Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __RequestVerificationToken=CsL4gIEyrRuS-lA64R7DtqSADpEucloklHmtq68INfX6k8Tqg6----g6o1afhEY3GCPtfcu_nc1O8UOEWxBnq3m4nHgT3zAxf557BkTp4Yk1
2024-03-28 14:14:16 UTC	1053	IN	HTTP/1.1 200 OK Content-Length: 17 Connection: close Content-Type: application/json; charset=utf-8 Date: Thu, 28 Mar 2024 14:14:15 GMT Server: Microsoft-IIS/10.0 Server: Microsoft-IIS/10.0 Cache-Control: no-cache Expires: -1 Pragma: no-cache Strict-Transport-Security: max-age=2592000; includeSubDomains X-RoutingOfficeCluster: usge-001.forms.gcc.osi.office365.us X-RoutingOfficeFE: FormsSingleBox_IN_0 X-RoutingOfficeVersion: 16.0.17519.42500 X-RoutingSessionId: 473500bd-9e21-41d3-be3c-d064360af505 X-RoutingCorrelationId: f223aa61-5381-4c95-a6bd-e09f887faa7e X-CorrelationId: f223aa61-5381-4c95-a6bd-e09f887faa7e X-UserSessionId: 473500bd-9e21-41d3-be3c-d064360af505 X-OfficeFE: FormsSingleBox_IN_1 X-OfficeFE: FormsSingleBox_IN_1 X-OfficeVersion: 16.0.17519.42500 X-OfficeCluster: usge-001.forms.gcc.osi.office365.us P3P: CP="CAO DSP COR ADMa DEV CONi TELi CUR PSA PSD TAI IVDi OUR SAMi BUS DEM NAV STA UNI COM INT PHY ONL FIN PUR" X-FailureReason: Unknown X-Robots-Tag: noindex, nofollow X-Content-Type-Options: nosniff
2024-03-28 14:14:16 UTC	17	IN	Data Raw: 7b 22 70 72 69 76 61 63 79 55 72 6c 22 3a 22 22 7d Data Ascii: {"privacyUrl":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49752	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:21 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=oKH7AKaDOEfh6P5&MD=PlelZS9N HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-28 14:14:22 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: cf218907-9346-4aa5-8b72-e3e9d52f417a MS-RequestId: 7a57206d-fea9-4cb1-b545-21bcb8882db1 MS-CV: Q137uB+pukWCNTqx.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 28 Mar 2024 14:14:21 GMT Connection: close Content-Length: 24490
2024-03-28 14:14:22 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-03-28 14:14:22 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49756	23.54.46.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:29 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 14:14:29 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=233374 Date: Thu, 28 Mar 2024 14:14:29 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49757	23.54.46.90	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:29 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-28 14:14:30 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=233334 Date: Thu, 28 Mar 2024 14:14:30 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-28 14:14:30 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.17	49758	20.190.190.194	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:30 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4784 Host: login.live.com
2024-03-28 14:14:30 UTC	4784	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-03-28 14:14:30 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 28 Mar 2024 14:13:30 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_BAY x-ms-request-id: c6365868-1cc2-4dbf-a774-f632c20d68c3 PPServer: PPV: 30 H: PH1PEPF00011E3F V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 28 Mar 2024 14:14:30 GMT Connection: close Content-Length: 11153
2024-03-28 14:14:30 UTC	11153	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.17	49759	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:30 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-03-28 14:14:30 UTC	432	IN	HTTP/1.1 200 OK Content-Length: 7213 Content-Type: application/json; charset=utf-8 ETag: -923310072_502633716 Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-ExP-TrackingId: 6d87843c-752d-47eb-9d54-392b3c48ba09 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 340989D00D404B0AB1BDE439FFFDE8D5 Ref B: BL2EDGE1317 Ref C: 2024-03-28T14:14:30Z Date: Thu, 28 Mar 2024 14:14:30 GMT Connection: close
2024-03-28 14:14:30 UTC	1024	IN	Data Raw: 7b 22 46 65 61 74 75 72 65 73 22 3a 5b 22 68 69 67 68 71 75 61 6c 69 74 79 63 61 70 74 75 72 65 63 22 2c 22 79 6f 61 6c 77 39 38 30 31 63 66 22 2c 22 79 6f 63 33 37 32 31 22 2c 22 61 61 74 65 73 31 32 31 22 2c 22 79 6f 63 61 6c 38 33 30 22 2c 22 65 6d 70 72 6f 37 30 32 22 2c 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 79 6f 79 70 70 31 31 37 22 2c 22 79 6f 79 70 70 35 36 31 22 2c 22 79 6f 70 68 6f 31 35 36 22 2c 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 79 6f 72 65 6d 37 38 32 22 2c 22 79 6f 72 65 6d 33 32 35 22 2c 22 79 6f 72 6f 6d 39 33 39 22 2c 22 79 6f 79 70 70 36 33 38 22 2c 22 79 6f 61 61 6f 77 63 34 36 63 66 22 2c 22 79 6f 35 35 36 22 2c 22 79 6f 61 61 6f 32 36 37 22 2c 22 79 6f 70 72 69 32 35 Data Ascii: {"Features":["highqualitycapturec","yoalw9801cf","yoc3721","aates121","yocal830","empro702","yonon248","contactsv2synconly","yoypp117","yoypp561","yopho156","ypromeless","yorem782","yorem325","yorom939","yoypp638","yoaaowc46cf","yo556","yoaao267","yopri25
2024-03-28 14:14:30 UTC	1024	IN	Data Raw: 74 65 73 31 32 31 22 2c 22 31 38 66 7a 22 3a 22 79 6f 63 61 6c 38 33 30 22 2c 22 31 68 6a 65 22 3a 22 65 6d 70 72 6f 37 30 32 22 2c 22 31 71 61 38 22 3a 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 31 77 6d 74 22 3a 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 32 69 77 6a 22 3a 22 79 6f 79 70 70 31 31 37 22 2c 22 32 6a 36 61 22 3a 22 79 6f 79 70 70 35 36 31 22 2c 22 32 6b 71 32 22 3a 22 79 6f 70 68 6f 31 35 36 22 2c 22 32 6c 61 64 22 3a 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 32 6f 63 64 22 3a 22 79 6f 72 65 6d 37 38 32 22 2c 22 32 72 65 6b 22 3a 22 79 6f 72 65 6d 33 32 35 22 2c 22 32 73 63 78 22 3a 22 79 6f 72 6f 6d 39 33 39 22 2c 22 32 74 70 33 22 3a 22 79 6f 79 70 70 36 33 38 22 2c 22 33 30 62 38 22 3a 22 79 6f 61 61 6f 77 63 34 36 63 66 Data Ascii: tes121","18fz":"yocal830","1hje":"empro702","1qa8":"yonon248","1wmt":"contactsv2synconly","2iwj":"yoypp117","2j6a":"yoypp561","2kq2":"yopho156","2lad":"ypromeless","2ocd":"yorem782","2rek":"yorem325","2scx":"yorom939","2tp3":"yoypp638","30b8":"yoaaowc46cf
2024-03-28 14:14:30 UTC	1024	IN	Data Raw: 3a 22 34 61 33 30 64 34 35 35 22 2c 22 35 39 67 67 22 3a 22 32 69 32 68 65 31 31 38 22 2c 22 35 39 67 6a 22 3a 22 34 64 65 35 67 35 34 32 22 2c 22 35 39 76 7a 22 3a 22 62 65 63 34 34 37 35 37 22 2c 22 35 61 39 73 22 3a 22 39 38 34 65 39 37 37 34 22 2c 22 35 61 74 6b 22 3a 22 35 35 35 64 37 39 37 38 22 2c 22 35 62 61 74 22 3a 22 65 6a 66 34 36 37 39 35 22 2c 22 35 63 70 66 22 3a 22 34 39 62 34 67 31 33 33 22 2c 22 35 63 72 73 22 3a 22 33 62 66 39 67 38 35 35 22 2c 22 35 64 77 37 22 3a 22 69 34 37 62 65 31 37 38 22 2c 22 35 65 74 36 22 3a 22 32 34 38 66 61 31 38 36 22 2c 22 35 66 6c 32 22 3a 22 68 35 31 66 30 33 34 32 22 2c 22 35 66 79 6f 22 3a 22 68 64 65 31 67 32 36 37 22 2c 22 35 66 79 71 22 3a 22 34 6a 6a 66 62 37 36 38 22 2c 22 35 67 31 73 22 3a 22 36 Data Ascii: :"4a30d455","59gg":"2i2he118","59gj":"4de5g542","59vz":"bec44757","5a9s":"984e9774","5atk":"555d7978","5bat":"ejf46795","5cpf":"49b4g133","5crs":"3bf9g855","5dw7":"i47be178","5et6":"248fa186","5fl2":"h51f0342","5fyo":"hde1g267","5fyq":"4jjfb768","5g1s":"6
2024-03-28 14:14:30 UTC	1024	IN	Data Raw: 65 72 73 22 3a 7b 22 41 41 4f 57 43 34 36 22 3a 36 34 30 30 2c 22 41 41 4f 57 43 34 37 22 3a 37 34 30 30 2c 22 41 41 4f 57 43 36 31 22 3a 31 36 30 30 2c 22 41 41 4f 57 43 36 32 22 3a 32 36 30 30 2c 22 41 41 4f 57 43 36 33 22 3a 33 36 30 30 2c 22 41 69 72 70 6c 61 6e 65 4d 6f 64 65 53 74 61 74 75 73 22 3a 74 72 75 65 2c 22 41 75 74 6f 48 79 64 72 61 74 65 64 49 6d 61 67 65 73 43 6f 75 6e 74 22 3a 30 2c 22 43 61 6c 6c 69 6e 67 41 6c 74 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 45 76 65 6e 74 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 45 78 69 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 4f 53 53 65 72 76 69 63 69 6e 67 46 69 78 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 53 68 61 72 65 64 42 6c 75 65 74 6f 6f Data Ascii: ers":{"AAOWC46":6400,"AAOWC47":7400,"AAOWC61":1600,"AAOWC62":2600,"AAOWC63":3600,"AirplaneModeStatus":true,"AutoHydratedImagesCount":0,"CallingAltBluetoothPairingEvent":true,"CallingExitConfirmation":true,"CallingOSServicingFix":true,"CallingSharedBluetoo
2024-03-28 14:14:30 UTC	1024	IN	Data Raw: 73 73 61 67 69 6e 67 43 68 61 74 46 69 6c 74 65 72 54 6f 67 67 6c 65 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 73 65 6e 74 56 32 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 76 65 72 73 61 74 69 6f 6e 56 69 65 77 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 48 69 64 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 4d 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 50 69 6e 6e 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 61 72 63 68 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 6e 64 41 6e 64 52 65 63 65 69 76 65 41 6e 69 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 6e 74 53 Data Ascii: ssagingChatFilterToggle":true,"MessagingConsentV2":true,"MessagingConversationView":true,"MessagingEnableHiding":true,"MessagingEnableMuting":true,"MessagingEnablePinning":true,"MessagingSearch":true,"MessagingSendAndReceiveAnimation":true,"MessagingSentS
2024-03-28 14:14:30 UTC	1024	IN	Data Raw: 3a 74 72 75 65 2c 22 52 6f 6d 65 44 69 73 61 62 6c 65 64 22 3a 34 34 31 35 30 33 2c 22 53 65 63 75 72 65 43 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 53 68 65 6c 6c 45 78 74 65 6e 64 65 64 4c 65 66 74 50 61 6e 65 22 3a 74 72 75 65 2c 22 54 65 73 74 46 65 61 74 75 72 65 32 22 3a 66 61 6c 73 65 2c 22 55 6e 69 76 65 72 73 61 6c 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 22 3a 74 72 75 65 2c 22 57 68 61 74 73 4e 65 77 43 4e 22 3a 74 72 75 65 2c 22 59 50 50 43 61 74 61 73 74 72 6f 70 68 69 63 45 72 72 6f 72 41 75 74 6f 52 65 73 65 74 22 3a 74 72 75 65 2c 22 59 50 50 43 6f 6e 73 65 63 75 74 69 76 65 41 63 6b 54 69 6d 65 6f 75 74 73 46 6f 72 50 61 72 74 6e 65 72 44 69 73 63 6f 6e 6e 65 63 74 22 3a 35 2c 22 59 50 50 43 72 79 70 74 6f 54 72 75 73 74 53 74 6f Data Ascii: :true,"RomeDisabled":441503,"SecureContent":true,"ShellExtendedLeftPane":true,"TestFeature2":false,"UniversalBluetoothPairing":true,"WhatsNewCN":true,"YPPCatastrophicErrorAutoReset":true,"YPPConsecutiveAckTimeoutsForPartnerDisconnect":5,"YPPCryptoTrustSto
2024-03-28 14:14:30 UTC	1024	IN	Data Raw: 37 39 3a 33 30 34 34 35 33 31 30 3b 79 6f 69 73 61 38 36 31 3a 33 30 35 32 35 38 36 38 3b 79 6f 72 65 6d 31 34 31 3a 33 30 34 38 36 33 35 33 3b 79 6f 79 70 70 36 35 32 3a 33 30 35 31 35 34 38 33 3b 79 6f 35 32 35 3a 33 30 35 35 33 39 38 35 3b 79 6f 36 30 36 3a 33 30 35 32 37 38 35 30 3b 79 6f 6e 6f 74 36 33 33 3a 33 30 36 32 36 30 37 38 3b 79 6f 79 70 70 38 35 39 3a 33 30 36 38 37 38 35 39 3b 79 6f 69 6e 64 36 36 35 3a 33 30 35 39 35 31 36 33 3b 79 6f 64 63 67 38 33 30 3a 33 30 37 31 32 39 34 39 3b 6f 6e 6c 79 5f 74 6f 61 73 74 63 6f 6e 74 65 78 74 6d 65 6e 75 3a 33 30 36 34 38 30 38 31 3b 61 6a 35 34 35 34 36 35 3a 33 30 38 39 37 37 35 35 3b 62 68 34 32 33 39 33 39 3a 33 30 37 35 35 36 35 33 3b 64 6a 65 65 36 39 35 39 3a 33 30 37 36 33 31 39 39 3b 36 36 Data Ascii: 79:30445310;yoisa861:30525868;yorem141:30486353;yoypp652:30515483;yo525:30553985;yo606:30527850;yonot633:30626078;yoypp859:30687859;yoind665:30595163;yodcg830:30712949;only_toastcontextmenu:30648081;aj545465:30897755;bh423939:30755653;djee6959:30763199;66
2024-03-28 14:14:30 UTC	45	IN	Data Raw: 39 35 32 38 37 35 3b 61 35 34 66 61 35 37 34 3a 33 30 39 39 33 33 34 39 3b 64 69 66 32 32 32 31 39 3a 33 30 39 36 30 34 30 32 3b 22 7d Data Ascii: 952875;a54fa574:30993349;dif22219:30960402;"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.17	49760	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:31 UTC	2559	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: 60 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=-60; StandardBias=0; TimeZoneKeyName=W. Europe Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAW3qyTdwQuptWR9Ey%2B4YsPQCwEgYbIhQ5k%2BuSZMHY2RAPXgrB9S2QxDZ8JdvVzuO3U9YAQiTv7GSi2wL9GsIqgnhvhB3obPDRIz5FzmusEo0JzTqouYgoWI6ChC96B9lPF/CWvjDik/4T5gF8NkaJg7HcCap4YDmcojPWMPPQM6gE5ZM2cfQnrDQ1AOuB8wJmVokZ2be5EksJZ%2BFtY/7AkZFm9JN2wEvZ/XqIUHtTSBpMLDwp6htEB5Og0eEO2b5wVaEV0JeY%2BHYZ%2BCzZbxfaSFnsYALo9NGT/VQmtWM7KD7HLPZvjSo/HMhCaNK7YNpbamGF1txFr/LoBYEYD5HiYUDZgAACOJrP89Dvnm5qAG3orzwOexsxXp39x2y9YU6Voww%2BWWDmGNbG9gXRZUKQ6CPt3yNUSStKuvrX6P3nBsiVVydmlauGRm%2Bd4V0ptF8bijXl6doHUNgdSfa9tmZdxZOJVpIl/%2BlWoNJFD/waVHfrm4P2U8UX7l6QWd1fFIglHFyyv6X2DdQe12Mbs0H3H9KuTryHCEiVy31PBPz1ttpBqU4JnrI0cVPe4meYPrCbFm/s1HKyMgbICLeMI3g3%2Bv8Ad4oql2iqiWjojiMfM1JKuo6879mgMUE8REyE6inyzgZVTNvJZTgdz5hjqvepIk/89U8wyf6hrybnEHlF2WL02xZlDvN3/SzppJJVizO0oEDQ7QIHug4YgqQkwuJsxEwrHYdNdlba/x2bLuCBmCoe12NzYOarwhrffx8k8VmUtmcK/RZ4DGGJMArwmLnzpgbZmH0IEHMOPRl43ojFVnqD1ulXId/I1T8wdUwJi24%2BNu1J1dy6rcmujvdOadLzXgZNxHefmpA3V6Id3DqxTW4nKl9znii3r92O7e1KHucBwN6K4Xeja%2BdIDDyj6UoIfeJfXxwYWV72QE%3D%26p%3D X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1711635269 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 78167B19EE174DA3B1267413266BEA7D X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-03-28 14:14:31 UTC	1459	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 2215 Content-Type: application/json; charset=utf-8 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: _EDGE_S=SID=26A85DBE0A0D6B060B9D49EE0B946AD4&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: MUIDB=4590362BB5CF472B95BBEDB3112D4B7B; expires=Tue, 22-Apr-2025 14:14:31 GMT; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Tue, 22-Apr-2025 14:14:31 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=26A85DBE0A0D6B060B9D49EE0B946AD4; domain=.bing.com; path=/; secure; SameSite=None X-EventID: 66057b474d7446d69fbc60cf1d9d8fde UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: E320276C9F6E4F639198DF09B26ACA30 Ref B: BL2EDGE2716 Ref C: 2024-03-28T14:14:31Z Date: Thu, 28 Mar 2024 14:14:30 GMT Connection: close
2024-03-28 14:14:31 UTC	825	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value
2024-03-28 14:14:31 UTC	1390	IN	Data Raw: 22 52 65 6d 69 6e 64 65 72 43 61 6c 65 6e 64 61 72 55 70 64 61 74 65 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 55 73 65 43 6c 6f 75 64 52 75 6c 65 46 6f 72 4c 6f 63 61 74 69 6f 6e 73 57 69 74 68 45 6e 74 69 74 79 49 64 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 43 6f 72 74 61 6e 61 48 6f 6d 65 55 73 65 72 41 63 74 69 76 69 74 79 45 6e 61 62 6c 65 64 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 58 44 65 76 69 63 65 4e 6f 74 69 66 69 63 61 74 69 6f 6e 41 63 74 69 6f 6e 73 45 6e 61 62 6c 65 64 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 43 6c 6f 75 64 41 67 Data Ascii: "ReminderCalendarUpdate":{"value":true,"feature":""},"UseCloudRuleForLocationsWithEntityId":{"value":false,"feature":""},"CortanaHomeUserActivityEnabled":{"value":true,"feature":""},"XDeviceNotificationActionsEnabled":{"value":false,"feature":""},"CloudAg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.17	49765	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-03-28 14:14:58 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=oKH7AKaDOEfh6P5&MD=PlelZS9N HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-03-28 14:14:59 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 04de580f-4e54-446c-91ef-da4dadd9c87d MS-RequestId: 14654161-9e26-40c0-bb88-ef853c652df5 MS-CV: d82jcIuUAkWSRK9d.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 28 Mar 2024 14:14:58 GMT Connection: close Content-Length: 25457
2024-03-28 14:14:59 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-03-28 14:14:59 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	15:14:09
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://gcv.microsoft.us/kgRWagmalJ
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	15:14:09
Start date:	28/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=1912,i,12631141012789215718,17048731869604151303,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://gcv.microsoft.us/kgRWagmalJ

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Windows Analysis Report
https://gcv.microsoft.us/kgRWagmalJ