Edit tour

Windows Analysis Report
http://gmail.com

Overview

General Information

Sample URL:	http://gmail.com
Analysis ID:	1427032
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

HTML body contains password input but no form action

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://gmail.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4508 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5888 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5552 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARZ0qKIHrR-OP7wuyBHgl5kCupPQoNCArmS8_o9stByQ3swkcy54UbGwOeFbS3ltHD7t_ObTxPJ2Ug&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1929935711%3A1713300719426040&theme=mn&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1321404373&timestamp=1713300722730
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARZ0qKIHrR-OP7wuyBHgl5kCupPQoNCArmS8_o9stByQ3swkcy54UbGwOeFbS3ltHD7t_ObTxPJ2Ug&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1929935711%3A1713300719426040&theme=mn&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARZ0qKIHrR-OP7wuyBHgl5kCupPQoNCArmS8_o9stByQ3swkcy54UbGwOeFbS3ltHD7t_ObTxPJ2Ug&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1929935711%3A1713300719426040&theme=mn&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1321404373&timestamp=1713300722730
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARZ0qKIHrR-OP7wuyBHgl5kCupPQoNCArmS8_o9stByQ3swkcy54UbGwOeFbS3ltHD7t_ObTxPJ2Ug&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1929935711%3A1713300719426040&theme=mn&ddm=0	HTTP Parser: Iframe src: /_/bscframe

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARZ0qKIHrR-OP7wuyBHgl5kCupPQoNCArmS8_o9stByQ3swkcy54UbGwOeFbS3ltHD7t_ObTxPJ2Ug&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1929935711%3A1713300719426040&theme=mn&ddm=0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: Title: Gmail does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARZ0qKIHrR-OP7wuyBHgl5kCupPQoNCArmS8_o9stByQ3swkcy54UbGwOeFbS3ltHD7t_ObTxPJ2Ug&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1929935711%3A1713300719426040&theme=mn&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARZ0qKIHrR-OP7wuyBHgl5kCupPQoNCArmS8_o9stByQ3swkcy54UbGwOeFbS3ltHD7t_ObTxPJ2Ug&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1929935711%3A1713300719426040&theme=mn&ddm=0	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARZ0qKIHrR-OP7wuyBHgl5kCupPQoNCArmS8_o9stByQ3swkcy54UbGwOeFbS3ltHD7t_ObTxPJ2Ug&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1929935711%3A1713300719426040&theme=mn&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARZ0qKIHrR-OP7wuyBHgl5kCupPQoNCArmS8_o9stByQ3swkcy54UbGwOeFbS3ltHD7t_ObTxPJ2Ug&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1929935711%3A1713300719426040&theme=mn&ddm=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARZ0qKIHrR-OP7wuyBHgl5kCupPQoNCArmS8_o9stByQ3swkcy54UbGwOeFbS3ltHD7t_ObTxPJ2Ug&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1929935711%3A1713300719426040&theme=mn&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&ifkv=ARZ0qKIHrR-OP7wuyBHgl5kCupPQoNCArmS8_o9stByQ3swkcy54UbGwOeFbS3ltHD7t_ObTxPJ2Ug&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1929935711%3A1713300719426040&theme=mn&ddm=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.29.13:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.15.253:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.214.29:443 -> 192.168.2.16:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.214.29:443 -> 192.168.2.16:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.214.29:443 -> 192.168.2.16:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.254:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.113.196.254:443 -> 192.168.2.16:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.254:443 -> 192.168.2.16:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.52.198:443 -> 192.168.2.16:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.118.80:443 -> 192.168.2.16:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.52.198:443 -> 192.168.2.16:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.29.13:443 -> 192.168.2.16:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.214.29:443 -> 192.168.2.16:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.29.13:443 -> 192.168.2.16:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.63.25:443 -> 192.168.2.16:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.63.25:443 -> 192.168.2.16:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.214.29:443 -> 192.168.2.16:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.22.113.133:443 -> 192.168.2.16:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.22.113.133:443 -> 192.168.2.16:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.22.113.133:443 -> 192.168.2.16:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.22.113.133:443 -> 192.168.2.16:49858 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.13
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.13
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.13
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.15.253
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.15.253
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.15.253
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.15.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.13
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.13
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.13
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.13
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 51.104.15.253
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.13
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.13
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.13
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.13

Source: global traffic	HTTP traffic detected: GET /mail/u/0/ HTTP/1.1Host: mail.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1321404373&timestamp=1713300722730 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest/threshold.appcache HTTP/1.1Accept: /Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitOrigin: https://www.bing.comAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=66ka7AY8zWtDbHC&MD=LZZ2D3WS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=st&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=2&cvid=06383237da004593a51c2cfed9916957&ig=4aa0e05b1fdf4fef8ea380075a1f6b48 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHX-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStoreX-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2X-MSEdge-ExternalExpType: JointCoordAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1713300731144&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1713300733&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=store&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=5&cvid=06383237da004593a51c2cfed9916957&ig=c3cac62bd6cb435c81e9969e065052f6 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHX-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStoreX-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2X-MSEdge-ExternalExpType: JointCoordAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1713300731144&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1713300733&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=s&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=1&cvid=06383237da004593a51c2cfed9916957&ig=fa13123c3b65485a8c0ad1d225b24786 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHX-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStoreX-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2X-MSEdge-ExternalExpType: JointCoordAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1713300731144&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1713300733&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=stor&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=4&cvid=06383237da004593a51c2cfed9916957&ig=65c7158fa9b5475fa1472641d85191b1 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHX-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStoreX-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2X-MSEdge-ExternalExpType: JointCoordAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1713300731144&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1713300733&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=sto&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=3&cvid=06383237da004593a51c2cfed9916957&ig=4eb84d662f164b0b9973aa16ab8f073b HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHX-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStoreX-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2X-MSEdge-ExternalExpType: JointCoordAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comConnection: Keep-AliveCookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1713300731144&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1713300733&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
Source: global traffic	HTTP traffic detected: GET /conf/v2/asgw/fpconfig.min.json?monitorId=asgw HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: fp.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v8.0/callerspecificdata/?market=CH&locale=en-CH&appversion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&catalogLocales=en-CH%2Cen-GB&oemId=Public&scmId=Public&moId=Public&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&pzn=1&preciseAppVersion=11910.1002.5.0&preciseDeviceFamilyVersion=2814751015241686&mfg=VMware%2C+Inc.&model=VMware20%2C1 HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseOSIsGenuine: TrueAccept: /TASIGNORE: YESMS-PreciseDeviceFamilyVersion: 2814751015241686User-Agent: WindowsStore/11910.1002.5.0MS-CV: UxEEy7KhKESwa2v1.2Accept-Language: en-CHAuthorization: Bearer MSAHW1.0=t=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&p=Content-Length: 0Content-Type: application/json; charset=UTF-8Host: storeedgefd.dsx.mp.microsoft.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /v8.0/secondarycallerspecificdata/?market=CH&locale=en-CH&appversion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&catalogLocales=en-CH%2Cen-GB&oemId=Public&scmId=Public&moId=Public&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&preciseAppVersion=11910.1002.5.0&preciseDeviceFamilyVersion=2814751015241686 HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseOSIsGenuine: TrueAccept: /TASIGNORE: YESMS-PreciseDeviceFamilyVersion: 2814751015241686User-Agent: WindowsStore/11910.1002.5.0MS-CV: UxEEy7KhKESwa2v1.1Accept-Language: en-CHAuthorization: Bearer MSAHW1.0=t=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&p=Content-Length: 0Content-Type: application/json; charset=UTF-8Host: storeedgefd.dsx.mp.microsoft.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /v8.0/callerspecificdata/?market=CH&locale=en-CH&appversion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&catalogLocales=en-CH%2Cen-GB&oemId=Public&scmId=Public&moId=Public&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&pzn=0&preciseAppVersion=11910.1002.5.0&preciseDeviceFamilyVersion=2814751015241686&mfg=VMware%2C+Inc.&model=VMware20%2C1 HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseOSIsGenuine: TrueAccept: /TASIGNORE: YESMS-PreciseDeviceFamilyVersion: 2814751015241686User-Agent: WindowsStore/11910.1002.5.0MS-CV: UxEEy7KhKESwa2v1.3Accept-Language: en-CHAuthorization: Bearer MSAHW1.0=t=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&p=Content-Length: 0Content-Type: application/json; charset=UTF-8Host: storeedgefd.dsx.mp.microsoft.comConnection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /v8.0/pages/chrome?appversion=11910.1002.0.0&market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&pzn=0&userSegments=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
Source: global traffic	HTTP traffic detected: GET /v8.0/pages/home?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&hydrateCount=3&deviceFamilyVersion=2814750970478592&pzn=0&userSegments=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
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?e3bfee56476065f0ab149b748f731e37 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: l-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?abf6b0b4363a8fb8ec7d6cce4a4b9cc3 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: l-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v8.0/pages/home?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&hydrateCount=3&deviceFamilyVersion=2814750970478592&pzn=0&userSegments=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
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?dc1aa3056d31478dcc0798188196ffde HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: teams-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?7bf22ffe445c3280828f728bc0dbb2b3 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: teams-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /apc/trans.gif?be502d8ba45b794bb9a4ed7b34197dc5 HTTP/1.1Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: ln-ring.msedge.netConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v8.0/recommendations/collections/Collection/Home.FC1?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&pageSize=15&cardsEnabled=true&pzn=0 HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseuserSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c2024
Source: global traffic	HTTP traffic detected: GET /v8.0/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW
Source: global traffic	HTTP traffic detected: GET /v8.0/recommendations/collections/TopFree?market=CH&locale=en-CH&mediaType=APPS&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&pageSize=15&cardsEnabled=true&pzn=0 HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseuserSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c2
Source: global traffic	HTTP traffic detected: GET /v8.0/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW
Source: global traffic	HTTP traffic detected: GET /v8.0/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW
Source: global traffic	HTTP traffic detected: GET /v8.0/recommendations/collections/TopFree?market=CH&locale=en-CH&mediaType=GAMES&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&pageSize=15&cardsEnabled=true&pzn=0 HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseuserSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c
Source: global traffic	HTTP traffic detected: GET /v8.0/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW
Source: global traffic	HTTP traffic detected: GET /v8.0/pages/search?appversion=11910.1002.0.0&market=CH&locale=en-CH&catalogLocales=en-CH%2Cen-GB&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&oemId=Public&scmId=Public&moId=Public&query=trello&navItemId=Home&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x/h2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j/E7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM/gOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga/fF1TaSmfcmlDS9rqcl8k/sG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt/AR/IwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk/+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB/Pfrc5UPdhNsb8zc8EU1Q4WKN+/y+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB/iJ1R1g/+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc/gVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK/50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW/TjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3/GSOz4cgioMMmrVpIMK/8M6fIIUUehZ6+9YmNpqEG/FvQZpNNkbyafd4/sawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr/hsmEu13e5mNyk+xISTJQ+US9A/Uo0NHxKQIjEev3F/eEgP/ob9LKMRNYwfqz+mNLUtJwDmrA9N/Yk62Aeasba4jU7a/wTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr/DCmzZjqfcG2K73TdzvnIlEb/lv2b6wB+L7WfkP0kR9oGUf/+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v/rLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb/h9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU/wh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv/OgWnroYVXiNqCbBDZ/QGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n/nhKSowEOrNqly/u8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy/MQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm/VcsrY7TPk8jC/IAqruaud2eIV0cKnnFN2cRll/jBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL/3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo/6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB/vORSsNvT2J3TF4DG/EB8UfdaxKrb2tUc9SXzOgdT/Mkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW5upF4Hmf6/
Source: global traffic	HTTP traffic detected: GET /v8.0/pages/searchAllResults?appVersion=11910.1002.0.0&market=CH&locale=en-CH&deviceFamily=windows.desktop&query=trello&mediaType=all&availableOn=windows.desktop&deviceFamilyVersion=2814750970478592&catalogLocales=en-CH%2Cen-GB&oemId=Public&scmId=Public&moId=Public&pzn=0&userSegments=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
Source: global traffic	HTTP traffic detected: GET /v8.0/search?market=CH&locale=en-CH&pageSize=15&query=trello&mediaType=TV&moId=Public&oemId=Public&scmId=Public&deviceFamily=windows.desktop&appVersion=11910.1002.0.0&catalogLocales=en-CH%2cen-GB&availableOn=windows.desktop&deviceFamilyVersion=2814750970478592&&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP
Source: global traffic	HTTP traffic detected: GET /7/713f2900-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1Accept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: musicart.xboxlive.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /7/f5855100-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1Accept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: musicart.xboxlive.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /7/b7654500-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1Accept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: musicart.xboxlive.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /7/45172400-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1Accept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: musicart.xboxlive.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /7/fd965100-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1Accept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: musicart.xboxlive.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /7/27ea1000-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1Accept: /Accept-Language: en-CHAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: musicart.xboxlive.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /v8.0/pages/pdp?productId=9NBLGGH4XXVW&itemType=Apps&appversion=11910.1002.0.0&market=CH&locale=en-CH&deviceFamily=Windows.Desktop&catalogLocales=en-CH%2Cen-GB&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&preciseDeviceFamilyVersion=2814751015241686&deviceFamilyVersion=2814750970478592&architecture=x64&deviceFamilyFilter=Windows.Desktop&displayMode=3&oemId=Public&scmId=Public&moId=Public&hydrateCount=0&cacheable=False&pzn=0&userSegments=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
Source: global traffic	HTTP traffic detected: GET /v8.0/ratings/summary/product/9NBLGGH4XXVW?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyFilter=Windows.Desktop&hardware=arm0%2carm640%2cble0%2ccmb0%2ccmf0%2ccmr0%2cdcb1%2cdcc1%2cdx91%2cdxa1%2cdxb1%2cgyr0%2chce0%2chdc0%2chov0%2chsa0%2chss1%2ckbd1%2cm041%2cm060%2cm080%2cm120%2cm160%2cm200%2cm301%2cm751%2cmA01%2cmct0%2cmgn0%2cmic0%2cmrc0%2cmse1%2cmT01%2cnfc0%2crs10%2crs20%2crs30%2crs40%2crs50%2crs60%2ctch0%2ctel0%2cv010%2cv020%2cv040%2cx641%2cx860%2cx86a640%2cxbd0%2cxbo0%2cxbs0%2cxbx0%2cxgp0&packageHardware=dcb%2cdcc%2cdx9%2cdxa%2cdxb%2cm30%2cm75%2cmA0%2cmT0&architecture=x64&displayMode=3&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6Sb
Source: global traffic	HTTP traffic detected: GET /v8.0/recommendations/bundlesByProduct/9NBLGGH4XXVW?market=CH&locale=en-CH&architecture=x64&moId=Public&oemId=Public&scmId=Public&hardware=arm0%2carm640%2cble0%2ccmb0%2ccmf0%2ccmr0%2cdcb1%2cdcc1%2cdx91%2cdxa1%2cdxb1%2cgyr0%2chce0%2chdc0%2chov0%2chsa0%2chss1%2ckbd1%2cm041%2cm060%2cm080%2cm120%2cm160%2cm200%2cm301%2cm751%2cmA01%2cmct0%2cmgn0%2cmic0%2cmrc0%2cmse1%2cmT01%2cnfc0%2crs10%2crs20%2crs30%2crs40%2crs50%2crs60%2ctch0%2ctel0%2cv010%2cv020%2cv040%2cx641%2cx860%2cx86a640%2cxbd0%2cxbo0%2cxbs0%2cxbx0%2cxgp0&packageHardware=dcb%2cdcc%2cdx9%2cdxa%2cdxb%2cm30%2cm75%2cmA0%2cmT0&deviceFamily=Windows.Desktop&catalogLocales=en-CH%2cen-GB&pageSize=15&appVersion=11910.1002.0.0&cardsEnabled=true&pzn=0 HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseuserSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,pr
Source: global traffic	HTTP traffic detected: GET /v8.0/filters/pdpReview?market=CH&locale=en-CH&appVersion=11910.1002.0.0&architecture=x64&hardware=arm0%2carm640%2cble0%2ccmb0%2ccmf0%2ccmr0%2cdcb1%2cdcc1%2cdx91%2cdxa1%2cdxb1%2cgyr0%2chce0%2chdc0%2chov0%2chsa0%2chss1%2ckbd1%2cm041%2cm060%2cm080%2cm120%2cm160%2cm200%2cm301%2cm751%2cmA01%2cmct0%2cmgn0%2cmic0%2cmrc0%2cmse1%2cmT01%2cnfc0%2crs10%2crs20%2crs30%2crs40%2crs50%2crs60%2ctch0%2ctel0%2cv010%2cv020%2cv040%2cx641%2cx860%2cx86a640%2cxbd0%2cxbo0%2cxbs0%2cxbx0%2cxgp0&packageHardware=dcb%2cdcc%2cdx9%2cdxa%2cdxb%2cm30%2cm75%2cmA0%2cmT0&deviceFamily=Windows.Desktop&catalogLocales=en-CH%2cen-GB&deviceFamilyFilter=Windows.Desktop&productId=9NBLGGH4XXVW&displayMode=3&oemId=Public&scmId=Public&moId=Public&deviceFamilyVersion=2814750970478592&deviceFamilyVersion=2814750970478592&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuU
Source: global traffic	HTTP traffic detected: GET /v8.0/ratings/product/9NBLGGH4XXVW?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyFilter=Windows.Desktop&hardware=arm0%2carm640%2cble0%2ccmb0%2ccmf0%2ccmr0%2cdcb1%2cdcc1%2cdx91%2cdxa1%2cdxb1%2cgyr0%2chce0%2chdc0%2chov0%2chsa0%2chss1%2ckbd1%2cm041%2cm060%2cm080%2cm120%2cm160%2cm200%2cm301%2cm751%2cmA01%2cmct0%2cmgn0%2cmic0%2cmrc0%2cmse1%2cmT01%2cnfc0%2crs10%2crs20%2crs30%2crs40%2crs50%2crs60%2ctch0%2ctel0%2cv010%2cv020%2cv040%2cx641%2cx860%2cx86a640%2cxbd0%2cxbo0%2cxbs0%2cxbx0%2cxgp0&packageHardware=dcb%2cdcc%2cdx9%2cdxa%2cdxb%2cm30%2cm75%2cmA0%2cmT0&architecture=x64&orderBy=5&pageSize=10&displayMode=3&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4
Source: global traffic	HTTP traffic detected: GET /v7.0/products/9NBLGGH4XXVW/?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=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&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.17.1.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/9NBLGGH4XXVW/0010?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=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&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.23.2.2.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v8.0/products/9NBLGGH4XXVW?appversion=11910.1002.0.0&idType=ProductId&market=CH&locale=en-CH&deviceFamily=Windows.Desktop&catalogLocales=en-CH%2Cen-GB&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&deviceFamilyVersion=2814750970478592&preciseDeviceFamilyVersion=2814751015241686&architecture=x64&pzn=0 HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseuserSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotif
Source: global traffic	HTTP traffic detected: GET /v8.0/oemdiscovery?oemId=&scmId=&phoneManufacturerName=&smBiosManufacturerName=VMware%2C+Inc.&phoneDeviceModel=&smBiosDm=VMware20%2C1 HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseuserSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,tr
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=66ka7AY8zWtDbHC&MD=LZZ2D3WS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v8.0/oemdiscovery?oemId=&scmId=&phoneManufacturerName=&smBiosManufacturerName=VMware%2C+Inc.&phoneDeviceModel=&smBiosDm=VMware20%2C1 HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseuserSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,tr
Source: global traffic	HTTP traffic detected: GET /v8.0/background/pages/livetile?appversion=11910.1002.0.0&market=CH&locale=en-CH&deviceFamily=Windows.Desktop HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseuserSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr
Source: global traffic	HTTP traffic detected: GET /v8.0/errorinfo?context=WU&code=0x80070422&market=CH&locale=en-CH&deviceFamily=Windows.Desktop&pzn=0 HTTP/1.1OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989fAccept-Encoding: gzip, deflateOSIsSMode: FalseuserSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi
Source: global traffic	HTTP traffic detected: GET /v8.0/pages/mylibrary?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&catalogLocales=en-CH%2Cen-GB&moId=Public&oemId=Public&scmId=Public&appversion=11910.1002.0.0&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&preciseDeviceFamilyVersion=2814751015241686&architecture=x64&pzn=0&userSegments=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
Source: global traffic	HTTP traffic detected: GET /v8.0/devicequalificationoffers?market=CH&locale=en-CH&architecture=x64&moId=Public&oemId=Public&scmId=Public&hardware=arm0%2carm640%2cble0%2ccmb0%2ccmf0%2ccmr0%2cdcb1%2cdcc1%2cdx91%2cdxa1%2cdxb1%2cgyr0%2chce0%2chdc0%2chov0%2chsa0%2chss1%2ckbd1%2cm041%2cm060%2cm080%2cm120%2cm160%2cm200%2cm301%2cm751%2cmA01%2cmct0%2cmgn0%2cmic0%2cmrc0%2cmse1%2cmT01%2cnfc0%2crs10%2crs20%2crs30%2crs40%2crs50%2crs60%2ctch0%2ctel0%2cv010%2cv020%2cv040%2cx641%2cx860%2cx86a640%2cxbd0%2cxbo0%2cxbs0%2cxbx0%2cxgp0&packageHardware=dcb%2cdcc%2cdx9%2cdxa%2cdxb%2cm30%2cm75%2cmA0%2cmT0&deviceFamily=Windows.Desktop&catalogLocales=en-CH%2cen-GB&pageSize=15&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.549981C3F5F10_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=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&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.3.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.BingWeather_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=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&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.5.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.DesktopAppInstaller_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=EwCYBF8iAQAU28X5hAkumfrDedQ+i9LVQH6YOAgAAeuljf3yihTEb0apRr7s//ERrDruG4IRMP9IXDkFxviXUw28eaQoqwUfAaf1CIXjUf4cqPcVoQ1YaTTH3WKts+FtW+PWLvB6YF0YZYPvAC0l9SIuoRQTxmnR/EgZoAjzXFZnnwQ7II1bt7T4yMgl1nfEc5Ym5KXArrfosIUrvtCVvEwiawftHd1niYtLCC4TCQtUejyJ0dSiwtVQXgBh/gqiR6aI++bLpENAFt8UopAffUqo45eUe6uLJXCIyd5YE55HTT5NoQUhydKLsM29vlxhkjBwJrQhRQdTfjnV8jyc3WCPQrGh4LQb2I8Otbecp5k1YTNBXtcqecmrAX4XXzsDZgAACElLWVbRXpKaaAMiJ7jLPDfqXRgcw4Ypj3Iha2yQCEZuCpDzPvzyjb3ZdC2UMWFYSM5olCyp0dLZjvwUeoAqs35QdlWZDQZla16FurEogZo+QIR8ZKNOh97S9IKRvkCT3pN/pW5AMK6bFZ/GAcpzLlG13vXPymCfa++xNe6Lvih5GrLQD/Y926PZVScuK00BiXDn2CZ54u02k4yx6s84Q/Zh3yS2i0yzqgLBr0lbHQ++cdv5C0mWbMoNpOT5cV3AW7DMH8lat6egIDLzHvznOBmyKwoR9Xmtlk3W1DCKh25+tg2Obmpxyb9fbZvsFxlroP8IBNYnsnoyuk8NbTYAxDuIbCpn83S+rQ5J72z9g02r8KLCOtRbCvT8gHYjUSjyU2f4a4ybST0ySJv9sEBpToNURaezDjDd4AjvNLUEn+N0xLCPR/GQ031D9MSHo8Vb/8PnT6zLStg6SON4+jaVq6nFGYbfiYHbDZ/VVmlP8+bYhkHcxR5hRwhCxWk+AP7N7cVnJFrmQre8eTfX9Pwa1NJzc1R1edQgGYeEdBXKVyHCoU1eONfw75xSdyrRHdvFeJ7yarUXkDgglAe6MYkWWCqlBjm2IMWy/UBrBoBVR7nNlvggfduqqZh+YoHy465d13N8/uWPcgFYUzjR5yg7x52GWvH8l2VaRR3Bzq8DQI2BvwDzCH7HHSFfecAG1FdICr5CHbd+9tAcVU3CCkWojVO/BiHl74RDWRndYKI+ryYcjy8FzkbciGgsy7vkMj+4xAag/FW7sHeEHAxdTlKmvxPkMXgB8r2F41qNyoMAQ3GWpE+awqk5l1gQzLKEPBBpJLqeSy2QSP+eExdn3lNE9Y3/DIA4Sio9uVxsv6ZKlwuqC5L0l90MN+IFcvogsQVq+/dn7VI4CDNnpC4Z4AJYXcaPOooh5sQEfJ9qW0OIkZ83IDZRbkgp0Y2HONOzwdhuKUXUbHTqp6aXP5TuN4Mb1gwm6zIEVLYPx7i2TUm27oXPwJ8Hp5wYOA/myVbXHWIEJ/qf+A47O2RcBmoSczOJkHMS/Hce8GD3QJ2LxfdTb90yOH8ADFKIeSn+pbbedpjPJO6efv9XIjslg7EQmDmh9dGumoDqloUxmywylEVLx8wanOp+JZ2rjP32cVe0qdNKVh5tysq3q3mzYQkrQVd7vpAjo5sD&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.7.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.GetHelp_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=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&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.9.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.Getstarted_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=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&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.11.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.HEIFImageExtension_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=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&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.13.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.Microsoft3DViewer_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=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&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.15.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=EwCYBF8iAQAU28X5hAkumfrDedQ+i9LVQH6YOAgAAeuljf3yihTEb0apRr7s//ERrDruG4IRMP9IXDkFxviXUw28eaQoqwUfAaf1CIXjUf4cqPcVoQ1YaTTH3WKts+FtW+PWLvB6YF0YZYPvAC0l9SIuoRQTxmnR/EgZoAjzXFZnnwQ7II1bt7T4yMgl1nfEc5Ym5KXArrfosIUrvtCVvEwiawftHd1niYtLCC4TCQtUejyJ0dSiwtVQXgBh/gqiR6aI++bLpENAFt8UopAffUqo45eUe6uLJXCIyd5YE55HTT5NoQUhydKLsM29vlxhkjBwJrQhRQdTfjnV8jyc3WCPQrGh4LQb2I8Otbecp5k1YTNBXtcqecmrAX4XXzsDZgAACElLWVbRXpKaaAMiJ7jLPDfqXRgcw4Ypj3Iha2yQCEZuCpDzPvzyjb3ZdC2UMWFYSM5olCyp0dLZjvwUeoAqs35QdlWZDQZla16FurEogZo+QIR8ZKNOh97S9IKRvkCT3pN/pW5AMK6bFZ/GAcpzLlG13vXPymCfa++xNe6Lvih5GrLQD/Y926PZVScuK00BiXDn2CZ54u02k4yx6s84Q/Zh3yS2i0yzqgLBr0lbHQ++cdv5C0mWbMoNpOT5cV3AW7DMH8lat6egIDLzHvznOBmyKwoR9Xmtlk3W1DCKh25+tg2Obmpxyb9fbZvsFxlroP8IBNYnsnoyuk8NbTYAxDuIbCpn83S+rQ5J72z9g02r8KLCOtRbCvT8gHYjUSjyU2f4a4ybST0ySJv9sEBpToNURaezDjDd4AjvNLUEn+N0xLCPR/GQ031D9MSHo8Vb/8PnT6zLStg6SON4+jaVq6nFGYbfiYHbDZ/VVmlP8+bYhkHcxR5hRwhCxWk+AP7N7cVnJFrmQre8eTfX9Pwa1NJzc1R1edQgGYeEdBXKVyHCoU1eONfw75xSdyrRHdvFeJ7yarUXkDgglAe6MYkWWCqlBjm2IMWy/UBrBoBVR7nNlvggfduqqZh+YoHy465d13N8/uWPcgFYUzjR5yg7x52GWvH8l2VaRR3Bzq8DQI2BvwDzCH7HHSFfecAG1FdICr5CHbd+9tAcVU3CCkWojVO/BiHl74RDWRndYKI+ryYcjy8FzkbciGgsy7vkMj+4xAag/FW7sHeEHAxdTlKmvxPkMXgB8r2F41qNyoMAQ3GWpE+awqk5l1gQzLKEPBBpJLqeSy2QSP+eExdn3lNE9Y3/DIA4Sio9uVxsv6ZKlwuqC5L0l90MN+IFcvogsQVq+/dn7VI4CDNnpC4Z4AJYXcaPOooh5sQEfJ9qW0OIkZ83IDZRbkgp0Y2HONOzwdhuKUXUbHTqp6aXP5TuN4Mb1gwm6zIEVLYPx7i2TUm27oXPwJ8Hp5wYOA/myVbXHWIEJ/qf+A47O2RcBmoSczOJkHMS/Hce8GD3QJ2LxfdTb90yOH8ADFKIeSn+pbbedpjPJO6efv9XIjslg7EQmDmh9dGumoDqloUxmywylEVLx8wanOp+JZ2rjP32cVe0qdNKVh5tysq3q3mzYQkrQVd7vpAjo5sD&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.17.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=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&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.19.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=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&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.21.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.MixedReality.Portal_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=EwCYBF8iAQAU28X5hAkumfrDedQ+i9LVQH6YOAgAAeuljf3yihTEb0apRr7s//ERrDruG4IRMP9IXDkFxviXUw28eaQoqwUfAaf1CIXjUf4cqPcVoQ1YaTTH3WKts+FtW+PWLvB6YF0YZYPvAC0l9SIuoRQTxmnR/EgZoAjzXFZnnwQ7II1bt7T4yMgl1nfEc5Ym5KXArrfosIUrvtCVvEwiawftHd1niYtLCC4TCQtUejyJ0dSiwtVQXgBh/gqiR6aI++bLpENAFt8UopAffUqo45eUe6uLJXCIyd5YE55HTT5NoQUhydKLsM29vlxhkjBwJrQhRQdTfjnV8jyc3WCPQrGh4LQb2I8Otbecp5k1YTNBXtcqecmrAX4XXzsDZgAACElLWVbRXpKaaAMiJ7jLPDfqXRgcw4Ypj3Iha2yQCEZuCpDzPvzyjb3ZdC2UMWFYSM5olCyp0dLZjvwUeoAqs35QdlWZDQZla16FurEogZo+QIR8ZKNOh97S9IKRvkCT3pN/pW5AMK6bFZ/GAcpzLlG13vXPymCfa++xNe6Lvih5GrLQD/Y926PZVScuK00BiXDn2CZ54u02k4yx6s84Q/Zh3yS2i0yzqgLBr0lbHQ++cdv5C0mWbMoNpOT5cV3AW7DMH8lat6egIDLzHvznOBmyKwoR9Xmtlk3W1DCKh25+tg2Obmpxyb9fbZvsFxlroP8IBNYnsnoyuk8NbTYAxDuIbCpn83S+rQ5J72z9g02r8KLCOtRbCvT8gHYjUSjyU2f4a4ybST0ySJv9sEBpToNURaezDjDd4AjvNLUEn+N0xLCPR/GQ031D9MSHo8Vb/8PnT6zLStg6SON4+jaVq6nFGYbfiYHbDZ/VVmlP8+bYhkHcxR5hRwhCxWk+AP7N7cVnJFrmQre8eTfX9Pwa1NJzc1R1edQgGYeEdBXKVyHCoU1eONfw75xSdyrRHdvFeJ7yarUXkDgglAe6MYkWWCqlBjm2IMWy/UBrBoBVR7nNlvggfduqqZh+YoHy465d13N8/uWPcgFYUzjR5yg7x52GWvH8l2VaRR3Bzq8DQI2BvwDzCH7HHSFfecAG1FdICr5CHbd+9tAcVU3CCkWojVO/BiHl74RDWRndYKI+ryYcjy8FzkbciGgsy7vkMj+4xAag/FW7sHeEHAxdTlKmvxPkMXgB8r2F41qNyoMAQ3GWpE+awqk5l1gQzLKEPBBpJLqeSy2QSP+eExdn3lNE9Y3/DIA4Sio9uVxsv6ZKlwuqC5L0l90MN+IFcvogsQVq+/dn7VI4CDNnpC4Z4AJYXcaPOooh5sQEfJ9qW0OIkZ83IDZRbkgp0Y2HONOzwdhuKUXUbHTqp6aXP5TuN4Mb1gwm6zIEVLYPx7i2TUm27oXPwJ8Hp5wYOA/myVbXHWIEJ/qf+A47O2RcBmoSczOJkHMS/Hce8GD3QJ2LxfdTb90yOH8ADFKIeSn+pbbedpjPJO6efv9XIjslg7EQmDmh9dGumoDqloUxmywylEVLx8wanOp+JZ2rjP32cVe0qdNKVh5tysq3q3mzYQkrQVd7vpAjo5sD&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.23.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.MSPaint_8wekyb3d8bbwe HTTP/1.1Connection: Keep-AliveContent-Type: application/jsonAuthorization: MSAHW1.0=t=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&p=User-Agent: Install ServiceMS-CV: UxEEy7KhKESwa2v1.36.0.25.3Host: displaycatalog.mp.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gmail.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_188.1.dr

String found in binary or memory: _.Hw(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.Hw(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.Hw(_.Qw(c))+"&hl="+_.Hw(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.Hw(m)+"/chromebook/termsofservice.html?languageCode="+_.Hw(d)+"&regionCode="+_.Hw(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded":"")+"?hl="+_.Hw(d)+"&gl="+_.Hw(c)+(h?"&color_scheme="+ equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: gmail.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 3592Host: login.live.com

Source: chromecache_188.1.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_188.1.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_174.1.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_188.1.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_188.1.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_188.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_188.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_188.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_188.1.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_188.1.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_188.1.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_188.1.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_188.1.dr	String found in binary or memory: https://policies.google.com/privacy/additional/embedded?gl=kr
Source: chromecache_188.1.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_188.1.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_188.1.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_188.1.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_188.1.dr	String found in binary or memory: https://policies.google.com/terms/location/embedded
Source: chromecache_188.1.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_v1.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/get_family_link_2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_0.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_0.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/alreadyinstalledfamilylink.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/installfamilylink.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_188.1.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_188.1.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_174.1.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_188.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_188.1.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_188.1.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_188.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_188.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_188.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_188.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_188.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_188.1.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_188.1.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_188.1.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.16:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.29.13:443 -> 192.168.2.16:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 51.104.15.253:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.16:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.16:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.16:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.214.29:443 -> 192.168.2.16:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.214.29:443 -> 192.168.2.16:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.214.29:443 -> 192.168.2.16:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.254:443 -> 192.168.2.16:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.113.196.254:443 -> 192.168.2.16:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.254:443 -> 192.168.2.16:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49801 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49802 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.200.10:443 -> 192.168.2.16:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.52.198:443 -> 192.168.2.16:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.118.80:443 -> 192.168.2.16:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.52.198:443 -> 192.168.2.16:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.29.13:443 -> 192.168.2.16:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.214.29:443 -> 192.168.2.16:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.29.13:443 -> 192.168.2.16:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.63.25:443 -> 192.168.2.16:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.63.25:443 -> 192.168.2.16:49839 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.214.29:443 -> 192.168.2.16:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49847 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49850 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.185.73.156:443 -> 192.168.2.16:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.22.113.133:443 -> 192.168.2.16:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.22.113.133:443 -> 192.168.2.16:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.22.113.133:443 -> 192.168.2.16:49857 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.22.113.133:443 -> 192.168.2.16:49858 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@19/42@12/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://gmail.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5888 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5552 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5888 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5552 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://play.google/intl/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www3.l.google.com	74.125.138.101	true	false	high
play.google.com	74.125.138.139	true	false	high
mail.google.com	74.125.136.83	true	false	high
www.google.com	142.250.105.103	true	false	high
gmail.com	142.250.9.17	true	false	high
accounts.youtube.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://musicart.xboxlive.com/7/f5855100-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190	false	high
https://musicart.xboxlive.com/7/b7654500-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190	false	high
https://mail.google.com/mail/u/0/	false	high
https://www.google.com/favicon.ico	false	high
https://musicart.xboxlive.com/7/27ea1000-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190	false	high
https://musicart.xboxlive.com/7/fd965100-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190	false	high
https://musicart.xboxlive.com/7/713f2900-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190	false	high
http://gmail.com/	false	high
https://musicart.xboxlive.com/7/45172400-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://play.google/intl/	chromecache_188.1.dr	false	URL Reputation: safe	unknown
https://families.google.com/intl/	chromecache_188.1.dr	false		high
https://youtube.com/t/terms?gl=	chromecache_188.1.dr	false		high
https://policies.google.com/technologies/location-data	chromecache_188.1.dr	false		high
https://www.google.com/intl/	chromecache_188.1.dr	false		high
https://apis.google.com/js/api.js	chromecache_174.1.dr	false		high
https://policies.google.com/privacy/google-partners	chromecache_188.1.dr	false		high
https://play.google.com/work/enroll?identifier=	chromecache_188.1.dr	false		high
https://policies.google.com/terms/service-specific	chromecache_188.1.dr	false		high
https://g.co/recover	chromecache_188.1.dr	false		high
https://policies.google.com/privacy/additional	chromecache_188.1.dr	false		high
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_188.1.dr	false		high
https://policies.google.com/technologies/cookies	chromecache_188.1.dr	false		high
https://policies.google.com/terms	chromecache_188.1.dr	false		high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_174.1.dr	false		high
https://www.google.com	chromecache_188.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_188.1.dr	false		high
https://policies.google.com/privacy/additional/embedded?gl=kr	chromecache_188.1.dr	false		high
https://policies.google.com/terms/location/embedded	chromecache_188.1.dr	false		high
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_188.1.dr	false		high
https://support.google.com/accounts?hl=	chromecache_188.1.dr	false		high
https://policies.google.com/privacy	chromecache_188.1.dr	false		high
https://support.google.com/accounts?p=new-si-ui	chromecache_188.1.dr	false		high
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_188.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.136.83	mail.google.com	United States	15169	GOOGLEUS	false
142.250.105.103	www.google.com	United States	15169	GOOGLEUS	false
142.250.105.147	unknown	United States	15169	GOOGLEUS	false
142.250.9.17	gmail.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
74.125.138.101	www3.l.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1427032
Start date and time:	2024-04-16 22:51:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://gmail.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	24
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@19/42@12/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, backgroundTaskHost.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe, wuapihost.exe
Excluded IPs from analysis (whitelisted): 142.251.15.94, 173.194.219.101, 173.194.219.113, 173.194.219.139, 173.194.219.102, 173.194.219.138, 173.194.219.100, 172.253.124.84, 34.104.35.123, 142.250.105.94, 142.250.9.94, 142.250.9.95, 172.253.124.95, 142.250.105.95, 173.194.219.95, 64.233.185.95, 64.233.177.95, 64.233.176.95, 142.251.15.95, 74.125.138.95, 74.125.136.95, 108.177.122.95, 172.217.215.95, 142.250.105.84, 72.21.81.240, 23.46.202.149
Excluded domains from analysis (whitelisted): fs.microsoft.com, l-ring.msedge.net, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, purchase.mp.microsoft.com, fe3cr.delivery.mp.microsoft.com, ln-ring.msedge.net, licensing.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, login.live.com, store-images.s-microsoft.com, displaycatalog.mp.microsoft.com, musicart.xboxlive.com, clients.l.google.com, www.gstatic.com, teams-ring.msedge.net, livetileedge.dsx.mp.microsoft.com, storeedgefd.dsx.mp.microsoft.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: http://gmail.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 19:51:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9928464885956627
Encrypted:	false
SSDEEP:	48:8DxdWTSi/HYidAKZdA1FehwiZUklqehly+3:8DajWmy
MD5:	A5F23040468CDD42A61D7709D837F8FF
SHA1:	EAB57B31DC3CF1C897ADB3BAD0C9C1196C287051
SHA-256:	0473B7BB89F7FBDC87AD7AEE144A4378AE2A1FD1AAEE02630C7FF0EAF3116A26
SHA-512:	331831A18B76370B3560A111B151BEB3803F865F979D4387798CD780D9B29460E857CD0D9B3F68BD53787D659E32FC5FB69A90DE2F44D69A06138BCEB742E92D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....\.&.?...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xv.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............&.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 19:51:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.012583862054201
Encrypted:	false
SSDEEP:	48:8NdWTSi/HYidAKZdA1seh/iZUkAQkqehWy+2:8Wjw9Q/y
MD5:	6C289A82D5DD329AFD50424ACCEDB69E
SHA1:	906AE1518070BFC5DB326A1E43A880AC6F1BFD72
SHA-256:	0574405AF4F69618DC9F81E83109DFC1A09D4F1CB33AF8E33E2DE81783B663FF
SHA-512:	957DD6A09C6B776E5AEF6233668E9C38B52647CE83467C038CC0F80E0555BE315EA0B2F0C7414620F457D671F5C68F7808D4DAD60837A4B356088D4C6DFAFB70
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........?...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xv.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............&.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.015833868873524
Encrypted:	false
SSDEEP:	48:8wdWTSiAHYidAKZdA14meh7sFiZUkmgqeh7sYy+BX:8djJniy
MD5:	7732319128E757C7199A1BABEDD4CF41
SHA1:	B870348482023F1BBB9F352271DCA286F5F2CF44
SHA-256:	18268C77257FEBD9E7CF8740C418E00D71BD10269700A012BA1B31F3E11EBEC2
SHA-512:	3AE5FC595522127EA65B017363A820F61304D02F1B3AAB6D510F250F973F1AFFED83FCCB74089E9A39F8A453C3F572B25E16A1F3E4FAAD652A9D7511EF8DB39D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xv.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............&.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 19:51:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.008068973036493
Encrypted:	false
SSDEEP:	48:8ddWTSi/HYidAKZdA1TehDiZUkwqehKy+R:8GjrAy
MD5:	A8B5BDE68ED7E59548C35E5FFCDB8EBA
SHA1:	FAE9E552EA5780E25CC2A3E52AC19C7791C91EAF
SHA-256:	897E98681BAC22526F888FBAF1E6CD5A8CABFCC17E37BDE0AEFF026D01F6DDED
SHA-512:	023F3D83BE4FBD1923EAF87B235B634DCACF48CE8EFB99490DF188280B4CFFF5680A509491AEEBB647D24FC25F0CC01A86ADA3C388FF2D6223BE27D56A189DCF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........?...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xv.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............&.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 19:51:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9957063512996553
Encrypted:	false
SSDEEP:	48:8NdWTSi/HYidAKZdA1dehBiZUk1W1qehky+C:8WjL9Ey
MD5:	824088C040FFE343EDC78E0D771DE8B0
SHA1:	FD91A55395D654683518151936795E72DE47CEE3
SHA-256:	802AFE5345DB8686E3DD96F6468AC160BDEEA08C8F2F38FAB6041F8B37EC8C1F
SHA-512:	4D192B502725349F9B9AA71FF2AFFDDBB489852FBF7DDF2DC0CC4F50CE89FEE721CC1DCD2D78661C708990B74D0E59202CC58F710B875B167277C2B132E7E143
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....6 .?...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xv.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............&.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Apr 16 19:51:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.008082153995017
Encrypted:	false
SSDEEP:	48:8tdWTSi/HYidAKZdA1duTeehOuTbbiZUk5OjqehOuTbiy+yT+:82jPTfTbxWOvTbiy7T
MD5:	2BA452B4F3C7241D9A1AB2FA352E0730
SHA1:	CC0F42515F6D756B0CEFA34788743396DFFAD776
SHA-256:	FF3B84A6ACB153BE5796837D9C93BB65F089F0A59503575E0DCF84D6C84D6751
SHA-512:	C1935B042E560CA76D7846F1ABECFF6A1A95684586215F24CFA666216E84F79BCD676A2A429A200D6A7F479BE97CA212777992D73A762FC34C1A59296519A3B0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....B..?...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.Xv.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X}.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X}............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............&.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	749
Entropy (8bit):	4.70368920713592
Encrypted:	false
SSDEEP:	12:t4nolW84qhebl8cP5UbKEBnStLJdJad+DB3xELFkXUIx+RWuSrtUjAC9ZiCWInLE:t4olS+2x5UbKrTJ9DA0YWrrmWCFzfIvB
MD5:	AA920B32443219E3EDFA32DEF5EBD457
SHA1:	8A4B47D0A2CA261803AA5C1A9DDE7BA3FE15B298
SHA-256:	E5773339E56DD15D8DAAB94CE6ED5D444D1EF0B61355E20854234605BB2E755B
SHA-512:	C45BDB233447E1F4D3B4B5174A328E3D8987C9B5E2E12733E5027173B0302919680901C311094714CFC32AC2F2C749DC9EB95FFCAA8F5DA1E5EBEF3FB7225E37
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="36" viewBox="0 0 36 36" width="36"><path d="M34.32 18.39c0-1.17-.11-2.3-.29-3.39H18v6.48h9.4c-.38 2.19-1.59 4.05-3.42 5.31v4.1h5.28c3.2-2.97 5.06-7.33 5.06-12.5z" fill="#4285F4"/><path d="M18 35c4.59 0 8.44-1.52 11.25-4.12l-5.28-4.1c-1.57 1.08-3.59 1.71-5.97 1.71-4.51 0-8.33-3.02-9.73-7.11H2.82v4.23C5.62 31.18 11.36 35 18 35z" fill="#34A853"/><path d="M8.27 21.39c-.36-1.07-.57-2.21-.57-3.39s.21-2.32.58-3.39v-4.23H2.82C1.67 12.67 1 15.25 1 18s.67 5.33 1.82 7.63l5.45-4.24z" fill="#FBBC05"/><path d="M18 7.5c2.56 0 4.86.88 6.67 2.61l.01.02 4.7-4.7C26.43 2.68 22.59 1 18 1 11.36 1 5.62 4.82 2.82 10.37l5.45 4.23c1.4-4.08 5.22-7.1 9.73-7.1z" fill="#EA4335"/><path d="M1 1h34v34H1z" fill="none"/></svg>

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	4126
Entropy (8bit):	5.365889949234325
Encrypted:	false
SSDEEP:	96:GMiH9U6meMtpj27U5LOmSyhw5melKwHwGw:bidUy7U5KmSyhwEelKwS
MD5:	5DE7B36B933956AA2BB4C7495D9CF6D4
SHA1:	AB7AFEAE0B0D11C3C8AC14C095919207916924F7
SHA-256:	53CC1CC51B9C9DABC9D12BFB5970BF5403F3FE90712EFC3ECECE78924C9CE03E
SHA-512:	31594BED2F05222AFEDE310ED6A7595B2F255ABB407EF7EDAD7841694D99C6D833AA0616C2643038C2692AB452444A648A92BFE9328C47382AF666E1B0FF20A0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=NTMZac,sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.sf(_.Una);._.k("sOXFj");.var Mq=function(a){_.I.call(this,a.Ha)};_.A(Mq,_.I);Mq.Na=_.I.Na;Mq.Ba=_.I.Ba;Mq.prototype.aa=function(a){return a()};_.Gq(_.Tna,Mq);._.l();._.k("oGtAuc");._.Gta=new _.ze(_.Una);._.l();._.k("q0xTif");.var Cua=function(a){var b=function(d){_.Tl(d)&&(_.Tl(d).yc=null,_.Zq(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},kr=function(a){_.ip.call(this,a.Ha);this.Qa=this.dom=null;if(this.xi()){var b=_.nk(this.Jf(),[_.Sk,_.Kk]);b=_.vh([b[_.Sk],b[_.Kk]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.zq(this,b)}this.Ma=a.yh.X7};_.A(kr,_.ip);kr.Ba=function(){return{yh:{X7:function(){return _.hf(this)}}}};kr.prototype.getContext=function(a){return this.Ma.getContext(a)};.kr.prototype.getData=function(a){return this.Ma.getData(a)};kr.protot

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (467)
Category:	downloaded
Size (bytes):	1884
Entropy (8bit):	5.275924479229317
Encrypted:	false
SSDEEP:	48:o76QwhumQ+L3AFFPraXDNJ7POZiNfY3KrHO/oxrw:oaLWF+2Zi0yw
MD5:	7BFD502606C07AADCD4CC6E3C25C1735
SHA1:	F633A183A8E579B8C02EF42473C13B39BF33AACA
SHA-256:	5C0AE852ACCCF590BFBB4FFF930A1AA2C1C913432BE7CBB0A06D979EF839FA7F
SHA-512:	D8AEA0B1C7B2E510E11E1E89E0B163DB22FEB4D8655DC7A7655A535AA8DFE17B3AA06F7280B3EEA412DC87E3C4BF77DC0A9967263DD0F60117E2A14A0AC61D34
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.XX=function(a){_.I.call(this,a.Ha);this.window=a.Fa.window.get();this.Bc=a.Fa.Bc};_.A(_.XX,_.I);_.XX.Na=_.I.Na;_.XX.Ba=function(){return{Fa:{window:_.Jq,Bc:_.LB}}};_.XX.prototype.Zn=function(){};_.XX.prototype.addEncryptionRecoveryMethod=function(){};_.YX=function(a){return(null==a?void 0:a.oq)\|\|function(){}};_.ZX=function(a){return(null==a?void 0:a.tca)\|\|function(){}};_.$X=function(a){return(null==a?void 0:a.Tn)\|\|function(){}};._.DBb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.EBb=function(a){setTimeout(function(){throw a;},0)};_.XX.prototype.uJ=function(){return!0};_.Gq(_.El,_.XX);._.l();._.k("ziXSP");.var yY=function(a){_.XX.call(this,a.Ha)};_.A(yY,_.XX);yY.Na=_.XX.Na;yY.Ba=_.XX.Ba;yY.prototype.Zn=function(a,b,c){var d;

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2362)
Category:	downloaded
Size (bytes):	219561
Entropy (8bit):	5.445841091913965
Encrypted:	false
SSDEEP:	3072:RcFHqs4rQScS0JmVDIX+8fmPqRntsQrYAXQ3G6NGilo1lR9:mPsQSw4QmEXXwG6KlR9
MD5:	7801C25D17218EC4138A3A3A8C217D30
SHA1:	4C4B7CB162EE248746E213A197B8EC10ED649F5E
SHA-256:	4C40DE31B22888ECB53891AA6A3841696B525368E396E8FF755197DCC4FFD99E
SHA-512:	62FF28BE77000F7D8B627C9D1FA1FC6201FC730E09D4665E8BBE129B3A5F467E7CB9DE2F4B74467E1B6D533AD06BD005D10D683EBD15F0F73A524D370F92D6D5
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlGWsB5G1rk7e6oG-SGuvI65d2usmw/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x3a22c03f, 0x800b1c4, 0x3e079c46, 0x10814500, 0x6, 0x400000, 0x201ac000, 0x199, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: MIT./.var baa,eaa,haa,laa,Ua,Wa,Xa,Ya,Za,maa,$a,naa,oaa,paa,fb,uaa,waa,ub,vb,Bb,Vb,Iaa,Kaa,Paa,bc,Raa,Saa,Xaa,eba,fba,cba,gba,lba,mba,oba,pba,qba,rba,ad,uba,tba,wba,gd,fd,yba,xba,Bba,Aba,nd,Eba,Fba,Hba,Iba,vd,ud,wd,jd,Vba,Sba,Wba,Xba,$ba,bca,cca,Qba,oca,de,qca,ee,rca,tca,vca,zca,Aca,Bca,Cca,Fca,Hca,Oca,Pca,Qca,Uca,cda,Zca,eda,Ue,gda,hda,ida,lda,nda,qda,rda,sda,tda,uda,xda,yda,Cda,Ida,Jda,Kda,Mda,Qda,Rda,aaa,Sda,yf,Tda,Af,Uda,Vda,Cf,Xda,Ff,dea,hea,gea,Mf,jea;._.aa=function(a){

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4199)
Category:	downloaded
Size (bytes):	19274
Entropy (8bit):	5.370463711293497
Encrypted:	false
SSDEEP:	384:afdvszls2BOsWAHc5/VhJSxPP/aZ6F0g46ht+V0hqKuV:8vjsWAHc5NhCkOK6ht+V0hHE
MD5:	D02275B0829113D988408FBA4337A926
SHA1:	2D1BA360C84F162C38C670722DBD96090F9DB97F
SHA-256:	75D955B5C52B1B014215238E6D649E2C3A1AEA6A34895DAD476913A2B9B69B4B
SHA-512:	1168599873E4F7964DD2A7AD47519DB98141A3C38AF1A44248BD6AF051CC1FA6D88EFF92DDECB2A5EFFB806CAE0683093D635DD10D2F0F4ED8AF3A88E2C8A53A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Ou=function(a){this.Ga=_.t(a)};_.A(_.Ou,_.v);_.Pu=function(a,b){return _.zd(a,3,b,_.Ec)};_.Ou.Mb=[1,2,3,4];.var sCa=_.da.URL,tCa,uCa,wCa,vCa;try{new sCa("http://example.com"),tCa=!0}catch(a){tCa=!1}uCa=tCa;.wCa=function(a){var b=_.fh("A");try{_.Mb(b,_.zb(a));var c=b.protocol}catch(e){throw Error("hc`"+a);}if(""===c\|\|":"===c\|\|":"!=c[c.length-1])throw Error("hc`"+a);if(!vCa.has(c))throw Error("hc`"+a);if(!b.hostname)throw Error("hc`"+a);var d=b.href;a={href:d,protocol:b.protocol,username:"",password:"",hostname:b.hostname,pathname:"/"+b.pathname,search:b.search,hash:b.hash,toString:function(){return d}};vCa.get(b.protocol)===b.port?(a.host=a.hostname,a.port="",a.origin=a.protocol+"//"+a.hostname):(a.host=.b.host,a.port=b.port,a.origin=a.protocol+"//"+a.hostname+":"+a.port);return a};._.xCa=function(a){if(uCa){try{var b=new sCa(a)}catch(d){throw Error("hc`"+a);}var c=vCa.get(b

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	749
Entropy (8bit):	4.70368920713592
Encrypted:	false
SSDEEP:	12:t4nolW84qhebl8cP5UbKEBnStLJdJad+DB3xELFkXUIx+RWuSrtUjAC9ZiCWInLE:t4olS+2x5UbKrTJ9DA0YWrrmWCFzfIvB
MD5:	AA920B32443219E3EDFA32DEF5EBD457
SHA1:	8A4B47D0A2CA261803AA5C1A9DDE7BA3FE15B298
SHA-256:	E5773339E56DD15D8DAAB94CE6ED5D444D1EF0B61355E20854234605BB2E755B
SHA-512:	C45BDB233447E1F4D3B4B5174A328E3D8987C9B5E2E12733E5027173B0302919680901C311094714CFC32AC2F2C749DC9EB95FFCAA8F5DA1E5EBEF3FB7225E37
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="36" viewBox="0 0 36 36" width="36"><path d="M34.32 18.39c0-1.17-.11-2.3-.29-3.39H18v6.48h9.4c-.38 2.19-1.59 4.05-3.42 5.31v4.1h5.28c3.2-2.97 5.06-7.33 5.06-12.5z" fill="#4285F4"/><path d="M18 35c4.59 0 8.44-1.52 11.25-4.12l-5.28-4.1c-1.57 1.08-3.59 1.71-5.97 1.71-4.51 0-8.33-3.02-9.73-7.11H2.82v4.23C5.62 31.18 11.36 35 18 35z" fill="#34A853"/><path d="M8.27 21.39c-.36-1.07-.57-2.21-.57-3.39s.21-2.32.58-3.39v-4.23H2.82C1.67 12.67 1 15.25 1 18s.67 5.33 1.82 7.63l5.45-4.24z" fill="#FBBC05"/><path d="M18 7.5c2.56 0 4.86.88 6.67 2.61l.01.02 4.7-4.7C26.43 2.68 22.59 1 18 1 11.36 1 5.62 4.82 2.82 10.37l5.45 4.23c1.4-4.08 5.22-7.1 9.73-7.1z" fill="#EA4335"/><path d="M1 1h34v34H1z" fill="none"/></svg>

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (693)
Category:	downloaded
Size (bytes):	3141
Entropy (8bit):	5.363355905404449
Encrypted:	false
SSDEEP:	48:o7r2s3Znb5YAWG+zk5dNQ8jsm/w4IAKnQYWfVI51aEswJ6xRJI3wrw:odd5a0dO8ljfVI51a756Ew
MD5:	94E5DA1B7EE65FADB4D240C06AA3A14C
SHA1:	39C9CCBD9E81C68E7419F68D7096EC952C2BDAA2
SHA-256:	AAD286E30DEDDA85E43E6B466192F82A8677DF25C2E8389498F20DB4728BCD0D
SHA-512:	70129B7AE2DDFE043284963F25BF1F80D6E43E628249020DD00281C42634CD80E8585C38588BB38B1C0507C605D48F7E9062506AE25BB3A7F38CB2A185B3264A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var Nv=function(a){_.I.call(this,a.Ha)};_.A(Nv,_.I);Nv.Na=_.I.Na;Nv.Ba=_.I.Ba;Nv.prototype.hN=function(a){return _.me(this,{Wa:{lO:_.yj}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.th(function(e){window._wjdc=function(f){d(f);e(sEa(f,b,a))}}):sEa(c,b,a)})};var sEa=function(a,b,c){return(a=a&&a[c])?a:b.Wa.lO.hN(c)};.Nv.prototype.aa=function(a,b){var c=_.Wsa(b).yi;if(c.startsWith("$")){var d=_.$l.get(a);_.Pp[b]&&(d\|\|(d={},_.$l.set(a,d)),d[c]=_.Pp[b],delete _.Pp[b],_.Qp--);if(d)if(a=d[c])b=_.le(a);else throw Error("Ob`"+b);else b=null}else b=null;return b};_.Gq(_.Oda,Nv);._.l();._.k("SNUn3");._.rEa=new _.ze(_.tf);._.l();._.k("RMhBfe");.var tEa=function(a,b){a=_.nra(a,b);return 0==a.length?null:a[0].ub},uEa=function(){return Object.values(_.No).reduce(function(a,b){return a+Object.keys(b).length},0)},vEa=function(){return Object.entries(_

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (405)
Category:	downloaded
Size (bytes):	1600
Entropy (8bit):	5.227930146325763
Encrypted:	false
SSDEEP:	24:kMYD73NPxuDinItBho6uIyNPxHJ98RTTR8uPlyLZ68umyuONPxkGQm0R6yYh4t7L:o79g/hyIsyR8ClyLwMgWJshsirw
MD5:	F39451A17089658749D6C11F7F8F4B70
SHA1:	D5FCCDE71EB4AEB493432698174C9F39E4ACD952
SHA-256:	B5565F31B5E4BA823AA67EA58E79B71F9CF7178F502FA8800047DC0D2101C7ED
SHA-512:	D3F5824B6EAB49D8587DF958C01E52508C0829DA4E06D703EABDBE52D6D0A70F6EFE56865AE54298BD171D2AF91C0CCEA58FECD9C3393264B4EB6C1E8701B3AA
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,VwDzFe,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.sf(_.eja);_.Lv=function(a){_.I.call(this,a.Ha);this.aa=a.Wa.cache};_.A(_.Lv,_.I);_.Lv.Na=_.I.Na;_.Lv.Ba=function(){return{Wa:{cache:_.bp}}};_.Lv.prototype.execute=function(a){_.nb(a,function(b){var c;_.ke(b)&&(c=b.ab.Wb(b.fb));c&&this.aa.kD(c)},this);return{}};_.Gq(_.zja,_.Lv);._.l();._.k("VwDzFe");.var fE=function(a){_.I.call(this,a.Ha);this.aa=a.Fa.Uq;this.fa=a.Fa.metadata;this.da=a.Fa.Mq};_.A(fE,_.I);fE.Na=_.I.Na;fE.Ba=function(){return{Fa:{Uq:_.GD,metadata:_.kVa,Mq:_.DD}}};fE.prototype.execute=function(a){var b=this;a=this.da.create(a);return _.nb(a,function(c){var d=2===b.fa.getType(c.Ed())?b.aa.Xb(c):b.aa.aa(c);return _.Kj(c,_.HD)?d.then(function(e){return _.od(e)}):d},this)};_.Gq(_.Eja,fE);._.l();._.k("sP4Vbe");._.jVa=new _.ze(_.Aja);._.l();._.k("A7fCU");.var LD=function(a){_.I.call(this,a.Ha);this.aa=a.Fa.uL};_.A(LD,_.I);LD.Na=_.I.Na;LD.Ba=function(){r

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (834)
Category:	downloaded
Size (bytes):	7669
Entropy (8bit):	5.345628814368703
Encrypted:	false
SSDEEP:	192:3rgBM0J4TimJwiDFKYkJrs0kV0XoaiZBv3R/pAY4d2wdNFP3xRL6:3YO7wiDgJNsZ8ol3
MD5:	37FAE970BFA0D11A3C7FD739362E801D
SHA1:	4FB26FFF64E3894094445AB400FF052508C848F8
SHA-256:	CB404B4216E86D1386679E18861AC6E95D42F435BCE82B848D23E9307927EA0E
SHA-512:	E54A63B669162E570D7C0FC07DE6405D4CC1AE73BBAEEAB3D5F478C1EE42698A44E72231A82D2903C0901416DF7629EBD6FBBB433A607BA4713E43CA955173C4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,iAskyc,iCBEqb,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,nKuFpb,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.mMa=_.y("wg1P6b",[_.rx,_.Gl,_.Ml]);._.k("wg1P6b");.var h1a=function(a,b){b=b\|\|_.Ja;for(var c=0,d=a.length,e;c<d;){var f=c+(d-c>>>1);var h=b(0,a[f]);0<h?c=f+1:(d=f,e=!h)}return e?c:-c-1},i1a=function(a,b){for(;b=b.previousSibling;)if(b==a)return-1;return 1},j1a=function(a,b){var c=a.parentNode;if(c==b)return-1;for(;b.parentNode!=c;)b=b.parentNode;return i1a(b,a)},k1a=function(a,b){if(a==b)return 0;if(a.compareDocumentPosition)return a.compareDocumentPosition(b)&2?1:-1;if(_.zg&&!(9<=Number(_.Gg))){if(9==a.nodeType)return-1;if(9==b.nodeType)return 1}if("sourceIndex"in.a\|\|a.parentNode&&"sourceIndex"in a.parentNode){var c=1==a.nodeType,d=1==b.nodeType;if(c&&d)return a.sourceIndex-b.sourceIndex;var e=a.parentNode,f=b.parentNode;return e==f?i1a(a,b):!c&&_.mh(e,b)?-1*j1a(a,b):!d&&_.mh(f,a)?j1a(b,a):(c?a.sourceIndex:e.sourceIndex)-(d?b.sourceIndex:f.sourceIndex)}d=_.Xg(a);c=d.create

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (574)
Category:	downloaded
Size (bytes):	3449
Entropy (8bit):	5.471746381603325
Encrypted:	false
SSDEEP:	96:oHIxOpYvVauJO31oOt66v1XTUCVaGgYCw:LxO3LlVLnX
MD5:	A78F8014D501EC107F179ECCAC65B00F
SHA1:	7AE2B8265A21BB8BF2EB993CC1DB129CB34CB5D8
SHA-256:	4890DAC4C70252A902E1138205043406BCAF5D38B3D2B8B7FA8ADE47F8F22783
SHA-512:	B58BAEABBA7FA3EA043A98F3CF6ACCBFD5658E122E77D984B63FB3D793FFC2573A1F175EAD57F594EBAC9B26E636E1CAC065D5F64376F95A373AB635E78C67F7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,iAskyc,iCBEqb,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,nKuFpb,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var lta=function(){var a=_.ce();return _.Ai(a,1)};var nq=function(a){this.Ga=_.t(a,0,nq.messageId)};_.A(nq,_.v);nq.prototype.Ja=function(){return _.ai(this,1)};nq.prototype.Va=function(a){return _.Mi(this,1,a)};nq.messageId="f.bo";var oq=function(){_.Ck.call(this)};_.A(oq,_.Ck);oq.prototype.Xc=function(){this.OO=!1;mta(this);_.Ck.prototype.Xc.call(this)};oq.prototype.aa=function(){nta(this);if(this.Sz)return ota(this),!1;if(!this.NQ)return pq(this),!0;this.dispatchEvent("p");if(!this.oK)return pq(this),!0;this.jI?(this.dispatchEvent("r"),pq(this)):ota(this);return!1};.var pta=function(a){var b=new _.Bn(a.Z_);null!=a.rL&&b.aa("authuser",a.rL);return b},ota=function(a){a.Sz=!0;var b=pta(a),c="rt=r&f_uid="+_.Pg(a.oK);_.il(b,(0,_.qf)(a.fa,a),"POST",c)};.oq.prototype.fa=function(a){a=a.target;nta(this);if(_.ll(a)){this.fG=0;if(this.jI)this.Sz=!1,this.dispatchEvent("

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1299)
Category:	downloaded
Size (bytes):	114209
Entropy (8bit):	5.557562708697312
Encrypted:	false
SSDEEP:	1536:CVXzyBSjFeJpasYPgwQrA1kAPXOw96iX3JOCj3wF8t1GrNVNcjHMknzYKImPiE5Y:CkBSxCamtusCkF8t1GrDNTkzYKImXe5
MD5:	5AB4463D1B7A0CFC287D24756F8DA9C6
SHA1:	2A2F29090045EED7653EDD3CF1F6EB37A7209105
SHA-256:	548BB8D2F33FE354E11A08229692C34DD3149434EA61543FDEC94BCA863ADCC1
SHA-512:	7B82279F16E41539DD5A190A22E8BC7768ACF079EBE2EC0084EE82DF9A97082F1E4631E49543E3253319722F980185BEC366A3FE468D452DA1A443AE6390EC41
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,qPfo0c,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ltDFwf");.var tvb=_.y("ltDFwf");var aU=function(a){_.J.call(this,a.Ha);var b=this.oa();this.tb=this.Ra("P1ekSe");this.jb=this.Ra("cQwEuf");this.da=b.getData("progressvalue").number(0);this.ja=b.getData("buffervalue").number(1);this.Ca=b.zb("B6Vhqe");this.Ma=b.zb("juhVM");this.ta=b.zb("D6TUi");this.aa=b.zb("qdulke");this.La=0!==this.da;this.Ka=1!==this.ja;this.Ia=[];this.fa=_.Xr(this).Xb(function(){this.Ia.length&&(this.Ia.forEach(this.g9,this),this.Ia=[]);this.La&&(this.La=!1,this.tb.ob("transform","scaleX("+this.da+")"));this.Ka&&.(this.Ka=!1,this.jb.ob("transform","scaleX("+this.ja+")"));_.Vq(b,"B6Vhqe",this.Ca);_.Vq(b,"D6TUi",this.ta);_.Vq(b,"juhVM",this.Ma);_.Vq(b,"qdulke",this.aa)}).build();this.fa();_.zg&&_.Xr(this).Xb(function(){b.pb("ieri7c")}).Ce().build()();_.Fz(this.oa().el(),this.Sa.bind(this))};_.A(aU,_.J);aU.Ba=_.J.Ba;.aU.prototype.Sa=function(a,b){uvb(this

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (504)
Category:	downloaded
Size (bytes):	2215
Entropy (8bit):	5.366723282438927
Encrypted:	false
SSDEEP:	48:o2HbT1u1fUBqQ4Z44YWsv7x7DvpcjMWqym4nh9Y3rw:oB634Ypfvyqym4nhew
MD5:	D680D26807A6981308DC983368B84B62
SHA1:	19649557284729998CF13FBA6A829893FE51DD44
SHA-256:	9DB902D1632D371BBE92B28F9D41A046CD67B47614FE09A9F726E27FD36F1C8F
SHA-512:	47001C8641BF8EEB6DEAB4364DFE48A39A710C367053BA0157632705B175E12646D8C9BF4764E3C35859507DA0AB2EF1ACD6BDA5069532D3E83C2BB77530DAB7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iCBEqb,nKuFpb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.UKa=_.y("iCBEqb",[_.Ooa]);._.k("iCBEqb");.var TH=function(a){_.J.call(this,a.Ha);this.aa=a.Fa.yz};_.A(TH,_.J);TH.Ba=function(){return{Fa:{yz:_.SH}}};TH.prototype.FB=function(){var a=this.aa;_.r4a(a);_.q4a(a)};_.K(TH.prototype,"IYtByb",function(){return this.FB});_.M(_.UKa,TH);._.l();._.aMa=_.y("nKuFpb",[_.Ml,_.zx]);._.k("nKuFpb");.var k_a=_.Bf(["target"]),l_a=_.Bf(["aria-"]),m_a=_.Bf(["aria-"]),CF=function(a){_.vF.call(this,a.Ha);this.Kc=a.Fa.Kc;this.link=this.oa().find("A").kd(0);if(_.rC(this.oa())){a=this.oa().el();var b=this.Pe.bind(this);a.__soy_skip_handler=b}};_.A(CF,_.vF);CF.Ba=function(){return{Fa:{Kc:_.Kq}}};_.g=CF.prototype;_.g.ue=function(){};_.g.lE=function(a){_.Mb(this.link.el(),a)};_.g.Xr=function(a){_.sq([_.Fb(k_a)],this.link.Nb(),"target",a)};._.g.click=function(a){if("keydown"===a.type&&"Enter"===_.AF(a.event))return!1;_.vF.prototype.click.call(this,a);retu

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.542000661265563
Encrypted:	false
SSDEEP:	3:yVkxzNDrMKcwVbF7KnZ:yVkxtkwVbF7KZ
MD5:	B3B89B9C275343BC6798E3A83564FDDB
SHA1:	32367475C527C3F5E5DB0BF42C348816FF4D157B
SHA-256:	900FB968F7FD9EA55F600AC9002A89E56AB56597DA7BDE04DEAAE6CC77AEB276
SHA-512:	ADB6938104E802B0936630B216CDE732F21ECA6E60E7A31D1B9C8FF52B5A66A712A7ECDE3F8ED4915D15C0A71C33A9788060E1E22999094C39020A1F8C636874
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	CiUKDQ0ZARP6GgQIVhgCIAEKCw3oIX6GGgQISxgCCgcN05ioBxoA

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (775)
Category:	downloaded
Size (bytes):	1479
Entropy (8bit):	5.315581042846763
Encrypted:	false
SSDEEP:	24:kMYD7xyQu0lbgQNzrYXMzbPZ1/HT8UuHCNPIeJwJObLag2ohLGk6UGbBOBGbLq6V:o7xS0l8yB5uHcTbGgNLGk6UGbMBGb/yq
MD5:	65C30E1E69E81791FBCF0725B084AE1C
SHA1:	A75649E0A4CAF7CA4199CB75D0E5B9F3844BF823
SHA-256:	06B372A3AA91AFAD99F959F5330EC4E22D7EBB10F34A1BBBD235FCF2E1D26F52
SHA-512:	753A42D99BF1EB0710E032E8F9D9F9822BE79B2C5CA0DC4BB9032E293BCCE9FD1BD274E8D8E8B6FA18C17770F03E866A7638A504B4BB80A62EF0304997F8086A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=bm51tf"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("kMFpHd");._.kVa=new _.ze(_.Hk);._.l();._.k("bm51tf");.var nVa=!!(_.Sf[0]>>20&1);var pVa=function(a,b,c,d,e){this.fa=a;this.ta=b;this.ja=c;this.Ca=d;this.Ia=e;this.aa=0;this.da=oVa(this)},qVa=function(a){var b={};_.Ka(a.DN(),function(e){b[e]=!0});var c=a.oN(),d=a.uN();return new pVa(a.kK(),1E3c.aa(),a.YM(),1E3d.aa(),b)},oVa=function(a){return Math.random()Math.min(a.taMath.pow(a.ja,a.aa),a.Ca)},MD=function(a,b){return a.aa>=a.fa?!1:null!=b?!!a.Ia[b]:!0};var ND=function(a){_.I.call(this,a.Ha);this.Gc=null;this.fa=a.Fa.EQ;this.ja=a.Fa.metadata;a=a.Fa.E$;this.da=a.fa.bind(a)};_.A(ND,_.I);ND.Na=_.I.Na;ND.Ba=function(){return{Fa:{EQ:_.lVa,metadata:_.kVa,E$:_.eVa}}};ND.prototype.aa=function(a,b){if(1!=this.ja.getType(a.Ed()))return _.Zk(a);var c=this.fa.aa;return(c=c?qVa(c):null)&&MD(c)?_.Cta(a,rVa(this,a,b,c)):_.Zk(a)};.var rVa=function(a,b,c,d){return c.then(function(e){r

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17337)
Category:	downloaded
Size (bytes):	775594
Entropy (8bit):	5.735139824143256
Encrypted:	false
SSDEEP:	6144:j9wavCk2lj3mqrGLsk+wa1WOPS4ulbPYSgDem2Wm0o:j6avCk2YWK4kPODeQo
MD5:	8F8B156D91D37C76E3C68F6A75A4152F
SHA1:	AFDE9F5DE7552F6E5B6C8D1302C74DB51B167CC1
SHA-256:	D5839A2920DB03C66518F8A954BB30592129DF80650878115A35AD8103EA51AE
SHA-512:	A27E6676A6061C8B96792C6F4722AB7671B1DA8A4B55FC0684909838D1ACC18ABCB3E91FA0695931C9B0C98A26B864B92EADE1363CB0EEA9F83A011C726BFA07
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,STuCOe,njlZCf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,zu7j8,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".O0WRkf{-webkit-user-select:none;transition:background .2s .1s;border:0;border-radius:3px;cursor:pointer;display:inline-block;font-size:14px;font-weight:500;min-width:4em;outline:none;overflow:hidden;position:relative;text-align:center;text-transform:uppercase;-webkit-tap-highlight-color:transparent;z-index:0}.A9jyad{font-size:13px;line-height:16px}.zZhnYe{transition:box-shadow .28s cubic-bezier(0.4,0,0.2,1);background:#dfdfdf;box-shadow:0px 2px 2px 0px rgba(0,0,0,.14),0px 3px 1px -2px rgba(0,0,0,.12),0px 1px 5px 0px rgba(0,0,0,.2)}.zZhnYe.qs41qe{transition:box-shadow .28s cubic-bezier(0.4,0,0.2,1);transition:background .8s;box-shadow:0px 8px 10px 1px rgba(0,0,0,.14),0px 3px 14px 2px rgba(0,0,0,.12),0px 5px 5px -3px rgba(0,0,0,.2)}.e3Duub,.e3Duub a,.e3Duub a:hover,.e3Duub a:link,.e3Duub a:visited{background:#4285f4;color:#fff}.HQ8yf,.HQ8yf a{color:#4285f4}.UxubU,.UxubU a{color:#fff}.ZFr60d{position:absolute;top:0;right:0;bottom:0;left:0;background-color:tran

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1631)
Category:	downloaded
Size (bytes):	38528
Entropy (8bit):	5.384614883894281
Encrypted:	false
SSDEEP:	768:ayHiBurut+KVKnv0b1AwjNWWePr03hMQOqu2Y2TdJieMwNa9Sq4L:wsK5jNsPr0Kqu2Y2TXhMN8
MD5:	30B8003C01889F12D98BE5336F5D04F0
SHA1:	BFF8237B8A8ECBA07C99C72D3904DFCA18DBA206
SHA-256:	60118A474D11E5ED79132E521E0AD32F397E224F1DE0138AC6CDF261DC52FB58
SHA-512:	F40DDF0ECBA221B4D21DCCF9D937C6F74246FD8C19CBF0721AB5B67E23C161AF683FED1802112BE7C2808471C7B5F51CB9CE6ACE2D3E2B516CED601EF9492F05
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.8HKpgJcE-j0.es5.O/ck=boq-identity.AccountsSignInUi.6hm245gU7MA.L.B1.O/am=P8AiOnEsAGLEeeADFAVCBgAAAAAAEAAArAFmBg/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlH-1ReNg6DC-KsNIJfoBEvMjYJDwQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.jpa=function(a){var b=0,c;for(c in a)b++;return b};_.kpa=function(a){return a.hh&&"function"==typeof a.hh?a.hh():_.ja(a)\|\|"string"===typeof a?a.length:_.jpa(a)};_.sn=function(a){if(a.Wg&&"function"==typeof a.Wg)return a.Wg();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ja(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.ob(a)};._.lpa=function(a){if(a.Ug&&"function"==typeof a.Ug)return a.Ug();if(!a.Wg\|\|"function"!=typeof a.Wg){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ja(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.pb(a)}}};.var mpa,ppa,opa,npa,In,Kn,Bpa,spa,upa,tpa,xpa,vpa;mpa=function(a,b,c){if(b)re

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 22:51:57.798603058 CEST	49697	80	192.168.2.16	142.250.9.17
Apr 16, 2024 22:51:57.799220085 CEST	49698	80	192.168.2.16	142.250.9.17
Apr 16, 2024 22:51:57.903129101 CEST	80	49697	142.250.9.17	192.168.2.16
Apr 16, 2024 22:51:57.903266907 CEST	49697	80	192.168.2.16	142.250.9.17
Apr 16, 2024 22:51:57.903548002 CEST	80	49698	142.250.9.17	192.168.2.16
Apr 16, 2024 22:51:57.903738022 CEST	49698	80	192.168.2.16	142.250.9.17
Apr 16, 2024 22:51:57.903841972 CEST	49697	80	192.168.2.16	142.250.9.17
Apr 16, 2024 22:51:58.008160114 CEST	80	49697	142.250.9.17	192.168.2.16
Apr 16, 2024 22:51:58.009525061 CEST	80	49697	142.250.9.17	192.168.2.16
Apr 16, 2024 22:51:58.061049938 CEST	49697	80	192.168.2.16	142.250.9.17
Apr 16, 2024 22:51:58.116895914 CEST	49701	443	192.168.2.16	74.125.136.83
Apr 16, 2024 22:51:58.116980076 CEST	443	49701	74.125.136.83	192.168.2.16
Apr 16, 2024 22:51:58.117069960 CEST	49701	443	192.168.2.16	74.125.136.83
Apr 16, 2024 22:51:58.117309093 CEST	49701	443	192.168.2.16	74.125.136.83
Apr 16, 2024 22:51:58.117346048 CEST	443	49701	74.125.136.83	192.168.2.16
Apr 16, 2024 22:51:58.340742111 CEST	443	49701	74.125.136.83	192.168.2.16
Apr 16, 2024 22:51:58.341085911 CEST	49701	443	192.168.2.16	74.125.136.83
Apr 16, 2024 22:51:58.341146946 CEST	443	49701	74.125.136.83	192.168.2.16
Apr 16, 2024 22:51:58.342367887 CEST	443	49701	74.125.136.83	192.168.2.16
Apr 16, 2024 22:51:58.342485905 CEST	49701	443	192.168.2.16	74.125.136.83
Apr 16, 2024 22:51:58.343312979 CEST	49701	443	192.168.2.16	74.125.136.83
Apr 16, 2024 22:51:58.343394041 CEST	443	49701	74.125.136.83	192.168.2.16
Apr 16, 2024 22:51:58.343487978 CEST	49701	443	192.168.2.16	74.125.136.83
Apr 16, 2024 22:51:58.343504906 CEST	443	49701	74.125.136.83	192.168.2.16
Apr 16, 2024 22:51:58.396958113 CEST	49701	443	192.168.2.16	74.125.136.83
Apr 16, 2024 22:51:58.575551987 CEST	443	49701	74.125.136.83	192.168.2.16
Apr 16, 2024 22:51:58.575622082 CEST	443	49701	74.125.136.83	192.168.2.16
Apr 16, 2024 22:51:58.575684071 CEST	49701	443	192.168.2.16	74.125.136.83
Apr 16, 2024 22:51:58.576054096 CEST	49701	443	192.168.2.16	74.125.136.83
Apr 16, 2024 22:51:58.576091051 CEST	443	49701	74.125.136.83	192.168.2.16
Apr 16, 2024 22:52:02.638323069 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:02.638348103 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:02.638391018 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:02.638571978 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:02.638582945 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:02.869872093 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:02.870117903 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:02.870129108 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:02.871125937 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:02.871191978 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:02.871984005 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:02.872040033 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:02.922005892 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:02.922015905 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:02.969969988 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:03.275681973 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.275738001 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.275826931 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.275990009 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.276026964 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.495863914 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.496153116 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.496182919 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.496874094 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.496968985 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.497558117 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.497622967 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.498496056 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.498569965 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.498660088 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.498678923 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.543009043 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.720062971 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.720110893 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.720179081 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.720217943 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.725287914 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.725370884 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.725389004 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.732485056 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.732564926 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.732579947 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.739825010 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.739861012 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.739918947 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.739938021 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.739996910 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.747142076 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.747230053 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.754523993 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.754705906 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.762047052 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.762121916 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.762134075 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.762200117 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.762253046 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.824500084 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.824623108 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.827828884 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.827882051 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.835165977 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.835232973 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.835239887 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.835280895 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.835321903 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.842500925 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.842577934 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.849733114 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.849778891 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.849857092 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.849874973 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.849955082 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.857053041 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.864351988 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.864381075 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.864423037 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.864433050 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.864473104 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.872157097 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.872282982 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:03.872338057 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.872452974 CEST	49722	443	192.168.2.16	74.125.138.101
Apr 16, 2024 22:52:03.872462988 CEST	443	49722	74.125.138.101	192.168.2.16
Apr 16, 2024 22:52:05.129229069 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:05.172142982 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:05.340198994 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:05.340325117 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:05.340374947 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:05.340392113 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:05.340462923 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:05.340513945 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:05.340519905 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:05.342884064 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:05.342955112 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:05.343122959 CEST	49715	443	192.168.2.16	142.250.105.103
Apr 16, 2024 22:52:05.343141079 CEST	443	49715	142.250.105.103	192.168.2.16
Apr 16, 2024 22:52:05.456420898 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.456473112 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.456547976 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.457895041 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.457926989 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.671061993 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.671339035 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.671366930 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.672817945 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.672915936 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.673321009 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.673408985 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.673511028 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.673526049 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.722973108 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.851344109 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 16, 2024 22:52:05.885906935 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.885941982 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.886001110 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.886007071 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.886035919 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.886076927 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.886100054 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:05.886168957 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.886764050 CEST	49735	443	192.168.2.16	142.250.105.147
Apr 16, 2024 22:52:05.886784077 CEST	443	49735	142.250.105.147	192.168.2.16
Apr 16, 2024 22:52:06.155009031 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 16, 2024 22:52:06.761996031 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 16, 2024 22:52:07.964122057 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 16, 2024 22:52:08.418596029 CEST	49698	80	192.168.2.16	142.250.9.17
Apr 16, 2024 22:52:08.418642044 CEST	49697	80	192.168.2.16	142.250.9.17
Apr 16, 2024 22:52:08.523307085 CEST	80	49697	142.250.9.17	192.168.2.16
Apr 16, 2024 22:52:08.523406029 CEST	80	49698	142.250.9.17	192.168.2.16
Apr 16, 2024 22:52:08.523411036 CEST	49697	80	192.168.2.16	142.250.9.17
Apr 16, 2024 22:52:08.523474932 CEST	49698	80	192.168.2.16	142.250.9.17
Apr 16, 2024 22:52:09.514051914 CEST	49690	80	192.168.2.16	192.229.211.108
Apr 16, 2024 22:52:10.375670910 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 16, 2024 22:52:11.080213070 CEST	49674	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.080358982 CEST	49675	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.080415964 CEST	49677	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.080697060 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.080766916 CEST	443	49742	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:11.080846071 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.081934929 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.081948996 CEST	443	49742	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:11.392205954 CEST	49677	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.392218113 CEST	49674	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.392229080 CEST	49675	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.411711931 CEST	443	49742	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:11.411819935 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.413053989 CEST	443	49742	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:11.413139105 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.466928005 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.466969967 CEST	443	49742	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:11.467113018 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.467123985 CEST	443	49742	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:11.467463970 CEST	443	49742	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:11.467530012 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.576788902 CEST	443	49742	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:11.576852083 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.576859951 CEST	443	49742	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:11.576894999 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.576925993 CEST	443	49742	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:11.576961040 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.577433109 CEST	49742	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.577447891 CEST	443	49742	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:11.807481050 CEST	49744	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:11.807560921 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:11.807657003 CEST	49744	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:11.809608936 CEST	49744	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:11.809648037 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:11.992625952 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:11.992655039 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:11.992732048 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:11.994235992 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:11.994254112 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:11.996010065 CEST	49675	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.996022940 CEST	49674	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:11.996038914 CEST	49677	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:12.093431950 CEST	49681	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:12.093652010 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:12.093681097 CEST	443	49746	51.104.15.253	192.168.2.16
Apr 16, 2024 22:52:12.093780994 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:12.093940973 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:12.093954086 CEST	443	49746	51.104.15.253	192.168.2.16
Apr 16, 2024 22:52:12.198779106 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.198892117 CEST	49744	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:12.265131950 CEST	49744	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:12.265177965 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.265506983 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.267230034 CEST	49744	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:12.267285109 CEST	49744	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:12.267321110 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.425069094 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.425180912 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:12.428173065 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:12.428198099 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.428549051 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.458024025 CEST	49681	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:12.474065065 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:12.504620075 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:12.545867920 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.545887947 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.545909882 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.545974970 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.546009064 CEST	49744	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:12.546063900 CEST	49744	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:12.546765089 CEST	49744	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:12.546775103 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.546797991 CEST	49744	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:12.546803951 CEST	443	49744	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.552110910 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.666399956 CEST	49747	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:12.666448116 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.666526079 CEST	49747	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:12.666706085 CEST	49747	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:12.666718960 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:12.683221102 CEST	443	49746	51.104.15.253	192.168.2.16
Apr 16, 2024 22:52:12.683330059 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:12.686414003 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:12.686431885 CEST	443	49746	51.104.15.253	192.168.2.16
Apr 16, 2024 22:52:12.686676979 CEST	443	49746	51.104.15.253	192.168.2.16
Apr 16, 2024 22:52:12.686811924 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:12.687251091 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:12.687453032 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:12.687479019 CEST	443	49746	51.104.15.253	192.168.2.16
Apr 16, 2024 22:52:12.820280075 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.820310116 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.820318937 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.820389032 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:12.820425987 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.820456028 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.820481062 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.820513010 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:12.820545912 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:12.820553064 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.820605993 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:12.832060099 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:12.832154036 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:12.832221985 CEST	49745	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:12.832243919 CEST	443	49745	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:13.066973925 CEST	443	49746	51.104.15.253	192.168.2.16
Apr 16, 2024 22:52:13.067074060 CEST	443	49746	51.104.15.253	192.168.2.16
Apr 16, 2024 22:52:13.067070961 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:13.067142963 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:13.067142963 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:13.067183971 CEST	49746	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:13.070724010 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.071424961 CEST	49747	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.071460009 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.072228909 CEST	49747	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.072235107 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.076200962 CEST	49747	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.076225996 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.175132990 CEST	49681	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:13.206115961 CEST	49674	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:13.206171989 CEST	49675	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:13.206195116 CEST	49677	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:13.349631071 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.349656105 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.349689007 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.349730015 CEST	49747	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.349740028 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.349778891 CEST	49747	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.349792957 CEST	49747	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.350142956 CEST	49747	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.350166082 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.350178957 CEST	49747	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.350186110 CEST	443	49747	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.351466894 CEST	49748	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.351552963 CEST	443	49748	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.351663113 CEST	49748	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.352838039 CEST	49748	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.352917910 CEST	443	49748	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.457114935 CEST	49749	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.457149982 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.457504988 CEST	49749	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.457550049 CEST	49749	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.457556009 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.571079969 CEST	443	49748	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.571280956 CEST	49748	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.573182106 CEST	49748	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.573234081 CEST	443	49748	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.573508978 CEST	443	49748	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.617429018 CEST	49748	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.664122105 CEST	443	49748	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.774113894 CEST	443	49748	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.774178028 CEST	443	49748	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.774245024 CEST	49748	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.774307013 CEST	49748	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.774327040 CEST	443	49748	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.774344921 CEST	49748	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.774353981 CEST	443	49748	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.814733028 CEST	49750	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.814817905 CEST	443	49750	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.815069914 CEST	49750	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.815201998 CEST	49750	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:13.815236092 CEST	443	49750	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:13.847516060 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.848064899 CEST	49749	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.848087072 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.849031925 CEST	49749	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.849031925 CEST	49749	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:13.849042892 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:13.849061012 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.029575109 CEST	443	49750	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:14.029659986 CEST	49750	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:14.038844109 CEST	49750	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:14.038870096 CEST	443	49750	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:14.039295912 CEST	443	49750	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:14.039787054 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 16, 2024 22:52:14.041354895 CEST	49750	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:14.053201914 CEST	49751	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.053246021 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.053478003 CEST	49751	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.053602934 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.053611040 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.053646088 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.053647041 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.053714991 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.053945065 CEST	49754	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.053965092 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.054007053 CEST	49751	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.054007053 CEST	443	49754	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.054027081 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.054047108 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.054073095 CEST	49754	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.054074049 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.054090977 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.054106951 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.054228067 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.054287910 CEST	49754	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.054316044 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.054318905 CEST	443	49754	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.054327011 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.054383039 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.054394960 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.084162951 CEST	443	49750	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:14.123214006 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.123235941 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.123291969 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.123302937 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.123338938 CEST	49749	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.123439074 CEST	49749	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.123775005 CEST	49749	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.123775005 CEST	49749	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.123810053 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.123820066 CEST	443	49749	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.237454891 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.237507105 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.237575054 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.237816095 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.237832069 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.270668983 CEST	443	49750	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:14.270756006 CEST	443	49750	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:14.270823002 CEST	49750	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:14.271517038 CEST	49750	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:14.271532059 CEST	443	49750	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:14.271547079 CEST	49750	443	192.168.2.16	23.201.212.130
Apr 16, 2024 22:52:14.271553993 CEST	443	49750	23.201.212.130	192.168.2.16
Apr 16, 2024 22:52:14.348985910 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 16, 2024 22:52:14.372961044 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.373092890 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.373542070 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.373548985 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.373744011 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.373749971 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.374711990 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.374772072 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.375056028 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.375077963 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.375255108 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.375274897 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.376219988 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.376287937 CEST	49751	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.376555920 CEST	443	49754	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.376576900 CEST	49751	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.376589060 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.376769066 CEST	49754	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.376773119 CEST	49751	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.376782894 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.376882076 CEST	49754	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.376909018 CEST	443	49754	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.377024889 CEST	49754	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.377039909 CEST	443	49754	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.382337093 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.382421970 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.382700920 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.382707119 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.382890940 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.382895947 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.537322044 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.537348986 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.537411928 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.537420988 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.537421942 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.537460089 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.537533998 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.537543058 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.537564039 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.537626028 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.537626028 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.538187027 CEST	49755	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.538223982 CEST	443	49755	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.540225029 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.540260077 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.540318012 CEST	49751	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.540340900 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.540358067 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.540409088 CEST	49751	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.540417910 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.540435076 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.540453911 CEST	49751	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.540484905 CEST	49751	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.542830944 CEST	443	49754	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.542860031 CEST	443	49754	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.542910099 CEST	49754	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.542910099 CEST	49754	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.542931080 CEST	443	49754	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.542970896 CEST	443	49754	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.543015003 CEST	49754	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.543065071 CEST	443	49754	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.543108940 CEST	49754	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.546837091 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.546874046 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.546895981 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.546911955 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.546927929 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.546961069 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.547003984 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.547003984 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.547003984 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.547022104 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.547065020 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.547070980 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.547090054 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.547132015 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.547132015 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.549587965 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.549608946 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.549633980 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.549668074 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.549676895 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.549691916 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.549721956 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.550059080 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.550111055 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.550122976 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.550144911 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.556345940 CEST	49751	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.556375027 CEST	443	49751	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.558393955 CEST	49754	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.558428049 CEST	443	49754	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.559207916 CEST	49752	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.559235096 CEST	443	49752	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.559895992 CEST	49753	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:14.559905052 CEST	443	49753	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:14.604057074 CEST	49681	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:14.620590925 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.623744011 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.623770952 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.637696028 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.637713909 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.637763977 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.637772083 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.906582117 CEST	49683	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:14.907121897 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:14.907160997 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:14.907788038 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:14.908016920 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:14.908034086 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:14.908674002 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.908730984 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.908792019 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.908803940 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.908869028 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.908876896 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.908915043 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.908955097 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.909003019 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.910136938 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.910136938 CEST	49756	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:14.910151005 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.910160065 CEST	443	49756	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:14.963995934 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 16, 2024 22:52:15.184001923 CEST	49758	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.184006929 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.184087038 CEST	443	49758	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.184088945 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.184212923 CEST	49758	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.184215069 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.186140060 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.186175108 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.186338902 CEST	49758	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.186377048 CEST	443	49758	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.188008070 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 16, 2024 22:52:15.219002008 CEST	49683	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.237190008 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.237915993 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.245666981 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.245675087 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.245835066 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.245841980 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.246084929 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.246154070 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.369430065 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369457960 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369509935 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.369518995 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369529963 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.369606018 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369617939 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.369622946 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369673967 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369693041 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.369698048 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369749069 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369791031 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.369791031 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.369796038 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369834900 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.369848967 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369858980 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369930983 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.369935036 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.369961023 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.370069027 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.372581959 CEST	49757	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.372606039 CEST	443	49757	204.79.197.222	192.168.2.16
Apr 16, 2024 22:52:15.403217077 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.403240919 CEST	443	49758	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.403367043 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.403382063 CEST	49758	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.459364891 CEST	49758	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.459403992 CEST	443	49758	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.459440947 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.459476948 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.459691048 CEST	443	49758	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.459733963 CEST	49758	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.459783077 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.459877968 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.462003946 CEST	49758	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.462038994 CEST	443	49758	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.462049007 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.462114096 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.617012978 CEST	49674	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:15.617036104 CEST	49675	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:15.617034912 CEST	49677	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:15.644740105 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.644766092 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.644807100 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.644810915 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.644850969 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.644870043 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.644881964 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.644906044 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.644932032 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.646413088 CEST	49759	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.646441936 CEST	443	49759	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.685024023 CEST	443	49758	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.685051918 CEST	443	49758	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.685101032 CEST	443	49758	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.685115099 CEST	443	49758	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.685147047 CEST	49758	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.685210943 CEST	49758	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.685381889 CEST	49758	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.685419083 CEST	443	49758	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.735932112 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.735979080 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.736068010 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.736347914 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.736381054 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.823029995 CEST	49683	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:15.949215889 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.949336052 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.949729919 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.949738979 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:15.950014114 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:15.950021982 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.175995111 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 16, 2024 22:52:16.333447933 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.333478928 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.333534956 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.333540916 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.333540916 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.333605051 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.333658934 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.333658934 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.333681107 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.333734035 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.333750963 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.333810091 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.333826065 CEST	443	49760	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.333859921 CEST	49760	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.356825113 CEST	49761	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.356870890 CEST	443	49761	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.356978893 CEST	49761	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.357168913 CEST	49761	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.357191086 CEST	443	49761	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.569914103 CEST	443	49761	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.570012093 CEST	49761	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.570468903 CEST	49761	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.570496082 CEST	443	49761	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.570863962 CEST	49761	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.570904016 CEST	443	49761	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.873560905 CEST	443	49761	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.873588085 CEST	443	49761	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.873627901 CEST	443	49761	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.873660088 CEST	49761	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.873683929 CEST	443	49761	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.873704910 CEST	49761	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.873738050 CEST	49761	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.873976946 CEST	49761	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.874017954 CEST	443	49761	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.874070883 CEST	49761	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.954066992 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.954143047 CEST	443	49762	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:16.954272985 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.954473972 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:16.954493999 CEST	443	49762	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:17.032001019 CEST	49683	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:17.171015024 CEST	443	49762	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:17.171098948 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:17.173641920 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:17.173657894 CEST	443	49762	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:17.173928022 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:17.173942089 CEST	443	49762	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:17.174019098 CEST	443	49762	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:17.174077034 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:17.475008011 CEST	49681	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:17.510571957 CEST	49763	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.510663033 CEST	443	49763	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:17.510737896 CEST	49763	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.511229992 CEST	49763	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.511264086 CEST	443	49763	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:17.810811043 CEST	443	49762	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:17.810895920 CEST	443	49762	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:17.810930014 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:17.811026096 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:17.811706066 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:17.811706066 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:17.811724901 CEST	443	49762	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:17.813342094 CEST	49762	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:17.839875937 CEST	443	49763	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:17.840018034 CEST	49763	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.842938900 CEST	49763	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.842967987 CEST	443	49763	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:17.843142033 CEST	49763	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.843162060 CEST	443	49763	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:17.843229055 CEST	443	49763	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:17.843420029 CEST	49763	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.853285074 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:17.853326082 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:17.853570938 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:17.853626013 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:17.853636026 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:17.949390888 CEST	443	49763	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:17.949460983 CEST	443	49763	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:17.949496031 CEST	49763	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.949845076 CEST	49763	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.950198889 CEST	49763	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.950232983 CEST	443	49763	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:17.951848030 CEST	49765	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.951904058 CEST	443	49765	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:17.952161074 CEST	49765	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.952261925 CEST	49765	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:17.952292919 CEST	443	49765	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:18.248984098 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:18.249567986 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:18.249618053 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:18.250351906 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:18.250360966 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:18.250413895 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:18.250428915 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:18.282850981 CEST	443	49765	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:18.283720016 CEST	49765	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:18.283720016 CEST	49765	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:18.283776045 CEST	443	49765	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:18.284224033 CEST	49765	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:18.284235954 CEST	443	49765	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:18.390953064 CEST	443	49765	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:18.391030073 CEST	443	49765	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:18.391146898 CEST	49765	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:18.392151117 CEST	49765	443	192.168.2.16	13.107.42.254
Apr 16, 2024 22:52:18.392169952 CEST	443	49765	13.107.42.254	192.168.2.16
Apr 16, 2024 22:52:18.500799894 CEST	49766	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.500840902 CEST	443	49766	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:18.500963926 CEST	49766	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.501472950 CEST	49766	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.501486063 CEST	443	49766	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:18.503350973 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 16, 2024 22:52:18.522439957 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:18.522464991 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:18.522505999 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:18.522553921 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:18.522614002 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:18.522643089 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:18.522648096 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:18.522675991 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:18.522754908 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:18.523020029 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:18.523020029 CEST	49764	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:18.523049116 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:18.523072004 CEST	443	49764	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:18.562897921 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:18.562975883 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:18.563150883 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:18.563370943 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:18.563401937 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:18.583136082 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 16, 2024 22:52:18.780677080 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:18.780760050 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:18.781162024 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:18.781191111 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:18.781455994 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:18.781488895 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:18.807569027 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 16, 2024 22:52:18.831756115 CEST	443	49766	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:18.831824064 CEST	49766	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.834316969 CEST	49766	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.834326982 CEST	443	49766	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:18.834510088 CEST	49766	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.834515095 CEST	443	49766	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:18.834548950 CEST	443	49766	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:18.834599972 CEST	49766	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.941354990 CEST	443	49766	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:18.941411972 CEST	49766	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.941418886 CEST	443	49766	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:18.941431999 CEST	443	49766	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:18.941457033 CEST	49766	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.941488028 CEST	49766	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.942009926 CEST	49766	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.942027092 CEST	443	49766	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:18.943942070 CEST	49768	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.944001913 CEST	443	49768	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:18.944093943 CEST	49768	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.944299936 CEST	49768	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:18.944329977 CEST	443	49768	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:19.272602081 CEST	443	49768	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:19.272682905 CEST	49768	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:19.273124933 CEST	49768	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:19.273139000 CEST	443	49768	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:19.273376942 CEST	49768	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:19.273382902 CEST	443	49768	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:19.380290985 CEST	443	49768	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:19.380354881 CEST	49768	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:19.380377054 CEST	443	49768	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:19.380395889 CEST	443	49768	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:19.380429029 CEST	49768	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:19.380455971 CEST	49768	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:19.380872965 CEST	49768	443	192.168.2.16	52.113.196.254
Apr 16, 2024 22:52:19.380903006 CEST	443	49768	52.113.196.254	192.168.2.16
Apr 16, 2024 22:52:19.413022041 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 16, 2024 22:52:19.438406944 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.438438892 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.438461065 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.438482046 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.438548088 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.438582897 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.438605070 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.445013046 CEST	49683	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:19.491020918 CEST	49769	443	192.168.2.16	150.171.22.254
Apr 16, 2024 22:52:19.491110086 CEST	443	49769	150.171.22.254	192.168.2.16
Apr 16, 2024 22:52:19.491199017 CEST	49769	443	192.168.2.16	150.171.22.254
Apr 16, 2024 22:52:19.491574049 CEST	49769	443	192.168.2.16	150.171.22.254
Apr 16, 2024 22:52:19.491612911 CEST	443	49769	150.171.22.254	192.168.2.16
Apr 16, 2024 22:52:19.539860010 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.539989948 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.540047884 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.540112972 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.567481995 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.567511082 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.567574024 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.567590952 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.567631960 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.567668915 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.581182957 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.581269026 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.581304073 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.581372023 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.641453028 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.641475916 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.641542912 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.641566992 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.641628981 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.643311024 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.643362045 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.667064905 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.667095900 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.667155981 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.667216063 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.667262077 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.667329073 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.692466974 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.692490101 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.692605019 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.692605019 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.692668915 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.692816973 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.715152979 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.715214014 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.715265036 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.715282917 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.715328932 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.715329885 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.715357065 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.715419054 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.719142914 CEST	49767	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.719175100 CEST	443	49767	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.821680069 CEST	443	49769	150.171.22.254	192.168.2.16
Apr 16, 2024 22:52:19.822063923 CEST	49769	443	192.168.2.16	150.171.22.254
Apr 16, 2024 22:52:19.824681044 CEST	49769	443	192.168.2.16	150.171.22.254
Apr 16, 2024 22:52:19.824681044 CEST	49769	443	192.168.2.16	150.171.22.254
Apr 16, 2024 22:52:19.824701071 CEST	443	49769	150.171.22.254	192.168.2.16
Apr 16, 2024 22:52:19.824728012 CEST	443	49769	150.171.22.254	192.168.2.16
Apr 16, 2024 22:52:19.824944019 CEST	443	49769	150.171.22.254	192.168.2.16
Apr 16, 2024 22:52:19.825198889 CEST	49769	443	192.168.2.16	150.171.22.254
Apr 16, 2024 22:52:19.882868052 CEST	49770	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.882917881 CEST	443	49770	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.883249044 CEST	49770	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.883249044 CEST	49770	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:19.883296013 CEST	443	49770	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:19.912806034 CEST	49771	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:19.912894964 CEST	443	49771	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:19.913165092 CEST	49771	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:19.913279057 CEST	49771	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:19.913316011 CEST	443	49771	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:19.931484938 CEST	443	49769	150.171.22.254	192.168.2.16
Apr 16, 2024 22:52:19.931562901 CEST	443	49769	150.171.22.254	192.168.2.16
Apr 16, 2024 22:52:19.931849003 CEST	49769	443	192.168.2.16	150.171.22.254
Apr 16, 2024 22:52:20.096091032 CEST	443	49770	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.096333027 CEST	49770	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.096829891 CEST	49770	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.096843004 CEST	443	49770	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.096885920 CEST	49770	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.096898079 CEST	443	49770	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.232173920 CEST	443	49771	204.79.197.200	192.168.2.16
Apr 16, 2024 22:52:20.232261896 CEST	49771	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:20.371222019 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.371313095 CEST	443	49778	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.371411085 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.371661901 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.371696949 CEST	443	49778	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.419584990 CEST	49674	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:20.432097912 CEST	49675	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:20.432142973 CEST	49677	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:20.441871881 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.441927910 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.442490101 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.445282936 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.445317984 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.562869072 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.562901020 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.563108921 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.563222885 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.563240051 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.585782051 CEST	443	49778	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.586086035 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.586533070 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.586533070 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.586546898 CEST	443	49778	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.586569071 CEST	443	49778	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.596556902 CEST	443	49770	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.596839905 CEST	49770	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.596851110 CEST	443	49770	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.596878052 CEST	443	49770	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.597018003 CEST	49770	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.597018003 CEST	49770	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.623086929 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 16, 2024 22:52:20.662337065 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.662431955 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.662854910 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.662873983 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.663203001 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.663232088 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.774614096 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.774709940 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.775073051 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.775087118 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.775381088 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.775404930 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.910023928 CEST	49770	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.910094023 CEST	443	49770	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.978934050 CEST	443	49778	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.978993893 CEST	443	49778	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.979016066 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.979036093 CEST	443	49778	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.979064941 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.979093075 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.979099035 CEST	443	49778	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.979135990 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.979137897 CEST	443	49778	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:20.979182959 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.979414940 CEST	49778	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:20.979433060 CEST	443	49778	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.061863899 CEST	49782	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.061906099 CEST	443	49782	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.061990976 CEST	49782	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.062191010 CEST	49782	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.062205076 CEST	443	49782	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.102678061 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.102708101 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.102744102 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.102746964 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.102768898 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.102801085 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.102823973 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.102837086 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.102864027 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.102899075 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.102920055 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.103177071 CEST	49781	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.103200912 CEST	443	49781	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.124895096 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.124979973 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.125062943 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.125359058 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.125396013 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.278629065 CEST	49784	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.278672934 CEST	443	49784	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.278753042 CEST	49784	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.278973103 CEST	49784	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.278990030 CEST	443	49784	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.306129932 CEST	443	49782	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.306204081 CEST	49782	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.306607962 CEST	49782	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.306623936 CEST	443	49782	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.306909084 CEST	49782	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.306926012 CEST	443	49782	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.330297947 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.330327988 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.330382109 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.330423117 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.330491066 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.330530882 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.330554008 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.359626055 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.359719992 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.360141993 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.360167980 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.360447884 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.360483885 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.431555986 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.431649923 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.431709051 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.431787014 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.458935976 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.459012032 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.459063053 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.459127903 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.459172010 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.459391117 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.472902060 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.473011017 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.473026991 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.473083019 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.488368988 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.488451958 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.488466978 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.488519907 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.496382952 CEST	443	49784	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.496459007 CEST	49784	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.496972084 CEST	49784	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.496982098 CEST	443	49784	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.497296095 CEST	49784	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.497313023 CEST	443	49784	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.547430038 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.547467947 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.547636986 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.547636986 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.547699928 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.547753096 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.555092096 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.555166960 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.555183887 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.555221081 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.555252075 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.555279016 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.555295944 CEST	443	49780	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.555321932 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.555321932 CEST	49780	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.624725103 CEST	443	49782	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.624751091 CEST	443	49782	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.624785900 CEST	443	49782	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.624789953 CEST	49782	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.624802113 CEST	443	49782	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.624814987 CEST	49782	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.624820948 CEST	443	49782	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.624860048 CEST	49782	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.625072002 CEST	49782	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.625082016 CEST	443	49782	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.722475052 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.722551107 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.726322889 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.726514101 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.726551056 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.794421911 CEST	443	49784	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.794501066 CEST	443	49784	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.794558048 CEST	443	49784	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.794670105 CEST	49784	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.794670105 CEST	49784	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.794684887 CEST	443	49784	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.794761896 CEST	49784	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.795145035 CEST	49784	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.795162916 CEST	443	49784	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.937962055 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.938086987 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.938571930 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.938571930 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.938606977 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.938657999 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.978216887 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.978240967 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.978312969 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.978435993 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.978467941 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:21.978502989 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:21.978615046 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.080063105 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.080323935 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.080384016 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.080498934 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.107378006 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.107415915 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.107662916 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.107662916 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.107727051 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.107985973 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.121020079 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.121150970 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.121166945 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.121257067 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.181839943 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.181859016 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.182209015 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.182277918 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.182542086 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.207310915 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.207329988 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.207647085 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.207715034 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.208050013 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.228701115 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.228744984 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.228795052 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:22.228837013 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.228868008 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.228868008 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.228935003 CEST	49783	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:22.228965998 CEST	443	49783	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.034998894 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 16, 2024 22:52:23.195003033 CEST	49681	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:23.387005091 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 16, 2024 22:52:23.455580950 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.455607891 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.455625057 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.455655098 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.455718994 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.455754042 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.455776930 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.557506084 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.557594061 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.557630062 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.557696104 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.584717989 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.584739923 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.584796906 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.584813118 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.584873915 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.598330021 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.598416090 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.598428965 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.598496914 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.659285069 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.659305096 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.659435034 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.659435034 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.659502029 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.659579992 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.684607983 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.684626102 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.684863091 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.684863091 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.684927940 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.685020924 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.709862947 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.709880114 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.710002899 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.710002899 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.710064888 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.710206032 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.732640982 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.732659101 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.732748032 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.732748032 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.732810020 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.732971907 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.744494915 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.744617939 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.744633913 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.744801998 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.776622057 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.776642084 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.776712894 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.776773930 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.776855946 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.792220116 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.792385101 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.792397022 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.792498112 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.813620090 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.813666105 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.813699961 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.813740015 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.813771963 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.813786030 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.813847065 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.813847065 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.813968897 CEST	49790	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.813997030 CEST	443	49790	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.939157009 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.939234018 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:23.939562082 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.939562082 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:23.939697981 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:24.154419899 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:24.154540062 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:24.154930115 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:24.154939890 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:24.155250072 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:24.155267954 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:24.248127937 CEST	49683	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:24.791059971 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 16, 2024 22:52:25.816426039 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:25.816457033 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:25.816476107 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:25.816531897 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:25.816598892 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:25.816643000 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:25.816703081 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:25.816703081 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:25.918205976 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:25.918289900 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:25.918315887 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:25.918423891 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:25.945549011 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:25.945581913 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:25.945691109 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:25.945712090 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:25.945730925 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:25.945975065 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:25.959103107 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:25.959268093 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:25.959283113 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:25.959353924 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.019773960 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.019803047 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.019920111 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.019920111 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.019942999 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.020596981 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.046083927 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.046108961 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.046205997 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.046238899 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.046336889 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.063750982 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.063793898 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.063827991 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.063843012 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.063875914 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.064135075 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.090696096 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.090723991 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.090822935 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.090822935 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.090842962 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.091079950 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.102639914 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.102700949 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.102874994 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.102881908 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.102957010 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.133905888 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.133946896 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.134038925 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.134038925 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.134056091 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.134596109 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.145634890 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.145869970 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.145884991 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.145977020 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.171216965 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.171251059 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.171370983 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.171370983 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.171386957 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.171443939 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.179099083 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.179343939 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.179356098 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.179543972 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.181962013 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.182080984 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.182085991 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.182161093 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.182208061 CEST	49791	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.182226896 CEST	443	49791	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.530431986 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.530455112 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.530459881 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.530491114 CEST	443	49798	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.530523062 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.530529976 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.530541897 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.530565023 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.530565977 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.530596972 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.530622959 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.530632019 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.530683994 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.530714989 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.530812025 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.530848026 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.530879021 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.531114101 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.531392097 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.531409025 CEST	443	49798	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.531415939 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.531447887 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.531653881 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.531666040 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.531732082 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.531764030 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.532006979 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.532042980 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.532068014 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.532078028 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.532598972 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.532618999 CEST	443	49804	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.533529997 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.533812046 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.533838034 CEST	443	49804	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.749701023 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.750000000 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.750735044 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.750812054 CEST	443	49804	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.750840902 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.750904083 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.751250029 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.751274109 CEST	443	49804	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.751554012 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:26.751589060 CEST	443	49804	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:26.752177000 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.752188921 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.752276897 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.752290964 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.752446890 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.752520084 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.753294945 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.753307104 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.753388882 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.753405094 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.753561974 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.753627062 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.754530907 CEST	443	49798	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.754606962 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.755300045 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.755386114 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.756026983 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.756112099 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.756876945 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.756886005 CEST	443	49798	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.757078886 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.757086039 CEST	443	49798	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.757241964 CEST	443	49798	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.757318020 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.757761002 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.757761002 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.757769108 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.757782936 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.758088112 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.758214951 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.758383989 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.758394957 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.758538008 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.758546114 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.758732080 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.758790970 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.762322903 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.762392044 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.764569044 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.764585018 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.764843941 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.764848948 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.764970064 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.765108109 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.962918043 CEST	443	49798	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.962997913 CEST	443	49798	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.963006020 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.963022947 CEST	443	49798	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.963052988 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.963102102 CEST	443	49798	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.963128090 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.963160038 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.963442087 CEST	49798	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.963460922 CEST	443	49798	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.965578079 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.965645075 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.965653896 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.965693951 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.965717077 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.965738058 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.965776920 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.965779066 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.965804100 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.965811014 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.965857983 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.966012001 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:26.966084003 CEST	443	49803	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:26.966135025 CEST	49803	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.044892073 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.044991016 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.045006037 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.045046091 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.045066118 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.045085907 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.045128107 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.045133114 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.045192003 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.045197964 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.045233011 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.045277119 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.045322895 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.045577049 CEST	49799	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.045588970 CEST	443	49799	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.178956032 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.179047108 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.179054022 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.179064035 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.179074049 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.179090977 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.179117918 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.179141998 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.179173946 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.179205894 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.179846048 CEST	49801	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.179878950 CEST	443	49801	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.219213963 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.219309092 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.219335079 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.219386101 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.219393015 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.219433069 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.219439030 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.219465971 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.219510078 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.219516039 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.219561100 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.219904900 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.219978094 CEST	443	49802	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.220035076 CEST	49802	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.296844959 CEST	443	49804	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:27.296880960 CEST	443	49804	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:27.296921015 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:27.296943903 CEST	443	49804	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:27.296962976 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:27.297018051 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:27.297084093 CEST	443	49804	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:27.297137022 CEST	443	49804	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:27.297154903 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:27.297154903 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:27.297163963 CEST	443	49804	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:27.297182083 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:27.297207117 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:27.297240973 CEST	49804	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:27.473170042 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.473206997 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.473238945 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.473289013 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.473299980 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.473344088 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.491156101 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.491164923 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.491187096 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.491240025 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.491271019 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.491301060 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.491347075 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.491452932 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.491497993 CEST	443	49800	23.54.200.10	192.168.2.16
Apr 16, 2024 22:52:27.491547108 CEST	49800	443	192.168.2.16	23.54.200.10
Apr 16, 2024 22:52:27.847140074 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 16, 2024 22:52:28.368987083 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:28.369066000 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:28.370094061 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:28.370326996 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:28.370363951 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:28.584660053 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:28.584752083 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:28.585331917 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:28.585331917 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:28.585349083 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:28.585377932 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.327124119 CEST	49819	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:29.327173948 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:29.327245951 CEST	49819	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:29.327440023 CEST	49819	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:29.327457905 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:29.344007015 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.344036102 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.344055891 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.344093084 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.344172955 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.344218016 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.344257116 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.445085049 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.445336103 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.445398092 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.445483923 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.472409010 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.472434044 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.472491980 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.472552061 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.472589016 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.472613096 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.486012936 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.486093998 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.486109972 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.486188889 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.546962976 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.546986103 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.547162056 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.547163010 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.547226906 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.547305107 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.572396040 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.572423935 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.572597980 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.572597980 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.572660923 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.572740078 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.597570896 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.597589016 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.597779036 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.597841024 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.597932100 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.620280981 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.620305061 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.620371103 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.620388031 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.620407104 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.620424032 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.632088900 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.632153034 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.632163048 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.632200003 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.652244091 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.652261972 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.652321100 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.652328968 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.652365923 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.663341045 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.663395882 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.663404942 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.663453102 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.674705982 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.674724102 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.674858093 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.674866915 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.674966097 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.682882071 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.682981014 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.682987928 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.683059931 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.696006060 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.696022034 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.696146965 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.696156979 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.696249008 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.699918032 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.700012922 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.700033903 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.700114012 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.700114012 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.721961975 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:29.722599030 CEST	49819	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:29.722632885 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:29.723376036 CEST	49819	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:29.723387957 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:29.723434925 CEST	49819	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:29.723443985 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:29.852092981 CEST	49820	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.852184057 CEST	443	49820	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.852529049 CEST	49820	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.852529049 CEST	49820	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.852611065 CEST	443	49820	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.929825068 CEST	49822	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.929860115 CEST	443	49822	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.929932117 CEST	49822	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.931135893 CEST	49822	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.931150913 CEST	443	49822	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.950895071 CEST	49823	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.950938940 CEST	443	49823	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.951028109 CEST	49823	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.951250076 CEST	49823	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.951261044 CEST	443	49823	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.979134083 CEST	49824	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.979170084 CEST	443	49824	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:29.983444929 CEST	49824	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.983649969 CEST	49824	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:29.983660936 CEST	443	49824	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.001230955 CEST	49818	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.001307011 CEST	443	49818	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.004925966 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:30.004954100 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:30.004997015 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:30.005064964 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:30.005089045 CEST	49819	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:30.005089045 CEST	49819	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:30.005330086 CEST	49819	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:30.005449057 CEST	49819	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:30.005449057 CEST	49819	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:30.005464077 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:30.005475998 CEST	443	49819	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:30.033035994 CEST	49674	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:30.033047915 CEST	49675	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:30.033118010 CEST	49677	443	192.168.2.16	204.79.197.200
Apr 16, 2024 22:52:30.063895941 CEST	443	49820	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.064289093 CEST	49820	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.064541101 CEST	49820	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.064559937 CEST	443	49820	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.065531015 CEST	49820	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.065568924 CEST	443	49820	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.146666050 CEST	443	49822	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.146948099 CEST	49822	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.147389889 CEST	49822	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.147401094 CEST	443	49822	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.147440910 CEST	49822	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.147450924 CEST	443	49822	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.167314053 CEST	443	49823	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.167853117 CEST	49823	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.168133974 CEST	49823	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.168147087 CEST	443	49823	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.168277979 CEST	49823	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.168298006 CEST	443	49823	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.198973894 CEST	443	49824	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.199223042 CEST	49824	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.199769974 CEST	49824	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.199769974 CEST	49824	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.199789047 CEST	443	49824	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.199811935 CEST	443	49824	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.288680077 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.288717031 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.289524078 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.289572954 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.289591074 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.438560009 CEST	443	49820	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.438621044 CEST	443	49820	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.438770056 CEST	443	49820	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.438815117 CEST	49820	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.438815117 CEST	49820	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.438958883 CEST	49820	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.438958883 CEST	49820	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.474730015 CEST	443	49824	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.474759102 CEST	443	49824	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.474896908 CEST	443	49824	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.474925041 CEST	49824	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.475018024 CEST	49824	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.475104094 CEST	49824	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.475125074 CEST	443	49824	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.537868023 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.538002968 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.538018942 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.542033911 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.549173117 CEST	443	49822	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.549468994 CEST	443	49822	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.549567938 CEST	49822	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.549839020 CEST	49822	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.549856901 CEST	443	49822	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.572374105 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.572385073 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.572690010 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.574109077 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.574136019 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.751019001 CEST	49820	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.751084089 CEST	443	49820	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.795659065 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.795711040 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.795744896 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.795788050 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.795809984 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.795823097 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.795847893 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.795860052 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.795891047 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.795938969 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.795945883 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.796000957 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.796000957 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.796013117 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.796118975 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.914710045 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.914779902 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.914813995 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.914817095 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.914824009 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.914885998 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.914894104 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.914937019 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.914972067 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.914984941 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.914992094 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915026903 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915034056 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.915040016 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915079117 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.915080070 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915088892 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915138960 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.915144920 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915189981 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915224075 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915225029 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.915232897 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915261984 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.915267944 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915303946 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915337086 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.915342093 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915427923 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915477037 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.915581942 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.915601015 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.915620089 CEST	49826	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:30.915627003 CEST	443	49826	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:30.946968079 CEST	443	49823	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.947001934 CEST	443	49823	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.947065115 CEST	49823	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.947065115 CEST	49823	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.947087049 CEST	443	49823	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:30.947154999 CEST	49823	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.947303057 CEST	49823	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:30.947324991 CEST	443	49823	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:32.995039940 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 16, 2024 22:52:33.853717089 CEST	49683	443	192.168.2.16	204.79.197.222
Apr 16, 2024 22:52:34.632384062 CEST	49681	443	192.168.2.16	51.104.15.253
Apr 16, 2024 22:52:34.844800949 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:34.844834089 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:34.844914913 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:34.845206976 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:34.845212936 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:35.073008060 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:35.073101044 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:35.076387882 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:35.076395035 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:35.076783895 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:35.076843023 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:35.077341080 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:35.077374935 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:35.077419043 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:35.124115944 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:36.156488895 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:36.156526089 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:36.156594992 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:36.156594992 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:36.156608105 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:36.157027006 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:36.157046080 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:36.157046080 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:36.157053947 CEST	443	49827	23.211.118.80	192.168.2.16
Apr 16, 2024 22:52:36.157120943 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:36.157120943 CEST	49827	443	192.168.2.16	23.211.118.80
Apr 16, 2024 22:52:37.456029892 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 16, 2024 22:52:38.250971079 CEST	49828	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:38.251055002 CEST	443	49828	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:38.251322985 CEST	49828	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:38.251926899 CEST	49828	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:38.252006054 CEST	443	49828	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:38.267138958 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.267184019 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.267256975 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.267730951 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.267749071 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.287602901 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.287681103 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.287875891 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.288024902 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.288060904 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.468190908 CEST	443	49828	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:38.468648911 CEST	49828	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:38.468650103 CEST	49828	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:38.468714952 CEST	443	49828	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:38.469032049 CEST	49828	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:38.469114065 CEST	443	49828	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:38.539913893 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.540322065 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.540380955 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.540515900 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.542148113 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.542162895 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.542964935 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.543598890 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.543668032 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.652564049 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.652915955 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.660630941 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.660641909 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.660875082 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.661416054 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.661416054 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.661444902 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.731262922 CEST	443	49828	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:38.731349945 CEST	49828	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:38.731415033 CEST	49828	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:38.731477022 CEST	443	49828	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:38.731544018 CEST	49828	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:38.806185007 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.806319952 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.806411028 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.806492090 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.806555033 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.806657076 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.806724072 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.806741953 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.806796074 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.806809902 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.806905031 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.806992054 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.807005882 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.807023048 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.807080984 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.807101011 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.860033989 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.924978018 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.925152063 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.925220966 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.925240040 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.925316095 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.925393105 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.925467014 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.925484896 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.925575972 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.925575972 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.925604105 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.925808907 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.925817013 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.925841093 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.925896883 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.925929070 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.926032066 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.926032066 CEST	49830	443	192.168.2.16	20.96.52.198
Apr 16, 2024 22:52:38.926059961 CEST	443	49830	20.96.52.198	192.168.2.16
Apr 16, 2024 22:52:38.930708885 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.930730104 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.930805922 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.930824995 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.930876970 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.930886030 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.930910110 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.930923939 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.934943914 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.934956074 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:38.934968948 CEST	49829	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:38.934976101 CEST	443	49829	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.070310116 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.070339918 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.070420980 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.070647001 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.070655107 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.119590044 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.119656086 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.119923115 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.119923115 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.120059013 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.334274054 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.334352970 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.336065054 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.336091995 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.336256981 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.336278915 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.336350918 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.336500883 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.481755972 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.481836081 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.483802080 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.483809948 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.484615088 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.485100031 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.485138893 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.485169888 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.764852047 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.764902115 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.764965057 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.764976978 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.765037060 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.765042067 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.765116930 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.765225887 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.765410900 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.765427113 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.765434980 CEST	49831	443	192.168.2.16	40.126.29.13
Apr 16, 2024 22:52:39.765439987 CEST	443	49831	40.126.29.13	192.168.2.16
Apr 16, 2024 22:52:39.888566971 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.888592958 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.888622046 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.888756990 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.888757944 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.888757944 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.888787031 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.888845921 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.990279913 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.990442991 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.990453959 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.990502119 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.999317884 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.999380112 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.999391079 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.999423027 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.999428034 CEST	443	49832	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:39.999449968 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:39.999489069 CEST	49832	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:40.028857946 CEST	49836	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.028897047 CEST	443	49836	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.028970003 CEST	49836	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.029709101 CEST	49836	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.029730082 CEST	443	49836	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.283274889 CEST	443	49836	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.283369064 CEST	49836	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.299324036 CEST	49836	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.299348116 CEST	443	49836	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.300218105 CEST	443	49836	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.301450014 CEST	49836	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.301471949 CEST	49836	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.301517963 CEST	443	49836	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.536659956 CEST	443	49836	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.536693096 CEST	443	49836	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.536768913 CEST	443	49836	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.536768913 CEST	49836	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.536842108 CEST	49836	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.537199020 CEST	49836	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.537214994 CEST	443	49836	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.537226915 CEST	49836	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.537233114 CEST	443	49836	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.582922935 CEST	49839	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.582967043 CEST	443	49839	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.583033085 CEST	49839	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.583267927 CEST	49839	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.583278894 CEST	443	49839	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.827667952 CEST	443	49839	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.827744007 CEST	49839	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.829582930 CEST	49839	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.829593897 CEST	443	49839	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.830084085 CEST	443	49839	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:40.830573082 CEST	49839	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.830598116 CEST	49839	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:40.830606937 CEST	443	49839	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:41.065423965 CEST	443	49839	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:41.065453053 CEST	443	49839	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:41.065510988 CEST	49839	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:41.065521002 CEST	443	49839	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:41.065571070 CEST	49839	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:41.065782070 CEST	49839	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:41.065799952 CEST	443	49839	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:41.065812111 CEST	49839	443	192.168.2.16	20.96.63.25
Apr 16, 2024 22:52:41.065817118 CEST	443	49839	20.96.63.25	192.168.2.16
Apr 16, 2024 22:52:45.027265072 CEST	49840	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:45.027318954 CEST	443	49840	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:45.027421951 CEST	49840	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:45.027754068 CEST	49840	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:45.027765989 CEST	443	49840	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:45.246120930 CEST	443	49840	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:45.251183033 CEST	49840	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:45.251478910 CEST	49840	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:45.251487970 CEST	443	49840	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:45.251739025 CEST	49840	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:45.251750946 CEST	443	49840	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:45.465706110 CEST	443	49840	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:45.465821028 CEST	49840	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:45.465852976 CEST	443	49840	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:45.465884924 CEST	443	49840	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:45.465902090 CEST	49840	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:45.465934038 CEST	49840	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:45.466233969 CEST	49840	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:45.466252089 CEST	443	49840	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:49.215723991 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:49.215773106 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:49.216140985 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:49.216308117 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:49.216317892 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:49.639256954 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:49.639709949 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:49.642025948 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:49.642035961 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:49.642359972 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:49.645148993 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:49.692147970 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:50.044966936 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:50.044991970 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:50.045005083 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:50.045064926 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:50.045082092 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:50.045090914 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:50.045130014 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:50.045156956 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:50.045156956 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:50.045187950 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:50.047673941 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:50.047686100 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:50.047696114 CEST	49841	443	192.168.2.16	52.165.165.26
Apr 16, 2024 22:52:50.047702074 CEST	443	49841	52.165.165.26	192.168.2.16
Apr 16, 2024 22:52:55.042232037 CEST	49842	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.042290926 CEST	443	49842	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.042532921 CEST	49842	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.042589903 CEST	49842	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.042604923 CEST	443	49842	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.257651091 CEST	443	49842	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.257754087 CEST	49842	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.258240938 CEST	49842	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.258255959 CEST	443	49842	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.258562088 CEST	49842	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.258580923 CEST	443	49842	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.366825104 CEST	49843	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.366864920 CEST	443	49843	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.366944075 CEST	49843	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.367247105 CEST	49843	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.367264032 CEST	443	49843	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.489852905 CEST	443	49842	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.490030050 CEST	443	49842	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.490072966 CEST	49842	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.490113974 CEST	49842	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.490221024 CEST	49842	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.490242004 CEST	443	49842	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.584237099 CEST	443	49843	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.584316015 CEST	49843	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.587029934 CEST	49843	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.587038040 CEST	443	49843	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.587357998 CEST	49843	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.587366104 CEST	443	49843	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.587412119 CEST	49843	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.587435961 CEST	443	49843	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.798753977 CEST	443	49843	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.798820019 CEST	49843	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.798842907 CEST	443	49843	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.798886061 CEST	49843	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.798918009 CEST	443	49843	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:55.798973083 CEST	49843	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.799079895 CEST	49843	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:55.799093008 CEST	443	49843	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:57.778163910 CEST	49844	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:57.778215885 CEST	443	49844	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:57.778300047 CEST	49844	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:57.778578997 CEST	49844	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:57.778590918 CEST	443	49844	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:58.001988888 CEST	443	49844	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:58.002177954 CEST	49844	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:58.002568960 CEST	49844	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:58.002574921 CEST	443	49844	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:58.002841949 CEST	49844	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:58.002856016 CEST	443	49844	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:58.250864983 CEST	443	49844	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:58.251055956 CEST	443	49844	23.201.214.29	192.168.2.16
Apr 16, 2024 22:52:58.251056910 CEST	49844	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:58.251126051 CEST	49844	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:58.251364946 CEST	49844	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:52:58.251374960 CEST	443	49844	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:09.597167969 CEST	49689	443	192.168.2.16	13.107.21.200
Apr 16, 2024 22:53:21.069024086 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:21.069071054 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:21.069179058 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:21.069458008 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:21.069467068 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:21.285085917 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:21.285193920 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:21.285687923 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:21.285696983 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:21.286032915 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:21.286046028 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.235013962 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.235084057 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.235095978 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.235116005 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.235162973 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.235173941 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.235219002 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.235230923 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.235279083 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.336091042 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.336229086 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.336247921 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.336297035 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.363768101 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.363794088 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.363902092 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.363912106 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.363954067 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.377602100 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.377759933 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.377767086 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.377830029 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.386780977 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.386856079 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.386883974 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.386950016 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.386955023 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.386986971 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.387001991 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.387032986 CEST	443	49845	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.387064934 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.387080908 CEST	49845	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.418513060 CEST	49846	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.418545008 CEST	443	49846	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.418627024 CEST	49846	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.418875933 CEST	49846	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.418888092 CEST	443	49846	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.635761023 CEST	443	49846	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.635884047 CEST	49846	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.636358976 CEST	49846	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.636369944 CEST	443	49846	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.636684895 CEST	49846	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.636703968 CEST	443	49846	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.920691967 CEST	443	49846	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.920753002 CEST	443	49846	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.920835972 CEST	49846	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.920856953 CEST	443	49846	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.920867920 CEST	49846	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.920886040 CEST	443	49846	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:22.920895100 CEST	49846	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.920934916 CEST	49846	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.921150923 CEST	49846	443	192.168.2.16	23.201.214.29
Apr 16, 2024 22:53:22.921164036 CEST	443	49846	23.201.214.29	192.168.2.16
Apr 16, 2024 22:53:27.654964924 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:27.655009985 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:27.655121088 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:27.655492067 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:27.655518055 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:27.933877945 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:27.933967113 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:27.933995962 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:27.934046984 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:27.937386036 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:27.937407970 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:27.937669992 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:27.938174963 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:27.938216925 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.267638922 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.267663002 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.267698050 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.267728090 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.267889023 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.267889023 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.267957926 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.268026114 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.399631023 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.399688005 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.399719954 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.399739027 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.399751902 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.399759054 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.399763107 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.399794102 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.399802923 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.399813890 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.399823904 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.399835110 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.399857044 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.399894953 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.399909019 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.399964094 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.531646967 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.531728029 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.531795979 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.531805038 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.531816006 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.531822920 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.531857014 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.531888008 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.531889915 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.531914949 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.531934977 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.531943083 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.531943083 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.531970024 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.531994104 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.531996965 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532006979 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532026052 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.532058001 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532087088 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532089949 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.532098055 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532143116 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.532149076 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532176018 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532195091 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.532200098 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532224894 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532257080 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.532262087 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532288074 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532315016 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532316923 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.532322884 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532366991 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532377958 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.532383919 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532407045 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.532480955 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.532536030 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.533413887 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.533430099 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:28.533438921 CEST	49847	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:28.533443928 CEST	443	49847	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.252021074 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.252067089 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.252162933 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.252413034 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.252423048 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.530275106 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.531133890 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.531142950 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.531297922 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.563133955 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.563139915 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.563380003 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.563868046 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.563893080 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.834407091 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.834429979 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.834461927 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.834489107 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.834511042 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.834523916 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.834577084 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.834590912 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.968884945 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.968930960 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.968950033 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.968964100 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.968971968 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.968992949 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.969007969 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.969026089 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.969029903 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.969058037 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.969063044 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.969079018 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.969082117 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.969089985 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.969130039 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.969135046 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:29.969146013 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:29.969170094 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103451014 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103532076 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103533030 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103544950 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103585005 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103586912 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103595018 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103630066 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103645086 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103650093 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103660107 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103672028 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103684902 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103688955 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103696108 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103713989 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103737116 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103743076 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103746891 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103775978 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103785992 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103790998 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103826046 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103826046 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103840113 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103878975 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103893995 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103944063 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103945017 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.103952885 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.103993893 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.146785975 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.146929026 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.237858057 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.237979889 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.237988949 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.238003016 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.238029957 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.238080025 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.238213062 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.238228083 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.238236904 CEST	49848	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.238243103 CEST	443	49848	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.786488056 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.786528111 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:30.786607027 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.786823034 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:30.786830902 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.073102951 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.074147940 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.074160099 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.074248075 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.075752020 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.075767994 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.076225042 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.076632977 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.076669931 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.364974976 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.365035057 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.365108967 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.365134001 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.365156889 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.365211010 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.365216970 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.365240097 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.365268946 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.365353107 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.365358114 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.365480900 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.500210047 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.500288963 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.500334024 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.500368118 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.500376940 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.500387907 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.500423908 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.500423908 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.500433922 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.500447035 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.500513077 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.500515938 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.500590086 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.500597000 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.500648975 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.635493040 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.635606050 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.635612011 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.635637999 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.635689974 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.635689974 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.635718107 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.635844946 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.635890961 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.635890961 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.635898113 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.636128902 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:31.636280060 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.636280060 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.636317015 CEST	49849	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:31.636326075 CEST	443	49849	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.182784081 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.182843924 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.182925940 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.183132887 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.183159113 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.464354038 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.464550018 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.464575052 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.464622974 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.466804028 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.466825962 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.467150927 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.467736006 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.467776060 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.763413906 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.763439894 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.763490915 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.763535023 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.763628006 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.763628006 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.763628006 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.763643026 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.763684034 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.898984909 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.899097919 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.899153948 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.899204016 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.899245024 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.899245024 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.899259090 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.899270058 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.899285078 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.899317980 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.899319887 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.899328947 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:32.899360895 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:32.899380922 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.035284996 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035372019 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.035372972 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035387039 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035408974 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.035430908 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.035442114 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035490990 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.035496950 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035531044 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035536051 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.035541058 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035573006 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.035578966 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035621881 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.035625935 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035666943 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.035670996 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035708904 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.035712004 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035751104 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035789013 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.035794020 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035891056 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.035931110 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.042457104 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.042469978 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.042478085 CEST	49850	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.042483091 CEST	443	49850	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.705903053 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.705930948 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.706207037 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.706702948 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.706715107 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.987672091 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.987802982 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.987812042 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.987904072 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.997416019 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.997422934 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.997744083 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:33.998222113 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:33.998251915 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.287483931 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.287517071 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.287578106 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.287595034 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.287604094 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.287615061 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.287622929 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.287718058 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.287724018 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.287765980 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.422785997 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.422858953 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.422878027 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.422883034 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.422911882 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.422923088 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.422928095 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.422956944 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.422966003 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.423012972 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.423039913 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.423044920 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.423057079 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.423074961 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.423103094 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.423106909 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.423207045 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558140039 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.558231115 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558235884 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.558274984 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558279037 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.558317900 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.558326006 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558329105 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.558373928 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558373928 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558387041 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.558433056 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558438063 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.558487892 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558511972 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.558557987 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558572054 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.558615923 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558651924 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.558693886 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558708906 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.558754921 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.558762074 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.559047937 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.599884987 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.600126982 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.694261074 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.694330931 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.694371939 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.694437981 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.694442987 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.694483042 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.694483995 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.694516897 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.694698095 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.694698095 CEST	49851	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:34.694711924 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:34.694720984 CEST	443	49851	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:35.757625103 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:35.757653952 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:35.757730961 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:35.757955074 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:35.757968903 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.039861917 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.039944887 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.039961100 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.040005922 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.045973063 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.045978069 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.046545982 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.047034025 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.047080994 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.327132940 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.327193022 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.327230930 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.327261925 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.327280045 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.327313900 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.327322006 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.327331066 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.327375889 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.327382088 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.327426910 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.327465057 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.327471972 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.327477932 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.327517986 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.327522993 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.382114887 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.462642908 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.462858915 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.462918997 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.462933064 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463010073 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463057995 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.463064909 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463146925 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463200092 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.463207960 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463308096 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463356018 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.463361979 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463449955 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463496923 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.463502884 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463597059 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463643074 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.463649035 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463735104 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463783026 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.463790894 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463876009 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.463922024 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.463928938 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.464210987 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.464266062 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.493825912 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.493844032 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.493853092 CEST	49852	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.493859053 CEST	443	49852	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.950407028 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.950455904 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:36.950540066 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.950774908 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:36.950792074 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.225893021 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.225979090 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.225995064 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.226041079 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.260307074 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.260317087 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.261234045 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.261802912 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.261861086 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.529788971 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.529845953 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.529927015 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.529947996 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.529966116 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.530004025 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.530010939 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.530052900 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.530071974 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.530133963 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.661470890 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.661593914 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.661614895 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.661681890 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.661720037 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.661777020 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.661815882 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.661873102 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.661911964 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.661977053 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.662009001 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.662086964 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.793231010 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.793405056 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.793446064 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.793457985 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.793526888 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.793559074 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.793564081 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.793622017 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.793641090 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.793747902 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.793755054 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.793776035 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.793807983 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.793879032 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.793936014 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.793941975 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.793977022 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.793979883 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.794001102 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.794033051 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.794096947 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.794148922 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.794154882 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.794195890 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.794200897 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.794222116 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.794259071 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.794318914 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.794375896 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.794382095 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.794423103 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.794428110 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.794449091 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.794481039 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.794540882 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.794595957 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.794601917 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.794642925 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926018000 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926094055 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926131964 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926141024 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926156998 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926177979 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926206112 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926208019 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926218987 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926259995 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926280975 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926332951 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926332951 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926343918 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926388025 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926429033 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926489115 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926529884 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926580906 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926624060 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926681042 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926721096 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926785946 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926847935 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.926901102 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.926938057 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.927069902 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.927129030 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.927510023 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.927527905 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:37.927537918 CEST	49853	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:37.927542925 CEST	443	49853	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.275136948 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:39.275182962 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.275273085 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:39.275491953 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:39.275511980 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.557785034 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.557884932 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:39.557910919 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.557996988 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:39.560367107 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:39.560372114 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.560695887 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.561233997 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:39.561269999 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.900506020 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.900538921 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.900589943 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.900635958 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.900640965 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:39.900671959 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:39.900687933 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:39.900716066 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:39.900742054 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.035491943 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.035592079 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.035615921 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.035696983 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.035720110 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.035855055 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.035865068 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.035917044 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.035921097 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.035969019 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.035974979 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.036056042 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.036061049 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.079137087 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.079179049 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.079212904 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.079235077 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.079288006 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.079294920 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.079314947 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.079358101 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.079621077 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.079639912 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.079649925 CEST	49854	443	192.168.2.16	52.185.73.156
Apr 16, 2024 22:53:40.079654932 CEST	443	49854	52.185.73.156	192.168.2.16
Apr 16, 2024 22:53:40.822562933 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:40.822607994 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:40.822699070 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:40.823029995 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:40.823045015 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.068448067 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.068519115 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.068542004 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.068584919 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.070811033 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.070816040 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.071136951 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.071633101 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.071665049 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.393579960 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.393611908 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.393667936 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.393707037 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.393711090 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.393731117 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.393748999 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.393758059 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.393779039 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.512516975 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.512599945 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.512609005 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.512634039 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.512667894 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.512674093 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.512686014 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.512691975 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.512726068 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.512733936 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.512777090 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.512783051 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.512789011 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.512823105 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.512861967 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.512904882 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.512909889 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.554147959 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.554898024 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.601238012 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.601264000 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.631598949 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.631643057 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.631663084 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.631675959 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.631712914 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.631728888 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.631733894 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.631776094 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.631779909 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.631815910 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.631859064 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.631859064 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.631869078 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.631906986 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.631911039 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.631973982 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.632011890 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.632014990 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.632019997 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.632051945 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.632059097 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.632139921 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.632179022 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.632183075 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.632188082 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.632219076 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.632252932 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.632347107 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.632400036 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.632426023 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.632441044 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:41.632450104 CEST	49855	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:41.632455111 CEST	443	49855	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.354208946 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:42.354249954 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.354322910 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:42.354582071 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:42.354598045 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.604857922 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.605003119 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:42.605031967 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.605093956 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:42.607377052 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:42.607388020 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.607631922 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.608108044 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:42.608138084 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.889456034 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.889518976 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.889595985 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:42.889621973 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.889641047 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.889681101 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:42.889688015 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.889698982 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:42.889734983 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.889803886 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:42.889811039 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:42.889853001 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.008363008 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.008449078 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.008491993 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.008553028 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.008594036 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.008647919 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.008678913 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.008732080 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.008778095 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.008832932 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.008867025 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.008919954 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.126903057 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.126955986 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.126983881 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.127001047 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.127011061 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.127048969 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.127055883 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.127096891 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.127100945 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.127129078 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.127135038 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.127147913 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.127188921 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.127213955 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.127223969 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.127252102 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.127253056 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.127279997 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.127286911 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.127325058 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.127356052 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.245529890 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.245606899 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.245616913 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.245659113 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.245687962 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.245735884 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.245735884 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.245735884 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.245748043 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.245775938 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.245786905 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.245803118 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.245826006 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.245862007 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.245923996 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.245995998 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246052027 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246089935 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246143103 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246185064 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246248007 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246277094 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246355057 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246373892 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246381998 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246387005 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246409893 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246419907 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246436119 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246443033 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246462107 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246469975 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246509075 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246520996 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246526003 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246541023 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246562958 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246565104 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246593952 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246596098 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246602058 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246624947 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246625900 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246654034 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246660948 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246666908 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246685982 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246687889 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246726990 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.246731997 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.246747017 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.281970978 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.290788889 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.290863991 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.364212036 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364283085 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364361048 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364423990 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364423990 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.364423990 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.364438057 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364458084 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.364483118 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.364566088 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364614964 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364619017 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.364625931 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364653111 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364667892 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.364674091 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364697933 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.364705086 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364720106 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364758015 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.364764929 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.364789963 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.364945889 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365000963 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365008116 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365041971 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365056992 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365065098 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365112066 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365179062 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365240097 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365246058 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365325928 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365350008 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365350008 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365375042 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365387917 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365427971 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365484953 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365540981 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365578890 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365627050 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365670919 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365722895 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365758896 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365814924 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365818977 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365842104 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365855932 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365869045 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365874052 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365892887 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365900993 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365914106 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365952969 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.365956068 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.365967989 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.366008043 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.366014004 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.366044044 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.366064072 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.366110086 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.411386967 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.411402941 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:43.411412954 CEST	49856	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:43.411418915 CEST	443	49856	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:45.676312923 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:45.676419020 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:45.676506042 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:45.676776886 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:45.676815033 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:45.916994095 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:45.917074919 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:45.917118073 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:45.917170048 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:45.919347048 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:45.919354916 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:45.919595957 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:45.920059919 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:45.920094967 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173063993 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173209906 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173325062 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173336029 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.173379898 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173441887 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.173450947 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173557997 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173615932 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.173624992 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173713923 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173772097 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.173780918 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173841953 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173887968 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173890114 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.173902035 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.173957109 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.289527893 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.289585114 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.289609909 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.289642096 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.289649963 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.289669991 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.289680958 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.289695024 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.289721966 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.289737940 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.289773941 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.289808035 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.289820910 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.289829969 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.289874077 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.289884090 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.289993048 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.290038109 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.290231943 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.290258884 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.290271044 CEST	49857	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.290277958 CEST	443	49857	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.698133945 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.698235035 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.698324919 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.698616028 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.698648930 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.943345070 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.943546057 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.943619013 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.943691969 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.946225882 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.946242094 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.946491957 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:46.947060108 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:46.947103977 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.214587927 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.214612007 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.214652061 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.214696884 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.214700937 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.214754105 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.214787006 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.214787006 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.214817047 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.334120989 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.334186077 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.334223032 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.334243059 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.334271908 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.334299088 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.334304094 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.334363937 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.334366083 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.334381104 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.334402084 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.334414005 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.334470034 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.334484100 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.334542990 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454056025 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454118967 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454159975 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454195023 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454212904 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454212904 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454231024 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454252958 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454277039 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454293013 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454293013 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454334021 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454350948 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454364061 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454392910 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454413891 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454466105 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454468966 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454479933 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454524994 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454538107 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454582930 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454612017 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454638958 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454653978 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454699039 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454716921 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454730034 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454771996 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454787970 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454801083 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454844952 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454860926 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454874992 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454915047 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454931021 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.454945087 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454986095 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.454996109 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.455008984 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.455054045 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.455066919 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.455108881 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.455163002 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.455176115 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.507136106 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.573769093 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.573976040 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.574037075 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.574067116 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.574157000 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.574213982 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.574227095 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.574311018 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.574368000 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.574381113 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.574522972 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.574579954 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.574593067 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.574717045 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.574753046 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.574753046 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.574803114 CEST	443	49858	20.22.113.133	192.168.2.16
Apr 16, 2024 22:53:47.574821949 CEST	49858	443	192.168.2.16	20.22.113.133
Apr 16, 2024 22:53:47.574842930 CEST	443	49858	20.22.113.133	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 16, 2024 22:51:57.687340021 CEST	53837	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:51:57.687536955 CEST	63254	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:51:57.780759096 CEST	53	64644	1.1.1.1	192.168.2.16
Apr 16, 2024 22:51:57.791819096 CEST	53	53837	1.1.1.1	192.168.2.16
Apr 16, 2024 22:51:57.794095039 CEST	53	63254	1.1.1.1	192.168.2.16
Apr 16, 2024 22:51:57.856949091 CEST	53	54719	1.1.1.1	192.168.2.16
Apr 16, 2024 22:51:58.011837959 CEST	55072	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:51:58.012061119 CEST	52485	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:51:58.116204023 CEST	53	55072	1.1.1.1	192.168.2.16
Apr 16, 2024 22:51:58.116395950 CEST	53	52485	1.1.1.1	192.168.2.16
Apr 16, 2024 22:51:58.509092093 CEST	53	54868	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:00.654042006 CEST	53	52808	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:00.682517052 CEST	53	58165	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:01.644227982 CEST	53	60192	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:02.527025938 CEST	52507	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:52:02.527167082 CEST	64209	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:52:02.632272005 CEST	53	64209	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:02.632493973 CEST	53	52507	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:03.144969940 CEST	53	54952	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:03.170353889 CEST	56039	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:52:03.170478106 CEST	60713	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:52:03.275019884 CEST	53	56039	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:03.275078058 CEST	53	60713	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:04.062628031 CEST	53	55663	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:05.346398115 CEST	56895	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:52:05.346518993 CEST	64664	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:52:05.451330900 CEST	53	56895	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:05.451755047 CEST	53	64664	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:08.347337008 CEST	62632	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:52:08.348185062 CEST	61259	53	192.168.2.16	1.1.1.1
Apr 16, 2024 22:52:08.452344894 CEST	53	62632	1.1.1.1	192.168.2.16
Apr 16, 2024 22:52:08.452617884 CEST	53	61259	1.1.1.1	192.168.2.16
Apr 16, 2024 22:53:10.195358038 CEST	138	138	192.168.2.16	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 16, 2024 22:52:08.452442884 CEST	192.168.2.16	1.1.1.1	c251	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 16, 2024 22:51:57.687340021 CEST	192.168.2.16	1.1.1.1	0xd011	Standard query (0)	gmail.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:51:57.687536955 CEST	192.168.2.16	1.1.1.1	0xd225	Standard query (0)	gmail.com	65	IN (0x0001)	false
Apr 16, 2024 22:51:58.011837959 CEST	192.168.2.16	1.1.1.1	0xe11c	Standard query (0)	mail.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:51:58.012061119 CEST	192.168.2.16	1.1.1.1	0x40b5	Standard query (0)	mail.google.com	65	IN (0x0001)	false
Apr 16, 2024 22:52:02.527025938 CEST	192.168.2.16	1.1.1.1	0x61e1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:02.527167082 CEST	192.168.2.16	1.1.1.1	0x8334	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 22:52:03.170353889 CEST	192.168.2.16	1.1.1.1	0x5c4	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:03.170478106 CEST	192.168.2.16	1.1.1.1	0x55bf	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Apr 16, 2024 22:52:05.346398115 CEST	192.168.2.16	1.1.1.1	0xbfcc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:05.346518993 CEST	192.168.2.16	1.1.1.1	0x94a2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 16, 2024 22:52:08.347337008 CEST	192.168.2.16	1.1.1.1	0x3b12	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:08.348185062 CEST	192.168.2.16	1.1.1.1	0x67e8	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 16, 2024 22:51:57.791819096 CEST	1.1.1.1	192.168.2.16	0xd011	No error (0)	gmail.com		142.250.9.17	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:51:57.791819096 CEST	1.1.1.1	192.168.2.16	0xd011	No error (0)	gmail.com		142.250.9.83	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:51:57.791819096 CEST	1.1.1.1	192.168.2.16	0xd011	No error (0)	gmail.com		142.250.9.19	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:51:57.791819096 CEST	1.1.1.1	192.168.2.16	0xd011	No error (0)	gmail.com		142.250.9.18	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:51:58.116204023 CEST	1.1.1.1	192.168.2.16	0xe11c	No error (0)	mail.google.com		74.125.136.83	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:51:58.116204023 CEST	1.1.1.1	192.168.2.16	0xe11c	No error (0)	mail.google.com		74.125.136.19	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:51:58.116204023 CEST	1.1.1.1	192.168.2.16	0xe11c	No error (0)	mail.google.com		74.125.136.18	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:51:58.116204023 CEST	1.1.1.1	192.168.2.16	0xe11c	No error (0)	mail.google.com		74.125.136.17	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:02.632272005 CEST	1.1.1.1	192.168.2.16	0x8334	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 22:52:02.632493973 CEST	1.1.1.1	192.168.2.16	0x61e1	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:02.632493973 CEST	1.1.1.1	192.168.2.16	0x61e1	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:02.632493973 CEST	1.1.1.1	192.168.2.16	0x61e1	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:02.632493973 CEST	1.1.1.1	192.168.2.16	0x61e1	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:02.632493973 CEST	1.1.1.1	192.168.2.16	0x61e1	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:02.632493973 CEST	1.1.1.1	192.168.2.16	0x61e1	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:03.275019884 CEST	1.1.1.1	192.168.2.16	0x5c4	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:52:03.275019884 CEST	1.1.1.1	192.168.2.16	0x5c4	No error (0)	www3.l.google.com		74.125.138.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:03.275019884 CEST	1.1.1.1	192.168.2.16	0x5c4	No error (0)	www3.l.google.com		74.125.138.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:03.275019884 CEST	1.1.1.1	192.168.2.16	0x5c4	No error (0)	www3.l.google.com		74.125.138.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:03.275019884 CEST	1.1.1.1	192.168.2.16	0x5c4	No error (0)	www3.l.google.com		74.125.138.102	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:03.275019884 CEST	1.1.1.1	192.168.2.16	0x5c4	No error (0)	www3.l.google.com		74.125.138.100	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:03.275019884 CEST	1.1.1.1	192.168.2.16	0x5c4	No error (0)	www3.l.google.com		74.125.138.113	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:03.275078058 CEST	1.1.1.1	192.168.2.16	0x55bf	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 16, 2024 22:52:05.451330900 CEST	1.1.1.1	192.168.2.16	0xbfcc	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:05.451330900 CEST	1.1.1.1	192.168.2.16	0xbfcc	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:05.451330900 CEST	1.1.1.1	192.168.2.16	0xbfcc	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:05.451330900 CEST	1.1.1.1	192.168.2.16	0xbfcc	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:05.451330900 CEST	1.1.1.1	192.168.2.16	0xbfcc	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:05.451330900 CEST	1.1.1.1	192.168.2.16	0xbfcc	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:05.451755047 CEST	1.1.1.1	192.168.2.16	0x94a2	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 16, 2024 22:52:08.452344894 CEST	1.1.1.1	192.168.2.16	0x3b12	No error (0)	play.google.com		74.125.138.139	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:08.452344894 CEST	1.1.1.1	192.168.2.16	0x3b12	No error (0)	play.google.com		74.125.138.101	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:08.452344894 CEST	1.1.1.1	192.168.2.16	0x3b12	No error (0)	play.google.com		74.125.138.102	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:08.452344894 CEST	1.1.1.1	192.168.2.16	0x3b12	No error (0)	play.google.com		74.125.138.138	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:08.452344894 CEST	1.1.1.1	192.168.2.16	0x3b12	No error (0)	play.google.com		74.125.138.100	A (IP address)	IN (0x0001)	false
Apr 16, 2024 22:52:08.452344894 CEST	1.1.1.1	192.168.2.16	0x3b12	No error (0)	play.google.com		74.125.138.113	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mail.google.com

https:

accounts.youtube.com

www.google.com

www.bing.com

browser.pipe.aria.microsoft.com

fp.msedge.net

l-ring.msedge.net

teams-ring.msedge.net

ln-ring.msedge.net

slscr.update.microsoft.com

fs.microsoft.com

storeedgefd.dsx.mp.microsoft.com

musicart.xboxlive.com

displaycatalog.mp.microsoft.com

purchase.mp.microsoft.com

licensing.mp.microsoft.com

livetileedge.dsx.mp.microsoft.com

gmail.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49697	142.250.9.17	80	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Apr 16, 2024 22:51:57.903841972 CEST	424	OUT	GET / HTTP/1.1 Host: gmail.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Apr 16, 2024 22:51:58.009525061 CEST	607	IN	HTTP/1.1 301 Moved Permanently Location: https://mail.google.com/mail/u/0/ Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: sffe Content-Length: 230 X-XSS-Protection: 0 Date: Tue, 16 Apr 2024 20:30:28 GMT Expires: Tue, 16 Apr 2024 21:00:28 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 1289 Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 69 6c 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 6d 61 69 6c 2f 75 2f 30 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://mail.google.com/mail/u/0/">here</A>.</BODY></HTML>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49701	74.125.136.83	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:51:58 UTC	667	OUT	GET /mail/u/0/ HTTP/1.1 Host: mail.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:51:58 UTC	777	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Location: https://accounts.google.com/ServiceLogin?service=mail&passive=1209600&osid=1&continue=https://mail.google.com/mail/u/0/&followup=https://mail.google.com/mail/u/0/&emr=1 Strict-Transport-Security: max-age=10886400; includeSubDomains Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: same-site Date: Tue, 16 Apr 2024 20:51:58 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: clear Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49722	74.125.138.101	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:03 UTC	1233	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1321404373&timestamp=1713300722730 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:52:03 UTC	1850	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-qlKM4LdmwQ8Von9s2HYLQA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Apr 2024 20:52:03 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjUtDikmLw0JBikPj6kkkNiJ3SZ7AGAHHSv_OsBUAsxMPx-eTvDWwCN64v3scEAH1gEsY" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-16 20:52:03 UTC	1850	IN	Data Raw: 37 36 39 66 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 71 6c 4b 4d 34 4c 64 6d 77 51 38 56 6f 6e 39 73 32 48 59 4c 51 41 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 Data Ascii: 769f<html><head><script nonce="qlKM4LdmwQ8Von9s2HYLQA">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){("unde
2024-04-16 20:52:03 UTC	1850	IN	Data Raw: 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 3d 3d 3d 61 29 7b 69 66 28 69 61 28 29 29 69 66 28 28 61 3d 2f 72 76 3a 20 2a 28 5b 5c 64 5c 2e 5d 2a 29 2f 2e 65 78 65 63 28 62 29 29 26 26 61 5b 31 5d 29 62 3d 61 5b 31 5d 3b 65 6c 73 65 7b 61 3d 22 22 3b 76 61 72 20 63 3d 2f 4d 53 49 45 20 2b 28 5b 5c 64 5c 2e 5d 2b 29 2f 2e 65 78 65 63 28 62 29 3b 69 66 28 63 26 26 63 5b 31 5d 29 69 66 28 62 3d 2f 54 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 0a 22 37 2e 30 22 3d 3d 63 5b 31 5d 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 61 3d 22 38 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 35 2e 30 22 3a 61 3d 22 39 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 36 2e 30 Data Ascii: ernet Explorer"===a){if(ia())if((a=/rv: ([\d\.])/.exec(b))&&a[1])b=a[1];else{a="";var c=/MSIE +([\d\.]+)/.exec(b);if(c&&c[1])if(b=/Trident\/(\d.\d)/.exec(b),"7.0"==c[1])if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0
2024-04-16 20:52:03 UTC	1850	IN	Data Raw: 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 3d 41 28 61 29 3b 69 66 28 64 26 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 41 61 28 61 2c 64 7c 31 29 3b 72 65 74 75 72 6e 21 30 7d 2c 42 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 22 69 6e 74 33 32 22 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 7c 7c 28 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 Data Ascii: },B=function(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;var d=A(a);if(d&1)return!0;if(!(b&&(Array.isArray(b)?b.includes(c):b.has(c))))return!1;Aa(a,d\|1);return!0},Ba=function(){var a=Error("int32");a.__closure__error__context__984382\|\|(a.__closure__er
2024-04-16 20:52:03 UTC	1850	IN	Data Raw: 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 0a 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 61 3d 42 28 61 2c 76 6f 69 64 20 30 2c 30 29 3f 76 6f 69 64 20 30 3a 65 26 26 41 28 61 29 26 32 3f 61 3a 49 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 3d 3d 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 7a 61 28 61 29 29 7b 76 61 72 20 66 3d 7b 7d 2c 68 3b 66 6f 72 28 68 20 69 6e 20 61 29 66 5b 68 5d 3d 4a 61 28 61 5b 68 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 3d 66 7d 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 64 7c 7c 63 3f 41 28 61 29 3a 30 3b 64 3d 64 3f 21 21 28 66 26 33 32 29 3a 76 6f 69 64 20 30 3b 61 3d 41 72 Data Ascii: a,b,c,d,e){if(null!=a){if(Array.isArray(a))a=B(a,void 0,0)?void 0:e&&A(a)&2?a:Ia(a,b,c,void 0!==d,e);else if(za(a)){var f={},h;for(h in a)f[h]=Ja(a[h],b,c,d,e);a=f}else a=b(a,d);return a}},Ia=function(a,b,c,d,e){var f=d\|\|c?A(a):0;d=d?!!(f&32):void 0;a=Ar
2024-04-16 20:52:03 UTC	1850	IN	Data Raw: 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 68 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 62 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 45 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 Data Ascii: e:!0,writable:!0,value:h})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("b");return new b(c+(f\|\|"")+"_"+d++,f)};return e});E("Symbol.iterator
2024-04-16 20:52:03 UTC	1850	IN	Data Raw: 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 64 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6d 2e 67 65 74 28 6b 29 7c 7c 33 21 3d 6d 2e 67 65 74 28 6c 29 29 72 65 74 75 72 6e 21 31 3b 6d 2e 64 65 6c 65 74 65 28 6b 29 3b 6d 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6d 2e 68 61 73 28 6b 29 26 26 34 3d 3d 6d 2e 67 65 74 28 6c 29 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 21 31 Data Ascii: ct.isExtensible(m)&&d(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(2!=m.get(k)\|\|3!=m.get(l))return!1;m.delete(k);m.set(l,4);return!m.has(k)&&4==m.get(l)}catch(r){return!1
2024-04-16 20:52:03 UTC	1850	IN	Data Raw: 65 61 64 3d 0a 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 75 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 67 29 2e 6c 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 28 67 3d 64 28 74 68 69 73 2c 67 29 2e 6c 29 26 26 67 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 Data Ascii: ead=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].u=f();this.size=0};c.prototype.has=function(g){return!!d(this,g).l};c.prototype.get=function(g){return(g=d(this,g).l)&&g.value};c.prototype.entries=function(){return e(t
2024-04-16 20:52:03 UTC	1850	IN	Data Raw: 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 21 3d 3d 62 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 29 3b 45 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 63 7c 7c 30 3b 66 6f 72 28 30 3e 63 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 29 29 3b 63 3c 65 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 69 66 28 66 3d 3d 3d 62 7c 7c 4f 62 6a 65 63 74 2e 69 73 28 66 2c 62 Data Ascii: c){return b===c?0!==b\|\|1/b===1/c:b!==b&&c!==c}});E("Array.prototype.includes",function(a){return a?a:function(b,c){var d=this;d instanceof String&&(d=String(d));var e=d.length;c=c\|\|0;for(0>c&&(c=Math.max(c+e,0));c<e;c++){var f=d[c];if(f===b\|\|Object.is(f,b
2024-04-16 20:52:03 UTC	1850	IN	Data Raw: 76 61 72 20 22 2b 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 3d 63 5b 64 5d 3a 63 3d 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 41 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 64 Data Ascii: var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c[d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b},I=function(a,b){function c(){}c.prototype=b.prototype;a.A=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.ea=function(d
2024-04-16 20:52:03 UTC	1850	IN	Data Raw: 61 6d 65 3a 61 2e 66 69 6c 65 4e 61 6d 65 2c 73 74 61 63 6b 3a 62 7d 3a 28 63 3d 61 2e 6d 65 73 73 61 67 65 2c 6e 75 6c 6c 3d 3d 63 26 26 28 63 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 3f 27 55 6e 6b 6e 6f 77 6e 20 45 72 72 6f 72 20 6f 66 20 74 79 70 65 20 22 27 2b 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3f 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 62 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 29 2b 27 22 27 3a 22 55 6e 6b 6e 6f 77 6e 20 45 72 72 6f 72 20 6f 66 20 75 6e 6b 6e 6f 77 6e 20 74 79 70 65 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 74 6f 53 74 72 69 6e 67 26 26 4f 62 6a 65 63 Data Ascii: ame:a.fileName,stack:b}:(c=a.message,null==c&&(c=a.constructor&&a.constructor instanceof Function?'Unknown Error of type "'+(a.constructor.name?a.constructor.name:tb(a.constructor))+'"':"Unknown Error of unknown type","function"===typeof a.toString&&Objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49715	142.250.105.103	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:05 UTC	1033	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQi5ys0BCMfRzQEIidPNAQjc080BCMvWzQEI9NbNAQiK180BCKfYzQEI+cDUFRi60s0BGMvYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:52:05 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 15 Apr 2024 14:07:06 GMT Expires: Tue, 23 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 110699 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 20:52:05 UTC	548	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-16 20:52:05 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;
2024-04-16 20:52:05 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4
2024-04-16 20:52:05 UTC	1255	IN	Data Raw: ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-16 20:52:05 UTC	1117	IN	Data Raw: ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49735	142.250.105.147	443	6184	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:05 UTC	442	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-16 20:52:05 UTC	707	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 15 Apr 2024 14:07:06 GMT Expires: Tue, 23 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 110699 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-16 20:52:05 UTC	548	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-16 20:52:05 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;
2024-04-16 20:52:05 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4
2024-04-16 20:52:05 UTC	1255	IN	Data Raw: ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-16 20:52:05 UTC	1117	IN	Data Raw: ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.16	49742	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:11 UTC	812	OUT	GET /manifest/threshold.appcache HTTP/1.1 Accept: / Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Origin: https://www.bing.com Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1707317782133&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1707317784&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-04-16 20:52:11 UTC	181	IN	HTTP/1.1 200 OK X-MSEdge-Ref: Ref A: AEC6546B6BF64F219C0E2D0A4263EB41 Ref B: ATL331000108031 Ref C: 2024-04-16T20:52:11Z Date: Tue, 16 Apr 2024 20:52:11 GMT Connection: close
2024-04-16 20:52:11 UTC	875	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 27 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 27 20 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 27 3e 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 27 20 68 74 74 70 2d 65 71 75 69 76 3d 27 63 6f 6e 74 65 6e 74 2d 74 79 70 65 27 2f 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 27 74 65 78 74 Data Ascii: <!DOCTYPE html PUBLIC '-//W3C//DTD XHTML 1.0 Transitional//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd'><html xmlns='http://www.w3.org/1999/xhtml'><head><meta content='text/html; charset=utf-8' http-equiv='content-type'/><style type='text

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49744	40.126.29.13	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:12 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 3592 Host: login.live.com
2024-04-16 20:52:12 UTC	3592	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-16 20:52:12 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 16 Apr 2024 20:51:12 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: cfb8555f-ce1a-4245-a5a1-5ddeb943b6a4 PPServer: PPV: 30 H: SN1PEPF0002F993 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:52:12 GMT Connection: close Content-Length: 11390
2024-04-16 20:52:12 UTC	11390	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49745	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:12 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=66ka7AY8zWtDbHC&MD=LZZ2D3WS HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-16 20:52:12 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: f1e286ba-fea8-4447-bc3e-b953270dfea7 MS-RequestId: 617dd602-8391-4703-8ca3-6c59a90c92a1 MS-CV: Otq6AAFW6EWpQrHG.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 20:52:12 GMT Connection: close Content-Length: 24490
2024-04-16 20:52:12 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-16 20:52:12 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.16	49746	51.104.15.253	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:12 UTC	684	OUT	POST /Collector/3.0/?qsp=true&content-type=application%2Fbond-compact-binary&client-id=NO_AUTH&sdk-version=AWT-Web-CJS-1.2.0&x-apikey=33d70a864599496b982a39f036f71122-2064703e-3a9d-4d90-8362-eec08dffe8e8-7176 HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: browser.pipe.aria.microsoft.com Content-Length: 987 Connection: Keep-Alive Cache-Control: no-cache
2024-04-16 20:52:12 UTC	987	OUT	Data Raw: 6d 09 0b 01 4a 33 33 64 37 30 61 38 36 34 35 39 39 34 39 36 62 39 38 32 61 33 39 66 30 33 36 66 37 31 31 32 32 2d 32 30 36 34 37 30 33 65 2d 33 61 39 64 2d 34 64 39 30 2d 38 33 36 32 2d 65 65 63 30 38 64 66 66 65 38 65 38 2d 37 31 37 36 0a 01 49 12 61 63 74 5f 64 65 66 61 75 6c 74 5f 73 6f 75 72 63 65 a9 24 38 38 63 34 32 33 65 63 2d 66 31 35 33 2d 34 34 34 35 2d 61 36 63 34 2d 62 35 65 62 32 39 63 61 62 36 31 33 d1 06 96 dc f3 8a dd 63 cb 08 0a 01 29 24 32 36 35 37 36 30 34 38 2d 61 30 61 34 2d 34 35 33 34 2d 39 61 36 34 2d 35 31 65 37 61 33 31 39 30 34 39 63 71 ac cc f3 8a dd 63 a9 14 63 75 73 74 6f 6d 2e 43 6c 69 65 6e 74 5f 45 76 65 6e 74 73 c9 06 0e 76 61 72 69 61 6e 74 5f 65 76 65 6e 74 73 cd 0d 09 09 19 0a 64 65 76 69 63 65 54 79 70 65 07 44 45 53 Data Ascii: mJ33d70a864599496b982a39f036f71122-2064703e-3a9d-4d90-8362-eec08dffe8e8-7176Iact_default_source$88c423ec-f153-4445-a6c4-b5eb29cab613c)$26576048-a0a4-4534-9a64-51e7a319049cqccustom.Client_Eventsvariant_eventsdeviceTypeDES
2024-04-16 20:52:13 UTC	462	IN	HTTP/1.1 200 OK Content-Length: 0 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 time-delta-millis: 1111 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: POST Access-Control-Allow-Headers: Accept, Content-Type, Content-Encoding, Client-Id Access-Control-Expose-Headers: kill-tokens, kill-duration-seconds, time-delta-millis Date: Tue, 16 Apr 2024 20:52:12 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49747	40.126.29.13	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:13 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-04-16 20:52:13 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-16 20:52:13 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 16 Apr 2024 20:51:13 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: 4e27460c-81ad-4280-a13f-20319265affb PPServer: PPV: 30 H: SN1PEPF0002F93A V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:52:12 GMT Connection: close Content-Length: 11370
2024-04-16 20:52:13 UTC	11370	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49748	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:13 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 20:52:13 UTC	468	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=123036 Date: Tue, 16 Apr 2024 20:52:13 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49749	40.126.29.13	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:13 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-04-16 20:52:13 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-16 20:52:14 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 16 Apr 2024 20:51:14 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: 1c1cc8b5-1871-487f-8371-1a910b11fd5a PPServer: PPV: 30 H: SN1PEPF0002F117 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:52:13 GMT Connection: close Content-Length: 11370
2024-04-16 20:52:14 UTC	11370	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49750	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-16 20:52:14 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=123078 Date: Tue, 16 Apr 2024 20:52:14 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-16 20:52:14 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.16	49752	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:14 UTC	1188	OUT	GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=st&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=2&cvid=06383237da004593a51c2cfed9916957&ig=4aa0e05b1fdf4fef8ea380075a1f6b48 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH X-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStore X-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2 X-MSEdge-ExternalExpType: JointCoord Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1713300731144&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1713300733&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-04-16 20:52:14 UTC	1190	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Length: 7395 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: MUIDB=5047E5942BB2460EA35B53CCF78DDB3D; expires=Sun, 11-May-2025 20:52:14 GMT; path=/; HttpOnly X-EventID: 661ee4feecdd401397a8e05a8630bc47 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 9A2E3530FA4D40A3AA785DFE1A34C863 Ref B: ATL331000102033 Ref C: 2024-04-16T20:52:14Z Date: Tue, 16 Apr 2024 20:52:14 GMT Connection: close
2024-04-16 20:52:14 UTC	1841	IN	Data Raw: 7b 22 52 65 73 6f 75 72 63 65 73 22 3a 7b 22 53 74 79 6c 65 73 22 3a 7b 22 43 73 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 43 73 73 48 65 61 64 4f 76 65 72 72 69 64 65 22 3a 7b 7d 7d 2c 22 53 63 72 69 70 74 73 22 3a 7b 22 4a 73 48 65 61 64 54 6f 70 6d 6f 73 74 22 3a 7b 7d 2c 22 4a 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 4a 73 45 6e 64 4f 66 43 68 75 6e 6b 22 3a 7b 7d 2c 22 4a 73 42 65 66 6f 72 65 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 4f 6e 4c 6f 61 64 22 3a 7b 7d 7d 7d 2c 22 53 75 67 67 65 73 74 69 6f 6e 73 22 3a 5b 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 75 72 6c 22 3a 22 2f 73 65 61 72 63 68 3f 71 3d 73 74 65 61 6d 5c 75 30 30 32 36 66 69 6c 74 Data Ascii: {"Resources":{"Styles":{"CssHeadNormal":{},"CssHeadOverride":{}},"Scripts":{"JsHeadTopmost":{},"JsHeadNormal":{},"JsEndOfChunk":{},"JsBeforeContent":{},"JsAfterContent":{},"JsAfterOnLoad":{}}},"Suggestions":[{"Attributes":{"url":"/search?q=steam\u0026filt
2024-04-16 20:52:14 UTC	1288	IN	Data Raw: 22 52 61 6e 6b 69 6e 67 53 63 6f 72 65 22 3a 22 22 2c 22 51 75 65 72 79 22 3a 22 53 74 65 61 6d 20 46 6f 72 65 6e 22 2c 22 54 79 70 65 22 3a 22 45 43 53 22 7d 2c 7b 22 54 65 78 74 22 3a 22 53 79 73 74 65 6d 76 6f 72 61 75 73 73 65 74 7a 75 6e 67 65 6e 22 2c 22 53 65 63 6f 6e 64 61 72 79 54 65 78 74 22 3a 22 22 2c 22 55 72 6c 22 3a 22 2f 73 65 61 72 63 68 3f 71 3d 53 74 65 61 6d 2b 53 79 73 74 65 6d 76 6f 72 61 75 73 73 65 74 7a 75 6e 67 65 6e 5c 75 30 30 32 36 66 69 6c 74 65 72 73 3d 75 66 6e 25 33 61 25 32 32 73 74 65 61 6d 25 32 32 2b 73 69 64 25 33 61 25 32 32 34 39 31 33 32 37 37 36 2d 37 33 39 31 2d 37 34 36 62 2d 64 64 64 35 2d 35 38 38 62 37 34 34 65 36 38 61 62 25 32 32 22 2c 22 43 61 74 65 67 6f 72 79 22 3a 22 22 2c 22 52 61 6e 6b 69 6e 67 53 63 Data Ascii: "RankingScore":"","Query":"Steam Foren","Type":"ECS"},{"Text":"Systemvoraussetzungen","SecondaryText":"","Url":"/search?q=Steam+Systemvoraussetzungen\u0026filters=ufn%3a%22steam%22+sid%3a%2249132776-7391-746b-ddd5-588b744e68ab%22","Category":"","RankingSc
2024-04-16 20:52:14 UTC	4096	IN	Data Raw: 30 30 31 3a 5c 22 31 30 38 36 31 5c 22 3b 32 31 35 32 3a 5c 22 31 33 32 35 36 5c 22 3b 32 30 30 30 3a 5c 22 31 32 31 33 31 34 39 5c 22 3b 32 30 31 31 3a 5c 22 35 5c 22 3b 31 31 30 33 34 3a 5c 22 31 30 37 33 37 39 37 35 30 35 5c 22 3b 22 2c 22 68 63 73 22 3a 22 30 22 7d 2c 22 54 65 78 74 22 3a 22 ee 80 80 73 74 ee 80 81 72 65 61 6d 6b 69 73 74 65 22 2c 22 48 69 67 68 43 6f 6e 66 69 64 65 6e 63 65 4d 65 74 61 53 75 67 67 65 73 74 69 6f 6e 53 63 6f 72 65 22 3a 30 2c 22 50 72 65 66 65 74 63 68 43 6f 6e 66 69 64 65 6e 63 65 53 63 6f 72 65 22 3a 30 7d 2c 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 75 72 6c 22 3a 22 2f 73 65 61 72 63 68 3f 71 3d 73 74 75 73 73 79 22 2c 22 71 75 65 72 79 22 3a 22 73 74 75 73 73 79 22 2c 22 73 74 79 70 65 22 3a 22 41 53 22 2c Data Ascii: 001:\"10861\";2152:\"13256\";2000:\"1213149\";2011:\"5\";11034:\"1073797505\";","hcs":"0"},"Text":"streamkiste","HighConfidenceMetaSuggestionScore":0,"PrefetchConfidenceScore":0},{"Attributes":{"url":"/search?q=stussy","query":"stussy","stype":"AS",
2024-04-16 20:52:14 UTC	170	IN	Data Raw: 73 65 74 74 69 6e 67 73 5c 74 73 74 61 72 20 77 61 72 73 20 2d 20 74 68 65 20 6f 6c 64 20 72 65 70 75 62 6c 69 63 5c 74 73 74 6d 33 32 20 73 74 2d 6c 69 6e 6b 20 75 74 69 6c 69 74 79 5c 74 73 74 61 72 66 61 63 65 20 75 63 63 20 63 6c 69 65 6e 74 5c 74 73 74 65 6c 6c 61 72 69 75 6d 5c 74 73 74 6d 33 32 63 75 62 65 6d 78 5c 74 73 74 61 72 74 65 61 6d 20 63 72 6f 73 73 2d 70 6c 61 74 66 6f 72 6d 20 63 6c 69 65 6e 74 5c 74 63 6c 78 2e 73 74 61 67 65 5c 74 73 79 73 74 65 6d 73 74 65 75 65 72 75 6e 67 22 7d 7d Data Ascii: settings\tstar wars - the old republic\tstm32 st-link utility\tstarface ucc client\tstellarium\tstm32cubemx\tstarteam cross-platform client\tclx.stage\tsystemsteuerung"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.16	49755	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:14 UTC	1191	OUT	GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=store&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=5&cvid=06383237da004593a51c2cfed9916957&ig=c3cac62bd6cb435c81e9969e065052f6 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH X-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStore X-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2 X-MSEdge-ExternalExpType: JointCoord Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1713300731144&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1713300733&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-04-16 20:52:14 UTC	1190	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Length: 5069 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: MUIDB=5047E5942BB2460EA35B53CCF78DDB3D; expires=Sun, 11-May-2025 20:52:14 GMT; path=/; HttpOnly X-EventID: 661ee4fecde64765984ce8bb859f14e2 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 82C12F8F068A4BC28B712CF11E73BF2F Ref B: ATL331000106027 Ref C: 2024-04-16T20:52:14Z Date: Tue, 16 Apr 2024 20:52:14 GMT Connection: close
2024-04-16 20:52:14 UTC	531	IN	Data Raw: 7b 22 52 65 73 6f 75 72 63 65 73 22 3a 7b 22 53 74 79 6c 65 73 22 3a 7b 22 43 73 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 43 73 73 48 65 61 64 4f 76 65 72 72 69 64 65 22 3a 7b 7d 7d 2c 22 53 63 72 69 70 74 73 22 3a 7b 22 4a 73 48 65 61 64 54 6f 70 6d 6f 73 74 22 3a 7b 7d 2c 22 4a 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 4a 73 45 6e 64 4f 66 43 68 75 6e 6b 22 3a 7b 7d 2c 22 4a 73 42 65 66 6f 72 65 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 4f 6e 4c 6f 61 64 22 3a 7b 7d 7d 7d 2c 22 53 75 67 67 65 73 74 69 6f 6e 73 22 3a 5b 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 75 72 6c 22 3a 22 2f 73 65 61 72 63 68 3f 71 3d 73 74 6f 72 65 22 2c 22 71 75 65 72 79 22 3a Data Ascii: {"Resources":{"Styles":{"CssHeadNormal":{},"CssHeadOverride":{}},"Scripts":{"JsHeadTopmost":{},"JsHeadNormal":{},"JsEndOfChunk":{},"JsBeforeContent":{},"JsAfterContent":{},"JsAfterOnLoad":{}}},"Suggestions":[{"Attributes":{"url":"/search?q=store","query":
2024-04-16 20:52:14 UTC	2598	IN	Data Raw: 64 65 6e 63 65 53 63 6f 72 65 22 3a 30 2e 33 34 34 30 38 33 39 39 34 36 32 36 39 39 38 39 7d 2c 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 75 72 6c 22 3a 22 2f 73 65 61 72 63 68 3f 71 3d 73 74 6f 72 65 2b 6d 69 63 72 6f 73 6f 66 74 22 2c 22 71 75 65 72 79 22 3a 22 73 74 6f 72 65 20 6d 69 63 72 6f 73 6f 66 74 22 2c 22 73 74 79 70 65 22 3a 22 41 53 22 2c 22 6c 6d 22 3a 22 31 30 30 30 3a 5c 22 30 5c 22 3b 32 32 30 30 3a 5c 22 31 33 5c 22 3b 33 30 30 30 31 3a 5c 22 31 34 37 38 33 5c 22 3b 32 31 35 32 3a 5c 22 31 35 35 33 33 5c 22 3b 32 30 30 30 3a 5c 22 31 35 32 30 31 34 5c 22 3b 32 30 31 31 3a 5c 22 32 5c 22 3b 31 31 30 33 34 3a 5c 22 31 30 37 33 37 39 37 35 30 35 5c 22 3b 22 2c 22 68 63 73 22 3a 22 30 22 7d 2c 22 54 65 78 74 22 3a 22 ee 80 80 73 74 6f Data Ascii: denceScore":0.3440839946269989},{"Attributes":{"url":"/search?q=store+microsoft","query":"store microsoft","stype":"AS","lm":"1000:\"0\";2200:\"13\";30001:\"14783\";2152:\"15533\";2000:\"152014\";2011:\"2\";11034:\"1073797505\";","hcs":"0"},"Text":"sto
2024-04-16 20:52:14 UTC	1940	IN	Data Raw: 72 65 22 3a 31 2c 22 50 72 65 66 65 74 63 68 43 6f 6e 66 69 64 65 6e 63 65 53 63 6f 72 65 22 3a 30 7d 2c 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 73 74 79 70 65 22 3a 22 51 50 22 2c 22 68 63 22 3a 22 31 22 2c 22 68 63 73 22 3a 22 31 22 2c 22 61 70 70 49 64 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 57 69 6e 64 6f 77 73 53 74 6f 72 65 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 21 41 70 70 22 7d 2c 22 48 69 67 68 43 6f 6e 66 69 64 65 6e 63 65 4d 65 74 61 53 75 67 67 65 73 74 69 6f 6e 53 63 6f 72 65 22 3a 31 2c 22 50 72 65 66 65 74 63 68 43 6f 6e 66 69 64 65 6e 63 65 53 63 6f 72 65 22 3a 30 7d 5d 2c 22 45 4c 54 6f 6b 65 6e 22 3a 22 22 2c 22 52 61 6e 6b 69 6e 67 53 69 67 6e 61 6c 73 22 3a 7b 22 43 43 52 53 75 67 67 65 73 74 69 6f 6e 73 22 3a 22 6d 69 63 72 Data Ascii: re":1,"PrefetchConfidenceScore":0},{"Attributes":{"stype":"QP","hc":"1","hcs":"1","appId":"Microsoft.WindowsStore_8wekyb3d8bbwe!App"},"HighConfidenceMetaSuggestionScore":1,"PrefetchConfidenceScore":0}],"ELToken":"","RankingSignals":{"CCRSuggestions":"micr

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.16	49751	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:14 UTC	1187	OUT	GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=s&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=1&cvid=06383237da004593a51c2cfed9916957&ig=fa13123c3b65485a8c0ad1d225b24786 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH X-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStore X-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2 X-MSEdge-ExternalExpType: JointCoord Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1713300731144&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1713300733&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-04-16 20:52:14 UTC	1190	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Length: 5461 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: MUIDB=5047E5942BB2460EA35B53CCF78DDB3D; expires=Sun, 11-May-2025 20:52:14 GMT; path=/; HttpOnly X-EventID: 661ee4fee94445d5961c0857cf05c778 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 3E8345C1F7C440CD8858898FD83461C6 Ref B: ATL331000102029 Ref C: 2024-04-16T20:52:14Z Date: Tue, 16 Apr 2024 20:52:13 GMT Connection: close
2024-04-16 20:52:14 UTC	3081	IN	Data Raw: 7b 22 52 65 73 6f 75 72 63 65 73 22 3a 7b 22 53 74 79 6c 65 73 22 3a 7b 22 43 73 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 43 73 73 48 65 61 64 4f 76 65 72 72 69 64 65 22 3a 7b 7d 7d 2c 22 53 63 72 69 70 74 73 22 3a 7b 22 4a 73 48 65 61 64 54 6f 70 6d 6f 73 74 22 3a 7b 7d 2c 22 4a 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 4a 73 45 6e 64 4f 66 43 68 75 6e 6b 22 3a 7b 7d 2c 22 4a 73 42 65 66 6f 72 65 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 4f 6e 4c 6f 61 64 22 3a 7b 7d 7d 7d 2c 22 53 75 67 67 65 73 74 69 6f 6e 73 22 3a 5b 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 75 72 6c 22 3a 22 2f 73 65 61 72 63 68 3f 71 3d 73 70 6f 74 69 66 79 5c 75 30 30 32 36 66 69 Data Ascii: {"Resources":{"Styles":{"CssHeadNormal":{},"CssHeadOverride":{}},"Scripts":{"JsHeadTopmost":{},"JsHeadNormal":{},"JsEndOfChunk":{},"JsBeforeContent":{},"JsAfterContent":{},"JsAfterOnLoad":{}}},"Suggestions":[{"Attributes":{"url":"/search?q=spotify\u0026fi
2024-04-16 20:52:14 UTC	48	IN	Data Raw: 22 31 33 5c 22 3b 33 30 30 30 31 3a 5c 22 31 30 33 37 32 5c 22 3b 32 31 35 32 3a 5c 22 31 30 37 32 32 5c 22 3b 32 30 30 30 3a 5c 22 31 32 35 31 Data Ascii: "13\";30001:\"10372\";2152:\"10722\";2000:\"1251
2024-04-16 20:52:14 UTC	2332	IN	Data Raw: 38 36 35 33 5c 22 3b 32 30 31 31 3a 5c 22 31 30 5c 22 3b 31 31 30 33 34 3a 5c 22 31 30 37 33 37 39 37 35 30 35 5c 22 3b 22 2c 22 68 63 73 22 3a 22 30 22 7d 2c 22 54 65 78 74 22 3a 22 ee 80 80 73 ee 80 81 75 6e 72 69 73 65 22 2c 22 48 69 67 68 43 6f 6e 66 69 64 65 6e 63 65 4d 65 74 61 53 75 67 67 65 73 74 69 6f 6e 53 63 6f 72 65 22 3a 30 2c 22 50 72 65 66 65 74 63 68 43 6f 6e 66 69 64 65 6e 63 65 53 63 6f 72 65 22 3a 30 7d 2c 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 73 74 79 70 65 22 3a 22 51 50 22 2c 22 68 63 22 3a 22 31 22 2c 22 68 63 73 22 3a 22 31 22 2c 22 61 70 70 49 64 22 3a 22 7b 37 43 35 41 34 30 45 46 2d 41 30 46 42 2d 34 42 46 43 2d 38 37 34 41 2d 43 30 46 32 45 30 42 39 46 41 38 45 7d 5c 5c 53 74 65 61 6d 5c 5c 53 74 65 61 6d 2e 65 78 65 Data Ascii: 8653\";2011:\"10\";11034:\"1073797505\";","hcs":"0"},"Text":"sunrise","HighConfidenceMetaSuggestionScore":0,"PrefetchConfidenceScore":0},{"Attributes":{"stype":"QP","hc":"1","hcs":"1","appId":"{7C5A40EF-A0FB-4BFC-874A-C0F2E0B9FA8E}\\Steam\\Steam.exe

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.16	49754	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:14 UTC	1190	OUT	GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=stor&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=4&cvid=06383237da004593a51c2cfed9916957&ig=65c7158fa9b5475fa1472641d85191b1 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH X-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStore X-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2 X-MSEdge-ExternalExpType: JointCoord Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1713300731144&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1713300733&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-04-16 20:52:14 UTC	1190	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Length: 5836 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: MUIDB=5047E5942BB2460EA35B53CCF78DDB3D; expires=Sun, 11-May-2025 20:52:14 GMT; path=/; HttpOnly X-EventID: 661ee4fe76ee40fe83ece9f2b8652f15 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: D1916AD0F1FF477EA6F6EA833951EBCB Ref B: ATL331000106033 Ref C: 2024-04-16T20:52:14Z Date: Tue, 16 Apr 2024 20:52:14 GMT Connection: close
2024-04-16 20:52:14 UTC	3129	IN	Data Raw: 7b 22 52 65 73 6f 75 72 63 65 73 22 3a 7b 22 53 74 79 6c 65 73 22 3a 7b 22 43 73 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 43 73 73 48 65 61 64 4f 76 65 72 72 69 64 65 22 3a 7b 7d 7d 2c 22 53 63 72 69 70 74 73 22 3a 7b 22 4a 73 48 65 61 64 54 6f 70 6d 6f 73 74 22 3a 7b 7d 2c 22 4a 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 4a 73 45 6e 64 4f 66 43 68 75 6e 6b 22 3a 7b 7d 2c 22 4a 73 42 65 66 6f 72 65 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 4f 6e 4c 6f 61 64 22 3a 7b 7d 7d 7d 2c 22 53 75 67 67 65 73 74 69 6f 6e 73 22 3a 5b 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 75 72 6c 22 3a 22 2f 73 65 61 72 63 68 3f 71 3d 73 74 6f 72 65 22 2c 22 71 75 65 72 79 22 3a Data Ascii: {"Resources":{"Styles":{"CssHeadNormal":{},"CssHeadOverride":{}},"Scripts":{"JsHeadTopmost":{},"JsHeadNormal":{},"JsEndOfChunk":{},"JsBeforeContent":{},"JsAfterContent":{},"JsAfterOnLoad":{}}},"Suggestions":[{"Attributes":{"url":"/search?q=store","query":
2024-04-16 20:52:14 UTC	2707	IN	Data Raw: 31 30 37 33 37 39 37 35 30 35 5c 22 3b 22 2c 22 68 63 73 22 3a 22 30 22 7d 2c 22 54 65 78 74 22 3a 22 ee 80 80 73 74 6f 72 ee 80 81 79 73 69 74 65 22 2c 22 48 69 67 68 43 6f 6e 66 69 64 65 6e 63 65 4d 65 74 61 53 75 67 67 65 73 74 69 6f 6e 53 63 6f 72 65 22 3a 30 2c 22 50 72 65 66 65 74 63 68 43 6f 6e 66 69 64 65 6e 63 65 53 63 6f 72 65 22 3a 30 7d 2c 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 73 74 79 70 65 22 3a 22 51 50 22 2c 22 68 63 22 3a 22 31 22 2c 22 68 63 73 22 3a 22 31 22 2c 22 61 70 70 49 64 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 57 69 6e 64 6f 77 73 53 74 6f 72 65 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 21 41 70 70 22 7d 2c 22 48 69 67 68 43 6f 6e 66 69 64 65 6e 63 65 4d 65 74 61 53 75 67 67 65 73 74 69 6f 6e 53 63 6f 72 65 22 3a 31 2c Data Ascii: 1073797505\";","hcs":"0"},"Text":"storysite","HighConfidenceMetaSuggestionScore":0,"PrefetchConfidenceScore":0},{"Attributes":{"stype":"QP","hc":"1","hcs":"1","appId":"Microsoft.WindowsStore_8wekyb3d8bbwe!App"},"HighConfidenceMetaSuggestionScore":1,

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.16	49753	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:14 UTC	1189	OUT	GET /AS/API/WindowsCortanaPane/V2/Suggestions?qry=sto&setlang=en-CH&cc=CH&nohs=1&qfm=1&cp=3&cvid=06383237da004593a51c2cfed9916957&ig=4eb84d662f164b0b9973aa16ab8f073b HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH X-BM-ClientFeatures: FontV22,LightAnswers,PreviewPaneAvailable,RevStore X-MSEdge-ExternalExp: d-thshld42,dsbdailyset_c,expmegaclick_cf,hashexpt3,iffsqloptwin10c,msbdsbedu9cf,wsbqfnewsynonym,wsbref-t,wsbswgc-t2 X-MSEdge-ExternalExpType: JointCoord Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Connection: Keep-Alive Cookie: MUID=5047E5942BB2460EA35B53CCF78DDB3D; _SS=SID=117ACB7E7D246FD81513DF607C366EB7&CPID=1713300731144&AC=1&CPH=c645c844; _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; SRCHUID=V=2&GUID=E0DD87A720F84B6F91D233EB006F66A1&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&HV=1713300733&IPMH=3a628620&IPMID=1707317755885; MUIDB=5047E5942BB2460EA35B53CCF78DDB3D
2024-04-16 20:52:14 UTC	1190	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Content-Length: 5391 Content-Type: application/json; charset=utf-8 Expires: -1 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: _EDGE_S=SID=117ACB7E7D246FD81513DF607C366EB7&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: MUIDB=5047E5942BB2460EA35B53CCF78DDB3D; expires=Sun, 11-May-2025 20:52:14 GMT; path=/; HttpOnly X-EventID: 661ee4fe9494494f830840a72c7b2520 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 055A4A0B647946F3B3DE241A9149C721 Ref B: ATL331000102019 Ref C: 2024-04-16T20:52:14Z Date: Tue, 16 Apr 2024 20:52:13 GMT Connection: close
2024-04-16 20:52:14 UTC	1568	IN	Data Raw: 7b 22 52 65 73 6f 75 72 63 65 73 22 3a 7b 22 53 74 79 6c 65 73 22 3a 7b 22 43 73 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 43 73 73 48 65 61 64 4f 76 65 72 72 69 64 65 22 3a 7b 7d 7d 2c 22 53 63 72 69 70 74 73 22 3a 7b 22 4a 73 48 65 61 64 54 6f 70 6d 6f 73 74 22 3a 7b 7d 2c 22 4a 73 48 65 61 64 4e 6f 72 6d 61 6c 22 3a 7b 7d 2c 22 4a 73 45 6e 64 4f 66 43 68 75 6e 6b 22 3a 7b 7d 2c 22 4a 73 42 65 66 6f 72 65 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 43 6f 6e 74 65 6e 74 22 3a 7b 7d 2c 22 4a 73 41 66 74 65 72 4f 6e 4c 6f 61 64 22 3a 7b 7d 7d 7d 2c 22 53 75 67 67 65 73 74 69 6f 6e 73 22 3a 5b 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 75 72 6c 22 3a 22 2f 73 65 61 72 63 68 3f 71 3d 73 74 6f 63 6b 78 22 2c 22 71 75 65 72 79 22 Data Ascii: {"Resources":{"Styles":{"CssHeadNormal":{},"CssHeadOverride":{}},"Scripts":{"JsHeadTopmost":{},"JsHeadNormal":{},"JsEndOfChunk":{},"JsBeforeContent":{},"JsAfterContent":{},"JsAfterOnLoad":{}}},"Suggestions":[{"Attributes":{"url":"/search?q=stockx","query"
2024-04-16 20:52:14 UTC	1561	IN	Data Raw: 34 30 5c 22 3b 32 30 30 30 3a 5c 22 32 38 39 31 35 38 5c 22 3b 32 30 31 31 3a 5c 22 35 5c 22 3b 31 31 30 33 34 3a 5c 22 31 30 37 33 37 39 37 35 30 35 5c 22 3b 22 2c 22 68 63 73 22 3a 22 30 22 7d 2c 22 54 65 78 74 22 3a 22 ee 80 80 73 74 6f ee 80 81 6e 65 20 69 73 6c 61 6e 64 22 2c 22 48 69 67 68 43 6f 6e 66 69 64 65 6e 63 65 4d 65 74 61 53 75 67 67 65 73 74 69 6f 6e 53 63 6f 72 65 22 3a 30 2c 22 50 72 65 66 65 74 63 68 43 6f 6e 66 69 64 65 6e 63 65 53 63 6f 72 65 22 3a 30 7d 2c 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 75 72 6c 22 3a 22 2f 73 65 61 72 63 68 3f 71 3d 73 74 6f 72 65 22 2c 22 71 75 65 72 79 22 3a 22 73 74 6f 72 65 22 2c 22 73 74 79 70 65 22 3a 22 41 53 22 2c 22 6c 6d 22 3a 22 31 30 30 30 3a 5c 22 30 5c 22 3b 32 32 30 30 3a 5c 22 31 33 Data Ascii: 40\";2000:\"289158\";2011:\"5\";11034:\"1073797505\";","hcs":"0"},"Text":"stone island","HighConfidenceMetaSuggestionScore":0,"PrefetchConfidenceScore":0},{"Attributes":{"url":"/search?q=store","query":"store","stype":"AS","lm":"1000:\"0\";2200:\"13
2024-04-16 20:52:14 UTC	2262	IN	Data Raw: 72 65 22 3a 30 2c 22 50 72 65 66 65 74 63 68 43 6f 6e 66 69 64 65 6e 63 65 53 63 6f 72 65 22 3a 30 7d 2c 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 73 74 79 70 65 22 3a 22 51 50 22 2c 22 68 63 22 3a 22 31 22 2c 22 68 63 73 22 3a 22 31 22 2c 22 61 70 70 49 64 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 57 69 6e 64 6f 77 73 53 74 6f 72 65 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 21 41 70 70 22 7d 2c 22 48 69 67 68 43 6f 6e 66 69 64 65 6e 63 65 4d 65 74 61 53 75 67 67 65 73 74 69 6f 6e 53 63 6f 72 65 22 3a 31 2c 22 50 72 65 66 65 74 63 68 43 6f 6e 66 69 64 65 6e 63 65 53 63 6f 72 65 22 3a 30 7d 2c 7b 22 41 74 74 72 69 62 75 74 65 73 22 3a 7b 22 73 74 79 70 65 22 3a 22 51 50 22 2c 22 68 63 22 3a 22 31 22 2c 22 68 63 73 22 3a 22 31 22 2c 22 61 70 70 49 64 22 Data Ascii: re":0,"PrefetchConfidenceScore":0},{"Attributes":{"stype":"QP","hc":"1","hcs":"1","appId":"Microsoft.WindowsStore_8wekyb3d8bbwe!App"},"HighConfidenceMetaSuggestionScore":1,"PrefetchConfidenceScore":0},{"Attributes":{"stype":"QP","hc":"1","hcs":"1","appId"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49756	40.126.29.13	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:14 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4788 Host: login.live.com
2024-04-16 20:52:14 UTC	4788	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-16 20:52:14 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 16 Apr 2024 20:51:14 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: 332e2794-c706-423b-a3b6-a22b29668c70 PPServer: PPV: 30 H: SN1PEPF0002F94F V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:52:14 GMT Connection: close Content-Length: 11153
2024-04-16 20:52:14 UTC	11153	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.16	49757	204.79.197.222	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:15 UTC	462	OUT	GET /conf/v2/asgw/fpconfig.min.json?monitorId=asgw HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: fp.msedge.net Connection: Keep-Alive
2024-04-16 20:52:15 UTC	431	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=900 Content-Length: 18094 Content-Type: application/json; charset=utf-8 ETag: "1507013247" Access-Control-Allow-Origin: * Request-Context: appId=cid-v1:b183296d-485b-49fc-81c7-a511e61d1309 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: ADE0CF110B904400A15811C04F2B2DF4 Ref B: ATL331000108019 Ref C: 2024-04-16T20:52:15Z Date: Tue, 16 Apr 2024 20:52:15 GMT Connection: close
2024-04-16 20:52:15 UTC	2568	IN	Data Raw: 7b 22 73 22 3a 35 30 30 30 2c 22 6e 22 3a 33 2c 22 65 22 3a 5b 7b 22 65 22 3a 22 2a 2e 61 7a 72 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 35 30 30 30 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 2a 2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 32 30 30 30 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 2a 2e 63 6c 6f 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 31 30 30 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 2a 2e 6e 72 62 2e 66 6f 6f 74 70 72 69 6e 74 64 6e 73 2e 63 6f 6d 22 2c 22 77 22 3a 34 32 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 61 66 64 78 74 65 73 74 2e 7a 30 31 2e 61 7a 75 72 65 66 64 2e 6e 65 74 22 2c 22 77 22 3a 35 30 30 2c 22 6d 22 3a 31 7d 2c 7b Data Ascii: {"s":5000,"n":3,"e":[{"e":".azr.footprintdns.com","w":5000,"m":128},{"e":".clo.footprintdns.com","w":2000,"m":1},{"e":".clo.footprintdns.com","w":100,"m":128},{"e":".nrb.footprintdns.com","w":420,"m":3},{"e":"afdxtest.z01.azurefd.net","w":500,"m":1},{
2024-04-16 20:52:15 UTC	1230	IN	Data Raw: 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 63 68 69 32 35 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 63 6f 32 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 63 6f 33 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 63 70 71 32 31 70 72 64 61 70 70 30 31 Data Ascii: p02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"chi25prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"co2prdapp01-canary.netmon.azure.com","w":3,"m":1},{"e":"co3prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"cpq21prdapp01
2024-04-16 20:52:15 UTC	4096	IN	Data Raw: 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 64 6f 68 32 31 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 64 6f 68 32 31 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 64 6f 68 32 32 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 Data Ascii: pp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"doh21prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"doh21prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"doh22prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"
2024-04-16 20:52:15 UTC	4096	IN	Data Raw: 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 69 61 64 32 30 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 6a 67 61 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 7d 2c 7b 22 65 22 3a 22 6a 67 61 32 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 6a 67 61 32 30 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e Data Ascii: om","w":3,"m":128},{"e":"iad20prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"jga20prdapp01-canary-opaph.netmon.azure.com","w":3,"m":1},{"e":"jga20prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"jga20prdapp02-canary-opaph.netmon.
2024-04-16 20:52:15 UTC	4096	IN	Data Raw: 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 70 61 72 32 32 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 70 61 72 32 33 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 70 68 78 31 30 70 72 64 61 70 70 30 31 2d 63 61 6e 61 72 79 2d 6f 70 61 70 68 2e 6e 65 74 6d 6f 6e 2e 61 7a 75 72 65 2e 63 6f 6d 22 2c 22 77 22 3a 33 2c 22 6d 22 3a 31 32 38 7d 2c 7b 22 65 22 3a 22 70 68 78 31 30 70 72 64 61 70 70 30 32 2d 63 61 6e 61 72 79 2d Data Ascii: ry.netmon.azure.com","w":3,"m":128},{"e":"par22prdapp01-canary.netmon.azure.com","w":3,"m":128},{"e":"par23prdapp02-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"phx10prdapp01-canary-opaph.netmon.azure.com","w":3,"m":128},{"e":"phx10prdapp02-canary-
2024-04-16 20:52:15 UTC	2008	IN	Data Raw: 33 7d 2c 7b 22 65 22 3a 22 74 2d 72 69 6e 67 2d 66 61 6c 6c 62 61 63 6b 73 31 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 32 30 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 74 2d 72 69 6e 67 2d 66 61 6c 6c 62 61 63 6b 73 32 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 32 30 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 74 2d 72 69 6e 67 2d 66 64 76 32 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 32 30 30 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 74 2d 73 31 2d 72 69 6e 67 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 35 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 74 2d 73 32 2d 72 69 6e 67 2e 6d 73 65 64 67 65 2e 6e 65 74 22 2c 22 77 22 3a 32 30 30 2c 22 6d 22 3a 33 7d 2c 7b 22 65 22 3a 22 74 79 31 70 72 64 61 70 70 30 31 2d 63 Data Ascii: 3},{"e":"t-ring-fallbacks1.msedge.net","w":200,"m":3},{"e":"t-ring-fallbacks2.msedge.net","w":200,"m":3},{"e":"t-ring-fdv2.msedge.net","w":2000,"m":3},{"e":"t-s1-ring.msedge.net","w":50,"m":3},{"e":"t-s2-ring.msedge.net","w":200,"m":3},{"e":"ty1prdapp01-c

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.16	49758	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:15 UTC	2871	OUT	GET /v8.0/callerspecificdata/?market=CH&locale=en-CH&appversion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&catalogLocales=en-CH%2Cen-GB&oemId=Public&scmId=Public&moId=Public&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&pzn=1&preciseAppVersion=11910.1002.5.0&preciseDeviceFamilyVersion=2814751015241686&mfg=VMware%2C+Inc.&model=VMware20%2C1 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False OSIsGenuine: True Accept: / TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.2 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Content-Length: 0 Content-Type: application/json; charset=UTF-8 Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive Cache-Control: no-cache
2024-04-16 20:52:15 UTC	380	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0007I9_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.2.0 Expires: Tue, 16 Apr 2024 20:52:15 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:15 GMT Content-Length: 9242 Connection: close X-Segment-On: true
2024-04-16 20:52:15 UTC	9242	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 63 61 6c 6c 65 72 73 70 65 63 69 66 69 63 64 61 74 61 2f 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 61 70 70 76 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 6f 6e 3d 32 38 31 34 37 35 30 39 37 30 34 37 38 35 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/callerspecificdata/?market=CH&locale=en-CH&appversion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=28147509704785

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.16	49759	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:15 UTC	2836	OUT	GET /v8.0/secondarycallerspecificdata/?market=CH&locale=en-CH&appversion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&catalogLocales=en-CH%2Cen-GB&oemId=Public&scmId=Public&moId=Public&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&preciseAppVersion=11910.1002.5.0&preciseDeviceFamilyVersion=2814751015241686 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False OSIsGenuine: True Accept: / TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.1 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Content-Length: 0 Content-Type: application/json; charset=UTF-8 Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive Cache-Control: no-cache
2024-04-16 20:52:15 UTC	380	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_LEGACY000002_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.1.0 Expires: Tue, 16 Apr 2024 20:52:15 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:15 GMT Content-Length: 9345 Connection: close X-Segment-On: true
2024-04-16 20:52:15 UTC	9345	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 73 65 63 6f 6e 64 61 72 79 63 61 6c 6c 65 72 73 70 65 63 69 66 69 63 64 61 74 61 2f 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 61 70 70 76 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 6f 6e 3d 32 38 31 34 37 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/secondarycallerspecificdata/?market=CH&locale=en-CH&appversion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=28147

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.16	49760	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:15 UTC	2871	OUT	GET /v8.0/callerspecificdata/?market=CH&locale=en-CH&appversion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&catalogLocales=en-CH%2Cen-GB&oemId=Public&scmId=Public&moId=Public&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&pzn=0&preciseAppVersion=11910.1002.5.0&preciseDeviceFamilyVersion=2814751015241686&mfg=VMware%2C+Inc.&model=VMware20%2C1 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False OSIsGenuine: True Accept: / TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.3 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=EwCoBF8iAQAUxokDaR6V1OYTSqu3AJSFH2TqWh0AAerKgtsf2pOlTKT7oTdo7Uceu1dZt/MHfrX3RnsNNyMPHM07k3VfGs5S8Dw/TeNZq8qkolPw30fES6JBwIj+mJr01HE5xxEI6vFmO08BNrGvcwkS2nj0u+3h+Y8WnLUZ1Gvrl1Mf3RYGstYGn+jox2xpSS7gdBFukoVq2vClZc5rGW5O8ypvBZZQn8NFqDv/MTpSzHEyKpdMJ6+sfg4a0yPzOyV2+dKYgcRhLnDDe77tukvPgkFuPtoWbhOEDQHrLl5vr35NngAYQqZxjYFC6UCt7B53MOH1L13dyfrPyR6QjD0TAbHom1glQWYiLOWrPWWnLfqmid5WEFWDC78RQI8DZgAACHAH+3DY/8tLeAMCp0cIJxN2OakUG7ztcRy5hX/26s5SG2jQWs2eaMtyA/XZMsD9XI64MOWt6hbnWnpWnqzGvRbgn3mZAwDG7WA3ZXhMGtQM0Okxbf/wsVPROYN2X8jmxDrO5EJnQCRIBP1mCvL5nHMJWrahZWQUwIzxZqFqRcG9ZYT6+A6DViwJauvNzQvEHpBXEILFXYc7lBydd0iHpLMwX6wyzTq/14hdcVUQZUJarjRdDJzbso1wbKzOj0fow5qqe6anSTmmYJyVtU3eKVRiriFggdz98cCYjkPAvO+qvtzsEMqGEjcSPP8zn9s7p27g5Ze+ypWEYmpGbCbs6Ofn5pB4pyrjRf08v6bpaVD3JOu14zN1Ms2H8uOuXKwkC7YQWNxDQ6rsKjSaSAI8m5mme0lhnH/hp/J3JvE46w9JSNYesRsVaTjs2zn3LBNJz9lsxKcz+NBDMSf8jq0M1FzgIdMPsh6RDchX3we/MM0hlpiqBto8FJd2+R11yIGB0LH6OVKT6XpMESK8Wy8A4wkItsz4MdocKvB/47Ld0dxlyfjpQEG1GTGbM6K0pVfya81N7dCnNIkvpslnERLkbGavSizggVUOtD0w/a/TFiLbJZgqW8X20xc/k8Bw+5ioFk9tHlFMI8TwyGOttF2E4inI1tYtTH85MEyQz31d0M0taDq7g2f6mHyCIBT1yRaLXfvIj0X9E7p64ULkTlGi7/BvmRlqeIlJlc994B+0cJDfyrLwrCW0vVatTJoExKrNnookFpwTN2FeZ/85fssGtdVxjlnxiURCIUi4fHJo1R2BZb7/QAEsdDL+9xVXqXRlp5RcZm4pmPLM1JAOMF4OZZ2WDKwW/wNJf5Wm1WwCQUjl4FxYBxnz0y67cqOBmr0+2Vqg4zvt7Ejzcfcz3uoxvCa7PiScCSan6V0BS1tsy/JJWIGoxk0cegBrfDFVI0AV1jx+9jdQ8RRe7+/QWy4b6CssoiwL/PvOAC6WW6o6RUKGmqnW3Rf5cVTvURKzZ5L9lAdtOrY+uVhjHgvqOaHUFBMD7DTLn9zkw6oWmINp64poZORLA7WgD2mueDsTcJ9nlHV/f/NYLLukQeBjOLo98pfi3XXl+zhJFpQ5CnX08ehpLJg6cv/gG6ropYLyruRCzJRQYZuGGEIaYAjS3C3XYLT6Di9fKpTjBW9xSN65LycjF3ieAw==&p= Content-Length: 0 Content-Type: application/json; charset=UTF-8 Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive Cache-Control: no-cache
2024-04-16 20:52:16 UTC	380	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0006QT_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.3.0 Expires: Tue, 16 Apr 2024 20:52:16 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:16 GMT Content-Length: 9509 Connection: close X-Segment-On: true
2024-04-16 20:52:16 UTC	9509	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 63 61 6c 6c 65 72 73 70 65 63 69 66 69 63 64 61 74 61 2f 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 61 70 70 76 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 6f 6e 3d 32 38 31 34 37 35 30 39 37 30 34 37 38 35 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/callerspecificdata/?market=CH&locale=en-CH&appversion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=28147509704785

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.16	49761	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:16 UTC	8927	OUT	GET /v8.0/pages/chrome?appversion=11910.1002.0.0&market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&pzn=0&userSegments=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 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.4 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:16 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy000001_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.4.5 Expires: Tue, 16 Apr 2024 20:52:16 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:16 GMT Content-Length: 17294 Connection: close X-Segment-On: true
2024-04-16 20:52:16 UTC	16003	IN	Data Raw: 5b 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 70 61 67 65 73 2f 63 68 72 6f 6d 65 3f 61 70 70 76 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 6f 6e 3d 32 38 31 34 37 35 30 39 37 30 34 37 38 35 39 32 26 70 7a 6e Data Ascii: [{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/pages/chrome?appversion=11910.1002.0.0&market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&pzn
2024-04-16 20:52:16 UTC	1291	IN	Data Raw: 48 48 64 42 78 52 6f 64 51 73 36 74 77 37 72 31 49 51 4d 69 34 51 38 58 30 65 76 73 72 31 6f 30 62 6d 4f 73 30 36 5a 30 4b 73 39 76 59 49 61 48 68 4e 61 30 4b 63 57 32 4b 45 4e 59 4d 52 41 4c 55 61 50 6e 69 67 25 32 66 43 53 52 39 4d 47 4e 38 6b 71 54 71 7a 68 47 4d 55 7a 74 33 45 5a 62 57 31 4d 50 41 4b 67 79 54 4d 37 50 79 50 6d 43 34 30 32 54 4c 42 61 59 79 67 7a 73 68 62 4c 67 59 52 50 48 57 50 4e 55 45 54 54 77 6a 56 63 71 66 33 32 49 4b 6a 25 32 66 33 42 57 32 51 34 59 31 52 30 33 46 48 56 62 62 65 67 4c 68 61 57 75 57 72 77 76 75 44 77 6d 34 44 63 66 47 32 53 62 74 79 57 7a 7a 25 32 66 65 52 51 38 54 68 78 41 36 73 4e 72 36 37 42 46 6a 34 68 42 5a 53 32 74 79 59 6b 72 4a 71 57 72 42 58 7a 75 32 61 44 35 71 4e 77 4c 37 6d 49 4e 4a 59 31 5a 78 6c 2b Data Ascii: HHdBxRodQs6tw7r1IQMi4Q8X0evsr1o0bmOs06Z0Ks9vYIaHhNa0KcW2KENYMRALUaPnig%2fCSR9MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj%2f3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz%2feRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.16	49762	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:17 UTC	8940	OUT	GET /v8.0/pages/home?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&hydrateCount=3&deviceFamilyVersion=2814750970478592&pzn=0&userSegments=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 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.5 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:17 UTC	340	IN	HTTP/1.1 401 Unauthorized Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy00000B_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.5.1 Expires: Tue, 16 Apr 2024 20:52:17 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:17 GMT Connection: close X-Segment-On: true

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.16	49763	13.107.42.254	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:17 UTC	481	OUT	GET /apc/trans.gif?e3bfee56476065f0ab149b748f731e37 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: l-ring.msedge.net Connection: Keep-Alive
2024-04-16 20:52:17 UTC	708	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Thu, 14 Mar 2024 23:51:50 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: ATL33r5d X-Frontend: AFD X-Machinename: ATL331000107039 X-Userhostaddress: 81.181.57.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: AB1ED188EA0241CF834FF47F5FEE5177 Ref B: ATL331000107039 Ref C: 2024-04-16T20:52:17Z Date: Tue, 16 Apr 2024 20:52:17 GMT Connection: close
2024-04-16 20:52:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49764	40.126.29.13	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:18 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4790 Host: login.live.com
2024-04-16 20:52:18 UTC	4790	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-16 20:52:18 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 16 Apr 2024 20:51:18 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: 3c79ec3e-c8b1-41f1-a352-26f1d8d6a07d PPServer: PPV: 30 H: SN1PEPF0002F94A V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:52:17 GMT Connection: close Content-Length: 11985
2024-04-16 20:52:18 UTC	11985	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.16	49765	13.107.42.254	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:18 UTC	481	OUT	GET /apc/trans.gif?abf6b0b4363a8fb8ec7d6cce4a4b9cc3 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: l-ring.msedge.net Connection: Keep-Alive
2024-04-16 20:52:18 UTC	708	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Thu, 14 Mar 2024 23:51:50 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: ATL33r5a X-Frontend: AFD X-Machinename: ATL331000101011 X-Userhostaddress: 81.181.57.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: CA65AC20B6594B08BB6FCE94B5434C48 Ref B: ATL331000101011 Ref C: 2024-04-16T20:52:18Z Date: Tue, 16 Apr 2024 20:52:17 GMT Connection: close
2024-04-16 20:52:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.16	49767	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:18 UTC	8928	OUT	GET /v8.0/pages/home?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&hydrateCount=3&deviceFamilyVersion=2814750970478592&pzn=0&userSegments=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 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.6 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:19 UTC	419	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_LEGACY000005_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.6.13 Expires: Tue, 16 Apr 2024 20:52:19 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:19 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-Segment-On: true
2024-04-16 20:52:19 UTC	15965	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 5b 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 70 61 67 65 73 2f 68 6f 6d 65 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 61 70 70 56 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 68 79 64 72 61 74 65 43 6f 75 6e 74 3d 33 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 Data Ascii: 00006000[{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/pages/home?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&hydrateCount=3&deviceFamilyVersi
2024-04-16 20:52:19 UTC	8623	IN	Data Raw: 51 6a 47 6c 41 39 57 44 6a 41 6c 56 76 65 33 6a 4f 4a 68 4d 4b 71 61 76 51 41 57 57 25 32 66 54 6a 6a 74 46 35 64 48 6f 62 47 7a 6e 4d 68 6f 66 35 68 54 6a 34 56 68 56 6d 35 42 31 6b 76 50 63 47 4c 50 4f 4f 77 66 35 6f 32 7a 71 37 50 52 41 65 35 52 6e 59 4b 79 6f 57 55 55 63 79 6f 76 78 37 77 2b 4f 2b 35 58 56 34 33 4b 74 77 35 51 46 66 69 6b 68 6b 47 6a 6e 6d 47 44 58 61 5a 48 61 4b 6d 59 58 4d 56 31 50 48 6b 7a 67 51 5a 35 70 41 45 2b 73 66 55 53 73 56 31 4f 36 45 67 74 5a 76 33 25 32 66 47 53 4f 7a 34 63 67 69 6f 4d 4d 6d 72 56 70 49 4d 4b 25 32 66 38 4d 36 66 49 49 55 55 65 68 5a 36 2b 39 59 6d 4e 70 71 45 47 25 32 66 46 76 51 5a 70 4e 4e 6b 62 79 61 66 64 34 25 32 66 73 61 77 78 53 31 75 75 6b 44 64 55 37 4f 69 6a 33 72 55 4a 64 32 4e 55 76 2b 46 6e Data Ascii: QjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+Fn
2024-04-16 20:52:19 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 56 64 71 77 39 79 79 2b 57 6d 47 5a 75 63 73 71 62 4a 4a 32 6b 39 6b 41 56 70 4c 52 6f 4a 25 32 66 36 61 2b 65 78 4c 4e 61 58 59 58 55 59 30 67 71 63 7a 68 74 45 33 5a 64 42 69 58 66 6f 4b 67 71 6f 33 71 35 76 65 69 6f 63 72 64 72 31 58 64 55 69 7a 68 56 44 4f 35 4b 63 25 33 64 22 7d 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 38 2e 44 61 74 61 53 6f 75 72 63 65 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 49 64 22 3a 22 74 69 74 6c 65 22 2c 22 44 61 74 61 42 69 6e 64 65 72 22 3a 7b 22 24 74 79 70 65 22 3a 22 Data Ascii: 00006000Vdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d"}},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V8.DataSource, Microsoft.Marketplace.Storefront.Contracts","Id":"title","DataBinder":{"$type":"
2024-04-16 20:52:19 UTC	8204	IN	Data Raw: 2f 61 70 70 73 2e 32 35 35 32 32 2e 31 34 33 37 34 35 31 32 30 37 30 36 39 37 37 35 31 2e 35 61 31 35 30 64 62 62 2d 32 63 65 66 2d 34 66 61 39 2d 61 66 38 32 2d 65 62 63 35 64 36 36 36 35 36 64 35 2e 39 30 34 61 31 63 34 34 2d 30 61 36 39 2d 34 35 66 35 2d 39 38 39 31 2d 39 61 63 61 36 31 66 62 34 31 64 61 22 2c 22 48 65 69 67 68 74 22 3a 33 31 30 2c 22 57 69 64 74 68 22 3a 33 31 30 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 32 2e 49 6d 61 67 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 49 6d 61 67 65 54 79 70 65 22 3a 22 Data Ascii: /apps.25522.14374512070697751.5a150dbb-2cef-4fa9-af82-ebc5d66656d5.904a1c44-0a69-45f5-9891-9aca61fb41da","Height":310,"Width":310},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V2.ImageItem, Microsoft.Marketplace.Storefront.Contracts","ImageType":"
2024-04-16 20:52:19 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 64 73 20 6f 66 20 6f 74 68 65 72 73 21 20 44 69 73 63 6f 76 65 72 20 67 69 67 61 6e 74 69 63 20 63 6f 6d 6d 75 6e 69 74 79 2d 72 75 6e 20 77 6f 72 6c 64 73 2c 20 63 6f 6d 70 65 74 65 20 69 6e 20 75 6e 69 71 75 65 20 6d 69 6e 69 2d 67 61 6d 65 73 20 61 6e 64 20 73 6f 63 69 61 6c 69 7a 65 20 69 6e 20 6c 6f 62 62 69 65 73 20 66 75 6c 6c 20 6f 66 20 6e 65 77 20 66 72 69 65 6e 64 73 2e 2d 20 4a 61 76 61 20 45 64 69 74 69 6f 6e 3a 20 43 72 6f 73 73 2d 70 6c 61 74 66 6f 72 6d 20 70 6c 61 79 20 66 6f 72 20 70 6c 61 79 65 72 73 20 61 63 72 6f 73 73 20 57 69 6e 64 6f 77 73 2c 20 4d 61 63 2c 20 61 6e 64 20 4c 69 6e 75 78 20 64 65 76 69 63 65 73 2e 20 43 72 6f 73 73 20 70 6c 61 79 20 61 63 72 6f 73 73 20 42 65 64 72 6f 63 6b 20 61 6e Data Ascii: 00004000nds of others! Discover gigantic community-run worlds, compete in unique mini-games and socialize in lobbies full of new friends.- Java Edition: Cross-platform play for players across Windows, Mac, and Linux devices. Cross play across Bedrock an
2024-04-16 20:52:19 UTC	12	IN	Data Raw: 6f 72 22 3a 22 23 30 30 37 38 0d 0a Data Ascii: or":"#0078
2024-04-16 20:52:19 UTC	402	IN	Data Raw: 30 30 30 30 30 31 38 36 0d 0a 44 34 22 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 35 34 33 34 2e 31 33 38 37 38 36 35 30 30 30 32 35 33 38 31 36 31 2e 33 66 32 37 34 31 33 62 2d 32 33 37 61 2d 34 35 32 66 2d 61 39 64 34 2d 32 38 61 63 66 62 37 66 66 38 61 33 2e 35 64 62 64 34 61 30 64 2d 65 63 63 65 2d 34 30 65 62 2d 62 38 35 61 2d 65 63 63 39 65 63 31 61 39 62 64 61 22 2c 22 48 65 69 67 68 74 22 3a 31 35 30 2c 22 57 69 64 74 68 22 3a 33 31 30 7d 2c 7b 22 24 74 Data Ascii: 00000186D4","ForegroundColor":"","Caption":"","ImagePositionInfo":"","Url":"https://store-images.s-microsoft.com/image/apps.55434.13878650002538161.3f27413b-237a-452f-a9d4-28acfb7ff8a3.5dbd4a0d-ecce-40eb-b85a-ecc9ec1a9bda","Height":150,"Width":310},{"$t
2024-04-16 20:52:19 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 23 30 30 37 38 44 34 22 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 31 38 38 39 39 2e 31 33 38 37 38 36 35 30 30 30 32 35 33 38 31 36 31 2e 33 66 32 37 34 31 33 62 2d 32 33 37 61 2d 34 35 32 66 2d 61 39 64 34 2d 32 38 61 63 66 62 37 66 66 38 61 33 2e 30 30 32 61 36 62 39 66 2d 66 38 34 64 2d 34 65 61 31 2d 62 32 65 66 2d 34 63 39 61 36 33 39 39 30 31 33 64 22 2c 22 48 65 69 67 68 74 22 3a 32 32 35 2c 22 57 69 64 74 68 22 3a 34 36 35 7d Data Ascii: 00004000#0078D4","ForegroundColor":"","Caption":"","ImagePositionInfo":"","Url":"https://store-images.s-microsoft.com/image/apps.18899.13878650002538161.3f27413b-237a-452f-a9d4-28acfb7ff8a3.002a6b9f-f84d-4ea1-b2ef-4c9a6399013d","Height":225,"Width":465}
2024-04-16 20:52:19 UTC	12	IN	Data Raw: 64 74 68 22 3a 34 36 35 7d 2c 0d 0a Data Ascii: dth":465},
2024-04-16 20:52:19 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 32 2e 49 6d 61 67 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 49 6d 61 67 65 54 79 70 65 22 3a 22 74 69 6c 65 22 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 Data Ascii: 00004000{"$type":"Microsoft.Marketplace.Storefront.Contracts.V2.ImageItem, Microsoft.Marketplace.Storefront.Contracts","ImageType":"tile","BackgroundColor":"transparent","ForegroundColor":"","Caption":"","ImagePositionInfo":"","Url":"https://store-image

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.16	49766	52.113.196.254	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:18 UTC	485	OUT	GET /apc/trans.gif?dc1aa3056d31478dcc0798188196ffde HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: teams-ring.msedge.net Connection: Keep-Alive
2024-04-16 20:52:18 UTC	708	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Thu, 14 Mar 2024 23:51:50 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: ATL33r5d X-Frontend: AFD X-Machinename: ATL331000107029 X-Userhostaddress: 81.181.57.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 04E06F1972154D0DA45888CE7DF2ABC8 Ref B: ATL331000107029 Ref C: 2024-04-16T20:52:18Z Date: Tue, 16 Apr 2024 20:52:18 GMT Connection: close
2024-04-16 20:52:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.16	49768	52.113.196.254	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:19 UTC	485	OUT	GET /apc/trans.gif?7bf22ffe445c3280828f728bc0dbb2b3 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: teams-ring.msedge.net Connection: Keep-Alive
2024-04-16 20:52:19 UTC	708	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Thu, 14 Mar 2024 23:51:50 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: ATL33r5c X-Frontend: AFD X-Machinename: ATL331000105017 X-Userhostaddress: 81.181.57.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 2FBB1E5F03B34CBA8BEE4FABD8F688AC Ref B: ATL331000105017 Ref C: 2024-04-16T20:52:19Z Date: Tue, 16 Apr 2024 20:52:19 GMT Connection: close
2024-04-16 20:52:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.16	49769	150.171.22.254	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:19 UTC	482	OUT	GET /apc/trans.gif?be502d8ba45b794bb9a4ed7b34197dc5 HTTP/1.1 Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: ln-ring.msedge.net Connection: Keep-Alive
2024-04-16 20:52:19 UTC	695	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Last-Modified: Fri, 09 Feb 2024 20:11:51 GMT Accept-Ranges: bytes ETag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName Timing-Allow-Origin: * X-Content-Type-Options: nosniff X-Endpoint: ATA X-Frontend: AFD X-Machinename: ATAEDGE1109 X-Userhostaddress: 81.181.57.0 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: C125870CDA274F7B842AD2BBED544D68 Ref B: ATAEDGE1109 Ref C: 2024-04-16T20:52:19Z Date: Tue, 16 Apr 2024 20:52:19 GMT Connection: close
2024-04-16 20:52:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.16	49770	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:20 UTC	5109	OUT	GET /v8.0/recommendations/collections/Collection/Home.FC1?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&pageSize=15&cardsEnabled=true&pzn=0 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.7 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:20 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0006QH_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.7.1 Expires: Tue, 16 Apr 2024 20:52:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:20 GMT Content-Length: 608 Connection: close X-Segment-On: true
2024-04-16 20:52:20 UTC	608	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 2f 63 6f 6c 6c 65 63 74 69 6f 6e 73 2f 43 6f 6c 6c 65 63 74 69 6f 6e 2f 48 6f 6d 65 2e 46 43 31 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 61 70 70 56 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 70 61 67 65 53 69 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/recommendations/collections/Collection/Home.FC1?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&pageSi

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.16	49778	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:20 UTC	9179	OUT	GET /v8.0/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW5upF4Hmf6%2fEkdGdi18FcGl4HM+pMNASrsvNiSbR%2fUq%2fMqk6BFQFiWNCjFDPWgoBhqK2Px3XNaiMwm2kHUg+%2f4z8s79bg7bwZKtHHdBxRodQs6tw7r1IQMi4Q8X0evsr1o0bmOs06Z0Ks9vYIaHhNa0KcW2KENYMRALUaPnig%2fCSR9MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj%2f3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz%2feRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+9MxWNyfdbZX2RBdeBJjRfOaQBaquhBq8E%2fl0iFbfjb3LQi6BwJNjZ8UikPrQ1VL3M0jcai97pjn430pbFMtSTWNCLF+nyNvMpyQvTl1j2%2fAKfXuBp8Wgeq+a89ZdGeh8RlM2aOM1Fq9gftB34jhJQ66vzvjFi0tXnWUuvg9tGdOFjj0xqF8KIR8m5aHg%2fTmQTt8+T+U5noiJ4%2f8y4F2Xkl%2fuVMkWwngoaLumw3KvfW1RYqu08J0nPecCp7SoikW%2fiQtO%2fcGxZ3sOm+gn0KFeNr%2fAWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B%2ffmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ%2fnpRqb1MboZQ3Sj+1fMAGFf4KQwgxCMxY5hEf7%2fHtnmtbyL2Qi0peCeTzvXKYChe8T75nTI4z+QYfMtzj51fRA+BhnZx3DaxBWiXkZgyTIe37wni%2frFV31yJOeNIRJM2W53XOlGSXgANxAgZrIJ4gzh7KPt2b9p31IFL%2fkZ5RH5jT9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d&prefix=t&navItemId=Home HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.8 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=EwCgBF8iAQAU28X5hAkumfrDedQ+i9LVQH6YOAgAASZFd06tzxPYHUlSfva310A/8GtVnnrKJg3/R5o2c6hGUm8XgwMTSNwqb8rpkorBhtXKN14jo3HMyPLNq+o731KfXwf5PzYaahuoAvM/eTedPPMeSLWsiNRKeCSCRsu0eaeIeubgBwUDu2XsUXjKRHOETs2PYg2aTYYTeuZTUo4txVUbDZbUWRLSYggg8mAVLZITnroW7+vAimtv+F8NPx7fLLzVbqIy6xrWCkYiyaa/rQui/k7G/GNmw9ebsXsWyn/0yD4EucLGqxqQvjuWUBv1L31nt2uP3gS+LB1vNAhPNVfhQufwans2Z6dDlYky9UZBusij0rBqDyG1evGREDMDZgAACE1Y86MbfyQ3cAMFCZcESBk6svH4MlVkHD0h4hLQssoT4Bq1E2ilDO3ItE7zZwsu1quPo/qKZsDH9JDZ4B6+tnkr6ir8HTofhf/4yNdRxNy1I0qjci8Gk0EA/TwQdGEPQhPJH//RCwOhOCdLeeN5jTnoLjImqsHT1CwlH5BQV+pR2kXrtIRmIPlf3vyRDd2sRFh5Pv094y4EXp7Q+WkT2stOcvgD48W9oK9EIMdjmhmukBhDWDq0YrVQZB1x/VVa6B0UI39Roukq0cuQaLJasSpHpkBypgU/8eFzInI9cXOqpec4rVfQGI1Pem/UXM2nnAzsf98H56/cEpEAAdj895chnVIBsoMjnZMaD8GPfVIaWNQi8CyuXMLvrLNsq2eNj4etC+SaNhx/QxEO0labjwiHfk0nejp7EYj3lBRZhA7ed6LwB9DCf0NAcA6eNfpIZRNEjlqHfZ/MseBK0EIX24rqPFjcTyqE/7atrB3gt8TQRzB0JiOZyGidMTB1MkBu3mZD+etopckCdIy6BAsnVaMOQGPWXcR6GoODhbcR0c+pnSjf+SVudUmR1/RTpP+TNdADkHQp0aERHtvpw9WSq595bZM8935VphthaOgcTdwfNq/r0uLQnpudHhtCNBMxibky39I04OZ8EqmDsgNb3d8iowtlf31Uw1Kfpzd3PXg1srkv6IFBLma0a0pBp1wMW6NisqMSlzmmM4h/PV3nqrUySqAsejXmNtrcZQwxE7A+WyqyRWZLIO77DnHHg+FJ4r0qeOCwzKlXe0znOT7QnNYAmfO92fC4LFbbrQULT8YV1C+MWjeKQyeqBVM/yMC4ow7tVva5eE0I0C0WRTou6Ba9Fun/5l0vXHWeO7AYrcENIPOvTqwP0rl2JV6UacMa2G7EhVVcKrYmO3KxdjvhGzGzCY+XT+TWdV36J2Nj9072+Ko9sTbNQ9LFHB0CfM4svbXnoYBmOsNt3Vh/IP1E/6r0tXbqxXCvIfZUyNVf4XAGj+BD4lUACxn1QGlZ353f6+jhLdmAsq4SCzBKSHbPW+LMY7NJ8h6tkp3+hMiVDzXPg/ZVZEM5Yo4JfVs+sqkjUmZaGGmjx3gRFxNg43bWDRcqlqSziJKMB3HR2jTZysYreNA9X581SBfktvFuymhsZQMWOq7EzF7YEtNSIIu5U4v8YjJWcJA6boeHmwM=&p= Content-Length: 0 Content-Type: application/json; charset=UTF-8 Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive Cache-Control: no-cache
2024-04-16 20:52:20 UTC	380	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0007IL_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.8.2 Expires: Tue, 16 Apr 2024 20:52:20 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:20 GMT Content-Length: 9804 Connection: close X-Segment-On: true
2024-04-16 20:52:20 UTC	9804	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 61 75 74 6f 73 75 67 67 65 73 74 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 61 70 70 56 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 6f 6e 3d 32 38 31 34 37 35 30 39 37 30 34 37 38 35 39 32 26 63 61 72 64 73 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cards

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.16	49780	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:20 UTC	5112	OUT	GET /v8.0/recommendations/collections/TopFree?market=CH&locale=en-CH&mediaType=APPS&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&pageSize=15&cardsEnabled=true&pzn=0 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.9 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:21 UTC	418	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0007HW_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.9.7 Expires: Tue, 16 Apr 2024 20:52:21 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:21 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-Segment-On: true
2024-04-16 20:52:21 UTC	15966	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 2f 63 6f 6c 6c 65 63 74 69 6f 6e 73 2f 54 6f 70 46 72 65 65 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 6d 65 64 69 61 54 79 70 65 3d 41 50 50 53 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 61 70 70 56 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 Data Ascii: 00006000{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/recommendations/collections/TopFree?market=CH&locale=en-CH&mediaType=APPS&deviceFamily=Windows.Desktop&appVersion=11910.10
2024-04-16 20:52:21 UTC	8622	IN	Data Raw: 4e 61 72 72 61 74 6f 72 54 65 78 74 22 3a 22 50 43 2c 48 6f 6c 6f 4c 65 6e 73 22 2c 22 54 79 70 65 54 61 67 22 3a 22 61 70 70 22 2c 22 52 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 52 65 61 73 6f 6e 22 3a 22 22 2c 22 4c 6f 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 6e 61 70 63 68 61 74 20 69 73 20 61 20 66 61 73 74 20 61 6e 64 20 66 75 6e 20 77 61 79 20 74 6f 20 73 68 61 72 65 20 74 68 65 20 6d 6f 6d 65 6e 74 20 77 69 74 68 20 79 6f 75 72 20 66 72 69 65 6e 64 73 20 61 6e 64 20 66 61 6d 69 6c 79 2e 22 2c 22 50 72 6f 64 75 63 74 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 41 70 70 73 22 2c 22 53 6b 75 73 53 75 6d 6d 61 72 79 22 3a 5b 5d 2c 22 49 73 47 61 6d 69 6e 67 41 70 70 4f 6e 6c 79 22 3a 66 61 6c 73 65 2c 22 43 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 53 Data Ascii: NarratorText":"PC,HoloLens","TypeTag":"app","RecommendationReason":"","LongDescription":"Snapchat is a fast and fun way to share the moment with your friends and family.","ProductFamilyName":"Apps","SkusSummary":[],"IsGamingAppOnly":false,"Categories":["S
2024-04-16 20:52:21 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 35 34 33 31 2e 31 34 34 39 35 33 31 31 38 34 37 31 32 34 31 37 30 2e 30 30 34 61 33 38 36 65 2d 65 62 30 37 2d 34 39 30 33 2d 62 31 37 64 2d 62 62 61 31 63 63 33 64 66 30 32 65 2e 62 34 31 39 34 61 63 64 2d 63 37 39 35 2d 34 61 62 30 2d 61 31 35 62 2d 66 30 61 31 33 38 33 64 62 37 32 34 22 2c 22 48 65 69 67 68 74 22 3a 33 30 30 2c 22 57 69 64 74 68 22 3a 33 30 30 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 32 2e 49 6d 61 67 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 Data Ascii: 00006000/store-images.s-microsoft.com/image/apps.55431.14495311847124170.004a386e-eb07-4903-b17d-bba1cc3df02e.b4194acd-c795-4ab0-a15b-f0a1383db724","Height":300,"Width":300},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V2.ImageItem, Microsoft.Ma
2024-04-16 20:52:21 UTC	8204	IN	Data Raw: 30 34 2d 34 61 34 64 2d 61 36 31 62 2d 34 37 63 63 63 32 35 64 61 30 31 32 2e 30 31 66 36 61 66 39 37 2d 30 66 66 39 2d 34 66 63 39 2d 61 61 65 30 2d 61 34 65 37 30 32 61 64 66 39 34 62 22 2c 22 48 65 69 67 68 74 22 3a 31 35 30 2c 22 57 69 64 74 68 22 3a 33 31 30 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 32 2e 49 6d 61 67 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 49 6d 61 67 65 54 79 70 65 22 3a 22 74 69 6c 65 22 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 31 30 37 43 31 30 22 2c 22 46 6f 72 65 67 72 Data Ascii: 04-4a4d-a61b-47ccc25da012.01f6af97-0ff9-4fc9-aae0-a4e702adf94b","Height":150,"Width":310},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V2.ImageItem, Microsoft.Marketplace.Storefront.Contracts","ImageType":"tile","BackgroundColor":"#107C10","Foregr
2024-04-16 20:52:21 UTC	8959	IN	Data Raw: 30 30 30 30 32 32 46 33 0d 0a 73 74 20 64 6f 6e e2 80 99 74 20 68 61 76 65 20 74 68 65 20 74 69 6d 65 2e 20 50 6f 63 6b 65 74 20 73 74 61 73 68 65 73 20 69 74 20 69 6e 20 79 6f 75 72 20 6f 77 6e 20 70 72 69 76 61 74 65 2c 20 64 69 73 74 72 61 63 74 69 6f 6e 2d 66 72 65 65 20 73 70 61 63 65 20 74 6f 20 64 69 76 65 20 69 6e 74 6f 20 6c 61 74 65 72 2e 5c 72 5c 6e 5c 72 5c 6e 4d 55 4c 54 49 54 41 53 4b 49 4e 47 20 4d 41 44 45 20 45 41 53 59 5c 72 5c 6e 50 6c 61 79 20 61 20 76 69 64 65 6f 20 69 6e 20 61 20 73 65 70 61 72 61 74 65 2c 20 73 63 61 6c 61 62 6c 65 20 77 69 6e 64 6f 77 20 74 68 61 74 20 70 69 6e 73 20 74 6f 20 74 68 65 20 66 72 6f 6e 74 20 6f 66 20 79 6f 75 72 20 64 65 73 6b 74 6f 70 20 77 69 74 68 20 74 68 65 20 50 69 63 74 75 72 65 2d 69 6e 2d 50 Data Ascii: 000022F3st dont have the time. Pocket stashes it in your own private, distraction-free space to dive into later.\r\n\r\nMULTITASKING MADE EASY\r\nPlay a video in a separate, scalable window that pins to the front of your desktop with the Picture-in-P
2024-04-16 20:52:21 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 70 75 72 63 68 61 73 65 20 61 20 4d 69 63 72 6f 73 6f 66 74 20 33 36 35 20 42 61 73 69 63 2c 20 50 65 72 73 6f 6e 61 6c 2c 20 6f 72 20 46 61 6d 69 6c 79 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 74 6f 20 72 65 6d 6f 76 65 20 61 6e 79 20 61 64 76 65 72 74 69 73 69 6e 67 20 73 65 72 76 65 64 20 62 79 20 4d 69 63 72 6f 73 6f 66 74 2e 20 54 6f 20 6c 65 61 72 6e 20 6d 6f 72 65 2c 20 76 69 73 69 74 20 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 6f 75 74 6c 6f 6f 6b 2d 66 6f 72 2d 77 69 6e 64 6f 77 73 5c 72 5c 6e 5c 72 5c 6e 2a 20 4d 69 63 72 6f 73 6f 66 74 20 33 36 35 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 72 65 71 75 69 72 65 64 22 2c 22 50 72 6f 64 75 63 74 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 41 70 70 73 22 2c 22 53 6b 75 73 Data Ascii: 00004000purchase a Microsoft 365 Basic, Personal, or Family subscription to remove any advertising served by Microsoft. To learn more, visit microsoft.com/outlook-for-windows\r\n\r\n* Microsoft 365 subscription required","ProductFamilyName":"Apps","Skus
2024-04-16 20:52:21 UTC	12	IN	Data Raw: 72 6f 6e 74 2e 43 6f 6e 74 72 0d 0a Data Ascii: ront.Contr
2024-04-16 20:52:21 UTC	4893	IN	Data Raw: 30 30 30 30 31 33 31 31 0d 0a 61 63 74 73 2e 56 31 2e 43 6f 6e 74 65 6e 74 46 69 6c 74 65 72 43 68 6f 69 63 65 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 43 68 6f 69 63 65 49 64 22 3a 22 43 53 52 52 3a 50 47 31 35 22 2c 22 54 69 74 6c 65 22 3a 22 43 53 52 52 3a 50 47 31 35 22 2c 22 43 6f 75 6e 74 22 3a 37 32 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 43 6f 6e 74 65 6e 74 46 69 6c 74 65 72 43 68 6f 69 63 65 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 Data Ascii: 00001311acts.V1.ContentFilterChoice, Microsoft.Marketplace.Storefront.Contracts","ChoiceId":"CSRR:PG15","Title":"CSRR:PG15","Count":72},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ContentFilterChoice, Microsoft.Marketplace.Storefront.Contrac
2024-04-16 20:52:21 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.16	49781	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:20 UTC	9181	OUT	GET /v8.0/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW5upF4Hmf6%2fEkdGdi18FcGl4HM+pMNASrsvNiSbR%2fUq%2fMqk6BFQFiWNCjFDPWgoBhqK2Px3XNaiMwm2kHUg+%2f4z8s79bg7bwZKtHHdBxRodQs6tw7r1IQMi4Q8X0evsr1o0bmOs06Z0Ks9vYIaHhNa0KcW2KENYMRALUaPnig%2fCSR9MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj%2f3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz%2feRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+9MxWNyfdbZX2RBdeBJjRfOaQBaquhBq8E%2fl0iFbfjb3LQi6BwJNjZ8UikPrQ1VL3M0jcai97pjn430pbFMtSTWNCLF+nyNvMpyQvTl1j2%2fAKfXuBp8Wgeq+a89ZdGeh8RlM2aOM1Fq9gftB34jhJQ66vzvjFi0tXnWUuvg9tGdOFjj0xqF8KIR8m5aHg%2fTmQTt8+T+U5noiJ4%2f8y4F2Xkl%2fuVMkWwngoaLumw3KvfW1RYqu08J0nPecCp7SoikW%2fiQtO%2fcGxZ3sOm+gn0KFeNr%2fAWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B%2ffmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ%2fnpRqb1MboZQ3Sj+1fMAGFf4KQwgxCMxY5hEf7%2fHtnmtbyL2Qi0peCeTzvXKYChe8T75nTI4z+QYfMtzj51fRA+BhnZx3DaxBWiXkZgyTIe37wni%2frFV31yJOeNIRJM2W53XOlGSXgANxAgZrIJ4gzh7KPt2b9p31IFL%2fkZ5RH5jT9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d&prefix=tr&navItemId=Home HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.10 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Content-Length: 0 Content-Type: application/json; charset=UTF-8 Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive Cache-Control: no-cache
2024-04-16 20:52:21 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0006QO_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.10.2 Expires: Tue, 16 Apr 2024 20:52:21 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:21 GMT Content-Length: 9805 Connection: close X-Segment-On: true
2024-04-16 20:52:21 UTC	9805	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 61 75 74 6f 73 75 67 67 65 73 74 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 61 70 70 56 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 6f 6e 3d 32 38 31 34 37 35 30 39 37 30 34 37 38 35 39 32 26 63 61 72 64 73 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cards

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.16	49782	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:21 UTC	9184	OUT	GET /v8.0/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW5upF4Hmf6%2fEkdGdi18FcGl4HM+pMNASrsvNiSbR%2fUq%2fMqk6BFQFiWNCjFDPWgoBhqK2Px3XNaiMwm2kHUg+%2f4z8s79bg7bwZKtHHdBxRodQs6tw7r1IQMi4Q8X0evsr1o0bmOs06Z0Ks9vYIaHhNa0KcW2KENYMRALUaPnig%2fCSR9MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj%2f3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz%2feRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+9MxWNyfdbZX2RBdeBJjRfOaQBaquhBq8E%2fl0iFbfjb3LQi6BwJNjZ8UikPrQ1VL3M0jcai97pjn430pbFMtSTWNCLF+nyNvMpyQvTl1j2%2fAKfXuBp8Wgeq+a89ZdGeh8RlM2aOM1Fq9gftB34jhJQ66vzvjFi0tXnWUuvg9tGdOFjj0xqF8KIR8m5aHg%2fTmQTt8+T+U5noiJ4%2f8y4F2Xkl%2fuVMkWwngoaLumw3KvfW1RYqu08J0nPecCp7SoikW%2fiQtO%2fcGxZ3sOm+gn0KFeNr%2fAWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B%2ffmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ%2fnpRqb1MboZQ3Sj+1fMAGFf4KQwgxCMxY5hEf7%2fHtnmtbyL2Qi0peCeTzvXKYChe8T75nTI4z+QYfMtzj51fRA+BhnZx3DaxBWiXkZgyTIe37wni%2frFV31yJOeNIRJM2W53XOlGSXgANxAgZrIJ4gzh7KPt2b9p31IFL%2fkZ5RH5jT9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d&prefix=trell&navItemId=Home HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.11 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=EwCgBF8iAQAU28X5hAkumfrDedQ+i9LVQH6YOAgAASZFd06tzxPYHUlSfva310A/8GtVnnrKJg3/R5o2c6hGUm8XgwMTSNwqb8rpkorBhtXKN14jo3HMyPLNq+o731KfXwf5PzYaahuoAvM/eTedPPMeSLWsiNRKeCSCRsu0eaeIeubgBwUDu2XsUXjKRHOETs2PYg2aTYYTeuZTUo4txVUbDZbUWRLSYggg8mAVLZITnroW7+vAimtv+F8NPx7fLLzVbqIy6xrWCkYiyaa/rQui/k7G/GNmw9ebsXsWyn/0yD4EucLGqxqQvjuWUBv1L31nt2uP3gS+LB1vNAhPNVfhQufwans2Z6dDlYky9UZBusij0rBqDyG1evGREDMDZgAACE1Y86MbfyQ3cAMFCZcESBk6svH4MlVkHD0h4hLQssoT4Bq1E2ilDO3ItE7zZwsu1quPo/qKZsDH9JDZ4B6+tnkr6ir8HTofhf/4yNdRxNy1I0qjci8Gk0EA/TwQdGEPQhPJH//RCwOhOCdLeeN5jTnoLjImqsHT1CwlH5BQV+pR2kXrtIRmIPlf3vyRDd2sRFh5Pv094y4EXp7Q+WkT2stOcvgD48W9oK9EIMdjmhmukBhDWDq0YrVQZB1x/VVa6B0UI39Roukq0cuQaLJasSpHpkBypgU/8eFzInI9cXOqpec4rVfQGI1Pem/UXM2nnAzsf98H56/cEpEAAdj895chnVIBsoMjnZMaD8GPfVIaWNQi8CyuXMLvrLNsq2eNj4etC+SaNhx/QxEO0labjwiHfk0nejp7EYj3lBRZhA7ed6LwB9DCf0NAcA6eNfpIZRNEjlqHfZ/MseBK0EIX24rqPFjcTyqE/7atrB3gt8TQRzB0JiOZyGidMTB1MkBu3mZD+etopckCdIy6BAsnVaMOQGPWXcR6GoODhbcR0c+pnSjf+SVudUmR1/RTpP+TNdADkHQp0aERHtvpw9WSq595bZM8935VphthaOgcTdwfNq/r0uLQnpudHhtCNBMxibky39I04OZ8EqmDsgNb3d8iowtlf31Uw1Kfpzd3PXg1srkv6IFBLma0a0pBp1wMW6NisqMSlzmmM4h/PV3nqrUySqAsejXmNtrcZQwxE7A+WyqyRWZLIO77DnHHg+FJ4r0qeOCwzKlXe0znOT7QnNYAmfO92fC4LFbbrQULT8YV1C+MWjeKQyeqBVM/yMC4ow7tVva5eE0I0C0WRTou6Ba9Fun/5l0vXHWeO7AYrcENIPOvTqwP0rl2JV6UacMa2G7EhVVcKrYmO3KxdjvhGzGzCY+XT+TWdV36J2Nj9072+Ko9sTbNQ9LFHB0CfM4svbXnoYBmOsNt3Vh/IP1E/6r0tXbqxXCvIfZUyNVf4XAGj+BD4lUACxn1QGlZ353f6+jhLdmAsq4SCzBKSHbPW+LMY7NJ8h6tkp3+hMiVDzXPg/ZVZEM5Yo4JfVs+sqkjUmZaGGmjx3gRFxNg43bWDRcqlqSziJKMB3HR2jTZysYreNA9X581SBfktvFuymhsZQMWOq7EzF7YEtNSIIu5U4v8YjJWcJA6boeHmwM=&p= Content-Length: 0 Content-Type: application/json; charset=UTF-8 Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive Cache-Control: no-cache
2024-04-16 20:52:21 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_LEGACY00000B_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.11.2 Expires: Tue, 16 Apr 2024 20:52:21 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:21 GMT Content-Length: 9800 Connection: close X-Segment-On: true
2024-04-16 20:52:21 UTC	9800	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 61 75 74 6f 73 75 67 67 65 73 74 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 61 70 70 56 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 6f 6e 3d 32 38 31 34 37 35 30 39 37 30 34 37 38 35 39 32 26 63 61 72 64 73 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cards

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.16	49783	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:21 UTC	5114	OUT	GET /v8.0/recommendations/collections/TopFree?market=CH&locale=en-CH&mediaType=GAMES&deviceFamily=Windows.Desktop&appVersion=11910.1002.0.0&pageSize=15&cardsEnabled=true&pzn=0 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.12 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:21 UTC	420	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0006QQ_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.12.13 Expires: Tue, 16 Apr 2024 20:52:21 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:21 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-Segment-On: true
2024-04-16 20:52:21 UTC	15964	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 2f 63 6f 6c 6c 65 63 74 69 6f 6e 73 2f 54 6f 70 46 72 65 65 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 6d 65 64 69 61 54 79 70 65 3d 47 41 4d 45 53 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 61 70 70 56 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 Data Ascii: 00006000{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/recommendations/collections/TopFree?market=CH&locale=en-CH&mediaType=GAMES&deviceFamily=Windows.Desktop&appVersion=11910.1
2024-04-16 20:52:22 UTC	8624	IN	Data Raw: 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 32 2e 49 6d 61 67 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 49 6d 61 67 65 54 79 70 65 22 3a 22 42 6f 78 41 72 74 22 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 32 34 35 39 37 2e 39 30 30 37 31 39 39 32 36 36 32 34 38 31 31 35 2e 39 Data Ascii: orefront.Contracts.V2.ImageItem, Microsoft.Marketplace.Storefront.Contracts","ImageType":"BoxArt","BackgroundColor":"","ForegroundColor":"","Caption":"","ImagePositionInfo":"","Url":"https://store-images.s-microsoft.com/image/apps.24597.9007199266248115.9
2024-04-16 20:52:22 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 61 63 74 73 2e 56 39 2e 49 6e 73 74 61 6c 6c 65 72 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 54 79 70 65 22 3a 22 57 69 6e 64 6f 77 73 55 70 64 61 74 65 22 2c 22 49 64 22 3a 22 39 4e 5a 51 50 54 30 4d 57 54 44 30 22 7d 2c 22 4d 69 6e 69 6d 75 6d 41 67 65 22 3a 30 2e 30 2c 22 48 61 73 49 41 50 73 22 3a 66 61 6c 73 65 2c 22 53 75 70 70 6f 72 74 73 49 6e 73 74 61 6e 74 47 61 6d 69 6e 67 22 3a 66 61 6c 73 65 2c 22 53 63 68 65 6d 61 22 3a 22 43 61 72 64 3b 31 22 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 38 2e Data Ascii: 00006000acts.V9.Installer, Microsoft.Marketplace.Storefront.Contracts","Type":"WindowsUpdate","Id":"9NZQPT0MWTD0"},"MinimumAge":0.0,"HasIAPs":false,"SupportsInstantGaming":false,"Schema":"Card;1"},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V8.
2024-04-16 20:52:22 UTC	8204	IN	Data Raw: 74 68 20 77 69 74 74 79 20 52 6f 67 65 72 20 61 6e 64 20 70 6c 75 63 6b 79 20 4c 6f 74 74 61 20 61 6e 64 20 75 6e 63 6f 76 65 72 20 61 20 73 74 6f 72 79 20 72 6f 6f 74 65 64 20 64 65 65 70 20 69 6e 20 74 68 65 20 70 61 73 74 21 20 48 65 6c 70 20 74 68 65 6d 20 72 65 76 65 61 6c 20 74 68 65 69 72 20 66 61 6d 69 6c 69 65 73 e2 80 99 20 68 69 73 74 6f 72 79 20 77 69 74 68 20 65 76 65 72 79 20 61 72 65 61 20 74 68 65 79 20 72 65 73 74 6f 72 65 2e 20 57 68 65 72 65 20 69 73 20 52 6f 67 65 72 e2 80 99 73 20 66 61 74 68 65 72 3f 20 57 68 61 74 20 68 61 70 70 65 6e 65 64 20 74 6f 20 74 68 65 20 50 69 72 61 74 65 20 4b 69 6e 67 64 6f 6d 3f 20 54 6f 20 77 68 6f 6d 20 62 65 6c 6f 6e 67 73 20 74 68 65 20 66 6f 72 74 27 73 20 74 72 65 61 73 75 72 65 3f 20 57 68 69 63 Data Ascii: th witty Roger and plucky Lotta and uncover a story rooted deep in the past! Help them reveal their families history with every area they restore. Where is Rogers father? What happened to the Pirate Kingdom? To whom belongs the fort's treasure? Whic
2024-04-16 20:52:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 30 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 32 2e 49 6d 61 67 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 49 6d 61 67 65 54 79 70 65 22 3a 22 74 69 6c 65 22 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2d 69 6d Data Ascii: 000040000},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V2.ImageItem, Microsoft.Marketplace.Storefront.Contracts","ImageType":"tile","BackgroundColor":"transparent","ForegroundColor":"","Caption":"","ImagePositionInfo":"","Url":"https://store-im
2024-04-16 20:52:22 UTC	12	IN	Data Raw: 20 69 6e 20 72 65 61 6c 20 6c 0d 0a Data Ascii: in real l
2024-04-16 20:52:22 UTC	202	IN	Data Raw: 30 30 30 30 30 30 42 45 0d 0a 69 66 65 21 20 55 70 67 72 61 64 65 20 79 6f 75 72 20 6b 69 74 63 68 65 6e 20 61 6e 64 20 70 72 6f 64 75 63 65 20 61 6e 20 65 76 65 6e 20 67 72 65 61 74 65 72 20 76 61 72 69 65 74 79 20 6f 66 20 64 69 73 68 65 73 2e 20 5c 72 5c 6e 5c 72 5c 6e 4f 68 2c 20 61 6e 64 20 64 69 64 20 77 65 20 73 61 79 20 74 68 61 74 20 74 68 69 73 20 67 61 6d 65 20 69 73 20 61 73 20 61 64 64 69 63 74 69 76 65 20 61 6e 64 20 61 73 20 65 6e 67 72 6f 73 73 69 6e 67 20 61 73 20 66 65 76 65 72 3f 20 48 61 76 65 20 66 75 6e 20 63 6f 6f 6b 69 6e 67 20 61 6e 64 20 64 6f 6e e2 80 99 74 20 66 6f 0d 0a Data Ascii: 000000BEife! Upgrade your kitchen and produce an even greater variety of dishes. \r\n\r\nOh, and did we say that this game is as addictive and as engrossing as fever? Have fun cooking and dont fo
2024-04-16 20:52:22 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 72 67 65 74 20 74 6f 20 73 68 61 72 65 20 79 6f 75 72 20 64 65 6c 69 63 69 6f 75 73 20 6d 65 61 6c 73 20 77 69 74 68 20 79 6f 75 72 20 66 72 69 65 6e 64 73 20 6f 6e 20 46 61 63 65 62 6f 6f 6b 21 5c 72 5c 6e 5c 72 5c 6e 46 65 61 74 75 72 65 73 3a 5c 72 5c 6e 2a 20 54 68 6f 75 73 61 6e 64 73 20 6f 66 20 64 65 6c 69 63 69 6f 75 73 20 64 69 73 68 65 73 20 74 6f 20 63 6f 6f 6b 20 75 73 69 6e 67 20 68 75 6e 64 72 65 64 73 20 62 65 73 74 20 71 75 61 6c 69 74 79 20 69 6e 67 72 65 64 69 65 6e 74 73 5c 72 5c 6e 2a 20 48 75 67 65 20 63 68 6f 69 63 65 20 6f 66 20 77 6f 72 6c 64 20 66 61 6d 6f 75 73 20 63 75 69 73 69 6e 65 73 5c 72 5c 6e 2a 20 4d 6f 72 65 20 74 68 61 6e 20 61 20 31 30 30 30 20 6c 65 76 65 6c 73 20 74 6f 20 63 6f 6d 70 6c Data Ascii: 00004000rget to share your delicious meals with your friends on Facebook!\r\n\r\nFeatures:\r\n* Thousands of delicious dishes to cook using hundreds best quality ingredients\r\n* Huge choice of world famous cuisines\r\n* More than a 1000 levels to compl
2024-04-16 20:52:22 UTC	12	IN	Data Raw: 65 72 2d 61 64 64 69 63 74 69 0d 0a Data Ascii: er-addicti
2024-04-16 20:52:22 UTC	14262	IN	Data Raw: 30 30 30 30 33 37 41 41 0d 0a 76 65 20 67 61 6d 65 20 77 68 65 72 65 20 79 6f 75 20 61 72 65 20 67 69 76 65 6e 20 61 20 72 61 63 6b 20 6f 66 20 6c 65 74 74 65 72 20 74 69 6c 65 73 2c 20 61 6e 64 20 79 6f 75 72 20 67 6f 61 6c 20 69 73 20 74 6f 20 63 72 65 61 74 65 20 77 6f 72 64 73 20 75 73 69 6e 67 20 74 68 65 6d 2e 5c 72 5c 6e 5c 72 5c 6e 53 69 6e 67 6c 65 20 50 6c 61 79 65 72 20 41 64 76 65 6e 74 75 72 65 73 5c 72 5c 6e 45 61 63 68 20 67 61 6d 65 20 6d 6f 64 65 20 68 61 73 20 6d 75 6c 74 69 70 6c 65 20 61 64 76 65 6e 74 75 72 65 20 6d 61 70 73 20 77 68 65 72 65 20 79 6f 75 20 63 61 6e 20 65 61 72 6e 20 33 20 70 6f 73 73 69 62 6c 65 20 73 74 61 72 73 20 6f 6e 20 65 61 63 68 20 70 75 7a 7a 6c 65 2e 20 45 61 72 6e 20 61 74 20 6c 65 61 73 74 20 6f 6e 65 20 Data Ascii: 000037AAve game where you are given a rack of letter tiles, and your goal is to create words using them.\r\n\r\nSingle Player Adventures\r\nEach game mode has multiple adventure maps where you can earn 3 possible stars on each puzzle. Earn at least one

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.16	49784	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:21 UTC	9185	OUT	GET /v8.0/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW5upF4Hmf6%2fEkdGdi18FcGl4HM+pMNASrsvNiSbR%2fUq%2fMqk6BFQFiWNCjFDPWgoBhqK2Px3XNaiMwm2kHUg+%2f4z8s79bg7bwZKtHHdBxRodQs6tw7r1IQMi4Q8X0evsr1o0bmOs06Z0Ks9vYIaHhNa0KcW2KENYMRALUaPnig%2fCSR9MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj%2f3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz%2feRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+9MxWNyfdbZX2RBdeBJjRfOaQBaquhBq8E%2fl0iFbfjb3LQi6BwJNjZ8UikPrQ1VL3M0jcai97pjn430pbFMtSTWNCLF+nyNvMpyQvTl1j2%2fAKfXuBp8Wgeq+a89ZdGeh8RlM2aOM1Fq9gftB34jhJQ66vzvjFi0tXnWUuvg9tGdOFjj0xqF8KIR8m5aHg%2fTmQTt8+T+U5noiJ4%2f8y4F2Xkl%2fuVMkWwngoaLumw3KvfW1RYqu08J0nPecCp7SoikW%2fiQtO%2fcGxZ3sOm+gn0KFeNr%2fAWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B%2ffmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ%2fnpRqb1MboZQ3Sj+1fMAGFf4KQwgxCMxY5hEf7%2fHtnmtbyL2Qi0peCeTzvXKYChe8T75nTI4z+QYfMtzj51fRA+BhnZx3DaxBWiXkZgyTIe37wni%2frFV31yJOeNIRJM2W53XOlGSXgANxAgZrIJ4gzh7KPt2b9p31IFL%2fkZ5RH5jT9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d&prefix=trello&navItemId=Home HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.13 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Content-Length: 0 Content-Type: application/json; charset=UTF-8 Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive Cache-Control: no-cache
2024-04-16 20:52:21 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_LEGACY00012M_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.13.2 Expires: Tue, 16 Apr 2024 20:52:21 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:21 GMT Content-Length: 9801 Connection: close X-Segment-On: true
2024-04-16 20:52:21 UTC	9801	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 61 75 74 6f 73 75 67 67 65 73 74 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 61 70 70 56 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 6f 6e 3d 32 38 31 34 37 35 30 39 37 30 34 37 38 35 39 32 26 63 61 72 64 73 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/autosuggest?market=CH&locale=en-CH&appVersion=11910.1002.0.0&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&cards

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.16	49790	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:21 UTC	9011	OUT	GET /v8.0/pages/search?appversion=11910.1002.0.0&market=CH&locale=en-CH&catalogLocales=en-CH%2Cen-GB&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&oemId=Public&scmId=Public&moId=Public&query=trello&navItemId=Home&pzn=0&userSegments=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 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.14 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:23 UTC	420	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy000000_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.14.24 Expires: Tue, 16 Apr 2024 20:52:23 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:23 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-Segment-On: true
2024-04-16 20:52:23 UTC	15964	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 5b 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 70 61 67 65 73 2f 73 65 61 72 63 68 3f 61 70 70 76 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 63 61 74 61 6c 6f 67 4c 6f 63 61 6c 65 73 3d 65 6e 2d 43 48 25 32 43 65 6e 2d 47 42 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 Data Ascii: 00006000[{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/pages/search?appversion=11910.1002.0.0&market=CH&locale=en-CH&catalogLocales=en-CH%2Cen-GB&deviceFamily=Windows.Desktop&d
2024-04-16 20:52:23 UTC	8624	IN	Data Raw: 6c 6c 5c 22 7d 5d 7d 2c 7b 5c 22 63 68 6f 69 63 65 4e 61 6d 65 5c 22 3a 5c 22 67 61 6d 65 73 5c 22 2c 5c 22 50 46 4d 5c 22 3a 5c 22 67 61 6d 65 73 5c 22 2c 5c 22 49 6e 63 6c 75 64 65 64 46 69 6c 74 65 72 73 5c 22 3a 5b 7b 5c 22 46 69 6c 74 65 72 4e 61 6d 65 5c 22 3a 5c 22 43 61 74 65 67 6f 72 79 5c 22 2c 5c 22 53 6f 75 72 63 65 5c 22 3a 5c 22 44 44 53 5f 47 41 4d 45 53 5f 43 41 54 45 47 4f 52 59 5c 22 2c 5c 22 44 65 66 61 75 6c 74 43 68 6f 69 63 65 49 64 5c 22 3a 5c 22 41 6c 6c 43 61 74 65 67 6f 72 69 65 73 5c 22 7d 2c 7b 5c 22 46 69 6c 74 65 72 4e 61 6d 65 5c 22 3a 5c 22 50 72 6f 64 75 63 74 54 79 70 65 5c 22 2c 5c 22 53 6f 75 72 63 65 5c 22 3a 5c 22 50 46 4d 5c 22 2c 5c 22 44 65 66 61 75 6c 74 43 68 6f 69 63 65 49 64 5c 22 3a 5c 22 41 6c 6c 50 72 6f 64 Data Ascii: ll\"}]},{\"choiceName\":\"games\",\"PFM\":\"games\",\"IncludedFilters\":[{\"FilterName\":\"Category\",\"Source\":\"DDS_GAMES_CATEGORY\",\"DefaultChoiceId\":\"AllCategories\"},{\"FilterName\":\"ProductType\",\"Source\":\"PFM\",\"DefaultChoiceId\":\"AllProd
2024-04-16 20:52:23 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 65 26 6f 65 6d 49 64 3d 50 75 62 6c 69 63 26 73 63 6d 49 64 3d 50 75 62 6c 69 63 26 6d 6f 49 64 3d 50 75 62 6c 69 63 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 6f 6e 3d 32 38 31 34 37 35 30 39 37 30 34 37 38 35 39 32 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 6f 6e 3d 32 38 31 34 37 35 30 39 37 30 34 37 38 35 39 32 26 63 61 72 64 73 45 6e 61 62 6c 65 64 3d 74 72 75 65 26 70 7a 6e 3d 30 26 75 73 65 72 53 65 67 6d 65 6e 74 73 3d 36 73 37 68 51 47 6f 63 64 57 64 59 66 63 41 56 31 47 54 4c 41 4d 5a 65 58 4e 43 4f 31 78 25 32 66 68 32 44 2b 77 47 6a 4d 41 69 53 4d 34 48 56 66 36 66 32 4a 6b 4b 6a 36 69 6d 6d 69 48 74 46 46 49 4d 4d 46 47 62 46 65 75 65 74 63 5a 62 79 64 56 45 62 79 6b 4e 48 70 6c 37 35 50 66 Data Ascii: 00006000e&oemId=Public&scmId=Public&moId=Public&deviceFamilyVersion=2814750970478592&deviceFamilyVersion=2814750970478592&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75Pf
2024-04-16 20:52:23 UTC	8204	IN	Data Raw: 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 43 6f 6e 74 65 6e 74 46 69 6c 74 65 72 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 43 68 6f 69 63 65 73 22 3a 5b 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 43 6f 6e 74 65 6e 74 46 69 6c 74 65 72 43 68 6f 69 63 65 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 43 68 6f 69 63 65 49 64 22 3a 22 61 6c 6c 22 2c 22 54 69 74 6c 65 22 3a 22 Data Ascii: t.Marketplace.Storefront.Contracts.V1.ContentFilter, Microsoft.Marketplace.Storefront.Contracts","Choices":[{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ContentFilterChoice, Microsoft.Marketplace.Storefront.Contracts","ChoiceId":"all","Title":"
2024-04-16 20:52:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 43 68 6f 69 63 65 49 64 22 3a 22 61 6c 6c 22 2c 22 46 69 6c 74 65 72 49 64 22 3a 22 73 75 62 63 61 74 65 67 6f 72 79 22 2c 22 49 6e 69 74 69 61 6c 43 68 6f 69 63 65 49 64 22 3a 22 61 6c 6c 22 2c 22 49 73 43 68 6f 69 63 65 52 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 4b 65 65 70 45 78 70 61 6e 64 65 64 22 3a 66 61 6c 73 65 2c 22 49 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 54 69 74 6c 65 22 3a 22 55 6e 64 65 72 20 53 65 63 75 72 69 74 79 22 2c 22 4d 75 6c 74 69 53 65 6c 65 63 74 69 6f 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 54 69 74 6c 65 22 3a 22 53 65 63 75 72 69 74 79 22 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 Data Ascii: 00004000tChoiceId":"all","FilterId":"subcategory","InitialChoiceId":"all","IsChoiceRequired":false,"KeepExpanded":false,"IsHidden":false,"Title":"Under Security","MultiSelectionEnabled":false}],"Title":"Security"},{"$type":"Microsoft.Marketplace.Storefr
2024-04-16 20:52:23 UTC	12	IN	Data Raw: 63 74 73 2e 56 31 2e 43 6f 6e 0d 0a Data Ascii: cts.V1.Con
2024-04-16 20:52:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 65 6e 74 46 69 6c 74 65 72 43 68 6f 69 63 65 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 43 68 6f 69 63 65 49 64 22 3a 22 35 30 54 6f 38 30 22 2c 22 54 69 74 6c 65 22 3a 22 43 48 46 20 35 30 2c 30 30 2d 43 48 46 20 38 30 2c 30 30 22 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 43 6f 6e 74 65 6e 74 46 69 6c 74 65 72 43 68 6f 69 63 65 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 43 68 6f 69 63 65 49 64 22 3a Data Ascii: 00004000tentFilterChoice, Microsoft.Marketplace.Storefront.Contracts","ChoiceId":"50To80","Title":"CHF 50,00-CHF 80,00"},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ContentFilterChoice, Microsoft.Marketplace.Storefront.Contracts","ChoiceId":
2024-04-16 20:52:23 UTC	12	IN	Data Raw: 22 54 69 74 6c 65 22 3a 22 58 0d 0a Data Ascii: "Title":"X
2024-04-16 20:52:23 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 62 6f 78 20 4f 6e 65 20 61 63 63 65 73 73 6f 72 69 65 73 22 7d 5d 2c 22 44 65 66 61 75 6c 74 43 68 6f 69 63 65 49 64 22 3a 22 61 6c 6c 22 2c 22 46 69 6c 74 65 72 49 64 22 3a 22 73 75 62 73 75 62 63 61 74 65 67 6f 72 79 22 2c 22 49 6e 69 74 69 61 6c 43 68 6f 69 63 65 49 64 22 3a 22 61 6c 6c 22 2c 22 49 73 43 68 6f 69 63 65 52 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 2c 22 4b 65 65 70 45 78 70 61 6e 64 65 64 22 3a 66 61 6c 73 65 2c 22 49 73 48 69 64 64 65 6e 22 3a 66 61 6c 73 65 2c 22 54 69 74 6c 65 22 3a 22 55 6e 64 65 72 20 58 62 6f 78 20 4f 6e 65 22 2c 22 4d 75 6c 74 69 53 65 6c 65 63 74 69 6f 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d 5d 2c 22 54 69 74 6c 65 22 3a 22 58 62 6f 78 20 4f 6e 65 22 7d 5d 2c 22 44 65 66 61 Data Ascii: 00004000box One accessories"}],"DefaultChoiceId":"all","FilterId":"subsubcategory","InitialChoiceId":"all","IsChoiceRequired":false,"KeepExpanded":false,"IsHidden":false,"Title":"Under Xbox One","MultiSelectionEnabled":false}],"Title":"Xbox One"}],"Defa
2024-04-16 20:52:23 UTC	12	IN	Data Raw: 63 65 2e 53 74 6f 72 65 66 72 0d 0a Data Ascii: ce.Storefr

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.16	49791	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:24 UTC	9048	OUT	GET /v8.0/pages/searchAllResults?appVersion=11910.1002.0.0&market=CH&locale=en-CH&deviceFamily=windows.desktop&query=trello&mediaType=all&availableOn=windows.desktop&deviceFamilyVersion=2814750970478592&catalogLocales=en-CH%2Cen-GB&oemId=Public&scmId=Public&moId=Public&pzn=0&userSegments=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 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.15 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:25 UTC	419	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_LEGACY00003A_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.15.7 Expires: Tue, 16 Apr 2024 20:52:25 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:25 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-Segment-On: true
2024-04-16 20:52:25 UTC	15965	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 5b 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 70 61 67 65 73 2f 73 65 61 72 63 68 41 6c 6c 52 65 73 75 6c 74 73 3f 61 70 70 56 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 77 69 6e 64 6f 77 73 2e 64 65 73 6b 74 6f 70 26 71 75 65 72 79 3d 74 72 65 6c 6c 6f 26 6d 65 64 69 61 54 79 Data Ascii: 00006000[{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/pages/searchAllResults?appVersion=11910.1002.0.0&market=CH&locale=en-CH&deviceFamily=windows.desktop&query=trello&mediaTy
2024-04-16 20:52:25 UTC	8623	IN	Data Raw: 39 41 66 4c 78 31 70 54 62 6a 76 71 50 57 56 64 71 77 39 79 79 2b 57 6d 47 5a 75 63 73 71 62 4a 4a 32 6b 39 6b 41 56 70 4c 52 6f 4a 25 32 66 36 61 2b 65 78 4c 4e 61 58 59 58 55 59 30 67 71 63 7a 68 74 45 33 5a 64 42 69 58 66 6f 4b 67 71 6f 33 71 35 76 65 69 6f 63 72 64 72 31 58 64 55 69 7a 68 56 44 4f 35 4b 63 25 33 64 22 7d 7d 5d 2c 22 46 69 65 6c 64 73 22 3a 7b 22 6c 61 79 6f 75 74 22 3a 22 53 69 6e 67 6c 65 52 6f 77 22 2c 22 73 68 6f 77 43 6f 75 6e 74 49 6e 54 69 74 6c 65 22 3a 22 74 72 75 65 22 2c 22 69 73 53 65 61 72 63 68 4d 6f 64 75 6c 65 22 3a 22 74 72 75 65 22 2c 22 66 69 6c 74 65 72 49 64 22 3a 22 6d 65 64 69 61 54 79 70 65 22 2c 22 74 72 61 63 6b 69 6e 67 49 64 22 3a 22 68 6f 6d 65 50 61 67 65 41 70 70 73 53 65 61 72 63 68 22 2c 22 63 68 6f 69 Data Ascii: 9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d"}}],"Fields":{"layout":"SingleRow","showCountInTitle":"true","isSearchModule":"true","filterId":"mediaType","trackingId":"homePageAppsSearch","choi
2024-04-16 20:52:25 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 75 6f 4e 43 36 69 54 72 74 4a 43 4c 79 57 61 6d 69 4b 55 78 77 59 5a 58 6f 33 43 33 36 78 6f 2b 53 70 63 51 75 56 41 71 64 38 76 6f 51 6a 47 6c 41 39 57 44 6a 41 6c 56 76 65 33 6a 4f 4a 68 4d 4b 71 61 76 51 41 57 57 25 32 66 54 6a 6a 74 46 35 64 48 6f 62 47 7a 6e 4d 68 6f 66 35 68 54 6a 34 56 68 56 6d 35 42 31 6b 76 50 63 47 4c 50 4f 4f 77 66 35 6f 32 7a 71 37 50 52 41 65 35 52 6e 59 4b 79 6f 57 55 55 63 79 6f 76 78 37 77 2b 4f 2b 35 58 56 34 33 4b 74 77 35 51 46 66 69 6b 68 6b 47 6a 6e 6d 47 44 58 61 5a 48 61 4b 6d 59 58 4d 56 31 50 48 6b 7a 67 51 5a 35 70 41 45 2b 73 66 55 53 73 56 31 4f 36 45 67 74 5a 76 33 25 32 66 47 53 4f 7a 34 63 67 69 6f 4d 4d 6d 72 56 70 49 4d 4b 25 32 66 38 4d 36 66 49 49 55 55 65 68 5a 36 2b 39 59 Data Ascii: 00006000uoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9Y
2024-04-16 20:52:25 UTC	8204	IN	Data Raw: 34 57 4b 4e 2b 25 32 66 79 2b 55 30 4b 48 52 77 73 6b 66 63 79 59 6d 4b 65 51 56 6f 59 41 76 71 36 41 79 2b 2b 6e 58 69 50 77 48 79 6f 48 33 4f 54 4d 56 35 32 6e 68 77 57 64 2b 5a 6e 6d 33 76 66 52 31 5a 79 72 44 2b 61 6e 56 4b 52 68 73 48 31 44 71 43 34 61 65 65 71 66 75 7a 73 7a 7a 78 69 6a 6f 63 4b 44 6d 7a 32 6d 4e 70 77 4e 2b 4d 55 53 76 7a 47 6d 64 6e 49 58 4f 74 42 25 32 66 69 4a 31 52 31 67 25 32 66 2b 79 53 4c 77 74 42 34 79 6d 4e 35 69 53 39 34 69 49 34 52 4e 34 59 46 61 45 6e 66 74 55 6b 44 34 64 63 25 32 66 67 56 62 50 32 32 66 68 55 72 7a 39 46 45 6a 4c 74 36 65 75 72 41 4f 65 61 45 47 77 55 69 64 6f 42 53 67 66 65 45 45 30 70 44 49 57 79 54 76 58 44 69 71 48 66 68 47 6b 7a 38 54 7a 52 64 46 43 34 77 71 4d 50 45 31 71 79 4c 6f 4a 62 44 54 76 Data Ascii: 4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv
2024-04-16 20:52:26 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 33 73 4f 6d 2b 67 6e 30 4b 46 65 4e 72 25 32 66 41 57 72 71 32 79 4e 72 51 2b 4b 6e 76 4c 2b 77 52 38 33 66 30 30 79 70 39 37 53 48 36 6a 57 37 53 59 2b 57 4b 62 6e 58 32 72 57 56 50 59 4f 49 35 30 39 6c 42 52 67 73 73 45 31 73 7a 48 69 38 31 43 46 6b 61 35 42 25 32 66 66 6d 6e 46 6c 4c 47 44 4b 6c 79 45 70 33 53 79 49 37 32 6f 56 31 55 43 37 76 4b 64 59 52 55 4b 75 53 6b 68 6b 52 44 63 4f 63 4f 4f 30 38 30 52 63 75 62 65 43 67 61 69 57 33 35 64 57 4b 6d 64 4e 32 67 6e 64 48 6e 4e 71 36 72 2b 53 7a 4e 44 73 42 48 75 43 6b 56 45 6b 72 64 69 47 69 41 57 4a 4e 4c 6b 39 6d 79 42 56 56 56 5a 25 32 66 6e 70 52 71 62 31 4d 62 6f 5a 51 33 53 6a 2b 31 66 4d 41 47 46 66 34 4b 51 77 67 78 43 4d 78 59 35 68 45 66 37 25 32 66 48 74 6e 6d Data Ascii: 000040003sOm+gn0KFeNr%2fAWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B%2ffmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ%2fnpRqb1MboZQ3Sj+1fMAGFf4KQwgxCMxY5hEf7%2fHtnm
2024-04-16 20:52:26 UTC	12	IN	Data Raw: 68 74 22 3a 33 30 30 2c 22 57 0d 0a Data Ascii: ht":300,"W
2024-04-16 20:52:26 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 69 64 74 68 22 3a 33 30 30 7d 5d 2c 22 44 69 73 70 6c 61 79 50 72 69 63 65 22 3a 22 46 72 65 65 22 2c 22 50 72 69 63 65 22 3a 30 2e 30 2c 22 41 76 65 72 61 67 65 52 61 74 69 6e 67 22 3a 30 2e 30 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 73 22 3a 5b 22 48 45 4c 4c 4f 45 56 4f 4c 55 54 49 4f 4e 54 45 43 48 4e 4f 4c 4f 47 59 43 2e 48 65 6c 6c 6f 54 61 6c 6b 5f 32 63 66 63 31 72 62 72 35 73 37 37 65 22 5d 2c 22 43 6f 6e 74 65 6e 74 49 64 73 22 3a 5b 22 64 38 39 37 30 38 30 38 2d 38 33 33 64 2d 38 36 62 38 2d 33 35 31 39 2d 33 33 66 64 31 65 34 61 65 62 61 31 22 5d 2c 22 47 61 6d 69 6e 67 4f 70 74 69 6f 6e 73 58 62 6f 78 4c 69 76 65 22 3a 66 61 6c 73 65 2c 22 41 76 61 69 6c 61 62 6c 65 44 65 76 69 63 65 73 44 69 73 Data Ascii: 00004000idth":300}],"DisplayPrice":"Free","Price":0.0,"AverageRating":0.0,"PackageFamilyNames":["HELLOEVOLUTIONTECHNOLOGYC.HelloTalk_2cfc1rbr5s77e"],"ContentIds":["d8970808-833d-86b8-3519-33fd1e4aeba1"],"GamingOptionsXboxLive":false,"AvailableDevicesDis
2024-04-16 20:52:26 UTC	12	IN	Data Raw: 6f 22 3a 22 22 2c 22 55 72 6c 0d 0a Data Ascii: o":"","Url
2024-04-16 20:52:26 UTC	12852	IN	Data Raw: 30 30 30 30 33 32 32 38 0d 0a 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 36 34 32 36 37 2e 31 33 35 31 30 37 39 38 38 38 36 36 34 30 30 39 32 2e 61 33 38 32 64 34 33 31 2d 32 65 66 65 2d 34 62 65 61 2d 39 34 36 33 2d 30 31 65 32 34 62 38 39 64 66 64 37 2e 36 31 65 36 36 30 32 35 2d 37 62 63 62 2d 34 36 35 30 2d 62 62 63 37 2d 31 63 38 33 30 36 36 38 34 37 64 32 22 2c 22 48 65 69 67 68 74 22 3a 31 30 30 2c 22 57 69 64 74 68 22 3a 31 30 30 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 32 2e 49 6d 61 67 65 49 74 65 6d 2c 20 4d 69 Data Ascii: 00003228":"https://store-images.s-microsoft.com/image/apps.64267.13510798886640092.a382d431-2efe-4bea-9463-01e24b89dfd7.61e66025-7bcb-4650-bbc7-1c83066847d2","Height":100,"Width":100},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V2.ImageItem, Mi
2024-04-16 20:52:26 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6c 37 35 50 66 65 48 68 2b 42 73 73 46 73 36 30 6a 6c 32 46 32 6a 25 32 66 45 37 50 62 42 52 37 38 2b 66 67 4d 75 56 68 6b 44 4f 41 66 2b 37 47 76 62 35 5a 49 64 71 4d 66 77 39 52 33 59 30 51 32 72 58 68 46 50 42 68 47 66 35 69 4b 69 6b 32 46 4a 4c 6b 59 79 56 61 44 5a 56 79 4d 25 32 66 67 4f 4c 6f 75 6c 6f 65 44 55 72 66 2b 6e 48 68 59 50 70 63 78 58 64 50 79 39 49 42 36 36 61 69 69 34 53 67 4e 67 61 25 32 66 66 46 31 54 61 53 6d 66 63 6d 6c 44 53 39 72 71 63 6c 38 6b 25 32 66 73 47 39 77 54 79 4e 54 30 6c 54 30 6b 76 31 6f 63 5a 41 51 31 52 47 38 30 63 7a 51 30 64 47 53 55 61 63 6f 41 39 30 73 4a 63 34 41 72 35 78 57 2b 7a 65 58 35 79 32 44 7a 79 30 66 32 6e 43 46 43 47 74 25 32 66 41 52 25 32 66 49 77 42 79 7a 38 58 53 47 Data Ascii: 00006000l75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSG

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.16	49804	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:26 UTC	9194	OUT	GET /v8.0/search?market=CH&locale=en-CH&pageSize=15&query=trello&mediaType=TV&moId=Public&oemId=Public&scmId=Public&deviceFamily=windows.desktop&appVersion=11910.1002.0.0&catalogLocales=en-CH%2cen-GB&availableOn=windows.desktop&deviceFamilyVersion=2814750970478592&&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW5upF4Hmf6%2fEkdGdi18FcGl4HM+pMNASrsvNiSbR%2fUq%2fMqk6BFQFiWNCjFDPWgoBhqK2Px3XNaiMwm2kHUg+%2f4z8s79bg7bwZKtHHdBxRodQs6tw7r1IQMi4Q8X0evsr1o0bmOs06Z0Ks9vYIaHhNa0KcW2KENYMRALUaPnig%2fCSR9MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj%2f3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz%2feRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+9MxWNyfdbZX2RBdeBJjRfOaQBaquhBq8E%2fl0iFbfjb3LQi6BwJNjZ8UikPrQ1VL3M0jcai97pjn430pbFMtSTWNCLF+nyNvMpyQvTl1j2%2fAKfXuBp8Wgeq+a89ZdGeh8RlM2aOM1Fq9gftB34jhJQ66vzvjFi0tXnWUuvg9tGdOFjj0xqF8KIR8m5aHg%2fTmQTt8+T+U5noiJ4%2f8y4F2Xkl%2fuVMkWwngoaLumw3KvfW1RYqu08J0nPecCp7SoikW%2fiQtO%2fcGxZ3sOm+gn0KFeNr%2fAWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B%2ffmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ%2fnpRqb1MboZQ3Sj+1fMAGFf4KQwgxCMxY5hEf7%2fHtnmtbyL2Qi0peCeTzvXKYChe8T75nTI4z+QYfMtzj51fRA+BhnZx3DaxBWiXkZgyTIe37wni%2frFV31yJOeNIRJM2W53XOlGSXgANxAgZrIJ4gzh7KPt2b9p31IFL%2fkZ5RH5jT9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.16 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:27 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0007I2_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.16.4 Expires: Tue, 16 Apr 2024 20:52:27 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:27 GMT Content-Length: 4603 Connection: close X-Segment-On: true
2024-04-16 20:52:27 UTC	4603	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 73 65 61 72 63 68 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 70 61 67 65 53 69 7a 65 3d 31 35 26 71 75 65 72 79 3d 74 72 65 6c 6c 6f 26 6d 65 64 69 61 54 79 70 65 3d 54 56 26 6d 6f 49 64 3d 50 75 62 6c 69 63 26 6f 65 6d 49 64 3d 50 75 62 6c 69 63 26 73 63 6d 49 64 3d 50 75 62 6c 69 63 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 77 69 6e 64 6f 77 73 2e 64 65 73 6b 74 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/search?market=CH&locale=en-CH&pageSize=15&query=trello&mediaType=TV&moId=Public&oemId=Public&scmId=Public&deviceFamily=windows.deskt

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.16	49800	23.54.200.10	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:26 UTC	351	OUT	GET /7/713f2900-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1 Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: musicart.xboxlive.com Connection: Keep-Alive
2024-04-16 20:52:27 UTC	410	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=604800, s-maxage=86400 Content-Type: image/jpeg Last-Modified: Tue, 04 Jul 2017 15:36:53 GMT Accept-Ranges: none ETag: W/"AEAwxDrB+FZEjUy3wXizVh/Iq/yx6x0hMHg4RDRDMkYyN0VCRjRGRDA" MS-CV: WfFTNXlFGEm9gpp2.0 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: MS-CV Content-Length: 12383 Date: Tue, 16 Apr 2024 20:52:27 GMT Connection: close
2024-04-16 20:52:27 UTC	1277	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 00 be 00 7f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-04-16 20:52:27 UTC	348	IN	Data Raw: 32 bd f9 6e ac d3 f8 5a ee 95 ae fa fe 7d 13 4d fe ef fd f2 2a 7d 35 8f 9d d1 7f ef 91 59 d2 b9 59 4a 81 de af 69 27 32 57 7c 63 15 b1 f2 f3 8e 86 b3 b1 c7 41 ff 00 7c 8a 8d 98 fa 2f fd f2 29 d2 1e 2a 26 35 66 22 ee 3f ec ff 00 df 22 9d 1b 13 0c dc 0f b8 3b 7f b4 b5 16 69 f1 ff 00 ab 98 0f ee 0f fd 09 68 02 f5 d1 fe 43 f9 56 3e a2 71 20 ad 6b a3 fc 87 f2 ac 5d 49 bf 7a bf 5a d0 19 9f e2 f8 44 de 0b d5 23 ce 33 65 37 3e 9f 21 af c9 1d 43 c4 3a 8b db c3 a7 cc f6 52 e9 da 7d ec ec b6 f2 40 37 28 27 74 8a af d4 02 3d 3b 90 2b f5 b3 c6 b7 0f 6f e0 4d 5a 78 c6 5e 3b 09 ca 8c 75 3e 59 af c9 5d 73 c1 9a a3 78 fa df 4a d6 21 78 da fe 11 a8 14 4c 23 ac 2c a5 c8 e7 01 01 3d 0f 20 e4 1e 95 cd 5a 31 72 57 3d 2c ba 75 e3 34 a8 fc 4d a4 ad d7 b2 fb cf 5b d0 7c 65 ad 6a Data Ascii: 2nZ}M}5YYJi'2W\|cA\|/)&5f"?";ihCV>q k]IzZD#3e7>!C:R}@7('t=;+oMZx^;u>Y]sxJ!xL#,= Z1rW=,u4M[\|ej
2024-04-16 20:52:27 UTC	10758	IN	Data Raw: 6c 8a fd 39 79 12 48 c9 39 c6 ec 6e ce 72 07 4a f4 0d 7b e2 6f 84 e5 f8 5f 6d 3f 85 b4 c8 ad 35 cd 49 1a da 48 b7 49 f6 8b 75 72 4b cc 25 07 2e 18 66 32 1f 3c 60 83 c9 c7 9d 88 a1 2a 93 84 a6 b9 b6 4b ca 2b a7 c9 68 7e 9b 80 e2 0a 74 72 ec 46 16 12 50 6b 9b 9d 5b 57 27 a3 7b ea 9b ed af a6 97 e7 3e 30 35 97 8e 7c 79 a8 f8 93 4f d1 ad ec 2d ef 9d 62 0b 00 05 00 45 58 fe 53 81 c1 2a 7f 97 5a e2 74 ff 00 06 f8 87 49 bd 9b 50 d0 67 b9 b5 d4 6c 99 a4 82 6b 79 0a b8 c6 0f 6f 6c d7 7f f0 9c 4f af eb 56 fa 5d b4 61 e3 b7 74 48 62 51 f2 92 07 de 38 f4 f9 98 9f 71 dd ab d8 ad fc 34 34 fb ad 66 41 17 36 17 30 c0 ae e9 8d ee d6 ea c4 7e 64 03 5b 3a 91 a1 05 4a 2b 44 92 5f 91 f1 71 c2 cb 15 56 58 8b b4 e4 db 3c 83 45 f1 76 b9 a8 78 17 54 9b 50 d0 74 59 b5 46 8d 6e 3e Data Ascii: l9yH9nrJ{o_m?5IHIurK%.f2<`K+h~trFPk[W'{>05\|yO-bEXSZtIPglkyolOV]atHbQ8q44fA60~d[:J+D_qVX<EvxTPtYFn>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.16	49801	23.54.200.10	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:26 UTC	351	OUT	GET /7/f5855100-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1 Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: musicart.xboxlive.com Connection: Keep-Alive
2024-04-16 20:52:27 UTC	452	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=604800, s-maxage=86400 Content-Type: image/jpeg Last-Modified: Wed, 04 Nov 2020 16:15:43 GMT Accept-Ranges: none ETag: W/"AEAwxDrB+FZEjUy3wXizVh/Iq/yx6x0hMHg4RDg4MERDRTFBNDhBOEE" MS-CV: IKH52YiKGk2FaogU.0 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: MS-CV,X-DominantColor X-DominantColor: #E3DCDE Content-Length: 10897 Date: Tue, 16 Apr 2024 20:52:27 GMT Connection: close
2024-04-16 20:52:27 UTC	1237	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 00 be 00 8b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-04-16 20:52:27 UTC	9660	IN	Data Raw: 25 69 84 71 4d 26 03 81 c8 91 cf 72 3f 83 3e 9d ab 4f 47 d5 2e cd ba 5a de 2a cb 08 e2 22 c9 90 3e 86 a0 84 4a d7 1f 69 8d de 39 43 7c c8 ed f2 c6 c3 b3 1f e2 1e 95 b1 6a ad 72 ac ea ca b3 06 5d e2 3e 10 0c 9e 76 f6 35 55 b5 8a bf fc 31 cd 4b 0f 28 54 6e 2e df a9 2d 8d ad ea 34 ab 05 97 99 31 5d f1 09 62 1b 47 a9 07 b1 c0 1c ff 00 5a d3 b8 f0 ad e5 dc 8b 70 66 83 f7 91 a1 e7 77 f7 47 a7 15 5f 4d 96 54 c9 32 f9 92 bf 46 2c 47 04 67 69 ff 00 3e 94 fb bd 6a 78 26 f2 a3 b3 bc 0a aa b8 08 41 03 e5 1d 32 6b 86 a3 9a 7a 1e 9d 1a 54 9a b4 93 67 6d 34 51 4c bb 65 8d 5c 63 1f 30 ac 7d 4b 41 b6 8a 36 9a c2 56 b1 f9 71 22 c0 8b fb c0 4f 39 24 67 f5 ad ca 87 50 e6 ce 4f f7 6b cd 3e 92 95 59 c2 4a cc c4 f0 0e 95 f6 4b 3f b6 9b db 89 5a e0 1f dd b9 1b 14 6e 38 e3 19 cf Data Ascii: %iqM&r?>OG.Z*">Ji9C\|jr]>v5U1K(Tn.-41]bGZpfwG_MT2F,Ggi>jx&A2kzTgm4QLe\c0}KA6Vq"O9$gPOk>YJK?Zn8

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.16	49798	23.54.200.10	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:26 UTC	351	OUT	GET /7/b7654500-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1 Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: musicart.xboxlive.com Connection: Keep-Alive
2024-04-16 20:52:26 UTC	378	IN	HTTP/1.1 200 OK Cache-Control: private MS-CV: +T8L+J9KS0iZeuQw.0 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: MS-CV Content-Type: image/jpeg Last-Modified: Mon, 17 Jul 2017 18:37:05 GMT Accept-Ranges: none ETag: W/"AEAwxDrB+FZEjUy3wXizVh/Iq/yx6x0hMHg4RDRDRDQyRDJEOENBNjI" Content-Length: 7266 Date: Tue, 16 Apr 2024 20:52:26 GMT Connection: close
2024-04-16 20:52:26 UTC	1327	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 00 be 00 7f 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHCC"}!1AQa"q2
2024-04-16 20:52:26 UTC	5939	IN	Data Raw: 55 65 77 af 9d d7 dc 61 ea 0e 76 9e 7a d6 45 d3 1c 75 af 47 9b e1 3f 8f 6e 6f 34 0b 48 74 68 da 5f 13 db bd c6 92 a6 f2 21 f6 88 d2 31 23 13 96 f9 70 ac 0e 1b 1d 68 9b e0 0f c5 89 34 77 d4 d3 c3 70 9b 58 c3 96 7f ed 18 32 36 92 1b 8d f9 ea 0d 6d 97 e1 6a a8 af 75 fd c7 e8 b5 33 8c ba 09 73 62 20 af fd e5 dd ae fd d3 5e a9 f6 3c 96 ed cf ad 66 de 31 f5 af 48 97 e0 f7 c4 49 7e 26 3f 80 13 43 8c f8 81 2c be da 6d 3e db 0e d1 0e 40 dd e6 6e db dc 71 9c d6 0f c3 ff 00 86 1e 3b f8 81 ae df 69 5e 13 d0 64 bf 9b 4d 72 97 b2 19 52 38 6d d8 12 36 b4 8c 42 e4 95 6c 01 92 71 9a fa dc 14 2d b9 e2 66 59 8e 15 d3 72 55 23 6b 27 7b ad 9e cf d1 f4 ee 71 f0 93 d6 be af ff 00 82 78 7c 50 f1 a5 ef 89 2d fe 18 9b 0b 5b cf 0e d8 59 cf 71 f6 90 a5 66 b0 1b 8b 01 9c e1 95 9d f6 Data Ascii: UewavzEuG?no4Hth_!1#ph4wpX26mju3sb ^<f1HI~&?C,m>@nq;i^dMrR8m6Blq-fYrU#k'{qx\|P-[Yqf

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.16	49803	23.54.200.10	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:26 UTC	351	OUT	GET /7/45172400-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1 Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: musicart.xboxlive.com Connection: Keep-Alive
2024-04-16 20:52:26 UTC	410	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=604800, s-maxage=86400 Content-Type: image/jpeg Last-Modified: Tue, 04 Jul 2017 14:16:52 GMT Accept-Ranges: none ETag: W/"AEAwxDrB+FZEjUy3wXizVh/Iq/yx6x0hMHg4RDRDMkU3NTE1N0I0Qjc" MS-CV: DE4xUqJ730WAxHHK.0 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: MS-CV Content-Length: 13538 Date: Tue, 16 Apr 2024 20:52:26 GMT Connection: close
2024-04-16 20:52:26 UTC	1295	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 00 bb 00 8c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-04-16 20:52:26 UTC	12243	IN	Data Raw: 70 23 30 c9 02 21 8a 32 36 36 44 b2 48 89 9f e1 ce 70 7a 57 8f 6a 3f b6 46 8d 25 ea c9 0f 80 44 c9 14 f6 ea 61 5d 50 02 c9 25 b3 4d 21 56 f2 8f 28 e8 d1 8c e0 13 82 4a 8c e3 c6 fe 2a 7c 74 d6 fc 55 e1 c8 f5 0d 66 38 f5 8d 42 df c1 fa 74 ba 75 cb e8 d0 dc 47 a7 5f 3d e4 29 77 24 8d b7 11 ac 9e 49 c0 39 1b 8a 00 07 15 7a 38 ac 21 fd 96 74 af 13 d9 f8 5f 45 b7 d6 6e 3e 22 4f e1 83 7d 67 e1 c8 2e 27 fe cf 92 37 0d 04 70 95 db 2b 9d ed 80 7e 63 9d b9 00 d3 8b 71 f8 59 32 97 36 8f 63 ec ef d9 4f e3 1d 97 c6 7f 07 eb ba a6 9f e1 78 b4 48 b4 6b d4 b1 f2 9e ed 67 77 98 a6 f7 24 04 5c 20 05 40 6e 77 1d de 9c fa 06 a7 34 08 44 bf 26 40 f9 88 51 c5 7e 78 fe cf 5f 10 be 24 4b ad 5e e9 de 15 d6 e3 f0 dc 30 f8 54 df 5e 37 87 7c 29 6b 34 33 7d 94 cf e5 8b d2 d8 fb 3f ca Data Ascii: p#0!266DHpzWj?F%Da]P%M!V(J*\|tUf8BtuG_=)w$I9z8!t_En>"O}g.'7p+~cqY26cOxHkgw$\ @nw4D&@Q~x_$K^0T^7\|)k43}?

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.16	49802	23.54.200.10	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:26 UTC	351	OUT	GET /7/fd965100-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1 Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: musicart.xboxlive.com Connection: Keep-Alive
2024-04-16 20:52:27 UTC	452	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=604800, s-maxage=86400 Content-Type: image/jpeg Last-Modified: Tue, 19 Jan 2021 17:39:44 GMT Accept-Ranges: none ETag: W/"AEAwxDrB+FZEjUy3wXizVh/Iq/yx6x0hMHg4RDhCQ0ExMzU3MTc2OUI" MS-CV: +XUuOU9C60uLAh68.0 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: MS-CV,X-DominantColor X-DominantColor: #ECE2E2 Content-Length: 11139 Date: Tue, 16 Apr 2024 20:52:27 GMT Connection: close
2024-04-16 20:52:27 UTC	1236	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 00 bb 00 8c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF,,CC"}!1AQa"q2
2024-04-16 20:52:27 UTC	347	IN	Data Raw: 15 3f d6 b1 35 85 f1 e7 f6 c2 c7 69 f6 13 62 65 50 cc fa 98 59 44 79 1b 88 f9 b1 9e b8 a7 3b 28 ec 3a 55 65 3a 9a cd 59 77 ba 32 f4 e8 35 1b db 35 bb 6f 0f 6a d6 8c ec c0 c1 35 83 ef 5c 31 19 38 5e 87 19 1e c4 54 b3 69 97 bd 46 91 a8 9f fb 70 93 fc 2b 5f ec 9e 22 04 83 74 c4 76 ff 00 89 aa ff 00 8d 45 25 9f 89 b3 f2 dd 7f e5 59 7f c6 b0 e4 5d 8d fe b3 26 ee a4 92 f9 ff 00 99 8f 25 9d ec 31 b4 92 e9 57 f1 46 a0 96 77 b2 75 55 03 a9 24 8e 05 57 b8 20 32 8c 0f bb e9 ee 6b a0 b6 7d 49 6d 7c 41 63 a8 cd 31 92 1d 2e 60 f1 bc e6 45 56 2a a4 60 f4 e8 c2 b0 e7 80 e5 73 9f bb fd 68 94 52 3a 28 d6 72 6d 49 f6 db cc f4 58 48 fe db 85 3f e9 ce 6f fd 92 99 0a 46 b6 b6 f7 05 15 9e 39 e6 54 dd d0 16 93 14 ed 9e 57 89 55 7b ad 9c df fb 25 36 dd b3 a2 c2 c4 75 bb 7f fd 1d Data Ascii: ?5ibePYDy;(:Ue:Yw255oj5\18^TiFp+_"tvE%Y]&%1WFwuU$W 2k}Im\|Ac1.`EV*`shR:(rmIXH?oF9TWU{%6u
2024-04-16 20:52:27 UTC	9556	IN	Data Raw: 4a 15 13 8e fe 76 6b f1 d0 ab e1 eb 7d 42 1b 79 05 ce b3 6b 7a 64 70 d1 b7 d9 dd 76 2e d0 36 f5 e7 90 4f e3 56 6f ad a5 96 09 13 ed 56 b1 96 42 03 08 9f 2a 71 d4 73 da b8 1f 0b e8 5a f6 99 ac 43 34 5e 17 9a 18 d2 5f 38 31 b8 66 06 43 c1 25 77 9e 00 67 18 e9 c0 3c 74 af 52 96 dc 15 e2 b2 a7 2e 65 b5 8e ac 65 38 d1 a8 9c 67 cd 7e d6 fc 93 67 9d 7f c2 37 af aa ed 6f 1f 46 5b 2e 37 fd 80 e4 64 82 a3 af 25 40 23 27 ae 6b a5 f0 dd 9d cd ae 92 2d a7 d5 ed ef a7 59 19 9a 76 81 c1 c1 39 0b 8c f6 1c 57 17 e3 0f 0d 6b 33 78 9a fa ee cf c3 9e 79 9e e1 76 c9 f6 82 82 45 5d c5 58 0d f8 ce 58 e7 81 fd 2b a9 f0 16 96 9e 1e d3 6f 2d 67 b2 6b 57 9e 45 78 c1 62 d9 01 40 1c ee 3d 3a 7e 75 31 f8 b6 fc ce dc 55 a5 87 4f da 26 f4 76 4a 2b f2 d7 a9 63 53 b5 8d a6 06 4b fb 48 db Data Ascii: Jvk}Bykzdpv.6OVoVB*qsZC4^_81fC%wg<tR.ee8g~g7oF[.7d%@#'k-Yv9Wk3xyvE]XX+o-gkWExb@=:~u1UO&vJ+cSKH

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.16	49799	23.54.200.10	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:26 UTC	351	OUT	GET /7/27ea1000-0000-0000-0000-000000000002/504/image.jpg?w=140&h=190 HTTP/1.1 Accept: / Accept-Language: en-CH Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: musicart.xboxlive.com Connection: Keep-Alive
2024-04-16 20:52:27 UTC	379	IN	HTTP/1.1 200 OK Cache-Control: private MS-CV: LgRcR6aIJkuP7GQB.0 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: MS-CV Content-Type: image/jpeg Last-Modified: Tue, 04 Jul 2017 16:24:42 GMT Accept-Ranges: none ETag: W/"AEAwxDrB+FZEjUy3wXizVh/Iq/yx6x0hMHg4RDRDMkY5MkNGRTAzOEU" Content-Length: 11548 Date: Tue, 16 Apr 2024 20:52:26 GMT Connection: close
2024-04-16 20:52:27 UTC	1324	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 04 02 03 03 03 02 04 03 03 03 04 04 04 04 05 09 06 05 05 05 05 0b 08 08 06 09 0d 0b 0d 0d 0d 0b 0c 0c 0e 10 14 11 0e 0f 13 0f 0c 0c 12 18 12 13 15 16 17 17 17 0e 11 19 1b 19 16 1a 14 16 17 16 ff db 00 43 01 04 04 04 05 05 05 0a 06 06 0a 16 0f 0c 0f 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 16 ff c0 00 11 08 00 be 00 8b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFHHCC"}!1AQa"q2
2024-04-16 20:52:27 UTC	10224	IN	Data Raw: 37 0e 32 33 8c 8a e8 b4 f2 1b db d0 57 e6 78 54 ac 7a 75 9b b9 a4 61 69 e3 88 18 c2 e1 71 90 bd 40 a5 d5 11 de d5 63 91 f3 14 19 7d cc 7a 0c 73 cf a5 4d 0b 31 55 f9 8f 03 15 17 8e 6c 26 97 e1 ed fc f6 f6 f7 17 52 15 c0 b7 87 39 93 d8 e3 b5 7a aa 36 8b 71 57 39 60 f9 aa 46 2d da ec f3 9d 53 c5 3a 74 ad 32 a6 9d 27 94 ae 42 c8 f3 aa ef fa 0c 56 26 a1 77 a1 6a 31 aa b3 4d 6f b8 e0 b3 a0 65 53 f5 15 ce 41 67 ab 8b a6 81 34 2b ad ca 72 e7 ca 62 ab ec 3d 31 4b 75 ff 00 1e f2 09 a2 f2 6e 11 4e 62 61 b5 88 ef 81 5e 44 6b 62 1d 4b 36 7d 8a cb f0 f1 5e ef e7 ff 00 0e 33 e2 67 83 60 d3 74 e8 ee 44 cb 2b 4e a5 a3 31 8d ca 47 d6 bc 77 c4 da 54 08 ac 04 72 23 63 ae 78 fc 45 7b 2f 83 7c 41 69 ae 48 be 10 be 9d 56 59 0e 6c a5 7f 5c 12 46 3a 90 40 e0 0e a7 8a e5 fc 7d e1 Data Ascii: 723WxTzuaiq@c}zsM1Ul&R9z6qW9`F-S:t2'BV&wj1MoeSAg4+rb=1KunNba^DkbK6}^3g`tD+N1GwTr#cxE{/\|AiHVYl\F:@}

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.16	49818	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:28 UTC	9609	OUT	GET /v8.0/pages/pdp?productId=9NBLGGH4XXVW&itemType=Apps&appversion=11910.1002.0.0&market=CH&locale=en-CH&deviceFamily=Windows.Desktop&catalogLocales=en-CH%2Cen-GB&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&preciseDeviceFamilyVersion=2814751015241686&deviceFamilyVersion=2814750970478592&architecture=x64&deviceFamilyFilter=Windows.Desktop&displayMode=3&oemId=Public&scmId=Public&moId=Public&hydrateCount=0&cacheable=False&pzn=0&userSegments=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 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.18 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:29 UTC	420	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy00079U_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.18.11 Expires: Tue, 16 Apr 2024 20:52:29 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:29 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-Segment-On: true
2024-04-16 20:52:29 UTC	15964	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 5b 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 70 61 67 65 73 2f 70 64 70 3f 70 72 6f 64 75 63 74 49 64 3d 39 4e 42 4c 47 47 48 34 58 58 56 57 26 69 74 65 6d 54 79 70 65 3d 41 70 70 73 26 61 70 70 76 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b Data Ascii: 00006000[{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/pages/pdp?productId=9NBLGGH4XXVW&itemType=Apps&appversion=11910.1002.0.0&market=CH&locale=en-CH&deviceFamily=Windows.Desk
2024-04-16 20:52:29 UTC	8624	IN	Data Raw: 70 65 43 65 54 7a 76 58 4b 59 43 68 65 38 54 37 35 6e 54 49 34 7a 2b 51 59 66 4d 74 7a 6a 35 31 66 52 41 2b 42 68 6e 5a 78 33 44 61 78 42 57 69 58 6b 5a 67 79 54 49 65 33 37 77 6e 69 25 32 66 72 46 56 33 31 79 4a 4f 65 4e 49 52 4a 4d 32 57 35 33 58 4f 6c 47 53 58 67 41 4e 78 41 67 5a 72 49 4a 34 67 7a 68 37 4b 50 74 32 62 39 70 33 31 49 46 4c 25 32 66 6b 5a 35 52 48 35 6a 54 39 41 66 4c 78 31 70 54 62 6a 76 71 50 57 56 64 71 77 39 79 79 2b 57 6d 47 5a 75 63 73 71 62 4a 4a 32 6b 39 6b 41 56 70 4c 52 6f 4a 25 32 66 36 61 2b 65 78 4c 4e 61 58 59 58 55 59 30 67 71 63 7a 68 74 45 33 5a 64 42 69 58 66 6f 4b 67 71 6f 33 71 35 76 65 69 6f 63 72 64 72 31 58 64 55 69 7a 68 56 44 4f 35 4b 63 25 33 64 22 7d 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 Data Ascii: peCeTzvXKYChe8T75nTI4z+QYfMtzj51fRA+BhnZx3DaxBWiXkZgyTIe37wni%2frFV31yJOeNIRJM2W53XOlGSXgANxAgZrIJ4gzh7KPt2b9p31IFL%2fkZ5RH5jT9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d"}},{"$type":"Microsof
2024-04-16 20:52:29 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 68 30 31 59 57 74 56 6d 5a 4e 48 6f 70 36 6c 47 47 41 46 44 49 70 47 4c 43 6f 44 61 49 64 53 4f 4e 59 75 30 57 76 25 32 66 4f 67 57 6e 72 6f 59 56 58 69 4e 71 43 62 42 44 5a 25 32 66 51 47 65 61 41 48 76 63 36 46 35 6d 42 63 39 49 32 32 65 62 4a 5a 32 66 31 75 51 42 2b 48 43 42 46 45 36 67 47 6e 2b 4b 67 33 32 39 4c 53 4f 33 54 71 6d 32 44 35 6a 37 6e 25 32 66 6e 68 4b 53 6f 77 45 4f 72 4e 71 6c 79 25 32 66 75 38 72 6f 5a 68 6c 6a 38 74 75 76 45 4f 6d 55 44 65 6f 37 35 6b 7a 4e 78 44 41 51 6b 79 75 55 6b 66 6d 49 39 56 4f 7a 30 79 52 72 63 51 72 49 52 43 4a 38 43 79 25 32 66 4d 51 67 36 70 70 6b 74 46 4d 45 52 32 79 32 49 67 34 61 56 42 62 39 4e 57 72 41 74 6b 74 48 30 49 74 76 5a 4c 32 63 75 73 4d 70 4f 6e 77 35 33 53 42 57 Data Ascii: 00006000h01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBW
2024-04-16 20:52:29 UTC	8204	IN	Data Raw: 32 66 35 30 4e 47 61 62 4f 75 57 4b 51 62 6d 6c 58 6b 7a 68 59 4d 4f 43 37 49 36 47 59 38 54 37 48 47 78 6b 33 66 67 54 4b 52 6e 6d 4e 38 79 79 38 56 39 36 68 66 6a 2b 65 56 5a 63 58 32 61 53 79 76 63 45 53 39 48 47 65 70 74 7a 69 49 75 4a 6d 78 68 38 70 45 33 37 79 61 68 4e 77 37 43 69 44 64 71 35 36 63 4f 41 57 4b 51 70 75 6f 4e 43 36 69 54 72 74 4a 43 4c 79 57 61 6d 69 4b 55 78 77 59 5a 58 6f 33 43 33 36 78 6f 2b 53 70 63 51 75 56 41 71 64 38 76 6f 51 6a 47 6c 41 39 57 44 6a 41 6c 56 76 65 33 6a 4f 4a 68 4d 4b 71 61 76 51 41 57 57 25 32 66 54 6a 6a 74 46 35 64 48 6f 62 47 7a 6e 4d 68 6f 66 35 68 54 6a 34 56 68 56 6d 35 42 31 6b 76 50 63 47 4c 50 4f 4f 77 66 35 6f 32 7a 71 37 50 52 41 65 35 52 6e 59 4b 79 6f 57 55 55 63 79 6f 76 78 37 77 2b 4f 2b 35 58 Data Ascii: 2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5X
2024-04-16 20:52:29 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 69 6b 57 25 32 66 69 51 74 4f 25 32 66 63 47 78 5a 33 73 4f 6d 2b 67 6e 30 4b 46 65 4e 72 25 32 66 41 57 72 71 32 79 4e 72 51 2b 4b 6e 76 4c 2b 77 52 38 33 66 30 30 79 70 39 37 53 48 36 6a 57 37 53 59 2b 57 4b 62 6e 58 32 72 57 56 50 59 4f 49 35 30 39 6c 42 52 67 73 73 45 31 73 7a 48 69 38 31 43 46 6b 61 35 42 25 32 66 66 6d 6e 46 6c 4c 47 44 4b 6c 79 45 70 33 53 79 49 37 32 6f 56 31 55 43 37 76 4b 64 59 52 55 4b 75 53 6b 68 6b 52 44 63 4f 63 4f 4f 30 38 30 52 63 75 62 65 43 67 61 69 57 33 35 64 57 4b 6d 64 4e 32 67 6e 64 48 6e 4e 71 36 72 2b 53 7a 4e 44 73 42 48 75 43 6b 56 45 6b 72 64 69 47 69 41 57 4a 4e 4c 6b 39 6d 79 42 56 56 56 5a 25 32 66 6e 70 52 71 62 31 4d 62 6f 5a 51 33 53 6a 2b 31 66 4d 41 47 46 66 34 4b 51 77 67 Data Ascii: 00004000ikW%2fiQtO%2fcGxZ3sOm+gn0KFeNr%2fAWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B%2ffmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ%2fnpRqb1MboZQ3Sj+1fMAGFf4KQwg
2024-04-16 20:52:29 UTC	12	IN	Data Raw: 62 76 2b 72 67 32 33 7a 49 62 0d 0a Data Ascii: bv+rg23zIb
2024-04-16 20:52:29 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 49 79 42 36 72 65 66 6c 57 47 34 56 32 61 48 37 72 64 71 59 2b 33 33 78 7a 7a 54 72 38 48 67 59 59 32 47 51 4c 59 75 50 43 32 50 34 35 57 46 6b 58 79 49 32 4d 71 6c 78 5a 43 42 42 41 49 5a 4f 32 6e 73 4a 6e 78 79 4f 51 53 79 63 7a 38 52 7a 61 30 77 32 6c 30 47 7a 77 6a 58 45 5a 6c 66 6a 71 63 72 45 72 74 6c 73 4e 54 54 2b 50 6c 32 42 47 59 6f 4f 62 79 31 70 65 35 4b 6e 50 78 36 43 75 77 63 32 48 77 74 6b 4a 50 67 39 6a 2b 73 39 4c 42 25 32 66 50 66 72 63 35 55 50 64 68 4e 73 62 38 7a 63 38 45 55 31 51 34 57 4b 4e 2b 25 32 66 79 2b 55 30 4b 48 52 77 73 6b 66 63 79 59 6d 4b 65 51 56 6f 59 41 76 71 36 41 79 2b 2b 6e 58 69 50 77 48 79 6f 48 33 4f 54 4d 56 35 32 6e 68 77 57 64 2b 5a 6e 6d 33 76 66 52 31 5a 79 72 44 2b 61 6e 56 Data Ascii: 00004000nIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anV
2024-04-16 20:52:29 UTC	12	IN	Data Raw: 64 22 3a 22 72 65 67 69 6f 6e 0d 0a Data Ascii: d":"region
2024-04-16 20:52:29 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 4f 66 50 64 70 62 75 6e 64 6c 65 73 22 2c 22 4d 6f 64 75 6c 65 44 65 66 69 6e 69 74 69 6f 6e 4e 61 6d 65 22 3a 22 63 6f 72 65 75 69 2d 72 65 67 69 6f 6e 22 2c 22 46 69 65 6c 64 73 22 3a 7b 22 72 65 67 69 6f 6e 54 79 70 65 22 3a 22 66 75 6c 6c 57 69 64 74 68 22 2c 22 75 73 65 43 6f 6e 74 61 69 6e 65 72 44 61 74 61 47 72 69 64 22 3a 74 72 75 65 7d 2c 22 4d 6f 64 75 6c 65 73 22 3a 5b 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 38 2e 4d 6f 64 75 6c 65 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 49 64 22 3a 22 70 64 70 Data Ascii: 00004000OfPdpbundles","ModuleDefinitionName":"coreui-region","Fields":{"regionType":"fullWidth","useContainerDataGrid":true},"Modules":[{"$type":"Microsoft.Marketplace.Storefront.Contracts.V8.Module, Microsoft.Marketplace.Storefront.Contracts","Id":"pdp
2024-04-16 20:52:29 UTC	12	IN	Data Raw: 6e 74 2e 43 6f 6e 74 72 61 63 0d 0a Data Ascii: nt.Contrac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49819	40.126.29.13	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:29 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4676 Host: login.live.com
2024-04-16 20:52:29 UTC	4676	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-16 20:52:30 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 16 Apr 2024 20:51:29 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: ae880f06-3b93-4cde-9c38-cee0397c2bee PPServer: PPV: 30 H: SN1PEPF0002F954 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:52:29 GMT Connection: close Content-Length: 11753
2024-04-16 20:52:30 UTC	11753	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.16	49820	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:30 UTC	9544	OUT	GET /v8.0/ratings/summary/product/9NBLGGH4XXVW?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyFilter=Windows.Desktop&hardware=arm0%2carm640%2cble0%2ccmb0%2ccmf0%2ccmr0%2cdcb1%2cdcc1%2cdx91%2cdxa1%2cdxb1%2cgyr0%2chce0%2chdc0%2chov0%2chsa0%2chss1%2ckbd1%2cm041%2cm060%2cm080%2cm120%2cm160%2cm200%2cm301%2cm751%2cmA01%2cmct0%2cmgn0%2cmic0%2cmrc0%2cmse1%2cmT01%2cnfc0%2crs10%2crs20%2crs30%2crs40%2crs50%2crs60%2ctch0%2ctel0%2cv010%2cv020%2cv040%2cx641%2cx860%2cx86a640%2cxbd0%2cxbo0%2cxbs0%2cxbx0%2cxgp0&packageHardware=dcb%2cdcc%2cdx9%2cdxa%2cdxb%2cm30%2cm75%2cmA0%2cmT0&architecture=x64&displayMode=3&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW5upF4Hmf6%2fEkdGdi18FcGl4HM+pMNASrsvNiSbR%2fUq%2fMqk6BFQFiWNCjFDPWgoBhqK2Px3XNaiMwm2kHUg+%2f4z8s79bg7bwZKtHHdBxRodQs6tw7r1IQMi4Q8X0evsr1o0bmOs06Z0Ks9vYIaHhNa0KcW2KENYMRALUaPnig%2fCSR9MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj%2f3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz%2feRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+9MxWNyfdbZX2RBdeBJjRfOaQBaquhBq8E%2fl0iFbfjb3LQi6BwJNjZ8UikPrQ1VL3M0jcai97pjn430pbFMtSTWNCLF+nyNvMpyQvTl1j2%2fAKfXuBp8Wgeq+a89ZdGeh8RlM2aOM1Fq9gftB34jhJQ66vzvjFi0tXnWUuvg9tGdOFjj0xqF8KIR8m5aHg%2fTmQTt8+T+U5noiJ4%2f8y4F2Xkl%2fuVMkWwngoaLumw3KvfW1RYqu08J0nPecCp7SoikW%2fiQtO%2fcGxZ3sOm+gn0KFeNr%2fAWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B%2ffmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ%2fnpRqb1MboZQ3Sj+1fMAGFf4KQwgxCMxY5hEf7%2fHtnmtbyL2Qi0peCeTzvXKYChe8T75nTI4z+QYfMtzj51fRA+BhnZx3DaxBWiXkZgyTIe37wni%2frFV31yJOeNIRJM2W53XOlGSXgANxAgZrIJ4gzh7KPt2b9p31IFL%2fkZ5RH5jT9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.19 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=EwCgBF8iAQAU28X5hAkumfrDedQ+i9LVQH6YOAgAASZFd06tzxPYHUlSfva310A/8GtVnnrKJg3/R5o2c6hGUm8XgwMTSNwqb8rpkorBhtXKN14jo3HMyPLNq+o731KfXwf5PzYaahuoAvM/eTedPPMeSLWsiNRKeCSCRsu0eaeIeubgBwUDu2XsUXjKRHOETs2PYg2aTYYTeuZTUo4txVUbDZbUWRLSYggg8mAVLZITnroW7+vAimtv+F8NPx7fLLzVbqIy6xrWCkYiyaa/rQui/k7G/GNmw9ebsXsWyn/0yD4EucLGqxqQvjuWUBv1L31nt2uP3gS+LB1vNAhPNVfhQufwans2Z6dDlYky9UZBusij0rBqDyG1evGREDMDZgAACE1Y86MbfyQ3cAMFCZcESBk6svH4MlVkHD0h4hLQssoT4Bq1E2ilDO3ItE7zZwsu1quPo/qKZsDH9JDZ4B6+tnkr6ir8HTofhf/4yNdRxNy1I0qjci8Gk0EA/TwQdGEPQhPJH//RCwOhOCdLeeN5jTnoLjImqsHT1CwlH5BQV+pR2kXrtIRmIPlf3vyRDd2sRFh5Pv094y4EXp7Q+WkT2stOcvgD48W9oK9EIMdjmhmukBhDWDq0YrVQZB1x/VVa6B0UI39Roukq0cuQaLJasSpHpkBypgU/8eFzInI9cXOqpec4rVfQGI1Pem/UXM2nnAzsf98H56/cEpEAAdj895chnVIBsoMjnZMaD8GPfVIaWNQi8CyuXMLvrLNsq2eNj4etC+SaNhx/QxEO0labjwiHfk0nejp7EYj3lBRZhA7ed6LwB9DCf0NAcA6eNfpIZRNEjlqHfZ/MseBK0EIX24rqPFjcTyqE/7atrB3gt8TQRzB0JiOZyGidMTB1MkBu3mZD+etopckCdIy6BAsnVaMOQGPWXcR6GoODhbcR0c+pnSjf+SVudUmR1/RTpP+TNdADkHQp0aERHtvpw9WSq595bZM8935VphthaOgcTdwfNq/r0uLQnpudHhtCNBMxibky39I04OZ8EqmDsgNb3d8iowtlf31Uw1Kfpzd3PXg1srkv6IFBLma0a0pBp1wMW6NisqMSlzmmM4h/PV3nqrUySqAsejXmNtrcZQwxE7A+WyqyRWZLIO77DnHHg+FJ4r0qeOCwzKlXe0znOT7QnNYAmfO92fC4LFbbrQULT8YV1C+MWjeKQyeqBVM/yMC4ow7tVva5eE0I0C0WRTou6Ba9Fun/5l0vXHWeO7AYrcENIPOvTqwP0rl2JV6UacMa2G7EhVVcKrYmO3KxdjvhGzGzCY+XT+TWdV36J2Nj9072+Ko9sTbNQ9LFHB0CfM4svbXnoYBmOsNt3Vh/IP1E/6r0tXbqxXCvIfZUyNVf4XAGj+BD4lUACxn1QGlZ353f6+jhLdmAsq4SCzBKSHbPW+LMY7NJ8h6tkp3+hMiVDzXPg/ZVZEM5Yo4JfVs+sqkjUmZaGGmjx3gRFxNg43bWDRcqlqSziJKMB3HR2jTZysYreNA9X581SBfktvFuymhsZQMWOq7EzF7YEtNSIIu5U4v8YjJWcJA6boeHmwM=&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:30 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0006R0_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.19.3 Expires: Tue, 16 Apr 2024 20:52:30 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:30 GMT Content-Length: 6238 Connection: close X-Segment-On: true
2024-04-16 20:52:30 UTC	6238	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 72 61 74 69 6e 67 73 2f 73 75 6d 6d 61 72 79 2f 70 72 6f 64 75 63 74 2f 39 4e 42 4c 47 47 48 34 58 58 56 57 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 65 76 69 63 65 46 61 6d 69 6c 79 46 69 6c 74 65 72 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 68 61 72 64 77 61 72 65 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/ratings/summary/product/9NBLGGH4XXVW?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyFilter=Windows.Desktop&hardware

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.16	49822	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:30 UTC	5643	OUT	GET /v8.0/recommendations/bundlesByProduct/9NBLGGH4XXVW?market=CH&locale=en-CH&architecture=x64&moId=Public&oemId=Public&scmId=Public&hardware=arm0%2carm640%2cble0%2ccmb0%2ccmf0%2ccmr0%2cdcb1%2cdcc1%2cdx91%2cdxa1%2cdxb1%2cgyr0%2chce0%2chdc0%2chov0%2chsa0%2chss1%2ckbd1%2cm041%2cm060%2cm080%2cm120%2cm160%2cm200%2cm301%2cm751%2cmA01%2cmct0%2cmgn0%2cmic0%2cmrc0%2cmse1%2cmT01%2cnfc0%2crs10%2crs20%2crs30%2crs40%2crs50%2crs60%2ctch0%2ctel0%2cv010%2cv020%2cv040%2cx641%2cx860%2cx86a640%2cxbd0%2cxbo0%2cxbs0%2cxbx0%2cxgp0&packageHardware=dcb%2cdcc%2cdx9%2cdxa%2cdxb%2cm30%2cm75%2cmA0%2cmT0&deviceFamily=Windows.Desktop&catalogLocales=en-CH%2cen-GB&pageSize=15&appVersion=11910.1002.0.0&cardsEnabled=true&pzn=0 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.20 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=EwCgBF8iAQAU28X5hAkumfrDedQ+i9LVQH6YOAgAASZFd06tzxPYHUlSfva310A/8GtVnnrKJg3/R5o2c6hGUm8XgwMTSNwqb8rpkorBhtXKN14jo3HMyPLNq+o731KfXwf5PzYaahuoAvM/eTedPPMeSLWsiNRKeCSCRsu0eaeIeubgBwUDu2XsUXjKRHOETs2PYg2aTYYTeuZTUo4txVUbDZbUWRLSYggg8mAVLZITnroW7+vAimtv+F8NPx7fLLzVbqIy6xrWCkYiyaa/rQui/k7G/GNmw9ebsXsWyn/0yD4EucLGqxqQvjuWUBv1L31nt2uP3gS+LB1vNAhPNVfhQufwans2Z6dDlYky9UZBusij0rBqDyG1evGREDMDZgAACE1Y86MbfyQ3cAMFCZcESBk6svH4MlVkHD0h4hLQssoT4Bq1E2ilDO3ItE7zZwsu1quPo/qKZsDH9JDZ4B6+tnkr6ir8HTofhf/4yNdRxNy1I0qjci8Gk0EA/TwQdGEPQhPJH//RCwOhOCdLeeN5jTnoLjImqsHT1CwlH5BQV+pR2kXrtIRmIPlf3vyRDd2sRFh5Pv094y4EXp7Q+WkT2stOcvgD48W9oK9EIMdjmhmukBhDWDq0YrVQZB1x/VVa6B0UI39Roukq0cuQaLJasSpHpkBypgU/8eFzInI9cXOqpec4rVfQGI1Pem/UXM2nnAzsf98H56/cEpEAAdj895chnVIBsoMjnZMaD8GPfVIaWNQi8CyuXMLvrLNsq2eNj4etC+SaNhx/QxEO0labjwiHfk0nejp7EYj3lBRZhA7ed6LwB9DCf0NAcA6eNfpIZRNEjlqHfZ/MseBK0EIX24rqPFjcTyqE/7atrB3gt8TQRzB0JiOZyGidMTB1MkBu3mZD+etopckCdIy6BAsnVaMOQGPWXcR6GoODhbcR0c+pnSjf+SVudUmR1/RTpP+TNdADkHQp0aERHtvpw9WSq595bZM8935VphthaOgcTdwfNq/r0uLQnpudHhtCNBMxibky39I04OZ8EqmDsgNb3d8iowtlf31Uw1Kfpzd3PXg1srkv6IFBLma0a0pBp1wMW6NisqMSlzmmM4h/PV3nqrUySqAsejXmNtrcZQwxE7A+WyqyRWZLIO77DnHHg+FJ4r0qeOCwzKlXe0znOT7QnNYAmfO92fC4LFbbrQULT8YV1C+MWjeKQyeqBVM/yMC4ow7tVva5eE0I0C0WRTou6Ba9Fun/5l0vXHWeO7AYrcENIPOvTqwP0rl2JV6UacMa2G7EhVVcKrYmO3KxdjvhGzGzCY+XT+TWdV36J2Nj9072+Ko9sTbNQ9LFHB0CfM4svbXnoYBmOsNt3Vh/IP1E/6r0tXbqxXCvIfZUyNVf4XAGj+BD4lUACxn1QGlZ353f6+jhLdmAsq4SCzBKSHbPW+LMY7NJ8h6tkp3+hMiVDzXPg/ZVZEM5Yo4JfVs+sqkjUmZaGGmjx3gRFxNg43bWDRcqlqSziJKMB3HR2jTZysYreNA9X581SBfktvFuymhsZQMWOq7EzF7YEtNSIIu5U4v8YjJWcJA6boeHmwM=&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:30 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_LEGACY000007_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.20.5 Expires: Tue, 16 Apr 2024 20:52:30 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:30 GMT Content-Length: 1153 Connection: close X-Segment-On: true
2024-04-16 20:52:30 UTC	1153	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 2f 62 75 6e 64 6c 65 73 42 79 50 72 6f 64 75 63 74 2f 39 4e 42 4c 47 47 48 34 58 58 56 57 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 61 72 63 68 69 74 65 63 74 75 72 65 3d 78 36 34 26 6d 6f 49 64 3d 50 75 62 6c 69 63 26 6f 65 6d 49 64 3d 50 75 62 6c 69 63 26 73 63 6d 49 64 3d 50 75 62 6c 69 63 26 68 61 72 64 77 61 72 65 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/recommendations/bundlesByProduct/9NBLGGH4XXVW?market=CH&locale=en-CH&architecture=x64&moId=Public&oemId=Public&scmId=Public&hardware

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.16	49823	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:30 UTC	9715	OUT	GET /v8.0/filters/pdpReview?market=CH&locale=en-CH&appVersion=11910.1002.0.0&architecture=x64&hardware=arm0%2carm640%2cble0%2ccmb0%2ccmf0%2ccmr0%2cdcb1%2cdcc1%2cdx91%2cdxa1%2cdxb1%2cgyr0%2chce0%2chdc0%2chov0%2chsa0%2chss1%2ckbd1%2cm041%2cm060%2cm080%2cm120%2cm160%2cm200%2cm301%2cm751%2cmA01%2cmct0%2cmgn0%2cmic0%2cmrc0%2cmse1%2cmT01%2cnfc0%2crs10%2crs20%2crs30%2crs40%2crs50%2crs60%2ctch0%2ctel0%2cv010%2cv020%2cv040%2cx641%2cx860%2cx86a640%2cxbd0%2cxbo0%2cxbs0%2cxbx0%2cxgp0&packageHardware=dcb%2cdcc%2cdx9%2cdxa%2cdxb%2cm30%2cm75%2cmA0%2cmT0&deviceFamily=Windows.Desktop&catalogLocales=en-CH%2cen-GB&deviceFamilyFilter=Windows.Desktop&productId=9NBLGGH4XXVW&displayMode=3&oemId=Public&scmId=Public&moId=Public&deviceFamilyVersion=2814750970478592&deviceFamilyVersion=2814750970478592&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW5upF4Hmf6%2fEkdGdi18FcGl4HM+pMNASrsvNiSbR%2fUq%2fMqk6BFQFiWNCjFDPWgoBhqK2Px3XNaiMwm2kHUg+%2f4z8s79bg7bwZKtHHdBxRodQs6tw7r1IQMi4Q8X0evsr1o0bmOs06Z0Ks9vYIaHhNa0KcW2KENYMRALUaPnig%2fCSR9MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj%2f3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz%2feRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+9MxWNyfdbZX2RBdeBJjRfOaQBaquhBq8E%2fl0iFbfjb3LQi6BwJNjZ8UikPrQ1VL3M0jcai97pjn430pbFMtSTWNCLF+nyNvMpyQvTl1j2%2fAKfXuBp8Wgeq+a89ZdGeh8RlM2aOM1Fq9gftB34jhJQ66vzvjFi0tXnWUuvg9tGdOFjj0xqF8KIR8m5aHg%2fTmQTt8+T+U5noiJ4%2f8y4F2Xkl%2fuVMkWwngoaLumw3KvfW1RYqu08J0nPecCp7SoikW%2fiQtO%2fcGxZ3sOm+gn0KFeNr%2fAWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B%2ffmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ%2fnpRqb1MboZQ3Sj+1fMAGFf4KQwgxCMxY5hEf7%2fHtnmtbyL2Qi0peCeTzvXKYChe8T75nTI4z+QYfMtzj51fRA+BhnZx3DaxBWiXkZgyTIe37wni%2frFV31yJOeNIRJM2W53XOlGSXgANxAgZrIJ4gzh7KPt2b9p31IFL%2fkZ5RH5jT9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.21 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:30 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_LEGACY000003_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.21.4 Expires: Tue, 16 Apr 2024 20:52:30 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:30 GMT Content-Length: 6214 Connection: close X-Segment-On: true
2024-04-16 20:52:30 UTC	6214	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 66 69 6c 74 65 72 73 2f 70 64 70 52 65 76 69 65 77 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 61 70 70 56 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 61 72 63 68 69 74 65 63 74 75 72 65 3d 78 36 34 26 68 61 72 64 77 61 72 65 3d 61 72 6d 30 25 32 63 61 72 6d 36 34 30 25 32 63 62 6c 65 30 25 32 63 63 6d 62 30 25 32 63 63 6d 66 30 25 32 63 63 6d Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/filters/pdpReview?market=CH&locale=en-CH&appVersion=11910.1002.0.0&architecture=x64&hardware=arm0%2carm640%2cble0%2ccmb0%2ccmf0%2ccm

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.16	49824	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:30 UTC	9558	OUT	GET /v8.0/ratings/product/9NBLGGH4XXVW?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyFilter=Windows.Desktop&hardware=arm0%2carm640%2cble0%2ccmb0%2ccmf0%2ccmr0%2cdcb1%2cdcc1%2cdx91%2cdxa1%2cdxb1%2cgyr0%2chce0%2chdc0%2chov0%2chsa0%2chss1%2ckbd1%2cm041%2cm060%2cm080%2cm120%2cm160%2cm200%2cm301%2cm751%2cmA01%2cmct0%2cmgn0%2cmic0%2cmrc0%2cmse1%2cmT01%2cnfc0%2crs10%2crs20%2crs30%2crs40%2crs50%2crs60%2ctch0%2ctel0%2cv010%2cv020%2cv040%2cx641%2cx860%2cx86a640%2cxbd0%2cxbo0%2cxbs0%2cxbx0%2cxgp0&packageHardware=dcb%2cdcc%2cdx9%2cdxa%2cdxb%2cm30%2cm75%2cmA0%2cmT0&architecture=x64&orderBy=5&pageSize=10&displayMode=3&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW5upF4Hmf6%2fEkdGdi18FcGl4HM+pMNASrsvNiSbR%2fUq%2fMqk6BFQFiWNCjFDPWgoBhqK2Px3XNaiMwm2kHUg+%2f4z8s79bg7bwZKtHHdBxRodQs6tw7r1IQMi4Q8X0evsr1o0bmOs06Z0Ks9vYIaHhNa0KcW2KENYMRALUaPnig%2fCSR9MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj%2f3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz%2feRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+9MxWNyfdbZX2RBdeBJjRfOaQBaquhBq8E%2fl0iFbfjb3LQi6BwJNjZ8UikPrQ1VL3M0jcai97pjn430pbFMtSTWNCLF+nyNvMpyQvTl1j2%2fAKfXuBp8Wgeq+a89ZdGeh8RlM2aOM1Fq9gftB34jhJQ66vzvjFi0tXnWUuvg9tGdOFjj0xqF8KIR8m5aHg%2fTmQTt8+T+U5noiJ4%2f8y4F2Xkl%2fuVMkWwngoaLumw3KvfW1RYqu08J0nPecCp7SoikW%2fiQtO%2fcGxZ3sOm+gn0KFeNr%2fAWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B%2ffmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ%2fnpRqb1MboZQ3Sj+1fMAGFf4KQwgxCMxY5hEf7%2fHtnmtbyL2Qi0peCeTzvXKYChe8T75nTI4z+QYfMtzj51fRA+BhnZx3DaxBWiXkZgyTIe37wni%2frFV31yJOeNIRJM2W53XOlGSXgANxAgZrIJ4gzh7KPt2b9p31IFL%2fkZ5RH5jT9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.22 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=EwCgBF8iAQAU28X5hAkumfrDedQ+i9LVQH6YOAgAASZFd06tzxPYHUlSfva310A/8GtVnnrKJg3/R5o2c6hGUm8XgwMTSNwqb8rpkorBhtXKN14jo3HMyPLNq+o731KfXwf5PzYaahuoAvM/eTedPPMeSLWsiNRKeCSCRsu0eaeIeubgBwUDu2XsUXjKRHOETs2PYg2aTYYTeuZTUo4txVUbDZbUWRLSYggg8mAVLZITnroW7+vAimtv+F8NPx7fLLzVbqIy6xrWCkYiyaa/rQui/k7G/GNmw9ebsXsWyn/0yD4EucLGqxqQvjuWUBv1L31nt2uP3gS+LB1vNAhPNVfhQufwans2Z6dDlYky9UZBusij0rBqDyG1evGREDMDZgAACE1Y86MbfyQ3cAMFCZcESBk6svH4MlVkHD0h4hLQssoT4Bq1E2ilDO3ItE7zZwsu1quPo/qKZsDH9JDZ4B6+tnkr6ir8HTofhf/4yNdRxNy1I0qjci8Gk0EA/TwQdGEPQhPJH//RCwOhOCdLeeN5jTnoLjImqsHT1CwlH5BQV+pR2kXrtIRmIPlf3vyRDd2sRFh5Pv094y4EXp7Q+WkT2stOcvgD48W9oK9EIMdjmhmukBhDWDq0YrVQZB1x/VVa6B0UI39Roukq0cuQaLJasSpHpkBypgU/8eFzInI9cXOqpec4rVfQGI1Pem/UXM2nnAzsf98H56/cEpEAAdj895chnVIBsoMjnZMaD8GPfVIaWNQi8CyuXMLvrLNsq2eNj4etC+SaNhx/QxEO0labjwiHfk0nejp7EYj3lBRZhA7ed6LwB9DCf0NAcA6eNfpIZRNEjlqHfZ/MseBK0EIX24rqPFjcTyqE/7atrB3gt8TQRzB0JiOZyGidMTB1MkBu3mZD+etopckCdIy6BAsnVaMOQGPWXcR6GoODhbcR0c+pnSjf+SVudUmR1/RTpP+TNdADkHQp0aERHtvpw9WSq595bZM8935VphthaOgcTdwfNq/r0uLQnpudHhtCNBMxibky39I04OZ8EqmDsgNb3d8iowtlf31Uw1Kfpzd3PXg1srkv6IFBLma0a0pBp1wMW6NisqMSlzmmM4h/PV3nqrUySqAsejXmNtrcZQwxE7A+WyqyRWZLIO77DnHHg+FJ4r0qeOCwzKlXe0znOT7QnNYAmfO92fC4LFbbrQULT8YV1C+MWjeKQyeqBVM/yMC4ow7tVva5eE0I0C0WRTou6Ba9Fun/5l0vXHWeO7AYrcENIPOvTqwP0rl2JV6UacMa2G7EhVVcKrYmO3KxdjvhGzGzCY+XT+TWdV36J2Nj9072+Ko9sTbNQ9LFHB0CfM4svbXnoYBmOsNt3Vh/IP1E/6r0tXbqxXCvIfZUyNVf4XAGj+BD4lUACxn1QGlZ353f6+jhLdmAsq4SCzBKSHbPW+LMY7NJ8h6tkp3+hMiVDzXPg/ZVZEM5Yo4JfVs+sqkjUmZaGGmjx3gRFxNg43bWDRcqlqSziJKMB3HR2jTZysYreNA9X581SBfktvFuymhsZQMWOq7EzF7YEtNSIIu5U4v8YjJWcJA6boeHmwM=&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:30 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0007HL_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.22.1 Expires: Tue, 16 Apr 2024 20:52:30 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:30 GMT Content-Length: 5857 Connection: close X-Segment-On: true
2024-04-16 20:52:30 UTC	5857	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 72 61 74 69 6e 67 73 2f 70 72 6f 64 75 63 74 2f 39 4e 42 4c 47 47 48 34 58 58 56 57 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 65 76 69 63 65 46 61 6d 69 6c 79 46 69 6c 74 65 72 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 68 61 72 64 77 61 72 65 3d 61 72 6d 30 25 32 63 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/ratings/product/9NBLGGH4XXVW?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyFilter=Windows.Desktop&hardware=arm0%2c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49826	20.96.52.198	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:30 UTC	1865	OUT	GET /v7.0/products/9NBLGGH4XXVW/?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.17.1.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:52:30 UTC	481	IN	HTTP/1.1 200 OK Content-Length: 30958 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:52:30 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: 3b06ce00-0515-431b-b40d-64caf76f5ba2 MS-RequestId: 901b237c-fc8e-4b56-aca7-b756f84c5e5d MS-CV: UxEEy7KhKESwa2v1.17.1.3.1582768666.586428051.0 X-Content-Type-Options: nosniff MS-ServerId: fc5ddf-z5fqx MS-DocumentVersions: 9NBLGGH4XXVW\|4262
2024-04-16 20:52:30 UTC	1024	IN	Data Raw: 7b 22 50 72 6f 64 75 63 74 22 3a 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 32 2d 30 38 54 32 32 3a 32 35 3a 35 39 2e 37 35 31 39 39 34 37 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 30 32 34 39 36 30 31 33 34 37 39 31 33 34 34 34 37 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 32 34 37 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f Data Ascii: {"Product":{"LastModifiedDate":"2024-02-08T22:25:59.7519947Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3002496013479134447","EISListingIdentifier":null,"BackgroundColor":"transparent","Caption":"","FileSizeInBytes":1247,"ForegroundColo
2024-04-16 20:52:30 UTC	1024	IN	Data Raw: 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 30 34 30 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 34 34 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 39 31 58 41 46 79 73 7a 2f 56 2f 78 64 72 33 2b 41 37 52 43 62 66 6b 6c 58 4e 64 6e 56 48 41 79 54 53 38 4b 44 4e 4a 44 4f 79 51 3d 22 2c 22 55 72 69 22 3a 22 2f Data Ascii: "EISListingIdentifier":null,"BackgroundColor":"transparent","Caption":"","FileSizeInBytes":1040,"ForegroundColor":"","Height":44,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"91XAFysz/V/xdr3+A7RCbfklXNdnVHAyTS8KDNJDOyQ=","Uri":"/
2024-04-16 20:52:30 UTC	1024	IN	Data Raw: 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 44 73 77 33 54 55 31 6e 53 74 65 54 37 4c 51 72 55 4a 67 59 57 43 43 5a 30 49 35 35 75 31 6d 42 4f 2b 67 64 72 74 4e 4c 74 34 59 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 32 32 33 38 2e 31 33 35 31 30 37 39 38 38 38 37 36 39 30 34 38 30 2e 66 61 66 32 63 61 34 63 2d 36 65 35 35 2d 34 37 37 36 2d 61 61 62 34 2d 38 32 36 34 32 30 34 33 62 61 33 64 2e 30 33 32 31 36 31 30 38 2d 34 61 30 64 2d 34 38 30 63 2d 61 66 34 33 2d 31 31 64 62 37 34 34 61 37 32 32 37 22 2c 22 57 69 64 Data Ascii: nfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"Dsw3TU1nSteT7LQrUJgYWCCZ0I55u1mBO+gdrtNLt4Y=","Uri":"//store-images.s-microsoft.com/image/apps.52238.13510798887690480.faf2ca4c-6e55-4776-aab4-82642043ba3d.03216108-4a0d-480c-af43-11db744a7227","Wid
2024-04-16 20:52:30 UTC	1024	IN	Data Raw: 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 35 34 30 34 2e 31 33 35 31 30 37 39 38 38 38 37 36 39 30 34 38 30 2e 38 64 66 31 36 34 37 34 2d 62 66 34 66 2d 34 35 63 63 2d 61 62 66 37 2d 65 32 33 39 30 39 64 38 64 62 61 65 2e 38 31 64 30 65 32 38 32 2d 30 31 63 34 2d 34 66 36 32 2d 62 62 35 64 2d 36 63 31 65 31 61 64 62 63 65 62 36 22 2c 22 57 69 64 74 68 22 3a 31 33 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 31 31 35 32 39 32 31 35 30 34 37 33 37 30 30 33 39 37 35 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e Data Ascii: -microsoft.com/image/apps.55404.13510798887690480.8df16474-bf4f-45cc-abf7-e23909d8dbae.81d0e282-01c4-4f62-bb5d-6c1e1adbceb6","Width":1366},{"FileId":"1152921504737003975","EISListingIdentifier":null,"BackgroundColor":"transparent","Caption":"","FileSizeIn
2024-04-16 20:52:30 UTC	1024	IN	Data Raw: 39 37 66 39 2d 34 62 61 32 39 33 63 65 62 30 37 66 22 2c 22 57 69 64 74 68 22 3a 31 33 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 31 31 35 32 39 32 31 35 30 34 37 33 37 30 30 33 39 32 33 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 33 32 37 32 31 30 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 37 36 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 44 65 73 6b 74 6f 70 2f 33 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 53 63 72 65 65 6e 73 68 6f 74 Data Ascii: 97f9-4ba293ceb07f","Width":1366},{"FileId":"1152921504737003923","EISListingIdentifier":null,"BackgroundColor":"transparent","Caption":"","FileSizeInBytes":327210,"ForegroundColor":"","Height":768,"ImagePositionInfo":"Desktop/3","ImagePurpose":"Screenshot
2024-04-16 20:52:30 UTC	1024	IN	Data Raw: 79 6f 75 72 20 70 72 6f 6a 65 63 74 73 2c 20 61 74 20 77 6f 72 6b 20 61 6e 64 20 61 74 20 68 6f 6d 65 2e 5c 72 5c 6e 5c 72 5c 6e 42 72 69 6e 67 20 54 72 65 6c 6c 6f 20 74 6f 20 57 69 6e 64 6f 77 73 20 69 6e 20 61 20 64 65 64 69 63 61 74 65 64 20 77 6f 72 6b 73 70 61 63 65 2e 20 54 68 65 20 54 72 65 6c 6c 6f 20 44 65 73 6b 74 6f 70 20 41 70 70 20 66 65 61 74 75 72 65 73 20 6e 61 74 69 76 65 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2c 20 70 6f 77 65 72 66 75 6c 20 65 6e 68 61 6e 63 65 6d 65 6e 74 73 20 61 6e 64 20 6d 6f 72 65 20 2d 20 61 77 61 79 20 66 72 6f 6d 20 74 68 65 20 64 69 73 74 72 61 63 74 69 6f 6e 73 20 6f 66 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 5c 72 5c 6e 5c 72 5c 6e 53 74 61 79 20 70 72 6f 64 75 63 74 69 76 65 20 77 69 74 68 20 61 20 62 Data Ascii: your projects, at work and at home.\r\n\r\nBring Trello to Windows in a dedicated workspace. The Trello Desktop App features native notifications, powerful enhancements and more - away from the distractions of your browser.\r\n\r\nStay productive with a b
2024-04-16 20:52:30 UTC	1024	IN	Data Raw: 20 62 6f 61 72 64 5c 72 5c 6e 43 74 72 6c 2b 41 6c 74 2b 56 20 2d 20 4f 70 65 6e 20 61 6e 79 20 54 72 65 6c 6c 6f 20 63 61 72 64 20 6f 72 20 62 6f 61 72 64 20 62 79 20 70 61 73 74 69 6e 67 20 69 74 20 69 6e 74 6f 20 74 68 65 20 61 70 70 20 66 72 6f 6d 20 79 6f 75 72 20 63 6c 69 70 62 6f 61 72 64 5c 72 5c 6e 43 74 72 6c 2b 41 6c 74 2b 54 20 2d 20 4f 70 65 6e 20 61 70 70 20 66 72 6f 6d 20 61 6e 79 77 68 65 72 65 20 28 63 75 73 74 6f 6d 69 7a 61 62 6c 65 29 5c 72 5c 6e 43 74 72 6c 2b 31 2d 39 20 2d 20 51 75 69 63 6b 20 61 63 63 65 73 73 20 74 6f 20 79 6f 75 72 20 53 74 61 72 72 65 64 20 42 6f 61 72 64 73 5c 72 5c 6e 43 74 72 6c 2b 53 68 69 66 74 2b 42 20 2d 20 4f 70 65 6e 20 42 6f 61 72 64 73 20 70 61 67 65 5c 72 5c 6e 43 74 72 6c 2b 44 20 2d 20 4f 70 65 6e Data Ascii: board\r\nCtrl+Alt+V - Open any Trello card or board by pasting it into the app from your clipboard\r\nCtrl+Alt+T - Open app from anywhere (customizable)\r\nCtrl+1-9 - Quick access to your Starred Boards\r\nCtrl+Shift+B - Open Boards page\r\nCtrl+D - Open
2024-04-16 20:52:30 UTC	1024	IN	Data Raw: 68 65 20 43 61 6c 65 6e 64 61 72 20 50 6f 77 65 72 2d 55 70 5c 72 5c 6e e2 80 a2 20 54 72 65 6c 6c 6f 20 69 73 20 66 72 65 65 20 74 6f 20 75 73 65 20 66 6f 72 65 76 65 72 20 77 69 74 68 20 6f 70 74 69 6f 6e 73 20 74 6f 20 75 70 67 72 61 64 65 20 74 6f 20 47 6f 6c 64 20 66 6f 72 20 6c 6f 61 64 73 20 6f 66 20 65 78 74 72 61 20 66 75 6e 20 61 6e 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 22 2c 22 50 72 6f 64 75 63 74 54 69 74 6c 65 22 3a 22 54 72 65 6c 6c 6f 22 2c 22 53 65 61 72 63 68 54 69 74 6c 65 73 22 3a 5b 7b 22 53 65 61 72 63 68 54 69 74 6c 65 53 74 72 69 6e 67 22 3a 22 74 72 65 6c 6c 6f 22 2c 22 53 65 61 72 63 68 54 69 74 6c 65 54 79 70 65 22 3a 22 53 65 61 72 63 68 48 69 6e 74 22 7d 2c 7b 22 53 65 61 72 63 68 54 69 74 6c 65 53 74 72 69 6e 67 22 3a Data Ascii: he Calendar Power-Up\r\n Trello is free to use forever with options to upgrade to Gold for loads of extra fun and functionality","ProductTitle":"Trello","SearchTitles":[{"SearchTitleString":"trello","SearchTitleType":"SearchHint"},{"SearchTitleString":
2024-04-16 20:52:30 UTC	1024	IN	Data Raw: 45 53 22 2c 22 53 45 22 2c 22 43 48 22 2c 22 54 57 22 2c 22 54 48 22 2c 22 54 54 22 2c 22 54 4e 22 2c 22 54 52 22 2c 22 55 41 22 2c 22 41 45 22 2c 22 47 42 22 2c 22 56 4e 22 2c 22 59 45 22 2c 22 4c 59 22 2c 22 4c 4b 22 2c 22 55 59 22 2c 22 56 45 22 2c 22 41 46 22 2c 22 41 58 22 2c 22 41 4c 22 2c 22 41 53 22 2c 22 41 4f 22 2c 22 41 49 22 2c 22 41 51 22 2c 22 41 47 22 2c 22 41 4d 22 2c 22 41 57 22 2c 22 42 4f 22 2c 22 42 51 22 2c 22 42 41 22 2c 22 42 57 22 2c 22 42 56 22 2c 22 49 4f 22 2c 22 42 4e 22 2c 22 42 46 22 2c 22 42 49 22 2c 22 4b 48 22 2c 22 43 4d 22 2c 22 43 56 22 2c 22 4b 59 22 2c 22 43 46 22 2c 22 54 44 22 2c 22 54 4c 22 2c 22 44 4a 22 2c 22 44 4d 22 2c 22 44 4f 22 2c 22 45 43 22 2c 22 53 56 22 2c 22 47 51 22 2c 22 45 52 22 2c 22 45 54 22 2c 22 Data Ascii: ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","
2024-04-16 20:52:30 UTC	1024	IN	Data Raw: 56 57 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 34 35 32 37 33 4c 69 61 6d 46 6f 72 73 79 74 68 2e 50 61 77 73 66 6f 72 54 72 65 6c 6c 6f 5f 37 70 62 35 64 64 74 79 38 7a 31 70 61 22 2c 22 50 61 63 6b 61 67 65 49 64 65 6e 74 69 74 79 4e 61 6d 65 22 3a 22 34 35 32 37 33 4c 69 61 6d 46 6f 72 73 79 74 68 2e 50 61 77 73 66 6f 72 54 72 65 6c 6c 6f 22 2c 22 50 75 62 6c 69 73 68 65 72 43 65 72 74 69 66 69 63 61 74 65 4e 61 6d 65 22 3a 22 43 4e 3d 34 36 34 41 37 37 45 45 2d 36 34 42 42 2d 34 44 44 31 2d 42 38 42 42 2d 31 36 36 46 46 44 35 45 31 31 46 33 22 2c 22 58 62 6f 78 43 72 6f 73 73 47 65 6e 53 65 74 49 64 22 3a 6e 75 6c 6c 2c 22 58 62 6f 78 43 6f 6e 73 6f 6c 65 47 65 6e 4f 70 74 69 6d 69 Data Ascii: VW","Properties":{"PackageFamilyName":"45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa","PackageIdentityName":"45273LiamForsyth.PawsforTrello","PublisherCertificateName":"CN=464A77EE-64BB-4DD1-B8BB-166FFD5E11F3","XboxCrossGenSetId":null,"XboxConsoleGenOptimi

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.16	49827	23.211.118.80	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:35 UTC	5166	OUT	POST /v7.0/users/me/orders HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 Correlation-Context: ms.b.tel.partner=UniversalStoreNativeClient.Windows.Desktop,ms.b.qos.rootOperationName=Purchase OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.23.1.3 Accept-Language: en-CH Authorization: MSAHW1.0=t=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&p= Content-Length: 451 Content-Type: application/json; charset=UTF-8 Host: purchase.mp.microsoft.com Connection: Keep-Alive Cache-Control: no-cache
2024-04-16 20:52:35 UTC	451	OUT	Data Raw: 7b 22 61 6c 77 61 79 73 45 6e 66 6f 72 63 65 44 6f 75 62 6c 65 50 75 72 63 68 61 73 65 50 6f 6c 69 63 79 22 3a 74 72 75 65 2c 22 63 6c 69 65 6e 74 43 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 22 55 6e 69 76 65 72 73 61 6c 20 53 74 6f 72 65 20 4e 61 74 69 76 65 20 43 6c 69 65 6e 74 22 2c 22 64 65 76 69 63 65 46 61 6d 69 6c 79 22 3a 22 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 22 7d 2c 22 6f 72 64 65 72 53 74 61 74 65 22 3a 22 50 75 72 63 68 61 73 65 64 22 2c 22 69 74 65 6d 73 22 3a 5b 7b 22 73 6b 75 49 64 22 3a 22 30 30 31 30 22 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 22 22 2c 22 64 65 76 4f 66 66 65 72 49 64 22 3a 22 22 2c 22 70 72 6f 64 75 63 74 49 64 22 3a 22 39 4e 42 4c 47 47 48 34 58 58 56 57 22 2c 22 66 75 6c 66 69 6c 6c 6d 65 6e 74 Data Ascii: {"alwaysEnforceDoublePurchasePolicy":true,"clientContext":{"client":"Universal Store Native Client","deviceFamily":"Windows.Desktop"},"orderState":"Purchased","items":[{"skuId":"0010","campaignId":"","devOfferId":"","productId":"9NBLGGH4XXVW","fulfillment
2024-04-16 20:52:36 UTC	695	IN	HTTP/1.1 201 Created Content-Length: 4798 Content-Type: application/json; charset=utf-8 Location: https://purchase.mp.microsoft.com/v7.0/users/me/orders?id=db96348a-a106-49b5-b6e6-6e9de9776879 ms-correlationid: 7341d87e-7bc8-4c70-a726-422cd08f7890 ms-requestid: cc209ca3-e4f4-447c-b28f-604953cb7384 ms-cv: UxEEy7KhKESwa2v1.23.1.3.1582769390.4099914543.0 x-content-type-options: nosniff ms-serverid: 44dc6c7-b5j4h x-envoy-upstream-service-time: 688 Expires: Tue, 16 Apr 2024 20:52:36 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:36 GMT Connection: close Strict-Transport-Security: max-age=15768000 ; includeSubDomains ; preload
2024-04-16 20:52:36 UTC	1283	IN	Data Raw: 7b 22 62 75 6e 64 6c 65 50 72 69 63 65 73 22 3a 5b 5d 2c 22 63 6c 69 65 6e 74 43 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 22 55 6e 69 76 65 72 73 61 6c 20 53 74 6f 72 65 20 4e 61 74 69 76 65 20 43 6c 69 65 6e 74 22 2c 22 64 65 76 69 63 65 46 61 6d 69 6c 79 22 3a 22 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 22 2c 22 64 65 76 69 63 65 49 64 22 3a 22 36 38 32 35 38 32 33 38 30 38 35 30 32 32 32 33 22 2c 22 64 65 76 69 63 65 54 79 70 65 22 3a 22 55 6e 6b 6e 6f 77 6e 22 7d 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 36 54 32 30 3a 35 32 3a 33 35 2e 34 35 37 32 30 37 2b 30 30 3a 30 30 22 2c 22 63 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 43 48 46 22 2c 22 64 69 73 70 6c 61 79 54 6f 74 61 6c 46 65 65 41 6d 6f 75 6e Data Ascii: {"bundlePrices":[],"clientContext":{"client":"Universal Store Native Client","deviceFamily":"Windows.Desktop","deviceId":"6825823808502223","deviceType":"Unknown"},"createdTime":"2024-04-16T20:52:35.457207+00:00","currencyCode":"CHF","displayTotalFeeAmoun
2024-04-16 20:52:36 UTC	3515	IN	Data Raw: 20 79 6f 75 72 20 77 6f 72 6b 2e 5c 72 5c 6e 43 72 65 61 74 65 20 6e 65 77 20 63 61 72 64 73 20 69 6e 73 74 61 6e 74 6c 79 20 66 72 6f 6d 20 61 6e 79 77 68 65 72 65 20 77 69 74 68 20 61 20 51 75 69 63 6b 20 41 64 64 20 77 69 6e 64 6f 77 2e 5c 72 5c 6e 47 65 74 20 6e 6f 74 69 66 69 65 64 20 77 68 65 6e 65 76 65 72 20 74 68 65 72 65 e2 80 99 73 20 6e 65 77 20 61 63 74 69 76 69 74 79 20 69 6e 20 61 6e 79 20 6f 66 20 79 6f 75 72 20 54 72 65 6c 6c 6f 20 62 6f 61 72 64 73 2e 5c 72 5c 6e 57 6f 72 6b 20 6f 6e 20 6d 75 6c 74 69 70 6c 65 20 62 6f 61 72 64 73 20 61 74 20 6f 6e 63 65 20 77 69 74 68 20 6d 75 6c 74 69 70 6c 65 20 77 69 6e 64 6f 77 73 2e 5c 72 5c 6e 53 65 74 20 61 20 67 6c 6f 62 61 6c 20 73 68 6f 72 74 63 75 74 20 74 68 61 74 20 6f 70 65 6e 73 20 74 68 Data Ascii: your work.\r\nCreate new cards instantly from anywhere with a Quick Add window.\r\nGet notified whenever theres new activity in any of your Trello boards.\r\nWork on multiple boards at once with multiple windows.\r\nSet a global shortcut that opens th

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.16	49828	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:38 UTC	5140	OUT	POST /v8.0/campaigns?type=install&market=CH&ocid=%7ChomePageAppsSearch&productId=9NBLGGH4XXVW&skuid=0010&pzn=0 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.24 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Content-Length: 0 Content-Type: application/json; charset=UTF-8 Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive Cache-Control: no-cache
2024-04-16 20:52:38 UTC	331	IN	HTTP/1.1 200 OK Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_LEGACY000000_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.24.0 Expires: Tue, 16 Apr 2024 20:52:38 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:38 GMT Connection: close X-Segment-On: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49830	20.96.52.198	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:38 UTC	1871	OUT	GET /v7.0/products/9NBLGGH4XXVW/0010?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.23.2.2.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:52:38 UTC	489	IN	HTTP/1.1 200 OK Content-Length: 21486 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:52:37 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: 4d23a71b-d539-4d43-bb5d-0178f6776a34 MS-RequestId: bdcf73ff-8726-4472-9264-9a6449c87d9f MS-CV: UxEEy7KhKESwa2v1.23.2.2.3.1582769888.3747247751.0 X-Content-Type-Options: nosniff MS-ServerId: fc5ddf-w8fkl MS-DocumentVersions: 9NBLGGH4XXVW/0010\|4262
2024-04-16 20:52:38 UTC	1024	IN	Data Raw: 7b 22 50 72 6f 64 75 63 74 22 3a 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 32 2d 30 38 54 32 32 3a 32 35 3a 35 39 2e 37 35 31 39 39 34 37 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 30 32 34 39 36 30 31 33 34 37 39 31 33 34 34 34 37 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 32 34 37 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f Data Ascii: {"Product":{"LastModifiedDate":"2024-02-08T22:25:59.7519947Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3002496013479134447","EISListingIdentifier":null,"BackgroundColor":"transparent","Caption":"","FileSizeInBytes":1247,"ForegroundColo
2024-04-16 20:52:38 UTC	1024	IN	Data Raw: 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 30 34 30 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 34 34 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 39 31 58 41 46 79 73 7a 2f 56 2f 78 64 72 33 2b 41 37 52 43 62 66 6b 6c 58 4e 64 6e 56 48 41 79 54 53 38 4b 44 4e 4a 44 4f 79 51 3d 22 2c 22 55 72 69 22 3a 22 2f Data Ascii: "EISListingIdentifier":null,"BackgroundColor":"transparent","Caption":"","FileSizeInBytes":1040,"ForegroundColor":"","Height":44,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"91XAFysz/V/xdr3+A7RCbfklXNdnVHAyTS8KDNJDOyQ=","Uri":"/
2024-04-16 20:52:38 UTC	1024	IN	Data Raw: 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 44 73 77 33 54 55 31 6e 53 74 65 54 37 4c 51 72 55 4a 67 59 57 43 43 5a 30 49 35 35 75 31 6d 42 4f 2b 67 64 72 74 4e 4c 74 34 59 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 32 32 33 38 2e 31 33 35 31 30 37 39 38 38 38 37 36 39 30 34 38 30 2e 66 61 66 32 63 61 34 63 2d 36 65 35 35 2d 34 37 37 36 2d 61 61 62 34 2d 38 32 36 34 32 30 34 33 62 61 33 64 2e 30 33 32 31 36 31 30 38 2d 34 61 30 64 2d 34 38 30 63 2d 61 66 34 33 2d 31 31 64 62 37 34 34 61 37 32 32 37 22 2c 22 57 69 64 Data Ascii: nfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"Dsw3TU1nSteT7LQrUJgYWCCZ0I55u1mBO+gdrtNLt4Y=","Uri":"//store-images.s-microsoft.com/image/apps.52238.13510798887690480.faf2ca4c-6e55-4776-aab4-82642043ba3d.03216108-4a0d-480c-af43-11db744a7227","Wid
2024-04-16 20:52:38 UTC	1024	IN	Data Raw: 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 35 34 30 34 2e 31 33 35 31 30 37 39 38 38 38 37 36 39 30 34 38 30 2e 38 64 66 31 36 34 37 34 2d 62 66 34 66 2d 34 35 63 63 2d 61 62 66 37 2d 65 32 33 39 30 39 64 38 64 62 61 65 2e 38 31 64 30 65 32 38 32 2d 30 31 63 34 2d 34 66 36 32 2d 62 62 35 64 2d 36 63 31 65 31 61 64 62 63 65 62 36 22 2c 22 57 69 64 74 68 22 3a 31 33 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 31 31 35 32 39 32 31 35 30 34 37 33 37 30 30 33 39 37 35 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e Data Ascii: -microsoft.com/image/apps.55404.13510798887690480.8df16474-bf4f-45cc-abf7-e23909d8dbae.81d0e282-01c4-4f62-bb5d-6c1e1adbceb6","Width":1366},{"FileId":"1152921504737003975","EISListingIdentifier":null,"BackgroundColor":"transparent","Caption":"","FileSizeIn
2024-04-16 20:52:38 UTC	1024	IN	Data Raw: 39 37 66 39 2d 34 62 61 32 39 33 63 65 62 30 37 66 22 2c 22 57 69 64 74 68 22 3a 31 33 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 31 31 35 32 39 32 31 35 30 34 37 33 37 30 30 33 39 32 33 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 33 32 37 32 31 30 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 37 36 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 44 65 73 6b 74 6f 70 2f 33 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 53 63 72 65 65 6e 73 68 6f 74 Data Ascii: 97f9-4ba293ceb07f","Width":1366},{"FileId":"1152921504737003923","EISListingIdentifier":null,"BackgroundColor":"transparent","Caption":"","FileSizeInBytes":327210,"ForegroundColor":"","Height":768,"ImagePositionInfo":"Desktop/3","ImagePurpose":"Screenshot
2024-04-16 20:52:38 UTC	1024	IN	Data Raw: 79 6f 75 72 20 70 72 6f 6a 65 63 74 73 2c 20 61 74 20 77 6f 72 6b 20 61 6e 64 20 61 74 20 68 6f 6d 65 2e 5c 72 5c 6e 5c 72 5c 6e 42 72 69 6e 67 20 54 72 65 6c 6c 6f 20 74 6f 20 57 69 6e 64 6f 77 73 20 69 6e 20 61 20 64 65 64 69 63 61 74 65 64 20 77 6f 72 6b 73 70 61 63 65 2e 20 54 68 65 20 54 72 65 6c 6c 6f 20 44 65 73 6b 74 6f 70 20 41 70 70 20 66 65 61 74 75 72 65 73 20 6e 61 74 69 76 65 20 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2c 20 70 6f 77 65 72 66 75 6c 20 65 6e 68 61 6e 63 65 6d 65 6e 74 73 20 61 6e 64 20 6d 6f 72 65 20 2d 20 61 77 61 79 20 66 72 6f 6d 20 74 68 65 20 64 69 73 74 72 61 63 74 69 6f 6e 73 20 6f 66 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 5c 72 5c 6e 5c 72 5c 6e 53 74 61 79 20 70 72 6f 64 75 63 74 69 76 65 20 77 69 74 68 20 61 20 62 Data Ascii: your projects, at work and at home.\r\n\r\nBring Trello to Windows in a dedicated workspace. The Trello Desktop App features native notifications, powerful enhancements and more - away from the distractions of your browser.\r\n\r\nStay productive with a b
2024-04-16 20:52:38 UTC	1024	IN	Data Raw: 20 62 6f 61 72 64 5c 72 5c 6e 43 74 72 6c 2b 41 6c 74 2b 56 20 2d 20 4f 70 65 6e 20 61 6e 79 20 54 72 65 6c 6c 6f 20 63 61 72 64 20 6f 72 20 62 6f 61 72 64 20 62 79 20 70 61 73 74 69 6e 67 20 69 74 20 69 6e 74 6f 20 74 68 65 20 61 70 70 20 66 72 6f 6d 20 79 6f 75 72 20 63 6c 69 70 62 6f 61 72 64 5c 72 5c 6e 43 74 72 6c 2b 41 6c 74 2b 54 20 2d 20 4f 70 65 6e 20 61 70 70 20 66 72 6f 6d 20 61 6e 79 77 68 65 72 65 20 28 63 75 73 74 6f 6d 69 7a 61 62 6c 65 29 5c 72 5c 6e 43 74 72 6c 2b 31 2d 39 20 2d 20 51 75 69 63 6b 20 61 63 63 65 73 73 20 74 6f 20 79 6f 75 72 20 53 74 61 72 72 65 64 20 42 6f 61 72 64 73 5c 72 5c 6e 43 74 72 6c 2b 53 68 69 66 74 2b 42 20 2d 20 4f 70 65 6e 20 42 6f 61 72 64 73 20 70 61 67 65 5c 72 5c 6e 43 74 72 6c 2b 44 20 2d 20 4f 70 65 6e Data Ascii: board\r\nCtrl+Alt+V - Open any Trello card or board by pasting it into the app from your clipboard\r\nCtrl+Alt+T - Open app from anywhere (customizable)\r\nCtrl+1-9 - Quick access to your Starred Boards\r\nCtrl+Shift+B - Open Boards page\r\nCtrl+D - Open
2024-04-16 20:52:38 UTC	1024	IN	Data Raw: 68 65 20 43 61 6c 65 6e 64 61 72 20 50 6f 77 65 72 2d 55 70 5c 72 5c 6e e2 80 a2 20 54 72 65 6c 6c 6f 20 69 73 20 66 72 65 65 20 74 6f 20 75 73 65 20 66 6f 72 65 76 65 72 20 77 69 74 68 20 6f 70 74 69 6f 6e 73 20 74 6f 20 75 70 67 72 61 64 65 20 74 6f 20 47 6f 6c 64 20 66 6f 72 20 6c 6f 61 64 73 20 6f 66 20 65 78 74 72 61 20 66 75 6e 20 61 6e 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 22 2c 22 50 72 6f 64 75 63 74 54 69 74 6c 65 22 3a 22 54 72 65 6c 6c 6f 22 2c 22 53 65 61 72 63 68 54 69 74 6c 65 73 22 3a 5b 7b 22 53 65 61 72 63 68 54 69 74 6c 65 53 74 72 69 6e 67 22 3a 22 74 72 65 6c 6c 6f 22 2c 22 53 65 61 72 63 68 54 69 74 6c 65 54 79 70 65 22 3a 22 53 65 61 72 63 68 48 69 6e 74 22 7d 2c 7b 22 53 65 61 72 63 68 54 69 74 6c 65 53 74 72 69 6e 67 22 3a Data Ascii: he Calendar Power-Up\r\n Trello is free to use forever with options to upgrade to Gold for loads of extra fun and functionality","ProductTitle":"Trello","SearchTitles":[{"SearchTitleString":"trello","SearchTitleType":"SearchHint"},{"SearchTitleString":
2024-04-16 20:52:38 UTC	1024	IN	Data Raw: 45 53 22 2c 22 53 45 22 2c 22 43 48 22 2c 22 54 57 22 2c 22 54 48 22 2c 22 54 54 22 2c 22 54 4e 22 2c 22 54 52 22 2c 22 55 41 22 2c 22 41 45 22 2c 22 47 42 22 2c 22 56 4e 22 2c 22 59 45 22 2c 22 4c 59 22 2c 22 4c 4b 22 2c 22 55 59 22 2c 22 56 45 22 2c 22 41 46 22 2c 22 41 58 22 2c 22 41 4c 22 2c 22 41 53 22 2c 22 41 4f 22 2c 22 41 49 22 2c 22 41 51 22 2c 22 41 47 22 2c 22 41 4d 22 2c 22 41 57 22 2c 22 42 4f 22 2c 22 42 51 22 2c 22 42 41 22 2c 22 42 57 22 2c 22 42 56 22 2c 22 49 4f 22 2c 22 42 4e 22 2c 22 42 46 22 2c 22 42 49 22 2c 22 4b 48 22 2c 22 43 4d 22 2c 22 43 56 22 2c 22 4b 59 22 2c 22 43 46 22 2c 22 54 44 22 2c 22 54 4c 22 2c 22 44 4a 22 2c 22 44 4d 22 2c 22 44 4f 22 2c 22 45 43 22 2c 22 53 56 22 2c 22 47 51 22 2c 22 45 52 22 2c 22 45 54 22 2c 22 Data Ascii: ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","
2024-04-16 20:52:38 UTC	1024	IN	Data Raw: 56 57 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 34 35 32 37 33 4c 69 61 6d 46 6f 72 73 79 74 68 2e 50 61 77 73 66 6f 72 54 72 65 6c 6c 6f 5f 37 70 62 35 64 64 74 79 38 7a 31 70 61 22 2c 22 50 61 63 6b 61 67 65 49 64 65 6e 74 69 74 79 4e 61 6d 65 22 3a 22 34 35 32 37 33 4c 69 61 6d 46 6f 72 73 79 74 68 2e 50 61 77 73 66 6f 72 54 72 65 6c 6c 6f 22 2c 22 50 75 62 6c 69 73 68 65 72 43 65 72 74 69 66 69 63 61 74 65 4e 61 6d 65 22 3a 22 43 4e 3d 34 36 34 41 37 37 45 45 2d 36 34 42 42 2d 34 44 44 31 2d 42 38 42 42 2d 31 36 36 46 46 44 35 45 31 31 46 33 22 2c 22 58 62 6f 78 43 72 6f 73 73 47 65 6e 53 65 74 49 64 22 3a 6e 75 6c 6c 2c 22 58 62 6f 78 43 6f 6e 73 6f 6c 65 47 65 6e 4f 70 74 69 6d 69 Data Ascii: VW","Properties":{"PackageFamilyName":"45273LiamForsyth.PawsforTrello_7pb5ddty8z1pa","PackageIdentityName":"45273LiamForsyth.PawsforTrello","PublisherCertificateName":"CN=464A77EE-64BB-4DD1-B8BB-166FFD5E11F3","XboxCrossGenSetId":null,"XboxConsoleGenOptimi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49829	40.126.29.13	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:38 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4749 Host: login.live.com
2024-04-16 20:52:38 UTC	4749	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-16 20:52:38 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 16 Apr 2024 20:51:38 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: e9561a0d-e9f6-4f8a-aeaf-a48a61849f0e PPServer: PPV: 30 H: SN1PEPF0002F051 V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:52:38 GMT Connection: close Content-Length: 11370
2024-04-16 20:52:38 UTC	11370	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.16	49832	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:39 UTC	5649	OUT	GET /v8.0/products/9NBLGGH4XXVW?appversion=11910.1002.0.0&idType=ProductId&market=CH&locale=en-CH&deviceFamily=Windows.Desktop&catalogLocales=en-CH%2Cen-GB&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&deviceFamilyVersion=2814750970478592&preciseDeviceFamilyVersion=2814751015241686&architecture=x64&pzn=0 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.25 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:39 UTC	382	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0006R0_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.25.4 Expires: Tue, 16 Apr 2024 20:52:39 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:39 GMT Content-Length: 30996 Connection: close X-Segment-On: true
2024-04-16 20:52:39 UTC	16002	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 70 72 6f 64 75 63 74 73 2f 39 4e 42 4c 47 47 48 34 58 58 56 57 3f 61 70 70 76 65 72 73 69 6f 6e 3d 31 31 39 31 30 2e 31 30 30 32 2e 30 2e 30 26 69 64 54 79 70 65 3d 50 72 6f 64 75 63 74 49 64 26 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 63 61 74 61 6c 6f 67 4c 6f 63 61 6c 65 73 3d Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/products/9NBLGGH4XXVW?appversion=11910.1002.0.0&idType=ProductId&market=CH&locale=en-CH&deviceFamily=Windows.Desktop&catalogLocales=
2024-04-16 20:52:39 UTC	8574	IN	Data Raw: 6e 53 65 74 20 61 20 67 6c 6f 62 61 6c 20 73 68 6f 72 74 63 75 74 20 74 68 61 74 20 6f 70 65 6e 73 20 74 68 65 20 6d 61 69 6e 20 77 69 6e 64 6f 77 20 66 72 6f 6d 20 61 6e 79 77 68 65 72 65 2e 5c 72 5c 6e 4e 61 76 69 67 61 74 65 20 62 65 74 77 65 65 6e 20 79 6f 75 72 20 73 74 61 72 72 65 64 20 62 6f 61 72 64 73 20 77 69 74 68 20 61 20 71 75 69 63 6b 20 73 68 6f 72 74 63 75 74 2e 5c 72 5c 6e 5c 72 5c 6e 41 6c 6c 20 54 72 65 6c 6c 6f 20 73 68 6f 72 74 63 75 74 73 20 77 6f 72 6b 20 6a 75 73 74 20 6c 69 6b 65 20 74 68 65 20 77 65 62 2c 20 69 6e 63 6c 75 64 69 6e 67 20 6b 65 79 62 6f 61 72 64 20 73 68 6f 72 74 63 75 74 73 2c 20 64 72 61 67 20 26 20 64 72 6f 70 20 61 6e 64 20 6d 6f 72 65 2e 5c 72 5c 6e 5c 72 5c 6e 2d 2d 2d 5c 72 5c 6e 5c 72 5c 6e 53 6f 6d 65 20 Data Ascii: nSet a global shortcut that opens the main window from anywhere.\r\nNavigate between your starred boards with a quick shortcut.\r\n\r\nAll Trello shortcuts work just like the web, including keyboard shortcuts, drag & drop and more.\r\n\r\n---\r\n\r\nSome
2024-04-16 20:52:39 UTC	6420	IN	Data Raw: 22 3a 22 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 44 65 73 6b 74 6f 70 2f 34 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 33 35 33 30 34 2e 31 33 35 31 30 37 39 38 38 38 37 36 39 30 34 38 30 2e 66 66 36 39 33 37 34 36 2d 35 36 31 37 2d 34 37 34 61 2d 38 34 32 66 2d 62 39 62 37 31 36 63 30 38 35 38 31 2e 39 34 33 37 31 65 32 66 2d 63 30 30 30 2d 34 66 64 34 2d 39 30 66 33 2d 36 38 33 62 33 35 31 62 66 33 34 37 22 2c 22 48 65 69 67 68 74 22 3a 37 36 38 2c 22 57 69 64 74 68 22 3a 31 33 36 36 7d 5d 2c 22 50 72 6f 64 75 63 74 49 64 22 3a 22 39 4e 42 4c 47 47 48 34 58 58 Data Ascii: ":"","Caption":"","ImagePositionInfo":"Desktop/4","Url":"https://store-images.s-microsoft.com/image/apps.35304.13510798887690480.ff693746-5617-474a-842f-b9b716c08581.94371e2f-c000-4fd4-90f3-683b351bf347","Height":768,"Width":1366}],"ProductId":"9NBLGGH4XX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49831	40.126.29.13	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:39 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4650 Host: login.live.com
2024-04-16 20:52:39 UTC	4650	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-16 20:52:39 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Tue, 16 Apr 2024 20:51:39 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C538_SN1 x-ms-request-id: 9fd7f103-1c1f-4604-91d8-278b08e6dfb6 PPServer: PPV: 30 H: SN1PEPF0002F94B V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Tue, 16 Apr 2024 20:52:39 GMT Connection: close Content-Length: 11753
2024-04-16 20:52:39 UTC	11753	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.16	49836	20.96.63.25	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:40 UTC	1799	OUT	POST /v7.0/licenses/content HTTP/1.1 Connection: Keep-Alive Content-Type: application/json; charset=utf-8 Authorization: t=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&p= User-Agent: LM MS-CV: ZOXLewfbPEGThV0I.1 Content-Length: 752 Host: licensing.mp.microsoft.com
2024-04-16 20:52:40 UTC	752	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 43 68 61 6c 6c 65 6e 67 65 22 3a 22 50 44 39 34 62 57 77 67 64 6d 56 79 63 32 6c 76 62 6a 30 69 4d 53 34 77 49 69 42 6c 62 6d 4e 76 5a 47 6c 75 5a 7a 30 69 64 58 52 6d 4c 54 67 69 49 44 38 2b 50 45 4e 73 61 57 56 75 64 45 4e 6f 59 57 78 73 5a 57 35 6e 5a 53 42 34 62 57 78 75 63 7a 70 34 63 32 6b 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 45 76 57 45 31 4d 55 32 4e 6f 5a 57 31 68 4c 57 6c 75 63 33 52 68 62 6d 4e 6c 49 69 42 34 62 57 78 75 63 7a 70 34 63 32 51 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 45 76 57 45 31 4d 55 32 4e 6f 5a 57 31 68 49 69 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 4e 6a 61 47 56 74 59 58 4d Data Ascii: {"clientChallenge":"PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiID8+PENsaWVudENoYWxsZW5nZSB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp4c2Q9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4bWxucz0iaHR0cDovL3NjaGVtYXM
2024-04-16 20:52:40 UTC	426	IN	HTTP/1.1 200 OK content-length: 7973 content-type: application/json; charset=utf-8 date: Tue, 16 Apr 2024 20:52:40 GMT server: istio-envoy ms-correlationid: 802dd83d-1649-4feb-b78a-76341e779e5e ms-requestid: ea83f94b-19b0-48cc-80e1-cf44cb3bd843 ms-cv: ZOXLewfbPEGThV0I.1.1582770138.2909204767.0 x-content-type-options: nosniff ms-serverid: ent-64c56f55cf-2644n x-envoy-upstream-service-time: 1 connection: close
2024-04-16 20:52:40 UTC	7973	IN	Data Raw: 7b 22 6c 69 63 65 6e 73 65 22 3a 7b 22 6b 65 79 73 22 3a 5b 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 72 6d 54 79 70 65 22 3a 22 4d 6b 6d 73 22 2c 22 6b 65 79 49 64 22 3a 22 65 36 34 66 66 65 66 31 2d 65 32 34 36 2d 62 36 33 32 2d 35 39 35 62 2d 35 36 30 37 36 61 33 66 61 37 37 36 22 7d 2c 22 76 61 6c 75 65 22 3a 22 50 45 78 70 59 32 56 75 63 32 55 67 65 47 31 73 62 6e 4d 36 65 48 4e 6b 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 78 4c 31 68 4e 54 46 4e 6a 61 47 56 74 59 53 49 67 65 47 31 73 62 6e 4d 36 65 48 4e 70 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 78 4c 31 68 4e 54 46 4e 6a 61 47 56 74 59 53 31 70 62 6e 4e 30 59 57 35 6a 5a 53 49 67 53 55 51 39 Data Ascii: {"license":{"keys":[{"metadata":{"drmType":"Mkms","keyId":"e64ffef1-e246-b632-595b-56076a3fa776"},"value":"PExpY2Vuc2UgeG1sbnM6eHNkPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgSUQ9

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.16	49839	20.96.63.25	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:40 UTC	1799	OUT	POST /v7.0/licenses/content HTTP/1.1 Connection: Keep-Alive Content-Type: application/json; charset=utf-8 Authorization: t=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&p= User-Agent: LM MS-CV: ZOXLewfbPEGThV0I.2 Content-Length: 752 Host: licensing.mp.microsoft.com
2024-04-16 20:52:40 UTC	752	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 43 68 61 6c 6c 65 6e 67 65 22 3a 22 50 44 39 34 62 57 77 67 64 6d 56 79 63 32 6c 76 62 6a 30 69 4d 53 34 77 49 69 42 6c 62 6d 4e 76 5a 47 6c 75 5a 7a 30 69 64 58 52 6d 4c 54 67 69 49 44 38 2b 50 45 4e 73 61 57 56 75 64 45 4e 6f 59 57 78 73 5a 57 35 6e 5a 53 42 34 62 57 78 75 63 7a 70 34 63 32 6b 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 45 76 57 45 31 4d 55 32 4e 6f 5a 57 31 68 4c 57 6c 75 63 33 52 68 62 6d 4e 6c 49 69 42 34 62 57 78 75 63 7a 70 34 63 32 51 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 45 76 57 45 31 4d 55 32 4e 6f 5a 57 31 68 49 69 42 34 62 57 78 75 63 7a 30 69 61 48 52 30 63 44 6f 76 4c 33 4e 6a 61 47 56 74 59 58 4d Data Ascii: {"clientChallenge":"PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiID8+PENsaWVudENoYWxsZW5nZSB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIiB4bWxuczp4c2Q9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiB4bWxucz0iaHR0cDovL3NjaGVtYXM
2024-04-16 20:52:41 UTC	426	IN	HTTP/1.1 200 OK content-length: 7977 content-type: application/json; charset=utf-8 date: Tue, 16 Apr 2024 20:52:40 GMT server: istio-envoy ms-correlationid: 6d335d34-bc5b-4f7a-8542-9fff2d903abc ms-requestid: 415165bf-8ff3-47fd-8083-fd60af8b0c42 ms-cv: ZOXLewfbPEGThV0I.2.1582770219.1714622108.0 x-content-type-options: nosniff ms-serverid: ent-64c56f55cf-hfb4s x-envoy-upstream-service-time: 1 connection: close
2024-04-16 20:52:41 UTC	7977	IN	Data Raw: 7b 22 6c 69 63 65 6e 73 65 22 3a 7b 22 6b 65 79 73 22 3a 5b 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 64 72 6d 54 79 70 65 22 3a 22 4d 6b 6d 73 22 2c 22 6b 65 79 49 64 22 3a 22 36 37 34 34 37 62 30 63 2d 30 35 63 66 2d 36 37 34 30 2d 35 66 37 62 2d 33 39 31 61 62 34 34 30 63 34 32 64 22 7d 2c 22 76 61 6c 75 65 22 3a 22 50 45 78 70 59 32 56 75 63 32 55 67 65 47 31 73 62 6e 4d 36 65 48 4e 6b 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 78 4c 31 68 4e 54 46 4e 6a 61 47 56 74 59 53 49 67 65 47 31 73 62 6e 4d 36 65 48 4e 70 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 78 4c 31 68 4e 54 46 4e 6a 61 47 56 74 59 53 31 70 62 6e 4e 30 59 57 35 6a 5a 53 49 67 53 55 51 39 Data Ascii: {"license":{"keys":[{"metadata":{"drmType":"Mkms","keyId":"67447b0c-05cf-6740-5f7b-391ab440c42d"},"value":"PExpY2Vuc2UgeG1sbnM6eHNkPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYSIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgSUQ9

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.16	49840	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:45 UTC	3458	OUT	GET /v8.0/oemdiscovery?oemId=&scmId=&phoneManufacturerName=&smBiosManufacturerName=VMware%2C+Inc.&phoneDeviceModel=&smBiosDm=VMware20%2C1 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.26 Accept-Language: en-CH Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:45 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-WESTUS_LEGACY00000C_1.0.0.0 MS-CV: ep/lGGnHWEWqWJ1n.2.0 Expires: Tue, 16 Apr 2024 20:52:45 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:45 GMT Content-Length: 160 Connection: close X-Segment-On: true
2024-04-16 20:52:45 UTC	160	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 33 2e 4f 65 6d 44 69 73 63 6f 76 65 72 79 52 65 73 70 6f 6e 73 65 42 6f 64 79 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 53 63 6d 49 64 22 3a 22 50 75 62 6c 69 63 22 2c 22 4f 65 6d 49 64 22 3a 22 50 75 62 6c 69 63 22 7d Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V3.OemDiscoveryResponseBody, Microsoft.Marketplace.Storefront.Contracts","ScmId":"Public","OemId":"Public"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49841	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:49 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=66ka7AY8zWtDbHC&MD=LZZ2D3WS HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-16 20:52:50 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: d5f2998c-7ac9-4270-844e-40f14f6242f4 MS-RequestId: 5b50cb33-37e0-4137-9540-f6bcc1531163 MS-CV: g3MyfsIW6kelaWiZ.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 16 Apr 2024 20:52:49 GMT Connection: close Content-Length: 25457
2024-04-16 20:52:50 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-16 20:52:50 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.16	49842	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:55 UTC	3458	OUT	GET /v8.0/oemdiscovery?oemId=&scmId=&phoneManufacturerName=&smBiosManufacturerName=VMware%2C+Inc.&phoneDeviceModel=&smBiosDm=VMware20%2C1 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.27 Accept-Language: en-CH Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:55 UTC	379	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-WESTUS_LEGACY00000C_1.0.0.0 MS-CV: ep/lGGnHWEWqWJ1n.2.0 Expires: Tue, 16 Apr 2024 20:52:55 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:55 GMT Content-Length: 160 Connection: close X-Segment-On: true
2024-04-16 20:52:55 UTC	160	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 33 2e 4f 65 6d 44 69 73 63 6f 76 65 72 79 52 65 73 70 6f 6e 73 65 42 6f 64 79 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 53 63 6d 49 64 22 3a 22 50 75 62 6c 69 63 22 2c 22 4f 65 6d 49 64 22 3a 22 50 75 62 6c 69 63 22 7d Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V3.OemDiscoveryResponseBody, Microsoft.Marketplace.Storefront.Contracts","ScmId":"Public","OemId":"Public"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.16	49843	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:55 UTC	3435	OUT	GET /v8.0/background/pages/livetile?appversion=11910.1002.0.0&market=CH&locale=en-CH&deviceFamily=Windows.Desktop HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.28 Accept-Language: en-CH Host: livetileedge.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:55 UTC	138	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/html Content-Length: 2 Date: Tue, 16 Apr 2024 20:52:55 GMT Connection: close
2024-04-16 20:52:55 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.16	49844	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:52:57 UTC	5043	OUT	GET /v8.0/errorinfo?context=WU&code=0x80070422&market=CH&locale=en-CH&deviceFamily=Windows.Desktop&pzn=0 HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.29 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:52:58 UTC	380	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_Legacy0007I6_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.29.0 Expires: Tue, 16 Apr 2024 20:52:58 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:52:58 GMT Content-Length: 695 Connection: close X-Segment-On: true
2024-04-16 20:52:58 UTC	695	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 65 72 72 6f 72 69 6e 66 6f 3f 63 6f 6e 74 65 78 74 3d 57 55 26 63 6f 64 65 3d 30 78 38 30 30 37 30 34 32 32 26 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 70 7a 6e 3d 30 22 2c 22 45 78 70 69 72 79 55 74 63 22 3a 22 32 30 32 34 2d 30 34 2d 31 36 54 32 31 3a 35 32 3a 35 38 2e 31 37 33 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/errorinfo?context=WU&code=0x80070422&market=CH&locale=en-CH&deviceFamily=Windows.Desktop&pzn=0","ExpiryUtc":"2024-04-16T21:52:58.173

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.16	49845	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:21 UTC	9498	OUT	GET /v8.0/pages/mylibrary?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&catalogLocales=en-CH%2Cen-GB&moId=Public&oemId=Public&scmId=Public&appversion=11910.1002.0.0&hardware=arm0%2Carm640%2Cble0%2Ccmb0%2Ccmf0%2Ccmr0%2Cdcb1%2Cdcc1%2Cdx91%2Cdxa1%2Cdxb1%2Cgyr0%2Chce0%2Chdc0%2Chov0%2Chsa0%2Chss1%2Ckbd1%2Cm041%2Cm060%2Cm080%2Cm120%2Cm160%2Cm200%2Cm301%2Cm751%2CmA01%2Cmct0%2Cmgn0%2Cmic0%2Cmrc0%2Cmse1%2CmT01%2Cnfc0%2Crs10%2Crs20%2Crs30%2Crs40%2Crs50%2Crs60%2Ctch0%2Ctel0%2Cv010%2Cv020%2Cv040%2Cx641%2Cx860%2Cx86a640%2Cxbd0%2Cxbo0%2Cxbs0%2Cxbx0%2Cxgp0&packageHardware=dcb%2Cdcc%2Cdx9%2Cdxa%2Cdxb%2Cm30%2Cm75%2CmA0%2CmT0&preciseDeviceFamilyVersion=2814751015241686&architecture=x64&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x/h2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j/E7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM/gOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga/fF1TaSmfcmlDS9rqcl8k/sG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt/AR/IwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk/+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB/Pfrc5UPdhNsb8zc8EU1Q4WKN+/y+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB/iJ1R1g/+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc/gVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK/50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW/TjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3/GSOz4cgioMMmrVpIMK/8M6fIIUUehZ6+9YmNpqEG/FvQZpNNkbyafd4/sawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr/hsmEu13e5mNyk+xISTJQ+US9A/Uo0NHxKQIjEev3F/eEgP/ob9LKMRNYwfqz+mNLUtJwDmrA9N/Yk62Aeasba4jU7a/wTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr/DCmzZjqfcG2K73TdzvnIlEb/lv2b6wB+L7WfkP0kR9oGUf/+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v/rLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb/h9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU/wh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv/OgWnroYVXiNqCbBDZ/QGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n/nhKSowEOrNqly/u8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy/MQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm/VcsrY7TPk8jC/IAqruaud2eIV0cKnnFN2cRll/jBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL/3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo/6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB/vORSsNvT2J3TF4DG/EB8UfdaxKrb2tUc9SXzOgdT/Mkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW5upF4Hmf6/EkdGdi18FcGl4HM+pMNASrsvNiSbR/Uq/Mqk6BFQFiWNCjFDPWgoBhqK2Px3XNaiMwm2kHUg+/4z8s79bg7bwZKtHHdBxRodQs6tw7r1IQMi4Q8X0evsr1o0bmOs06Z0Ks9vYIaHhNa0KcW2KENYMRALUaPnig/CSR9MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj/3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz/eRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+9MxWNyfdbZX2RBdeBJjRfOaQBaquhBq8E/l0iFbfjb3LQi6BwJNjZ8UikPrQ1VL3M0jcai97pjn430pbFMtSTWNCLF+nyNvMpyQvTl1j2/AKfXuBp8Wgeq+a89ZdGeh8RlM2aOM1Fq9gftB34jhJQ66vzvjFi0tXnWUuvg9tGdOFjj0xqF8KIR8m5aHg/TmQTt8+T+U5noiJ4/8y4F2Xkl/uVMkWwngoaLumw3KvfW1RYqu08J0nPecCp7SoikW/iQtO/cGxZ3sOm+gn0KFeNr/AWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B/fmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ/npRqb1MboZQ3Sj+1fMAGFf4KQwgxCMxY5hEf7/HtnmtbyL2Qi0peCeTzvXKYChe8T75nTI4z+QYfMtzj51fRA+BhnZx3DaxBWiXkZgyTIe37wni/rFV31yJOeNIRJM2W53XOlGSXgANxAgZrIJ4gzh7KPt2b9p31IFL/kZ5RH5jT9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ/6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc= HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.33 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=EwCgBF8iAQAU28X5hAkumfrDedQ+i9LVQH6YOAgAASZFd06tzxPYHUlSfva310A/8GtVnnrKJg3/R5o2c6hGUm8XgwMTSNwqb8rpkorBhtXKN14jo3HMyPLNq+o731KfXwf5PzYaahuoAvM/eTedPPMeSLWsiNRKeCSCRsu0eaeIeubgBwUDu2XsUXjKRHOETs2PYg2aTYYTeuZTUo4txVUbDZbUWRLSYggg8mAVLZITnroW7+vAimtv+F8NPx7fLLzVbqIy6xrWCkYiyaa/rQui/k7G/GNmw9ebsXsWyn/0yD4EucLGqxqQvjuWUBv1L31nt2uP3gS+LB1vNAhPNVfhQufwans2Z6dDlYky9UZBusij0rBqDyG1evGREDMDZgAACE1Y86MbfyQ3cAMFCZcESBk6svH4MlVkHD0h4hLQssoT4Bq1E2ilDO3ItE7zZwsu1quPo/qKZsDH9JDZ4B6+tnkr6ir8HTofhf/4yNdRxNy1I0qjci8Gk0EA/TwQdGEPQhPJH//RCwOhOCdLeeN5jTnoLjImqsHT1CwlH5BQV+pR2kXrtIRmIPlf3vyRDd2sRFh5Pv094y4EXp7Q+WkT2stOcvgD48W9oK9EIMdjmhmukBhDWDq0YrVQZB1x/VVa6B0UI39Roukq0cuQaLJasSpHpkBypgU/8eFzInI9cXOqpec4rVfQGI1Pem/UXM2nnAzsf98H56/cEpEAAdj895chnVIBsoMjnZMaD8GPfVIaWNQi8CyuXMLvrLNsq2eNj4etC+SaNhx/QxEO0labjwiHfk0nejp7EYj3lBRZhA7ed6LwB9DCf0NAcA6eNfpIZRNEjlqHfZ/MseBK0EIX24rqPFjcTyqE/7atrB3gt8TQRzB0JiOZyGidMTB1MkBu3mZD+etopckCdIy6BAsnVaMOQGPWXcR6GoODhbcR0c+pnSjf+SVudUmR1/RTpP+TNdADkHQp0aERHtvpw9WSq595bZM8935VphthaOgcTdwfNq/r0uLQnpudHhtCNBMxibky39I04OZ8EqmDsgNb3d8iowtlf31Uw1Kfpzd3PXg1srkv6IFBLma0a0pBp1wMW6NisqMSlzmmM4h/PV3nqrUySqAsejXmNtrcZQwxE7A+WyqyRWZLIO77DnHHg+FJ4r0qeOCwzKlXe0znOT7QnNYAmfO92fC4LFbbrQULT8YV1C+MWjeKQyeqBVM/yMC4ow7tVva5eE0I0C0WRTou6Ba9Fun/5l0vXHWeO7AYrcENIPOvTqwP0rl2JV6UacMa2G7EhVVcKrYmO3KxdjvhGzGzCY+XT+TWdV36J2Nj9072+Ko9sTbNQ9LFHB0CfM4svbXnoYBmOsNt3Vh/IP1E/6r0tXbqxXCvIfZUyNVf4XAGj+BD4lUACxn1QGlZ353f6+jhLdmAsq4SCzBKSHbPW+LMY7NJ8h6tkp3+hMiVDzXPg/ZVZEM5Yo4JfVs+sqkjUmZaGGmjx3gRFxNg43bWDRcqlqSziJKMB3HR2jTZysYreNA9X581SBfktvFuymhsZQMWOq7EzF7YEtNSIIu5U4v8YjJWcJA6boeHmwM=&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:53:22 UTC	419	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_LEGACY000039_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.33.9 Expires: Tue, 16 Apr 2024 20:53:22 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:53:22 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding X-Segment-On: true
2024-04-16 20:53:22 UTC	15965	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 5b 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 70 61 67 65 73 2f 6d 79 6c 69 62 72 61 72 79 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 64 65 76 69 63 65 46 61 6d 69 6c 79 3d 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 26 64 65 76 69 63 65 46 61 6d 69 6c 79 56 65 72 73 69 6f 6e 3d 32 38 31 34 37 35 30 39 37 30 34 37 38 35 39 32 26 63 61 74 61 6c 6f 67 4c 6f 63 61 6c 65 73 3d 65 Data Ascii: 00006000[{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/pages/mylibrary?market=CH&locale=en-CH&deviceFamily=Windows.Desktop&deviceFamilyVersion=2814750970478592&catalogLocales=e
2024-04-16 20:53:22 UTC	8623	IN	Data Raw: 4d 47 4e 38 6b 71 54 71 7a 68 47 4d 55 7a 74 33 45 5a 62 57 31 4d 50 41 4b 67 79 54 4d 37 50 79 50 6d 43 34 30 32 54 4c 42 61 59 79 67 7a 73 68 62 4c 67 59 52 50 48 57 50 4e 55 45 54 54 77 6a 56 63 71 66 33 32 49 4b 6a 25 32 66 33 42 57 32 51 34 59 31 52 30 33 46 48 56 62 62 65 67 4c 68 61 57 75 57 72 77 76 75 44 77 6d 34 44 63 66 47 32 53 62 74 79 57 7a 7a 25 32 66 65 52 51 38 54 68 78 41 36 73 4e 72 36 37 42 46 6a 34 68 42 5a 53 32 74 79 59 6b 72 4a 71 57 72 42 58 7a 75 32 61 44 35 71 4e 77 4c 37 6d 49 4e 4a 59 31 5a 78 6c 2b 39 4d 78 57 4e 79 66 64 62 5a 58 32 52 42 64 65 42 4a 6a 52 66 4f 61 51 42 61 71 75 68 42 71 38 45 25 32 66 6c 30 69 46 62 66 6a 62 33 4c 51 69 36 42 77 4a 4e 6a 5a 38 55 69 6b 50 72 51 31 56 4c 33 4d 30 6a 63 61 69 39 37 70 6a 6e Data Ascii: MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj%2f3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz%2feRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+9MxWNyfdbZX2RBdeBJjRfOaQBaquhBq8E%2fl0iFbfjb3LQi6BwJNjZ8UikPrQ1VL3M0jcai97pjn
2024-04-16 20:53:22 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 3a 22 41 6c 6c 20 63 61 74 65 67 6f 72 69 65 73 22 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 43 6f 6e 74 65 6e 74 46 69 6c 74 65 72 43 68 6f 69 63 65 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 43 68 6f 69 63 65 49 64 22 3a 22 42 6f 6f 6b 73 20 26 20 72 65 66 65 72 65 6e 63 65 22 2c 22 54 69 74 6c 65 22 3a 22 42 6f 6f 6b 73 20 26 20 72 65 66 65 72 65 6e 63 65 22 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f Data Ascii: 00006000:"All categories"},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ContentFilterChoice, Microsoft.Marketplace.Storefront.Contracts","ChoiceId":"Books & reference","Title":"Books & reference"},{"$type":"Microsoft.Marketplace.Storefront.Co
2024-04-16 20:53:22 UTC	8204	IN	Data Raw: 65 22 3a 22 43 48 46 20 31 30 2c 30 30 2d 43 48 46 20 32 30 2c 30 30 22 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 43 6f 6e 74 65 6e 74 46 69 6c 74 65 72 43 68 6f 69 63 65 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 43 68 6f 69 63 65 49 64 22 3a 22 32 30 54 6f 35 30 22 2c 22 54 69 74 6c 65 22 3a 22 43 48 46 20 32 30 2c 30 30 2d 43 48 46 20 35 30 2c 30 30 22 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 43 Data Ascii: e":"CHF 10,00-CHF 20,00"},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ContentFilterChoice, Microsoft.Marketplace.Storefront.Contracts","ChoiceId":"20To50","Title":"CHF 20,00-CHF 50,00"},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.C
2024-04-16 20:53:22 UTC	3006	IN	Data Raw: 30 30 30 30 30 42 42 32 0d 0a 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 43 68 6f 69 63 65 49 64 22 3a 22 54 68 72 69 6c 6c 65 72 2f 4b 72 69 6d 69 22 2c 22 54 69 74 6c 65 22 3a 22 54 68 72 69 6c 6c 65 72 2f 4b 72 69 6d 69 22 7d 2c 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 43 6f 6e 74 65 6e 74 46 69 6c 74 65 72 43 68 6f 69 63 65 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 43 68 6f 69 63 65 49 64 22 3a 22 5a 65 69 63 68 65 6e 74 72 69 63 6b 22 2c 22 54 69 74 6c 65 22 3a 22 5a 65 69 63 Data Ascii: 00000BB2ketplace.Storefront.Contracts","ChoiceId":"Thriller/Krimi","Title":"Thriller/Krimi"},{"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ContentFilterChoice, Microsoft.Marketplace.Storefront.Contracts","ChoiceId":"Zeichentrick","Title":"Zeic
2024-04-16 20:53:22 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.16	49846	23.201.214.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:22 UTC	9563	OUT	GET /v8.0/devicequalificationoffers?market=CH&locale=en-CH&architecture=x64&moId=Public&oemId=Public&scmId=Public&hardware=arm0%2carm640%2cble0%2ccmb0%2ccmf0%2ccmr0%2cdcb1%2cdcc1%2cdx91%2cdxa1%2cdxb1%2cgyr0%2chce0%2chdc0%2chov0%2chsa0%2chss1%2ckbd1%2cm041%2cm060%2cm080%2cm120%2cm160%2cm200%2cm301%2cm751%2cmA01%2cmct0%2cmgn0%2cmic0%2cmrc0%2cmse1%2cmT01%2cnfc0%2crs10%2crs20%2crs30%2crs40%2crs50%2crs60%2ctch0%2ctel0%2cv010%2cv020%2cv040%2cx641%2cx860%2cx86a640%2cxbd0%2cxbo0%2cxbs0%2cxbx0%2cxgp0&packageHardware=dcb%2cdcc%2cdx9%2cdxa%2cdxb%2cm30%2cm75%2cmA0%2cmT0&deviceFamily=Windows.Desktop&catalogLocales=en-CH%2cen-GB&pageSize=15&cardsEnabled=true&pzn=0&userSegments=6s7hQGocdWdYfcAV1GTLAMZeXNCO1x%2fh2D+wGjMAiSM4HVf6f2JkKj6immiHtFFIMMFGbFeuetcZbydVEbykNHpl75PfeHh+BssFs60jl2F2j%2fE7PbBR78+fgMuVhkDOAf+7Gvb5ZIdqMfw9R3Y0Q2rXhFPBhGf5iKik2FJLkYyVaDZVyM%2fgOLouloeDUrf+nHhYPpcxXdPy9IB66aii4SgNga%2ffF1TaSmfcmlDS9rqcl8k%2fsG9wTyNT0lT0kv1ocZAQ1RG80czQ0dGSUacoA90sJc4Ar5xW+zeX5y2Dzy0f2nCFCGt%2fAR%2fIwByz8XSGH71cvjvuGE9PHaFiOi9YM3M4hhGbaAMniNx5lo2VYOyaWLPHOBpRTj3rrnoUGUXXF2+Seuj2tFbqXlcpbbpN5CxlG9aUIAdSx0Vm8al7T07lVKR0isR4GxV6xii4KAz5EfcjHw1tTYjgnZAcRhuwCCLt7JhfHQvt8Z+zvn4aMk%2f+iZqcofcEDcYh2wfUWf5Pf9WIh8cpLAVUrSd2AxqcH2EnweHoq66LIC7VXvADXFGC6GsBBdnPWEnUG3bG31X4ztmxV0A1zqbaBBJCOHOe3sKlwpWMDgUPZF2CQxXxXiKWKpxEZ+ApvvXOdjgA2fbv+rg23zIbnIyB6reflWG4V2aH7rdqY+33xzzTr8HgYY2GQLYuPC2P45WFkXyI2MqlxZCBBAIZO2nsJnxyOQSycz8Rza0w2l0GzwjXEZlfjqcrErtlsNTT+Pl2BGYoOby1pe5KnPx6Cuwc2HwtkJPg9j+s9LB%2fPfrc5UPdhNsb8zc8EU1Q4WKN+%2fy+U0KHRwskfcyYmKeQVoYAvq6Ay++nXiPwHyoH3OTMV52nhwWd+Znm3vfR1ZyrD+anVKRhsH1DqC4aeeqfuzszzxijocKDmz2mNpwN+MUSvzGmdnIXOtB%2fiJ1R1g%2f+ySLwtB4ymN5iS94iI4RN4YFaEnftUkD4dc%2fgVbP22fhUrz9FEjLt6eurAOeaEGwUidoBSgfeEE0pDIWyTvXDiqHfhGkz8TzRdFC4wqMPE1qyLoJbDTv6H1y+n5GAkZdBUjhI84ENOQHPNlz51zDh8xj4Kwe+opCa4DIfRUyB5I9dPZeathCYp4BuQTTmr958Mbh7vnqozDc9CoMaeIWtAK%2f50NGabOuWKQbmlXkzhYMOC7I6GY8T7HGxk3fgTKRnmN8yy8V96hfj+eVZcX2aSyvcES9HGeptziIuJmxh8pE37yahNw7CiDdq56cOAWKQpuoNC6iTrtJCLyWamiKUxwYZXo3C36xo+SpcQuVAqd8voQjGlA9WDjAlVve3jOJhMKqavQAWW%2fTjjtF5dHobGznMhof5hTj4VhVm5B1kvPcGLPOOwf5o2zq7PRAe5RnYKyoWUUcyovx7w+O+5XV43Ktw5QFfikhkGjnmGDXaZHaKmYXMV1PHkzgQZ5pAE+sfUSsV1O6EgtZv3%2fGSOz4cgioMMmrVpIMK%2f8M6fIIUUehZ6+9YmNpqEG%2fFvQZpNNkbyafd4%2fsawxS1uukDdU7Oij3rUJd2NUv+FnGjeJy+l7g850z+lJsIh5NDnJGN6pAr%2fhsmEu13e5mNyk+xISTJQ+US9A%2fUo0NHxKQIjEev3F%2feEgP%2fob9LKMRNYwfqz+mNLUtJwDmrA9N%2fYk62Aeasba4jU7a%2fwTAVOI6hwqDqx4Drb0t+KJwqn0A1TsHWMGMWXNzr%2fDCmzZjqfcG2K73TdzvnIlEb%2flv2b6wB+L7WfkP0kR9oGUf%2f+goDqzCQJOCteqT3Krkti7frqb7bdJSizyeK9T1IpHCFIHkOeE7v%2frLw2D5WZ0HMQYXgeDvNs1bxgq3ZBOnibq9RCO6ASmNihyg+yUN6daQsxLLoGhuCOTzyCKxbA0Eh1seJtRaKlqCb%2fh9tLqKaCNhrOnQ8HbPJI5BojxEyIXmQ0DU%2fwh01YWtVmZNHop6lGGAFDIpGLCoDaIdSONYu0Wv%2fOgWnroYVXiNqCbBDZ%2fQGeaAHvc6F5mBc9I22ebJZ2f1uQB+HCBFE6gGn+Kg329LSO3Tqm2D5j7n%2fnhKSowEOrNqly%2fu8roZhlj8tuvEOmUDeo75kzNxDAQkyuUkfmI9VOz0yRrcQrIRCJ8Cy%2fMQg6ppktFMER2y2Ig4aVBb9NWrAtktH0ItvZL2cusMpOnw53SBWDhnsci2mdXOCBeohKQND2FwqTHsj5tOm%2fVcsrY7TPk8jC%2fIAqruaud2eIV0cKnnFN2cRll%2fjBd4vz+vv7ggjlZ6SbF8vKaK1hGShkUg42Mey50s4AgTtBQyUdt89TlbWVXiy2Jr67zoU5n0koGCpNK6qdq+rcdA74ut+iCme65mwi2gdSzyk4RbTL%2f3CZj9lHbWY7ZElTpS1EPyDPHHdpvrEshHN6yFgyo%2f6tKKlm785Lr6RKCFYlgFY1MZnP+xjwMjf1RmTkJzm52pn9xfXrfSRd0rWMYjz5mpvm1SU7Tas+OsxQZkTtAZ2zsXwvOzYvqow9rVsaxs2Am89kHxbaA0y1FYLZDQQIIlaUBdTMbgdGqMMe3jpkgtoytzm2M1rPk5xnXpzCe4XUzJKXT9VDkoG9xsCW7egMHEDglbp5a3g8bm4qNP7qC2HHQ90I4zIBpt+AosVvZc3YB%2fvORSsNvT2J3TF4DG%2fEB8UfdaxKrb2tUc9SXzOgdT%2fMkj9AmHRFuLSR+Q3Ng5KB4HTesN5eDyNDUPvSEpCWw9AGeJIUaI1CW5upF4Hmf6%2fEkdGdi18FcGl4HM+pMNASrsvNiSbR%2fUq%2fMqk6BFQFiWNCjFDPWgoBhqK2Px3XNaiMwm2kHUg+%2f4z8s79bg7bwZKtHHdBxRodQs6tw7r1IQMi4Q8X0evsr1o0bmOs06Z0Ks9vYIaHhNa0KcW2KENYMRALUaPnig%2fCSR9MGN8kqTqzhGMUzt3EZbW1MPAKgyTM7PyPmC402TLBaYygzshbLgYRPHWPNUETTwjVcqf32IKj%2f3BW2Q4Y1R03FHVbbegLhaWuWrwvuDwm4DcfG2SbtyWzz%2feRQ8ThxA6sNr67BFj4hBZS2tyYkrJqWrBXzu2aD5qNwL7mINJY1Zxl+9MxWNyfdbZX2RBdeBJjRfOaQBaquhBq8E%2fl0iFbfjb3LQi6BwJNjZ8UikPrQ1VL3M0jcai97pjn430pbFMtSTWNCLF+nyNvMpyQvTl1j2%2fAKfXuBp8Wgeq+a89ZdGeh8RlM2aOM1Fq9gftB34jhJQ66vzvjFi0tXnWUuvg9tGdOFjj0xqF8KIR8m5aHg%2fTmQTt8+T+U5noiJ4%2f8y4F2Xkl%2fuVMkWwngoaLumw3KvfW1RYqu08J0nPecCp7SoikW%2fiQtO%2fcGxZ3sOm+gn0KFeNr%2fAWrq2yNrQ+KnvL+wR83f00yp97SH6jW7SY+WKbnX2rWVPYOI509lBRgssE1szHi81CFka5B%2ffmnFlLGDKlyEp3SyI72oV1UC7vKdYRUKuSkhkRDcOcOO080RcubeCgaiW35dWKmdN2gndHnNq6r+SzNDsBHuCkVEkrdiGiAWJNLk9myBVVVZ%2fnpRqb1MboZQ3Sj+1fMAGFf4KQwgxCMxY5hEf7%2fHtnmtbyL2Qi0peCeTzvXKYChe8T75nTI4z+QYfMtzj51fRA+BhnZx3DaxBWiXkZgyTIe37wni%2frFV31yJOeNIRJM2W53XOlGSXgANxAgZrIJ4gzh7KPt2b9p31IFL%2fkZ5RH5jT9AfLx1pTbjvqPWVdqw9yy+WmGZucsqbJJ2k9kAVpLRoJ%2f6a+exLNaXYXUY0gqczhtE3ZdBiXfoKgqo3q5veiocrdr1XdUizhVDO5Kc%3d HTTP/1.1 OSContentId: 482e3ada-05f0-d73c-4fef-cc9d8f8d989f Accept-Encoding: gzip, deflate OSIsSMode: False userSegments: 0.{"Flights":{"Features":"1s-1sw-evlc,1s-1sw-evlcn,1s-1sw-evlct,1s-blis-followloc,1s-ntf1-rspmh,1s-ntf1-spmh,1s-ntf2-ctrl,1s-shp-rc-t2-c20240328,1s-shp-rc-tc-rmsan1,1s-shp-rc-te-c20240328,1s-sl-halfucards,1s-sports-recov2,1s-temp-wid-t,1s-tpsn-wapidestprg2,1s-tpsn-wapiprg2-t,1s-uasdisf-t,1s-wpo-ntp-hero-t,1s-wpo-pr1-3colnodem,1s-wpo-pr1-clc19,1s-wpo-pr1-clc19-sup,1s-wpo-pr1-fsearch,1s-wpo-pr1-ncard,1s-wpo-pr1-ntrfd,1s-wpo-pr1-prots120,1s-wpo-pr1-skipdisb,1s-wpo-pr1-trfd2,1s-wpo-pr1-tskipdisb,1s-wpo-pr2-revpro,1s-wpo-prg1-aeplifecycle,1s-wpo-prg1-tafv3,1s-wpo-skdt-revwpo3,1s-wpo-skype-revwpo3,4918t1,ads-anjson-migc,ads-logallcr-t,ads-nooutbrain,ads-postsq-c,ads-sharvia-migr,ads-unifcrlog-t,ads-uniformcralllog,be7hj724,btie-fancy-img-t,cartemberpl,cartinstallall,cg-int-4-rwd,cjhii185,cswea-ovwntout,daconvertenabled,disableapprestore,disablebinglinkrestoretf,disableblendallpdp,disableiapreactcf,disablenorefunds,enableavatars,enablenpdp,enablesaturn,enablescarlettmetadata,enablesfdsapp,fv-cg-stage,hp-bot-seo,installgrtswithgarrison,mms-sc-sc_roer1,msnallexpusers,msph-aiacselect,msph-c2scontrep,msph-c2snobrand,msph-contoverview,msph-feedinternal,msph-mergedfeedapi,msph-mngcontrep,msph-newrsvideo,msph-onboardconfig,msph-tdinmsph,preprg-1sw-sa-annquota11,prg-1s-sm-workid-c,prg-1s-twid,prg-1sw-cmpmhp1,prg-1sw-dft3r,prg-1sw-dft-tskb,prg-1sw-fieplc,prg-1sw-finvldc,prg-1sw-iconmap,prg-1sw-ins-nb,prg-1sw-iplsdc1p2,prg-1sw-iplsdc-ntp,prg-1sw-iplsd-ntp,prg-1sw-iplsdp1,prg-1sw-iplsdp2,prg-1sw-mtr-en-c,prg-1sw-nucomobiter2t3,prg-1sw-p1widinc,prg-1sw-p1widinc-2d,prg-1s-wpocfp1,prg-1sw-river34,prg-1sw-sa-1gfm,prg-1sw-sal3fcac1,prg-1sw-samtmli18t2,prg-1sw-sa-offv32t6,prg-1sw-spexpnut3,prg-1sw-spmhp1,prg-1sw-superifpind,prg-1sw-tsk-cmsev,prg-1sw-wxevolnoti,prg-1sw-wxmptreplace,prg-ad-ai-imgf,prg-ad-fbi,prg-ad-pdedupe-c,prg-arb-rsz,prg-cg-c-hb,prg-cg-dom-cleac,prg-cg-ntv-ad-blnd,prg-chnl-umf-follow,prg-chpg-ldgw,prg-fin-cdicon,prg-fin-cnosign,prg-fin-errde,prg-fin-l2nav21,prg-msan-p2-holdout,prg-p2-add-pred,prg-p2-tfins,prg-padonrest,prg-pr1-evolvelifecycle2,prg-pr2-getpinnedwd,prg-pr2-pagecontext,prg-pr2-pulsec,prg-pr2-rmplchdr-t2,prg-pr2-sanotifyp2,prg-pr2-saupsellp2,prg-pr2-saupsellt2,prg-pr2-shoreline,prg-pr2-sidebar,prg-pr2-sidebar-5-t,prg-river-infod2,prg-river-infodl,prg-rpt2,prg-sh-bd-disgb,prg-sh-bd-newchckot,prg-sh-bd-nwchk,prg-sh-bd-pagoff,prg-sh-bd-ts2,prg-sh-bd-video,prg-sh-bd-xtracash,prg-sh-bf-ts,prg-sh-fashion-c,prg-sh-usecshk,prg-sh-usecshkpdp,prg-sp-liveapi,prg-ugc-likechange,prg-vidbuf4,prg-wg-cgbgc,prg-wx-ncar,prg-wx-nrfdads,prg-wx-pwac,prg-wx-reactads,revprmres,sfa-exp-dk3vt5s1o4,sfdsconfigoverride,sfdspriceoverride,sha-exp-inlyi9j7ql,sh-bdvid,spr-t-c20240328,test21emulation,testcanvas,traffic-p1df-3r,traffic-pr2-ampm-wi,usewsasmodecheck,vws-chpgv2-lgtn,wishlistmvpsfaf,wsaenabledforusonly,zchen-t"}} TASGUID: a523d5be-dd8c-45ce-80bc-9648858cd753 OSIsGenuine: True Accept: / Muid: 28E37935204C689136B56D56214B6983 TASIGNORE: YES MS-PreciseDeviceFamilyVersion: 2814751015241686 User-Agent: WindowsStore/11910.1002.5.0 MS-CV: UxEEy7KhKESwa2v1.34 Accept-Language: en-CH Authorization: Bearer MSAHW1.0=t=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&p= Host: storeedgefd.dsx.mp.microsoft.com Connection: Keep-Alive
2024-04-16 20:53:22 UTC	381	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 X-OSG-Served-By: Torus-EASTUS_LEGACY00003I_1.0.0.0 MS-CV: UxEEy7KhKESwa2v1.34.1 Expires: Tue, 16 Apr 2024 20:53:22 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Tue, 16 Apr 2024 20:53:22 GMT Content-Length: 5005 Connection: close X-Segment-On: true
2024-04-16 20:53:22 UTC	5005	IN	Data Raw: 7b 22 24 74 79 70 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 2e 56 31 2e 52 65 73 70 6f 6e 73 65 49 74 65 6d 2c 20 4d 69 63 72 6f 73 6f 66 74 2e 4d 61 72 6b 65 74 70 6c 61 63 65 2e 53 74 6f 72 65 66 72 6f 6e 74 2e 43 6f 6e 74 72 61 63 74 73 22 2c 22 50 61 74 68 22 3a 22 2f 64 65 76 69 63 65 71 75 61 6c 69 66 69 63 61 74 69 6f 6e 6f 66 66 65 72 73 3f 6d 61 72 6b 65 74 3d 43 48 26 6c 6f 63 61 6c 65 3d 65 6e 2d 43 48 26 61 72 63 68 69 74 65 63 74 75 72 65 3d 78 36 34 26 6d 6f 49 64 3d 50 75 62 6c 69 63 26 6f 65 6d 49 64 3d 50 75 62 6c 69 63 26 73 63 6d 49 64 3d 50 75 62 6c 69 63 26 68 61 72 64 77 61 72 65 3d 61 72 6d 30 25 32 63 61 72 6d 36 34 30 25 32 63 62 6c 65 Data Ascii: {"$type":"Microsoft.Marketplace.Storefront.Contracts.V1.ResponseItem, Microsoft.Marketplace.Storefront.Contracts","Path":"/devicequalificationoffers?market=CH&locale=en-CH&architecture=x64&moId=Public&oemId=Public&scmId=Public&hardware=arm0%2carm640%2cble

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49847	52.185.73.156	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:27 UTC	1934	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.549981C3F5F10_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.3.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:28 UTC	484	IN	HTTP/1.1 200 OK Content-Length: 79008 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:27 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: cdef9367-cd36-4b75-a1c1-d1d5ba7e431d MS-RequestId: 3e505622-fb30-466d-b7d0-1664ede27361 MS-CV: UxEEy7KhKESwa2v1.36.0.3.3.1582777427.2277417198.0 X-Content-Type-Options: nosniff MS-ServerId: dc79b8-422wd MS-DocumentVersions: 9NFFX4SZZ23L\|3250
2024-04-16 20:53:28 UTC	3612	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 4e 46 46 58 34 53 5a 5a 32 33 4c 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 31 2d 31 30 54 30 38 3a 32 34 3a 30 32 2e 37 36 36 39 39 38 33 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 30 35 32 39 36 32 32 35 38 32 30 34 37 32 34 33 34 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 Data Ascii: {"BigIds":["9NFFX4SZZ23L"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2024-01-10T08:24:02.7669983Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3005296225820472434","EISListingIdentifier":null,"BackgroundColor":"transparent","C
2024-04-16 20:53:28 UTC	4096	IN	Data Raw: 64 31 2d 61 31 34 62 61 63 61 63 31 33 34 61 2e 38 39 37 62 31 65 65 33 2d 35 36 31 61 2d 34 32 32 30 2d 39 61 61 31 2d 65 34 64 34 34 37 31 38 38 61 33 30 22 2c 22 57 69 64 74 68 22 3a 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 32 37 34 39 33 34 33 30 35 37 39 30 38 36 34 35 34 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 31 36 36 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 38 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 Data Ascii: d1-a14bacac134a.897b1ee3-561a-4220-9aa1-e4d447188a30","Width":66},{"FileId":"3027493430579086454","EISListingIdentifier":null,"BackgroundColor":"transparent","Caption":"","FileSizeInBytes":1166,"ForegroundColor":"","Height":88,"ImagePositionInfo":"","Imag
2024-04-16 20:53:28 UTC	4096	IN	Data Raw: 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 32 31 38 35 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 33 30 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 69 41 67 62 78 35 38 31 59 6c 62 47 79 77 76 30 66 42 38 56 33 42 4e 4c 2f 38 4b 6e 6b 30 58 4d 6b 48 66 79 34 36 30 37 35 48 6b 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 Data Ascii: dColor":"transparent","Caption":"","FileSizeInBytes":2185,"ForegroundColor":"","Height":300,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"iAgbx581YlbGywv0fB8V3BNL/8Knk0XMkHfy46075Hk=","Uri":"//store-images.s-microsoft.com/image/a
2024-04-16 20:53:28 UTC	4096	IN	Data Raw: 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 31 30 38 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 44 65 73 6b 74 6f 70 2f 36 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 53 63 72 65 65 6e 73 68 6f 74 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 62 4c 48 46 77 2f 72 41 64 68 42 77 4e 59 6d 30 55 78 62 57 53 44 36 79 6a 56 67 39 72 61 48 74 36 72 72 4f 43 6a 46 61 2b 58 77 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 34 35 34 32 30 2e 31 33 35 39 35 34 36 38 39 31 39 33 38 38 30 39 31 2e 63 31 31 61 33 63 37 33 2d 36 64 37 35 2d 34 Data Ascii: ForegroundColor":"","Height":1080,"ImagePositionInfo":"Desktop/6","ImagePurpose":"Screenshot","UnscaledImageSHA256Hash":"bLHFw/rAdhBwNYm0UxbWSD6yjVg9raHt6rrOCjFa+Xw=","Uri":"//store-images.s-microsoft.com/image/apps.45420.13595468919388091.c11a3c73-6d75-4
2024-04-16 20:53:28 UTC	4096	IN	Data Raw: 49 22 2c 22 41 51 22 2c 22 41 47 22 2c 22 41 4d 22 2c 22 41 57 22 2c 22 42 4f 22 2c 22 42 51 22 2c 22 42 41 22 2c 22 42 57 22 2c 22 42 56 22 2c 22 49 4f 22 2c 22 42 4e 22 2c 22 42 46 22 2c 22 42 49 22 2c 22 4b 48 22 2c 22 43 4d 22 2c 22 43 56 22 2c 22 4b 59 22 2c 22 43 46 22 2c 22 54 44 22 2c 22 54 4c 22 2c 22 44 4a 22 2c 22 44 4d 22 2c 22 44 4f 22 2c 22 45 43 22 2c 22 53 56 22 2c 22 47 51 22 2c 22 45 52 22 2c 22 45 54 22 2c 22 46 4b 22 2c 22 46 4f 22 2c 22 46 4a 22 2c 22 47 46 22 2c 22 50 46 22 2c 22 54 46 22 2c 22 47 41 22 2c 22 47 4d 22 2c 22 47 45 22 2c 22 47 48 22 2c 22 47 49 22 2c 22 47 4c 22 2c 22 47 44 22 2c 22 47 50 22 2c 22 47 55 22 2c 22 47 47 22 2c 22 47 4e 22 2c 22 47 57 22 2c 22 47 59 22 2c 22 48 54 22 2c 22 48 4d 22 2c 22 48 4e 22 2c 22 41 Data Ascii: I","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","A
2024-04-16 20:53:28 UTC	4096	IN	Data Raw: 4c 22 5d 7d 5d 2c 22 50 72 6f 64 75 63 74 49 64 22 3a 22 39 4e 46 46 58 34 53 5a 5a 32 33 4c 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 46 75 6c 66 69 6c 6c 6d 65 6e 74 44 61 74 61 22 3a 7b 22 50 72 6f 64 75 63 74 49 64 22 3a 22 39 4e 46 46 58 34 53 5a 5a 32 33 4c 22 2c 22 57 75 43 61 74 65 67 6f 72 79 49 64 22 3a 22 33 65 63 65 36 33 63 31 2d 61 65 35 31 2d 34 34 31 34 2d 39 30 36 34 2d 62 34 66 66 31 65 30 61 39 30 31 37 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 35 34 39 39 38 31 43 33 46 35 46 31 30 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 53 6b 75 49 64 22 3a 22 30 30 31 30 22 7d 2c 22 46 75 6c 66 69 6c 6c 6d 65 6e 74 54 79 70 65 22 3a 22 57 69 6e 64 6f 77 73 55 70 64 61 74 65 Data Ascii: L"]}],"ProductId":"9NFFX4SZZ23L","Properties":{"FulfillmentData":{"ProductId":"9NFFX4SZZ23L","WuCategoryId":"3ece63c1-ae51-4414-9064-b4ff1e0a9017","PackageFamilyName":"Microsoft.549981C3F5F10_8wekyb3d8bbwe","SkuId":"0010"},"FulfillmentType":"WindowsUpdate
2024-04-16 20:53:28 UTC	4096	IN	Data Raw: 65 73 22 3a 6e 75 6c 6c 7d 7d 2c 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 5b 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 49 64 22 3a 22 41 70 70 22 7d 5d 2c 22 41 72 63 68 69 74 65 63 74 75 72 65 73 22 3a 5b 22 61 72 6d 36 34 22 2c 22 78 36 34 22 2c 22 78 38 36 22 5d 2c 22 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 22 69 6e 74 65 72 6e 65 74 43 6c 69 65 6e 74 22 2c 22 70 72 69 76 61 74 65 4e 65 74 77 6f 72 6b 43 6c 69 65 6e 74 53 65 72 76 65 72 22 2c 22 69 6e 74 65 72 6e 65 74 43 6c 69 65 6e 74 53 65 72 76 65 72 22 2c 22 65 6e 74 65 72 70 72 69 73 65 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 22 2c 22 73 68 61 72 65 64 55 73 65 72 43 65 72 74 69 66 69 63 61 74 65 73 22 2c 22 72 65 6d 6f 74 65 53 79 73 74 65 6d 22 2c 22 75 73 65 72 41 63 63 6f 75 6e 74 Data Ascii: es":null}},{"Applications":[{"ApplicationId":"App"}],"Architectures":["arm64","x64","x86"],"Capabilities":["internetClient","privateNetworkClientServer","internetClientServer","enterpriseAuthentication","sharedUserCertificates","remoteSystem","userAccount
2024-04-16 20:53:28 UTC	4096	IN	Data Raw: 7b 5c 22 6c 65 76 65 6c 5c 22 3a 37 2c 5c 22 73 79 73 74 65 6d 49 64 5c 22 3a 33 7d 2c 7b 5c 22 6c 65 76 65 6c 5c 22 3a 31 32 2c 5c 22 73 79 73 74 65 6d 49 64 5c 22 3a 35 7d 2c 7b 5c 22 6c 65 76 65 6c 5c 22 3a 34 38 2c 5c 22 73 79 73 74 65 6d 49 64 5c 22 3a 31 32 7d 2c 7b 5c 22 6c 65 76 65 6c 5c 22 3a 32 37 2c 5c 22 73 79 73 74 65 6d 49 64 5c 22 3a 39 7d 2c 7b 5c 22 6c 65 76 65 6c 5c 22 3a 37 36 2c 5c 22 73 79 73 74 65 6d 49 64 5c 22 3a 31 36 7d 2c 7b 5c 22 6c 65 76 65 6c 5c 22 3a 36 38 2c 5c 22 73 79 73 74 65 6d 49 64 5c 22 3a 31 35 7d 2c 7b 5c 22 6c 65 76 65 6c 5c 22 3a 35 34 2c 5c 22 73 79 73 74 65 6d 49 64 5c 22 3a 31 33 7d 5d 7d 7d 22 2c 22 50 61 63 6b 61 67 65 44 6f 77 6e 6c 6f 61 64 55 72 69 73 22 3a 6e 75 6c 6c 2c 22 46 75 6c 66 69 6c 6c 6d 65 6e Data Ascii: {\"level\":7,\"systemId\":3},{\"level\":12,\"systemId\":5},{\"level\":48,\"systemId\":12},{\"level\":27,\"systemId\":9},{\"level\":76,\"systemId\":16},{\"level\":68,\"systemId\":15},{\"level\":54,\"systemId\":13}]}}","PackageDownloadUris":null,"Fulfillmen
2024-04-16 20:53:28 UTC	4096	IN	Data Raw: 22 7d 5d 2c 22 50 6c 61 74 66 6f 72 6d 44 65 70 65 6e 64 65 6e 63 79 58 6d 6c 42 6c 6f 62 22 3a 22 7b 5c 22 62 6c 6f 62 2e 76 65 72 73 69 6f 6e 5c 22 3a 31 36 38 38 38 36 37 30 34 30 35 32 36 33 33 36 2c 5c 22 63 6f 6e 74 65 6e 74 2e 62 75 6e 64 6c 65 64 50 61 63 6b 61 67 65 73 5c 22 3a 5b 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 35 34 39 39 38 31 43 33 46 35 46 31 30 5f 33 2e 32 31 31 30 2e 31 33 36 30 33 2e 30 5f 61 72 6d 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 35 34 39 39 38 31 43 33 46 35 46 31 30 5f 33 2e 32 31 31 30 2e 31 33 36 30 33 2e 30 5f 78 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 35 34 39 39 38 31 43 33 46 35 46 31 30 5f 33 2e 32 31 31 30 Data Ascii: "}],"PlatformDependencyXmlBlob":"{\"blob.version\":1688867040526336,\"content.bundledPackages\":[\"Microsoft.549981C3F5F10_3.2110.13603.0_arm64__8wekyb3d8bbwe\",\"Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\",\"Microsoft.549981C3F5F10_3.2110
2024-04-16 20:53:28 UTC	4096	IN	Data Raw: 65 6e 74 22 2c 22 70 72 69 76 61 74 65 4e 65 74 77 6f 72 6b 43 6c 69 65 6e 74 53 65 72 76 65 72 22 2c 22 69 6e 74 65 72 6e 65 74 43 6c 69 65 6e 74 53 65 72 76 65 72 22 2c 22 65 6e 74 65 72 70 72 69 73 65 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 22 2c 22 73 68 61 72 65 64 55 73 65 72 43 65 72 74 69 66 69 63 61 74 65 73 22 2c 22 72 65 6d 6f 74 65 53 79 73 74 65 6d 22 2c 22 75 73 65 72 41 63 63 6f 75 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 22 67 6c 6f 62 61 6c 4d 65 64 69 61 43 6f 6e 74 72 6f 6c 22 2c 22 72 75 6e 46 75 6c 6c 54 72 75 73 74 22 2c 22 63 6f 6e 66 69 72 6d 41 70 70 43 6c 6f 73 65 22 2c 22 75 6e 76 69 72 74 75 61 6c 69 7a 65 64 52 65 73 6f 75 72 63 65 73 22 2c 22 63 6f 72 74 61 6e 61 50 65 72 6d 69 73 73 69 6f 6e 73 22 2c 22 62 72 6f 61 64 Data Ascii: ent","privateNetworkClientServer","internetClientServer","enterpriseAuthentication","sharedUserCertificates","remoteSystem","userAccountInformation","globalMediaControl","runFullTrust","confirmAppClose","unvirtualizedResources","cortanaPermissions","broad

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49848	52.185.73.156	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:29 UTC	1932	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.BingWeather_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.5.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:29 UTC	484	IN	HTTP/1.1 200 OK Content-Length: 89693 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:29 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: d56f9f6c-abe7-4ce5-90de-091974fcce6d MS-RequestId: eaef3fba-0049-4e63-9651-8a07318465a9 MS-CV: UxEEy7KhKESwa2v1.36.0.5.3.1582777673.4039346727.0 X-Content-Type-Options: nosniff MS-ServerId: dc79b8-cdswk MS-DocumentVersions: 9WZDNCRFJ3Q2\|5222
2024-04-16 20:53:29 UTC	3612	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 57 5a 44 4e 43 52 46 4a 33 51 32 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 34 2d 30 38 54 31 39 3a 34 37 3a 30 36 2e 30 34 38 36 30 31 32 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 33 38 35 39 30 35 39 30 35 37 31 31 37 37 30 37 30 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 34 22 2c 22 43 61 70 74 69 Data Ascii: {"BigIds":["9WZDNCRFJ3Q2"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2024-04-08T19:47:06.0486012Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3038590590571177070","EISListingIdentifier":null,"BackgroundColor":"#0078D4","Capti
2024-04-16 20:53:29 UTC	4096	IN	Data Raw: 2d 33 38 37 39 35 63 38 39 32 65 62 61 22 2c 22 57 69 64 74 68 22 3a 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 30 35 35 37 35 31 38 36 31 32 31 31 35 38 32 37 32 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 34 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 37 36 35 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 38 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a Data Ascii: -38795c892eba","Width":66},{"FileId":"3005575186121158272","EISListingIdentifier":null,"BackgroundColor":"#0078D4","Caption":"","FileSizeInBytes":1765,"ForegroundColor":"","Height":88,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":
2024-04-16 20:53:29 UTC	4096	IN	Data Raw: 69 67 68 74 22 3a 33 30 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 45 70 52 4b 30 4e 61 44 6e 33 55 6f 56 55 63 33 75 62 32 59 6a 77 79 37 66 67 6e 45 7a 6b 78 43 35 4c 79 39 56 30 46 4c 61 45 6b 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 33 37 39 30 36 2e 39 30 30 37 31 39 39 32 36 36 32 34 36 31 39 37 2e 31 31 30 32 62 62 39 34 2d 33 64 36 35 2d 34 31 37 62 2d 62 64 34 61 2d 35 65 34 61 62 64 30 66 63 37 35 39 2e 32 61 32 63 35 34 38 63 2d 39 38 39 35 2d 34 31 33 37 Data Ascii: ight":300,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"EpRK0NaDn3UoVUc3ub2Yjwy7fgnEzkxC5Ly9V0FLaEk=","Uri":"//store-images.s-microsoft.com/image/apps.37906.9007199266246197.1102bb94-3d65-417b-bd4a-5e4abd0fc759.2a2c548c-9895-4137
2024-04-16 20:53:29 UTC	4096	IN	Data Raw: 63 38 39 39 34 66 32 2d 32 38 62 64 2d 34 31 66 35 2d 38 31 66 39 2d 63 34 38 61 37 61 61 38 61 31 31 30 22 2c 22 57 69 64 74 68 22 3a 31 35 30 39 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 31 34 34 30 37 37 37 38 38 33 39 31 34 36 33 39 31 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 34 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 33 44 20 4d 61 70 73 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 35 35 38 35 31 37 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 39 36 39 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 44 65 73 6b 74 6f 70 2f 37 22 2c 22 49 6d 61 67 Data Ascii: c8994f2-28bd-41f5-81f9-c48a7aa8a110","Width":1509},{"FileId":"3014407778839146391","EISListingIdentifier":null,"BackgroundColor":"#0078D4","Caption":"3D Maps","FileSizeInBytes":558517,"ForegroundColor":"","Height":969,"ImagePositionInfo":"Desktop/7","Imag
2024-04-16 20:53:29 UTC	4096	IN	Data Raw: 64 75 63 74 49 64 22 2c 22 56 61 6c 75 65 22 3a 22 36 33 63 32 61 31 31 37 2d 38 36 30 34 2d 34 34 65 37 2d 38 63 65 66 2d 64 66 31 30 62 65 33 61 35 37 63 38 22 7d 2c 7b 22 49 64 54 79 70 65 22 3a 22 58 62 6f 78 54 69 74 6c 65 49 64 22 2c 22 56 61 6c 75 65 22 3a 22 31 37 38 33 38 36 38 31 33 37 22 7d 5d 2c 22 49 6e 67 65 73 74 69 6f 6e 53 6f 75 72 63 65 22 3a 22 44 43 45 22 2c 22 49 73 4d 69 63 72 6f 73 6f 66 74 50 72 6f 64 75 63 74 22 3a 74 72 75 65 2c 22 50 72 65 66 65 72 72 65 64 53 6b 75 49 64 22 3a 22 30 30 31 30 22 2c 22 50 72 6f 64 75 63 74 54 79 70 65 22 3a 22 41 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 56 61 6c 69 64 61 74 69 6f 6e 44 61 74 61 22 3a 7b 22 50 61 73 73 65 64 56 61 6c 69 64 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 52 65 76 69 73 69 Data Ascii: ductId","Value":"63c2a117-8604-44e7-8cef-df10be3a57c8"},{"IdType":"XboxTitleId","Value":"1783868137"}],"IngestionSource":"DCE","IsMicrosoftProduct":true,"PreferredSkuId":"0010","ProductType":"Application","ValidationData":{"PassedValidation":false,"Revisi
2024-04-16 20:53:29 UTC	4096	IN	Data Raw: 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 42 69 6e 67 57 65 61 74 68 65 72 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 53 6b 75 49 64 22 3a 22 30 30 31 30 22 2c 22 43 6f 6e 74 65 6e 74 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 46 65 61 74 75 72 65 73 22 3a 6e 75 6c 6c 7d 7d 2c 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 5b 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 49 64 22 3a 22 41 70 70 22 7d 5d 2c 22 41 72 63 68 69 74 65 63 74 75 72 65 73 22 3a 5b 22 78 36 34 22 2c 22 61 72 6d 22 2c 22 78 38 36 22 5d 2c 22 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 22 69 6e 74 65 72 6e 65 74 43 6c 69 65 6e 74 22 5d 2c 22 45 78 70 65 72 69 65 6e 63 65 49 64 73 22 3a 5b 5d 2c 22 4d 61 78 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 49 6e 42 79 74 65 73 Data Ascii: lyName":"Microsoft.BingWeather_8wekyb3d8bbwe","SkuId":"0010","Content":null,"PackageFeatures":null}},{"Applications":[{"ApplicationId":"App"}],"Architectures":["x64","arm","x86"],"Capabilities":["internetClient"],"ExperienceIds":[],"MaxDownloadSizeInBytes
2024-04-16 20:53:29 UTC	4096	IN	Data Raw: 37 37 35 33 36 2c 5c 22 76 6d 69 6e 5c 22 3a 32 38 31 34 37 35 30 38 33 35 32 37 37 38 32 34 7d 5d 7d 2c 7b 5c 22 70 66 75 6e 5c 22 3a 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 42 69 6e 67 57 65 61 74 68 65 72 5f 33 2e 32 2e 32 2e 30 5f 78 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 73 74 75 62 5c 22 3a 74 72 75 65 2c 5c 22 74 64 66 73 5c 22 3a 5b 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 57 69 6e 64 6f 77 73 2e 55 6e 69 76 65 72 73 61 6c 5c 22 2c 5c 22 76 6d 61 78 5c 22 3a 32 38 31 34 37 35 31 30 31 33 30 31 31 34 35 36 2c 5c 22 76 6d 69 6e 5c 22 3a 32 38 31 34 37 35 31 30 31 33 30 31 31 34 35 36 7d 5d 7d 5d 2c 5c 22 70 6f 6c 69 63 79 5c 22 3a 7b 5c 22 63 61 74 65 67 6f 72 79 2e 66 69 72 73 74 5c 22 3a 5c 22 61 70 70 5c 22 2c 5c 22 63 61 74 65 Data Ascii: 77536,\"vmin\":2814750835277824}]},{\"pfun\":\"Microsoft.BingWeather_3.2.2.0_x64__8wekyb3d8bbwe\",\"stub\":true,\"tdfs\":[{\"name\":\"Windows.Universal\",\"vmax\":2814751013011456,\"vmin\":2814751013011456}]}],\"policy\":{\"category.first\":\"app\",\"cate
2024-04-16 20:53:29 UTC	4096	IN	Data Raw: 67 65 46 61 6d 69 6c 79 4e 61 6d 65 46 6f 72 44 6c 63 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 46 75 6c 6c 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 42 69 6e 67 57 65 61 74 68 65 72 5f 34 2e 35 33 2e 34 32 30 39 31 2e 37 30 5f 6e 65 75 74 72 61 6c 5f 7e 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 50 61 63 6b 61 67 65 49 64 22 3a 22 66 61 61 63 65 34 64 30 2d 39 32 37 39 2d 37 32 39 30 2d 39 37 30 66 2d 39 62 34 32 38 34 35 63 34 30 64 37 2d 58 38 36 2d 58 38 36 2d 58 36 34 2d 58 36 34 2d 41 72 6d 36 34 2d 41 72 6d 36 34 22 2c 22 50 61 63 6b 61 67 65 52 61 6e 6b 22 3a 33 30 30 35 35 2c 22 50 6c 61 74 66 6f 72 6d 44 65 70 65 6e 64 65 6e 63 69 65 73 22 3a 5b 7b 22 4d 61 78 54 65 73 74 65 64 22 3a 32 38 31 34 37 35 31 30 31 34 39 37 37 35 Data Ascii: geFamilyNameForDlc":null,"PackageFullName":"Microsoft.BingWeather_4.53.42091.70_neutral_~_8wekyb3d8bbwe","PackageId":"faace4d0-9279-7290-970f-9b42845c40d7-X86-X86-X64-X64-Arm64-Arm64","PackageRank":30055,"PlatformDependencies":[{"MaxTested":28147510149775
2024-04-16 20:53:29 UTC	4096	IN	Data Raw: 70 65 5c 22 3a 37 2c 5c 22 70 6b 67 73 5c 22 3a 5b 7b 5c 22 70 66 75 6e 5c 22 3a 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 42 69 6e 67 57 65 61 74 68 65 72 5f 34 2e 35 33 2e 34 32 30 39 31 2e 30 5f 78 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 74 64 66 73 5c 22 3a 5b 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 57 69 6e 64 6f 77 73 2e 55 6e 69 76 65 72 73 61 6c 5c 22 2c 5c 22 76 6d 61 78 5c 22 3a 32 38 31 34 37 35 31 30 31 34 39 37 37 35 33 36 2c 5c 22 76 6d 69 6e 5c 22 3a 32 38 31 34 37 35 30 38 33 35 32 37 37 38 32 34 7d 5d 7d 2c 7b 5c 22 70 66 75 6e 5c 22 3a 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 42 69 6e 67 57 65 61 74 68 65 72 5f 33 2e 32 2e 33 2e 30 5f 78 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 73 74 75 62 5c 22 3a 74 Data Ascii: pe\":7,\"pkgs\":[{\"pfun\":\"Microsoft.BingWeather_4.53.42091.0_x64__8wekyb3d8bbwe\",\"tdfs\":[{\"name\":\"Windows.Universal\",\"vmax\":2814751014977536,\"vmin\":2814750835277824}]},{\"pfun\":\"Microsoft.BingWeather_3.2.3.0_x64__8wekyb3d8bbwe\",\"stub\":t
2024-04-16 20:53:30 UTC	4096	IN	Data Raw: 65 72 73 69 6f 6e 5c 22 3a 31 36 38 38 38 36 37 30 34 30 35 32 36 33 33 36 2c 5c 22 63 6f 6e 74 65 6e 74 2e 62 75 6e 64 6c 65 64 50 61 63 6b 61 67 65 73 5c 22 3a 5b 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 42 69 6e 67 57 65 61 74 68 65 72 5f 34 2e 35 33 2e 35 32 33 33 31 2e 37 30 5f 78 38 36 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 42 69 6e 67 57 65 61 74 68 65 72 5f 34 2e 35 33 2e 35 32 33 33 31 2e 37 30 5f 78 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 42 69 6e 67 57 65 61 74 68 65 72 5f 34 2e 35 33 2e 35 32 33 33 31 2e 37 30 5f 61 72 6d 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 5d 2c 5c 22 63 6f 6e 74 65 6e 74 2e 69 73 4d 61 69 6e 5c 22 3a 66 Data Ascii: ersion\":1688867040526336,\"content.bundledPackages\":[\"Microsoft.BingWeather_4.53.52331.70_x86__8wekyb3d8bbwe\",\"Microsoft.BingWeather_4.53.52331.70_x64__8wekyb3d8bbwe\",\"Microsoft.BingWeather_4.53.52331.70_arm64__8wekyb3d8bbwe\"],\"content.isMain\":f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49849	52.185.73.156	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:31 UTC	1940	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.DesktopAppInstaller_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.7.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:31 UTC	472	IN	HTTP/1.1 200 OK Content-Length: 50402 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:31 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: c04519d1-4f59-400e-b22b-0d2c2e663863 MS-RequestId: cf95c826-a1b7-4b00-8ed0-49e7a0c78860 MS-CV: UxEEy7KhKESwa2v1.36.0.7.3.1582777907.516640668.0 X-Content-Type-Options: nosniff MS-ServerId: 8 MS-DocumentVersions: 9NBLGGH4NNS1\|4411
2024-04-16 20:53:31 UTC	3624	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 4e 42 4c 47 47 48 34 4e 4e 53 31 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 32 54 32 30 3a 31 35 3a 30 32 2e 38 38 31 31 37 32 35 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 36 32 38 35 30 38 35 34 34 36 33 31 30 30 37 34 39 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 64 37 22 2c 22 43 61 70 74 69 Data Ascii: {"BigIds":["9NBLGGH4NNS1"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2024-04-12T20:15:02.8811725Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3062850854463100749","EISListingIdentifier":null,"BackgroundColor":"#0078d7","Capti
2024-04-16 20:53:31 UTC	4096	IN	Data Raw: 38 32 63 22 2c 22 57 69 64 74 68 22 3a 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 31 30 34 38 32 37 37 31 39 35 33 36 37 37 38 34 36 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 64 37 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 34 36 37 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 38 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 37 69 38 78 6b 68 30 41 6c 31 Data Ascii: 82c","Width":66},{"FileId":"3010482771953677846","EISListingIdentifier":null,"BackgroundColor":"#0078d7","Caption":"","FileSizeInBytes":467,"ForegroundColor":"","Height":88,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"7i8xkh0Al1
2024-04-16 20:53:31 UTC	4096	IN	Data Raw: 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 74 48 53 6f 6a 6e 78 78 33 4a 61 38 7a 44 46 72 37 79 47 52 77 61 6b 51 58 6b 6d 76 46 31 69 6a 48 34 51 66 48 6e 73 75 43 4b 55 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 32 39 38 37 36 2e 31 33 35 31 30 37 39 38 38 38 37 34 37 35 32 30 36 2e 64 31 36 62 31 32 32 39 2d 65 35 62 38 2d 34 62 32 65 2d 61 63 66 35 2d 64 32 39 65 61 33 34 61 61 32 36 30 2e 62 37 61 64 32 34 33 37 2d 64 33 65 65 2d 34 36 30 39 2d 38 30 30 65 2d 34 Data Ascii: 0,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"tHSojnxx3Ja8zDFr7yGRwakQXkmvF1ijH4QfHnsuCKU=","Uri":"//store-images.s-microsoft.com/image/apps.29876.13510798887475206.d16b1229-e5b8-4b2e-acf5-d29ea34aa260.b7ad2437-d3ee-4609-800e-4
2024-04-16 20:53:31 UTC	4096	IN	Data Raw: 22 4d 48 22 2c 22 4d 51 22 2c 22 4d 55 22 2c 22 59 54 22 2c 22 46 4d 22 2c 22 4d 44 22 2c 22 4d 4e 22 2c 22 4d 53 22 2c 22 4d 5a 22 2c 22 4d 4d 22 2c 22 4e 41 22 2c 22 4e 52 22 2c 22 4e 50 22 2c 22 4d 56 22 2c 22 4d 4c 22 2c 22 4e 43 22 2c 22 4e 49 22 2c 22 4e 45 22 2c 22 4e 55 22 2c 22 4e 46 22 2c 22 50 57 22 2c 22 50 53 22 2c 22 50 41 22 2c 22 50 47 22 2c 22 50 59 22 2c 22 52 45 22 2c 22 52 57 22 2c 22 42 4c 22 2c 22 4d 46 22 2c 22 57 53 22 2c 22 53 54 22 2c 22 53 4e 22 2c 22 4d 50 22 2c 22 50 4e 22 2c 22 53 58 22 2c 22 53 42 22 2c 22 53 4f 22 2c 22 53 43 22 2c 22 53 4c 22 2c 22 47 53 22 2c 22 53 48 22 2c 22 4b 4e 22 2c 22 4c 43 22 2c 22 50 4d 22 2c 22 56 43 22 2c 22 54 4a 22 2c 22 54 5a 22 2c 22 54 47 22 2c 22 54 4b 22 2c 22 54 4f 22 2c 22 54 4d 22 2c Data Ascii: "MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF","PW","PS","PA","PG","PY","RE","RW","BL","MF","WS","ST","SN","MP","PN","SX","SB","SO","SC","SL","GS","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM",
2024-04-16 20:53:31 UTC	4096	IN	Data Raw: 6e 22 2c 22 4d 69 63 72 6f 73 6f 66 74 2e 73 74 6f 72 65 46 69 6c 74 65 72 2e 63 6f 72 65 2e 6e 6f 74 53 75 70 70 6f 72 74 65 64 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 5d 2c 22 45 78 70 65 72 69 65 6e 63 65 49 64 73 22 3a 5b 5d 2c 22 4d 61 78 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 30 39 30 34 32 33 31 2c 22 4d 61 78 49 6e 73 74 61 6c 6c 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 33 39 34 38 35 34 34 2c 22 50 61 63 6b 61 67 65 46 6f 72 6d 61 74 22 3a 22 45 41 70 70 78 42 75 6e 64 6c 65 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 44 65 73 6b 74 6f 70 41 70 70 49 6e 73 74 61 6c 6c 65 72 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 4d 61 69 6e 50 61 63 6b 61 67 65 46 61 Data Ascii: n","Microsoft.storeFilter.core.notSupported_8wekyb3d8bbwe"],"ExperienceIds":[],"MaxDownloadSizeInBytes":10904231,"MaxInstallSizeInBytes":3948544,"PackageFormat":"EAppxBundle","PackageFamilyName":"Microsoft.DesktopAppInstaller_8wekyb3d8bbwe","MainPackageFa
2024-04-16 20:53:31 UTC	4096	IN	Data Raw: 6f 61 64 46 69 6c 65 53 79 73 74 65 6d 41 63 63 65 73 73 22 2c 22 72 75 6e 46 75 6c 6c 54 72 75 73 74 22 2c 22 61 6c 6c 6f 77 45 6c 65 76 61 74 69 6f 6e 22 2c 22 4d 69 63 72 6f 73 6f 66 74 2e 64 65 70 6c 6f 79 46 75 6c 6c 54 72 75 73 74 4f 6e 48 6f 73 74 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 5d 2c 22 45 78 70 65 72 69 65 6e 63 65 49 64 73 22 3a 5b 5d 2c 22 4d 61 78 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 34 34 34 33 33 33 34 39 2c 22 4d 61 78 49 6e 73 74 61 6c 6c 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 31 35 36 37 31 30 34 2c 22 50 61 63 6b 61 67 65 46 6f 72 6d 61 74 22 3a 22 45 41 70 70 78 42 75 6e 64 6c 65 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 44 65 73 6b 74 6f Data Ascii: oadFileSystemAccess","runFullTrust","allowElevation","Microsoft.deployFullTrustOnHost_8wekyb3d8bbwe"],"ExperienceIds":[],"MaxDownloadSizeInBytes":44433349,"MaxInstallSizeInBytes":11567104,"PackageFormat":"EAppxBundle","PackageFamilyName":"Microsoft.Deskto
2024-04-16 20:53:31 UTC	4096	IN	Data Raw: 64 69 72 65 63 74 6f 72 22 7d 2c 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 49 64 22 3a 22 77 69 6e 67 65 74 22 7d 2c 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 49 64 22 3a 22 57 69 6e 47 65 74 43 6f 6d 53 65 72 76 65 72 22 7d 5d 2c 22 41 72 63 68 69 74 65 63 74 75 72 65 73 22 3a 5b 22 78 38 36 22 2c 22 78 36 34 22 2c 22 61 72 6d 22 2c 22 61 72 6d 36 34 22 2c 22 78 36 34 22 2c 22 78 38 36 22 2c 22 61 72 6d 22 2c 22 61 72 6d 36 34 22 5d 2c 22 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 22 69 6e 74 65 72 6e 65 74 43 6c 69 65 6e 74 22 2c 22 70 72 69 76 61 74 65 4e 65 74 77 6f 72 6b 43 6c 69 65 6e 74 53 65 72 76 65 72 22 2c 22 64 6f 63 75 6d 65 6e 74 73 4c 69 62 72 61 72 79 22 2c 22 73 74 6f 72 65 41 70 70 49 6e 73 74 61 6c 6c 22 2c 22 70 61 63 6b 61 67 65 4d 61 6e Data Ascii: director"},{"ApplicationId":"winget"},{"ApplicationId":"WinGetComServer"}],"Architectures":["x86","x64","arm","arm64","x64","x86","arm","arm64"],"Capabilities":["internetClient","privateNetworkClientServer","documentsLibrary","storeAppInstall","packageMan
2024-04-16 20:53:31 UTC	4096	IN	Data Raw: 5f 61 72 6d 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 73 74 75 62 5c 22 3a 74 72 75 65 2c 5c 22 74 64 66 73 5c 22 3a 5b 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 57 69 6e 64 6f 77 73 2e 55 6e 69 76 65 72 73 61 6c 5c 22 2c 5c 22 76 6d 61 78 5c 22 3a 32 38 31 34 37 35 31 34 31 34 30 39 31 37 37 36 2c 5c 22 76 6d 69 6e 5c 22 3a 32 38 31 34 37 35 30 39 33 31 32 32 32 35 32 38 7d 2c 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 57 69 6e 64 6f 77 73 2e 48 6f 6c 6f 67 72 61 70 68 69 63 5c 22 2c 5c 22 76 6d 61 78 5c 22 3a 32 38 31 34 37 35 31 32 30 38 38 39 38 35 36 30 2c 5c 22 76 6d 69 6e 5c 22 3a 32 38 31 34 37 35 31 31 30 30 35 30 32 30 31 36 7d 5d 7d 5d 2c 5c 22 70 6f 6c 69 63 79 5c 22 3a 7b 5c 22 63 61 74 65 67 6f 72 79 2e 66 69 72 73 74 5c 22 3a 5c Data Ascii: _arm64__8wekyb3d8bbwe\",\"stub\":true,\"tdfs\":[{\"name\":\"Windows.Universal\",\"vmax\":2814751414091776,\"vmin\":2814750931222528},{\"name\":\"Windows.Holographic\",\"vmax\":2814751208898560,\"vmin\":2814751100502016}]}],\"policy\":{\"category.first\":\
2024-04-16 20:53:31 UTC	4096	IN	Data Raw: 3a 61 66 39 35 61 36 30 30 2d 39 39 61 38 2d 34 31 36 31 2d 39 37 33 36 2d 34 34 38 63 36 30 62 38 33 66 32 39 3a 46 75 6c 6c 22 5d 2c 22 4c 69 63 65 6e 73 69 6e 67 4b 65 79 49 64 73 22 3a 5b 22 31 22 5d 7d 2c 7b 22 45 6e 74 69 74 6c 65 6d 65 6e 74 4b 65 79 73 22 3a 5b 22 62 69 67 3a 39 4e 42 4c 47 47 48 34 4e 4e 53 31 3a 30 30 30 31 22 5d 2c 22 4c 69 63 65 6e 73 69 6e 67 4b 65 79 49 64 73 22 3a 5b 22 31 22 5d 7d 2c 7b 22 45 6e 74 69 74 6c 65 6d 65 6e 74 4b 65 79 73 22 3a 5b 22 62 69 67 3a 39 4e 42 4c 47 47 48 34 4e 4e 53 31 3a 30 30 30 32 22 5d 2c 22 4c 69 63 65 6e 73 69 6e 67 4b 65 79 49 64 73 22 3a 5b 22 31 22 5d 7d 5d 7d 2c 22 4d 61 72 6b 65 74 73 22 3a 5b 22 43 48 22 5d 2c 22 4f 72 64 65 72 4d 61 6e 61 67 65 6d 65 6e 74 44 61 74 61 22 3a 7b 22 47 72 Data Ascii: :af95a600-99a8-4161-9736-448c60b83f29:Full"],"LicensingKeyIds":["1"]},{"EntitlementKeys":["big:9NBLGGH4NNS1:0001"],"LicensingKeyIds":["1"]},{"EntitlementKeys":["big:9NBLGGH4NNS1:0002"],"LicensingKeyIds":["1"]}]},"Markets":["CH"],"OrderManagementData":{"Gr
2024-04-16 20:53:31 UTC	4096	IN	Data Raw: 65 5c 22 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 61 72 67 65 74 50 6c 61 74 66 6f 72 6d 73 5c 22 3a 5b 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 39 37 30 34 37 38 35 39 32 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 37 31 30 33 36 36 32 30 38 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 35 7d 5d 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 79 70 65 5c 22 3a 37 2c 5c 22 70 6f 6c 69 63 79 5c 22 3a 7b 5c 22 63 61 74 65 67 6f 72 79 2e 66 69 72 73 74 5c 22 3a 5c 22 61 70 70 5c 22 2c 5c 22 63 61 74 65 67 6f 72 79 2e 73 65 63 6f 6e 64 5c 22 3a 5c 22 55 74 69 6c 69 74 69 65 73 20 26 20 74 6f 6f 6c 73 5c 22 2c 5c 22 6f 70 74 4f 75 74 2e Data Ascii: e\",\"content.targetPlatforms\":[{\"platform.maxVersionTested\":2814750970478592,\"platform.minVersion\":2814750710366208,\"platform.target\":5}],\"content.type\":7,\"policy\":{\"category.first\":\"app\",\"category.second\":\"Utilities & tools\",\"optOut.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49850	52.185.73.156	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:32 UTC	1928	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.GetHelp_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.9.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:32 UTC	472	IN	HTTP/1.1 200 OK Content-Length: 68863 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:31 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: 912abc43-bdfb-4e19-beef-447781dd0a1b MS-RequestId: 6c79ed88-b05c-4205-bb38-72576c2302cb MS-CV: UxEEy7KhKESwa2v1.36.0.9.3.1582778120.933389392.0 X-Content-Type-Options: nosniff MS-ServerId: 8 MS-DocumentVersions: 9PKDZBMV1H3T\|4311
2024-04-16 20:53:32 UTC	3624	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 50 4b 44 5a 42 4d 56 31 48 33 54 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 33 2d 31 32 2d 31 34 54 32 31 3a 30 38 3a 34 33 2e 36 36 36 38 36 36 38 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 32 39 32 37 37 38 34 31 31 35 35 31 34 38 35 31 37 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 34 22 2c 22 43 61 70 74 69 Data Ascii: {"BigIds":["9PKDZBMV1H3T"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2023-12-14T21:08:43.6668668Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3029277841155148517","EISListingIdentifier":null,"BackgroundColor":"#0078D4","Capti
2024-04-16 20:53:32 UTC	4096	IN	Data Raw: 61 64 61 61 65 32 63 37 64 63 33 61 22 2c 22 57 69 64 74 68 22 3a 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 36 30 36 36 39 30 39 38 37 33 30 30 30 34 38 34 31 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 34 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 33 36 33 35 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 38 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 Data Ascii: adaae2c7dc3a","Width":66},{"FileId":"3060669098730004841","EISListingIdentifier":null,"BackgroundColor":"#0078D4","Caption":"","FileSizeInBytes":3635,"ForegroundColor":"","Height":88,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"
2024-04-16 20:53:32 UTC	4096	IN	Data Raw: 22 22 2c 22 48 65 69 67 68 74 22 3a 33 30 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 58 2b 64 46 7a 77 31 74 4e 6e 67 37 38 78 65 77 48 7a 45 39 59 37 76 31 48 59 71 41 65 52 78 50 64 74 56 34 5a 4a 33 56 6d 32 41 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 39 32 33 31 2e 31 34 32 36 34 31 39 32 31 33 34 34 34 33 31 33 36 2e 38 63 30 61 32 35 31 37 2d 36 62 32 37 2d 34 31 35 62 2d 39 33 36 37 2d 63 31 64 62 64 62 62 35 64 38 63 65 2e 63 31 66 36 62 37 33 64 2d 31 37 Data Ascii: "","Height":300,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"X+dFzw1tNng78xewHzE9Y7v1HYqAeRxPdtV4ZJ3Vm2A=","Uri":"//store-images.s-microsoft.com/image/apps.59231.14264192134443136.8c0a2517-6b27-415b-9367-c1dbdbb5d8ce.c1f6b73d-17
2024-04-16 20:53:32 UTC	4096	IN	Data Raw: 74 20 63 6f 6d 6d 75 6e 69 74 79 20 66 6f 72 20 68 65 6c 70 2e 20 59 6f 75 e2 80 99 6c 6c 20 66 69 6e 64 20 61 6c 6c 20 74 68 65 20 57 69 6e 64 6f 77 73 20 73 75 70 70 6f 72 74 20 79 6f 75 20 6e 65 65 64 20 72 69 67 68 74 20 68 65 72 65 2e 5c 6e 5c 6e 46 65 61 74 75 72 65 73 20 61 6e 64 20 74 79 70 65 73 20 6f 66 20 73 75 70 70 6f 72 74 20 76 61 72 79 20 62 79 20 63 6f 75 6e 74 72 79 20 61 6e 64 20 70 72 6f 64 75 63 74 2e 22 2c 22 53 6b 75 54 69 74 6c 65 22 3a 22 47 65 74 20 48 65 6c 70 22 2c 22 4c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 75 73 22 2c 22 4d 61 72 6b 65 74 73 22 3a 5b 22 55 53 22 2c 22 44 5a 22 2c 22 41 52 22 2c 22 41 55 22 2c 22 41 54 22 2c 22 42 48 22 2c 22 42 44 22 2c 22 42 45 22 2c 22 42 52 22 2c 22 42 47 22 2c 22 43 41 22 2c 22 43 4c 22 Data Ascii: t community for help. Youll find all the Windows support you need right here.\n\nFeatures and types of support vary by country and product.","SkuTitle":"Get Help","Language":"en-us","Markets":["US","DZ","AR","AU","AT","BH","BD","BE","BR","BG","CA","CL"
2024-04-16 20:53:32 UTC	4096	IN	Data Raw: 39 32 2c 22 50 6c 61 74 66 6f 72 6d 4e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 2e 55 6e 69 76 65 72 73 61 6c 22 7d 5d 2c 22 50 6c 61 74 66 6f 72 6d 44 65 70 65 6e 64 65 6e 63 79 58 6d 6c 42 6c 6f 62 22 3a 22 7b 5c 22 62 6c 6f 62 2e 76 65 72 73 69 6f 6e 5c 22 3a 31 36 38 38 38 36 37 30 34 30 35 32 36 33 33 36 2c 5c 22 63 6f 6e 74 65 6e 74 2e 62 75 6e 64 6c 65 64 50 61 63 6b 61 67 65 73 5c 22 3a 5b 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 48 65 6c 70 5f 31 30 2e 31 37 30 36 2e 31 39 38 31 2e 31 30 30 30 5f 78 38 36 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 48 65 6c 70 5f 31 30 2e 31 37 30 36 2e 31 39 38 31 2e 31 30 30 30 5f 78 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 4d 69 Data Ascii: 92,"PlatformName":"Windows.Universal"}],"PlatformDependencyXmlBlob":"{\"blob.version\":1688867040526336,\"content.bundledPackages\":[\"Microsoft.GetHelp_10.1706.1981.1000_x86__8wekyb3d8bbwe\",\"Microsoft.GetHelp_10.1706.1981.1000_x64__8wekyb3d8bbwe\",\"Mi
2024-04-16 20:53:32 UTC	4096	IN	Data Raw: 32 64 38 66 31 32 5c 22 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 61 72 67 65 74 50 6c 61 74 66 6f 72 6d 73 5c 22 3a 5b 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 38 33 35 32 37 37 38 32 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 38 33 35 32 37 37 38 32 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 30 7d 5d 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 79 70 65 5c 22 3a 37 2c 5c 22 70 6f 6c 69 63 79 5c 22 3a 7b 5c 22 63 61 74 65 67 6f 72 79 2e 66 69 72 73 74 5c 22 3a 5c 22 61 70 70 5c 22 2c 5c 22 63 61 74 65 67 6f 72 79 2e 73 65 63 6f 6e 64 5c 22 3a 5c 22 55 74 69 6c 69 74 69 65 73 20 26 20 74 6f 6f 6c 73 5c 22 2c 5c 22 6f 70 Data Ascii: 2d8f12\",\"content.targetPlatforms\":[{\"platform.maxVersionTested\":2814750835277824,\"platform.minVersion\":2814750835277824,\"platform.target\":0}],\"content.type\":7,\"policy\":{\"category.first\":\"app\",\"category.second\":\"Utilities & tools\",\"op
2024-04-16 20:53:32 UTC	4096	IN	Data Raw: 64 75 63 74 49 64 22 3a 22 39 50 4b 44 5a 42 4d 56 31 48 33 54 22 2c 22 57 75 42 75 6e 64 6c 65 49 64 22 3a 22 63 63 62 38 31 39 34 37 2d 63 34 65 30 2d 34 34 66 65 2d 38 34 35 33 2d 64 31 36 34 36 33 39 65 36 33 31 63 22 2c 22 57 75 43 61 74 65 67 6f 72 79 49 64 22 3a 22 32 30 66 34 35 30 36 38 2d 30 32 66 63 2d 34 37 30 31 2d 39 33 38 35 2d 35 33 61 63 38 35 64 38 65 61 66 39 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 48 65 6c 70 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 53 6b 75 49 64 22 3a 22 30 30 31 30 22 2c 22 43 6f 6e 74 65 6e 74 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 46 65 61 74 75 72 65 73 22 3a 6e 75 6c 6c 7d 7d 2c 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 5b Data Ascii: ductId":"9PKDZBMV1H3T","WuBundleId":"ccb81947-c4e0-44fe-8453-d164639e631c","WuCategoryId":"20f45068-02fc-4701-9385-53ac85d8eaf9","PackageFamilyName":"Microsoft.GetHelp_8wekyb3d8bbwe","SkuId":"0010","Content":null,"PackageFeatures":null}},{"Applications":[
2024-04-16 20:53:32 UTC	4096	IN	Data Raw: 65 72 69 65 6e 63 65 49 64 73 22 3a 5b 5d 2c 22 4d 61 78 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 34 34 36 36 35 33 38 31 2c 22 4d 61 78 49 6e 73 74 61 6c 6c 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 37 30 37 32 31 32 38 2c 22 50 61 63 6b 61 67 65 46 6f 72 6d 61 74 22 3a 22 45 41 70 70 78 42 75 6e 64 6c 65 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 48 65 6c 70 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 4d 61 69 6e 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 46 6f 72 44 6c 63 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 46 75 6c 6c 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 48 65 6c 70 5f 31 30 2e 32 32 30 34 2e 31 32 32 32 2e 37 30 5f 6e Data Ascii: erienceIds":[],"MaxDownloadSizeInBytes":44665381,"MaxInstallSizeInBytes":17072128,"PackageFormat":"EAppxBundle","PackageFamilyName":"Microsoft.GetHelp_8wekyb3d8bbwe","MainPackageFamilyNameForDlc":null,"PackageFullName":"Microsoft.GetHelp_10.2204.1222.70_n
2024-04-16 20:53:32 UTC	4096	IN	Data Raw: 61 74 66 6f 72 6d 4e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 2e 58 62 6f 78 22 7d 5d 2c 22 50 6c 61 74 66 6f 72 6d 44 65 70 65 6e 64 65 6e 63 79 58 6d 6c 42 6c 6f 62 22 3a 22 7b 5c 22 62 6c 6f 62 2e 76 65 72 73 69 6f 6e 5c 22 3a 31 36 38 38 38 36 37 30 34 30 35 32 36 33 33 36 2c 5c 22 63 6f 6e 74 65 6e 74 2e 62 75 6e 64 6c 65 64 50 61 63 6b 61 67 65 73 5c 22 3a 5b 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 48 65 6c 70 5f 31 30 2e 32 32 30 36 2e 32 30 31 31 2e 37 30 5f 78 38 36 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 48 65 6c 70 5f 31 30 2e 32 32 30 36 2e 32 30 31 31 2e 37 30 5f 78 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 48 65 6c 70 Data Ascii: atformName":"Windows.Xbox"}],"PlatformDependencyXmlBlob":"{\"blob.version\":1688867040526336,\"content.bundledPackages\":[\"Microsoft.GetHelp_10.2206.2011.70_x86__8wekyb3d8bbwe\",\"Microsoft.GetHelp_10.2206.2011.70_x64__8wekyb3d8bbwe\",\"Microsoft.GetHelp
2024-04-16 20:53:33 UTC	4096	IN	Data Raw: 2d 39 62 30 63 2d 34 32 31 66 2d 62 65 33 65 2d 63 62 37 65 32 34 32 64 38 66 31 32 5c 22 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 61 72 67 65 74 50 6c 61 74 66 6f 72 6d 73 5c 22 3a 5b 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 31 32 30 38 38 39 38 35 36 30 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 39 33 31 32 32 32 35 32 38 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 30 7d 5d 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 79 70 65 5c 22 3a 37 2c 5c 22 70 6f 6c 69 63 79 5c 22 3a 7b 5c 22 63 61 74 65 67 6f 72 79 2e 66 69 72 73 74 5c 22 3a 5c 22 61 70 70 5c 22 2c 5c 22 63 61 74 65 67 6f 72 79 2e 73 65 63 6f 6e 64 5c 22 3a 5c 22 55 74 Data Ascii: -9b0c-421f-be3e-cb7e242d8f12\",\"content.targetPlatforms\":[{\"platform.maxVersionTested\":2814751208898560,\"platform.minVersion\":2814750931222528,\"platform.target\":0}],\"content.type\":7,\"policy\":{\"category.first\":\"app\",\"category.second\":\"Ut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49851	52.185.73.156	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:33 UTC	1932	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.Getstarted_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.11.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:34 UTC	474	IN	HTTP/1.1 200 OK Content-Length: 91151 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:33 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: f93a4b45-b616-4d93-97a0-1e8836b93cd3 MS-RequestId: 7aa0eb9d-9f10-4c97-a2f0-c6d7011756ba MS-CV: UxEEy7KhKESwa2v1.36.0.11.3.1582778353.3446362641.0 X-Content-Type-Options: nosniff MS-ServerId: 6 MS-DocumentVersions: 9WZDNCRDTBJJ\|5142
2024-04-16 20:53:34 UTC	3622	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 57 5a 44 4e 43 52 44 54 42 4a 4a 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 32 54 31 38 3a 33 38 3a 32 32 2e 30 30 38 37 34 35 37 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 31 34 37 32 32 32 31 32 33 39 39 39 33 30 34 34 34 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 64 34 22 2c 22 43 61 70 74 69 Data Ascii: {"BigIds":["9WZDNCRDTBJJ"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2024-04-12T18:38:22.0087457Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3014722212399930444","EISListingIdentifier":null,"BackgroundColor":"#0078d4","Capti
2024-04-16 20:53:34 UTC	4096	IN	Data Raw: 65 66 36 39 65 64 22 2c 22 57 69 64 74 68 22 3a 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 32 38 33 36 34 39 36 39 39 37 30 39 35 33 32 30 35 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 64 34 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 33 32 38 38 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 38 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 6d 54 36 71 49 61 Data Ascii: ef69ed","Width":66},{"FileId":"3028364969970953205","EISListingIdentifier":null,"BackgroundColor":"#0078d4","Caption":"","FileSizeInBytes":3288,"ForegroundColor":"","Height":88,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"mT6qIa
2024-04-16 20:53:34 UTC	4096	IN	Data Raw: 3a 33 30 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 50 4f 2f 63 75 50 78 46 31 63 33 6b 6b 58 51 39 59 4b 72 77 59 73 43 4f 73 78 55 74 56 73 32 77 61 46 6f 53 77 77 6c 31 2b 75 30 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 36 31 32 34 34 2e 39 30 30 37 31 39 39 32 36 36 37 34 30 35 30 33 2e 38 61 31 36 34 32 32 61 2d 32 62 34 66 2d 34 66 61 30 2d 39 64 30 34 2d 62 30 37 33 37 36 66 36 64 35 38 39 2e 62 36 38 30 33 30 39 63 2d 31 61 65 66 2d 34 66 38 61 2d 62 35 61 39 Data Ascii: :300,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"PO/cuPxF1c3kkXQ9YKrwYsCOsxUtVs2waFoSwwl1+u0=","Uri":"//store-images.s-microsoft.com/image/apps.61244.9007199266740503.8a16422a-2b4f-4fa0-9d04-b07376f6d589.b680309c-1aef-4f8a-b5a9
2024-04-16 20:53:34 UTC	4096	IN	Data Raw: 7b 22 50 61 73 73 65 64 56 61 6c 69 64 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 52 65 76 69 73 69 6f 6e 49 64 22 3a 22 32 30 32 34 2d 30 34 2d 31 32 54 31 38 3a 34 30 3a 30 32 2e 38 33 30 32 34 34 34 5a 7c 7c 2e 7c 7c 35 37 63 34 38 65 62 62 2d 36 35 65 66 2d 34 34 61 30 2d 61 61 39 31 2d 39 62 35 63 33 62 31 37 39 34 61 61 7c 7c 31 31 35 32 39 32 31 35 30 35 36 39 37 32 31 32 31 30 36 7c 7c 4e 75 6c 6c 7c 7c 66 75 6c 6c 72 65 6c 65 61 73 65 22 2c 22 56 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 55 72 69 22 3a 22 22 7d 2c 22 4d 65 72 63 68 61 6e 64 69 7a 69 6e 67 54 61 67 73 22 3a 5b 5d 2c 22 50 61 72 74 44 22 3a 22 22 2c 22 50 72 6f 64 75 63 74 46 61 6d 69 6c 79 22 3a 22 41 70 70 73 22 2c 22 50 72 6f 64 75 63 74 4b 69 6e 64 22 3a 22 41 70 70 6c 69 63 Data Ascii: {"PassedValidation":false,"RevisionId":"2024-04-12T18:40:02.8302444Z\|\|.\|\|57c48ebb-65ef-44a0-aa91-9b5c3b1794aa\|\|1152921505697212106\|\|Null\|\|fullrelease","ValidationResultUri":""},"MerchandizingTags":[],"PartD":"","ProductFamily":"Apps","ProductKind":"Applic
2024-04-16 20:53:34 UTC	4096	IN	Data Raw: 43 6c 69 65 6e 74 22 2c 22 73 6c 61 70 69 51 75 65 72 79 4c 69 63 65 6e 73 65 56 61 6c 75 65 22 5d 2c 22 45 78 70 65 72 69 65 6e 63 65 49 64 73 22 3a 5b 5d 2c 22 4d 61 78 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 39 32 36 35 33 38 32 2c 22 4d 61 78 49 6e 73 74 61 6c 6c 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 37 39 34 32 31 34 34 2c 22 50 61 63 6b 61 67 65 46 6f 72 6d 61 74 22 3a 22 41 70 70 78 42 75 6e 64 6c 65 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 73 74 61 72 74 65 64 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 4d 61 69 6e 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 46 6f 72 44 6c 63 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 46 75 6c 6c 4e 61 6d 65 Data Ascii: Client","slapiQueryLicenseValue"],"ExperienceIds":[],"MaxDownloadSizeInBytes":9265382,"MaxInstallSizeInBytes":7942144,"PackageFormat":"AppxBundle","PackageFamilyName":"Microsoft.Getstarted_8wekyb3d8bbwe","MainPackageFamilyNameForDlc":null,"PackageFullName
2024-04-16 20:53:34 UTC	4096	IN	Data Raw: 22 3a 33 30 30 34 33 2c 22 50 6c 61 74 66 6f 72 6d 44 65 70 65 6e 64 65 6e 63 69 65 73 22 3a 5b 7b 22 4d 61 78 54 65 73 74 65 64 22 3a 32 38 31 34 37 35 30 37 31 30 33 36 36 32 30 38 2c 22 4d 69 6e 56 65 72 73 69 6f 6e 22 3a 32 38 31 34 37 35 30 34 33 38 31 39 35 32 30 30 2c 22 50 6c 61 74 66 6f 72 6d 4e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 2e 58 62 6f 78 22 7d 5d 2c 22 50 6c 61 74 66 6f 72 6d 44 65 70 65 6e 64 65 6e 63 79 58 6d 6c 42 6c 6f 62 22 3a 22 7b 5c 22 62 6c 6f 62 2e 76 65 72 73 69 6f 6e 5c 22 3a 31 36 38 38 38 36 37 30 34 30 35 32 36 33 33 36 2c 5c 22 63 6f 6e 74 65 6e 74 2e 62 75 6e 64 6c 65 64 50 61 63 6b 61 67 65 73 5c 22 3a 5b 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 73 74 61 72 74 65 64 5f 34 2e 35 2e 36 2e 32 30 37 30 5f 78 38 36 5f Data Ascii: ":30043,"PlatformDependencies":[{"MaxTested":2814750710366208,"MinVersion":2814750438195200,"PlatformName":"Windows.Xbox"}],"PlatformDependencyXmlBlob":"{\"blob.version\":1688867040526336,\"content.bundledPackages\":[\"Microsoft.Getstarted_4.5.6.2070_x86_
2024-04-16 20:53:34 UTC	4096	IN	Data Raw: 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 5d 2c 5c 22 63 6f 6e 74 65 6e 74 2e 69 73 4d 61 69 6e 5c 22 3a 66 61 6c 73 65 2c 5c 22 63 6f 6e 74 65 6e 74 2e 70 61 63 6b 61 67 65 49 64 5c 22 3a 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 73 74 61 72 74 65 64 5f 36 2e 35 2e 32 38 35 31 2e 32 30 30 30 5f 6e 65 75 74 72 61 6c 5f 7e 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 63 6f 6e 74 65 6e 74 2e 70 72 6f 64 75 63 74 49 64 5c 22 3a 5c 22 62 33 37 32 36 33 30 38 2d 33 64 37 34 2d 34 61 31 34 2d 61 38 34 63 2d 38 36 37 63 38 63 37 33 35 63 33 63 5c 22 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 61 72 67 65 74 50 6c 61 74 66 6f 72 6d 73 5c 22 3a 5b 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 Data Ascii: _8wekyb3d8bbwe\"],\"content.isMain\":false,\"content.packageId\":\"Microsoft.Getstarted_6.5.2851.2000_neutral_~_8wekyb3d8bbwe\",\"content.productId\":\"b3726308-3d74-4a14-a84c-867c8c735c3c\",\"content.targetPlatforms\":[{\"platform.maxVersionTested\":2814
2024-04-16 20:53:34 UTC	4096	IN	Data Raw: 65 6e 74 2e 74 79 70 65 5c 22 3a 37 2c 5c 22 70 6f 6c 69 63 79 5c 22 3a 7b 5c 22 63 61 74 65 67 6f 72 79 2e 66 69 72 73 74 5c 22 3a 5c 22 61 70 70 5c 22 2c 5c 22 63 61 74 65 67 6f 72 79 2e 73 65 63 6f 6e 64 5c 22 3a 5c 22 42 6f 6f 6b 73 20 26 20 72 65 66 65 72 65 6e 63 65 5c 22 2c 5c 22 6f 70 74 4f 75 74 2e 62 61 63 6b 75 70 52 65 73 74 6f 72 65 5c 22 3a 66 61 6c 73 65 2c 5c 22 6f 70 74 4f 75 74 2e 72 65 6d 6f 76 65 61 62 6c 65 4d 65 64 69 61 5c 22 3a 66 61 6c 73 65 7d 2c 5c 22 70 6f 6c 69 63 79 32 5c 22 3a 7b 5c 22 61 67 65 52 61 74 69 6e 67 5c 22 3a 30 2c 5c 22 6f 70 74 4f 75 74 2e 44 56 52 5c 22 3a 66 61 6c 73 65 2c 5c 22 74 68 69 72 64 50 61 72 74 79 41 70 70 52 61 74 69 6e 67 73 5c 22 3a 5b 7b 5c 22 6c 65 76 65 6c 5c 22 3a 30 2c 5c 22 73 79 73 74 65 Data Ascii: ent.type\":7,\"policy\":{\"category.first\":\"app\",\"category.second\":\"Books & reference\",\"optOut.backupRestore\":false,\"optOut.removeableMedia\":false},\"policy2\":{\"ageRating\":0,\"optOut.DVR\":false,\"thirdPartyAppRatings\":[{\"level\":0,\"syste
2024-04-16 20:53:34 UTC	4096	IN	Data Raw: 2e 30 5f 78 38 36 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 74 64 66 73 5c 22 3a 5b 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 57 69 6e 64 6f 77 73 2e 55 6e 69 76 65 72 73 61 6c 5c 22 2c 5c 22 76 6d 61 78 5c 22 3a 32 38 31 34 37 35 30 39 37 30 34 37 38 35 39 32 2c 5c 22 76 6d 69 6e 5c 22 3a 32 38 31 34 37 35 30 39 33 31 32 32 32 35 32 38 7d 5d 7d 2c 7b 5c 22 70 66 75 6e 5c 22 3a 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 47 65 74 73 74 61 72 74 65 64 5f 31 2e 33 2e 34 31 38 31 31 2e 30 5f 78 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 73 74 75 62 5c 22 3a 74 72 75 65 2c 5c 22 74 64 66 73 5c 22 3a 5b 7b 5c 22 6e 61 6d 65 5c 22 3a 5c 22 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 5c 22 2c 5c 22 76 6d 61 78 5c 22 3a 32 38 31 34 37 Data Ascii: .0_x86__8wekyb3d8bbwe\",\"tdfs\":[{\"name\":\"Windows.Universal\",\"vmax\":2814750970478592,\"vmin\":2814750931222528}]},{\"pfun\":\"Microsoft.Getstarted_1.3.41811.0_x64__8wekyb3d8bbwe\",\"stub\":true,\"tdfs\":[{\"name\":\"Windows.Desktop\",\"vmax\":28147
2024-04-16 20:53:34 UTC	4096	IN	Data Raw: 6f 70 74 4f 75 74 2e 44 56 52 5c 22 3a 66 61 6c 73 65 2c 5c 22 74 68 69 72 64 50 61 72 74 79 41 70 70 52 61 74 69 6e 67 73 5c 22 3a 5b 7b 5c 22 6c 65 76 65 6c 5c 22 3a 30 2c 5c 22 73 79 73 74 65 6d 49 64 5c 22 3a 30 7d 5d 7d 7d 22 2c 22 50 61 63 6b 61 67 65 44 6f 77 6e 6c 6f 61 64 55 72 69 73 22 3a 6e 75 6c 6c 2c 22 46 75 6c 66 69 6c 6c 6d 65 6e 74 44 61 74 61 22 3a 7b 22 50 72 6f 64 75 63 74 49 64 22 3a 22 39 57 5a 44 4e 43 52 44 54 42 4a 4a 22 2c 22 57 75 42 75 6e 64 6c 65 49 64 22 3a 22 39 65 36 62 32 37 66 65 2d 66 36 30 62 2d 34 34 62 34 2d 38 34 38 38 2d 37 66 32 39 32 66 37 63 36 39 33 64 22 2c 22 57 75 43 61 74 65 67 6f 72 79 49 64 22 3a 22 37 66 33 35 34 64 30 65 2d 61 39 31 33 2d 34 61 61 30 2d 38 31 35 64 2d 33 66 61 39 66 62 66 66 32 62 64 38 Data Ascii: optOut.DVR\":false,\"thirdPartyAppRatings\":[{\"level\":0,\"systemId\":0}]}}","PackageDownloadUris":null,"FulfillmentData":{"ProductId":"9WZDNCRDTBJJ","WuBundleId":"9e6b27fe-f60b-44b4-8488-7f292f7c693d","WuCategoryId":"7f354d0e-a913-4aa0-815d-3fa9fbff2bd8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49852	52.185.73.156	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:36 UTC	1940	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.HEIFImageExtension_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.13.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:36 UTC	484	IN	HTTP/1.1 200 OK Content-Length: 29290 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:35 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: 7f78763c-516c-4bd2-8b7d-98e1f2c52dc1 MS-RequestId: aafff61f-dc80-4734-a4ac-03aeefbc65b4 MS-CV: UxEEy7KhKESwa2v1.36.0.13.3.1582778666.519551407.0 X-Content-Type-Options: nosniff MS-ServerId: dc79b8-r92sm MS-DocumentVersions: 9PMMSR1CGPWG\|4075
2024-04-16 20:53:36 UTC	1024	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 50 4d 4d 53 52 31 43 47 50 57 47 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 34 2d 30 32 54 32 30 3a 30 39 3a 33 39 2e 37 36 35 34 39 30 33 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 33 36 34 30 33 32 38 30 30 36 31 33 35 34 31 37 39 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 37 22 2c 22 43 61 70 74 69 Data Ascii: {"BigIds":["9PMMSR1CGPWG"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2024-04-02T20:09:39.7654903Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3036403280061354179","EISListingIdentifier":null,"BackgroundColor":"#0078D7","Capti
2024-04-16 20:53:36 UTC	1024	IN	Data Raw: 3a 37 35 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 31 36 30 30 36 37 38 36 34 34 37 35 31 37 33 34 39 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 37 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 34 32 32 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 31 30 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 4c 6f 67 6f 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 6b 56 79 33 42 6c 53 36 4a 63 61 64 49 77 6f 39 4b 6d 4a 4e 56 Data Ascii: :75},{"FileId":"3016006786447517349","EISListingIdentifier":null,"BackgroundColor":"#0078D7","Caption":"","FileSizeInBytes":422,"ForegroundColor":"","Height":100,"ImagePositionInfo":"","ImagePurpose":"Logo","UnscaledImageSHA256Hash":"kVy3BlS6JcadIwo9KmJNV
2024-04-16 20:53:36 UTC	1024	IN	Data Raw: 69 67 68 74 22 3a 32 32 35 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 42 75 43 4a 48 44 77 61 41 73 6c 44 74 50 41 73 79 52 4e 35 5a 77 4b 75 67 67 57 71 49 66 2f 36 52 65 54 30 47 48 71 4a 37 37 59 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 37 33 35 30 2e 31 34 32 39 30 34 36 33 31 35 37 31 32 30 39 30 37 2e 64 35 32 32 62 37 63 33 2d 63 61 36 61 2d 34 61 30 32 2d 61 64 30 36 2d 39 64 66 63 35 30 63 65 32 35 65 35 2e 63 33 33 34 39 65 39 33 2d 62 35 62 30 2d 34 34 38 Data Ascii: ight":225,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"BuCJHDwaAslDtPAsyRN5ZwKuggWqIf/6ReT0GHqJ77Y=","Uri":"//store-images.s-microsoft.com/image/apps.57350.14290463157120907.d522b7c3-ca6a-4a02-ad06-9dfc50ce25e5.c3349e93-b5b0-448
2024-04-16 20:53:36 UTC	1024	IN	Data Raw: 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 32 35 39 38 2e 31 34 32 39 30 34 36 33 31 35 37 31 32 30 39 30 37 2e 64 30 36 62 62 35 36 38 2d 62 34 39 35 2d 34 34 32 39 2d 61 65 61 32 2d 39 66 34 33 64 63 62 30 31 62 64 33 2e 64 65 36 30 35 37 65 38 2d 34 65 63 32 2d 34 37 33 37 2d 38 66 35 63 2d 38 30 33 36 66 35 64 32 36 32 39 33 22 2c 22 57 69 64 74 68 22 3a 34 34 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 35 32 37 34 33 35 30 38 31 38 31 32 30 36 33 37 33 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 37 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a Data Ascii: microsoft.com/image/apps.52598.14290463157120907.d06bb568-b495-4429-aea2-9f43dcb01bd3.de6057e8-4ec2-4737-8f5c-8036f5d26293","Width":44},{"FileId":"3052743508181206373","EISListingIdentifier":null,"BackgroundColor":"#0078D7","Caption":"","FileSizeInBytes":
2024-04-16 20:53:36 UTC	1024	IN	Data Raw: 35 31 30 39 34 31 37 39 36 38 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 37 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 30 37 38 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 33 31 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 45 65 64 75 65 37 6a 47 76 4f 54 47 68 36 39 56 6c 36 44 75 6b 56 61 53 6f 64 53 78 6f 41 48 71 77 4b 47 61 2f 48 65 36 56 67 38 3d 22 Data Ascii: 5109417968","EISListingIdentifier":null,"BackgroundColor":"#0078D7","Caption":"","FileSizeInBytes":1078,"ForegroundColor":"","Height":310,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"Eedue7jGvOTGh69Vl6DukVaSodSxoAHqwKGa/He6Vg8="
2024-04-16 20:53:36 UTC	1024	IN	Data Raw: 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 36 65 63 4b 71 39 5a 4c 57 6c 4e 74 79 6e 51 53 34 77 6c 33 6b 57 4d 75 4c 6a 34 38 4c 4b 6c 50 35 32 52 78 48 37 4b 6f 6a 6b 67 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 39 33 36 39 2e 31 34 32 39 30 34 36 33 31 35 37 31 32 30 39 30 37 2e 63 64 62 35 31 38 62 61 2d 62 33 62 63 2d 34 65 63 34 2d 39 36 39 37 2d 66 35 66 37 33 37 64 63 31 34 33 32 2e 38 61 37 37 65 37 32 34 2d 61 34 32 34 2d 34 36 66 38 2d 61 66 33 32 2d 66 61 33 62 38 39 63 39 66 32 37 36 22 2c 22 Data Ascii: onInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"6ecKq9ZLWlNtynQS4wl3kWMuLj48LKlP52RxH7Kojkg=","Uri":"//store-images.s-microsoft.com/image/apps.59369.14290463157120907.cdb518ba-b3bc-4ec4-9697-f5f737dc1432.8a77e724-a424-46f8-af32-fa3b89c9f276","
2024-04-16 20:53:36 UTC	1024	IN	Data Raw: 2e 32 39 39 38 39 2e 31 34 32 39 30 34 36 33 31 35 37 31 32 30 39 30 37 2e 63 32 63 38 32 62 30 33 2d 30 61 65 32 2d 34 63 39 39 2d 38 32 31 62 2d 31 66 66 62 39 66 37 61 65 66 30 63 2e 31 32 62 37 30 39 62 61 2d 63 66 34 37 2d 34 37 35 34 2d 61 39 64 33 2d 65 64 38 62 61 37 32 36 64 62 61 64 22 2c 22 57 69 64 74 68 22 3a 31 30 37 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 36 36 36 32 30 39 38 37 34 37 37 36 36 38 35 30 31 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 37 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 35 32 36 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 Data Ascii: .29989.14290463157120907.c2c82b03-0ae2-4c99-821b-1ffb9f7aef0c.12b709ba-cf47-4754-a9d3-ed8ba726dbad","Width":107},{"FileId":"3066620987477668501","EISListingIdentifier":null,"BackgroundColor":"#0078D7","Caption":"","FileSizeInBytes":526,"ForegroundColor":"
2024-04-16 20:53:36 UTC	1024	IN	Data Raw: 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 37 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 39 36 36 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 32 32 35 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 77 58 78 44 75 4d 2b 63 54 69 38 57 68 46 69 55 2b 4e 66 39 64 64 47 66 56 2f 4e 42 55 52 6f 37 70 4a 52 51 6c 68 52 4a 45 51 59 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 Data Ascii: tingIdentifier":null,"BackgroundColor":"#0078D7","Caption":"","FileSizeInBytes":966,"ForegroundColor":"","Height":225,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"wXxDuM+cTi8WhFiU+Nf9ddGfV/NBURo7pJRQlhRJEQY=","Uri":"//store-imag
2024-04-16 20:53:36 UTC	1024	IN	Data Raw: 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 53 63 72 65 65 6e 73 68 6f 74 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 68 30 51 33 48 6a 76 2b 49 74 5a 31 44 59 2f 58 77 4e 4d 6f 6e 70 75 79 75 78 32 4e 4a 2f 6a 43 76 78 39 56 69 4e 4c 55 54 49 30 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 31 37 35 34 33 2e 31 34 32 39 30 34 36 33 31 35 37 31 32 30 39 30 37 2e 31 34 30 38 31 35 62 33 2d 30 66 39 32 2d 34 36 33 30 2d 38 35 34 61 2d 38 61 36 35 64 66 65 64 31 35 36 34 2e 30 39 63 35 34 65 36 63 2d 33 38 64 33 2d 34 36 61 64 2d 62 31 30 63 2d 63 30 66 64 39 30 36 38 63 61 36 33 22 2c 22 57 69 64 Data Ascii: ","ImagePurpose":"Screenshot","UnscaledImageSHA256Hash":"h0Q3Hjv+ItZ1DY/XwNMonpuyux2NJ/jCvx9ViNLUTI0=","Uri":"//store-images.s-microsoft.com/image/apps.17543.14290463157120907.140815b3-0f92-4630-854a-8a65dfed1564.09c54e6c-38d3-46ad-b10c-c0fd9068ca63","Wid
2024-04-16 20:53:36 UTC	1024	IN	Data Raw: 22 41 55 22 2c 22 41 54 22 2c 22 42 48 22 2c 22 42 44 22 2c 22 42 45 22 2c 22 42 52 22 2c 22 42 47 22 2c 22 43 41 22 2c 22 43 4c 22 2c 22 43 4e 22 2c 22 43 4f 22 2c 22 43 52 22 2c 22 48 52 22 2c 22 43 59 22 2c 22 43 5a 22 2c 22 44 4b 22 2c 22 45 47 22 2c 22 45 45 22 2c 22 46 49 22 2c 22 46 52 22 2c 22 44 45 22 2c 22 47 52 22 2c 22 47 54 22 2c 22 48 4b 22 2c 22 48 55 22 2c 22 49 53 22 2c 22 49 4e 22 2c 22 49 44 22 2c 22 49 51 22 2c 22 49 45 22 2c 22 49 4c 22 2c 22 49 54 22 2c 22 4a 50 22 2c 22 4a 4f 22 2c 22 4b 5a 22 2c 22 4b 45 22 2c 22 4b 57 22 2c 22 4c 56 22 2c 22 4c 42 22 2c 22 4c 49 22 2c 22 4c 54 22 2c 22 4c 55 22 2c 22 4d 59 22 2c 22 4d 54 22 2c 22 4d 52 22 2c 22 4d 58 22 2c 22 4d 41 22 2c 22 4e 4c 22 2c 22 4e 5a 22 2c 22 4e 47 22 2c 22 4e 4f 22 2c Data Ascii: "AU","AT","BH","BD","BE","BR","BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49853	52.185.73.156	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:37 UTC	1939	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.Microsoft3DViewer_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.15.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:37 UTC	486	IN	HTTP/1.1 200 OK Content-Length: 128939 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:36 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: aff83e39-e809-4d2a-a3ed-48184fa4ebf0 MS-RequestId: 7636c166-e58b-4f25-beca-aa6059eb98c7 MS-CV: UxEEy7KhKESwa2v1.36.0.15.3.1582778846.3461664646.0 X-Content-Type-Options: nosniff MS-ServerId: dc79b8-zwmxd MS-DocumentVersions: 9NBLGGH42THS\|5065
2024-04-16 20:53:37 UTC	3610	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 4e 42 4c 47 47 48 34 32 54 48 53 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 32 54 32 31 3a 33 34 3a 30 37 2e 38 36 35 31 35 35 30 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 34 31 32 36 35 37 35 35 34 36 33 36 34 37 36 35 37 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 Data Ascii: {"BigIds":["9NBLGGH42THS"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2024-04-12T21:34:07.8651550Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3041265755463647657","EISListingIdentifier":null,"BackgroundColor":"transparent","C
2024-04-16 20:53:37 UTC	4096	IN	Data Raw: 36 65 63 64 62 34 62 32 62 39 65 2e 31 32 36 31 37 36 62 31 2d 39 32 31 39 2d 34 35 37 61 2d 61 39 38 36 2d 30 33 30 30 63 65 36 38 30 62 38 66 22 2c 22 57 69 64 74 68 22 3a 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 31 35 34 30 31 34 37 34 39 30 33 31 38 39 30 35 37 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 38 30 34 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 38 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 Data Ascii: 6ecdb4b2b9e.126176b1-9219-457a-a986-0300ce680b8f","Width":66},{"FileId":"3015401474903189057","EISListingIdentifier":null,"BackgroundColor":"transparent","Caption":"","FileSizeInBytes":804,"ForegroundColor":"","Height":88,"ImagePositionInfo":"","ImagePurp
2024-04-16 20:53:37 UTC	4096	IN	Data Raw: 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 32 37 34 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 33 30 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 78 64 72 48 70 4b 67 32 73 6c 4d 37 5a 49 68 69 33 36 67 47 48 58 4b 39 5a 4b 49 44 4d 6c 58 66 2f 6f 68 5a 79 51 43 6b 6d 79 45 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 36 30 30 Data Ascii: "transparent","Caption":"","FileSizeInBytes":1274,"ForegroundColor":"","Height":300,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"xdrHpKg2slM7ZIhi36gGHXK9ZKIDMlXf/ohZyQCkmyE=","Uri":"//store-images.s-microsoft.com/image/apps.5600
2024-04-16 20:53:37 UTC	4096	IN	Data Raw: 72 65 6e 74 20 73 68 61 64 69 6e 67 20 6d 6f 64 65 73 2e 20 49 6e 20 4d 69 78 65 64 20 52 65 61 6c 69 74 79 20 6d 6f 64 65 2c 20 63 6f 6d 62 69 6e 65 20 74 68 65 20 64 69 67 69 74 61 6c 20 61 6e 64 20 70 68 79 73 69 63 61 6c 2e 20 50 75 73 68 20 74 68 65 20 62 6f 75 6e 64 61 72 69 65 73 20 6f 66 20 72 65 61 6c 69 74 79 20 61 6e 64 20 63 61 70 74 75 72 65 20 69 74 20 61 6c 6c 20 77 69 74 68 20 61 20 76 69 64 65 6f 20 6f 72 20 70 68 6f 74 6f 20 74 6f 20 73 68 61 72 65 2e 22 2c 22 50 72 6f 64 75 63 74 54 69 74 6c 65 22 3a 22 33 44 20 56 69 65 77 65 72 22 2c 22 53 65 61 72 63 68 54 69 74 6c 65 73 22 3a 5b 7b 22 53 65 61 72 63 68 54 69 74 6c 65 53 74 72 69 6e 67 22 3a 22 33 44 20 56 69 65 77 65 72 22 2c 22 53 65 61 72 63 68 54 69 74 6c 65 54 79 70 65 22 3a 22 Data Ascii: rent shading modes. In Mixed Reality mode, combine the digital and physical. Push the boundaries of reality and capture it all with a video or photo to share.","ProductTitle":"3D Viewer","SearchTitles":[{"SearchTitleString":"3D Viewer","SearchTitleType":"
2024-04-16 20:53:37 UTC	4096	IN	Data Raw: 46 4b 22 2c 22 46 4f 22 2c 22 46 4a 22 2c 22 47 46 22 2c 22 50 46 22 2c 22 54 46 22 2c 22 47 41 22 2c 22 47 4d 22 2c 22 47 45 22 2c 22 47 48 22 2c 22 47 49 22 2c 22 47 4c 22 2c 22 47 44 22 2c 22 47 50 22 2c 22 47 55 22 2c 22 47 47 22 2c 22 47 4e 22 2c 22 47 57 22 2c 22 47 59 22 2c 22 48 54 22 2c 22 48 4d 22 2c 22 48 4e 22 2c 22 41 5a 22 2c 22 42 53 22 2c 22 42 42 22 2c 22 42 59 22 2c 22 42 5a 22 2c 22 42 4a 22 2c 22 42 4d 22 2c 22 42 54 22 2c 22 4b 4d 22 2c 22 43 47 22 2c 22 43 44 22 2c 22 43 4b 22 2c 22 43 58 22 2c 22 43 43 22 2c 22 43 49 22 2c 22 43 57 22 2c 22 4a 4d 22 2c 22 53 4a 22 2c 22 4a 45 22 2c 22 4b 49 22 2c 22 4b 47 22 2c 22 4c 41 22 2c 22 4c 53 22 2c 22 4c 52 22 2c 22 4d 4f 22 2c 22 4d 4b 22 2c 22 4d 47 22 2c 22 4d 57 22 2c 22 49 4d 22 2c 22 Data Ascii: FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","
2024-04-16 20:53:37 UTC	4096	IN	Data Raw: 61 6c 73 65 2c 5c 22 63 6f 6e 74 65 6e 74 2e 70 61 63 6b 61 67 65 49 64 5c 22 3a 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 33 44 56 69 65 77 65 72 5f 35 2e 31 38 31 31 2e 32 37 30 31 32 2e 30 5f 6e 65 75 74 72 61 6c 5f 7e 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 63 6f 6e 74 65 6e 74 2e 70 72 6f 64 75 63 74 49 64 5c 22 3a 5c 22 66 34 31 36 34 37 63 39 2d 64 35 36 37 2d 34 33 37 38 2d 62 32 61 62 2d 37 39 32 34 65 35 61 31 35 32 66 33 5c 22 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 61 72 67 65 74 50 6c 61 74 66 6f 72 6d 73 5c 22 3a 5b 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 38 39 30 30 30 30 33 38 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 Data Ascii: alse,\"content.packageId\":\"Microsoft.Microsoft3DViewer_5.1811.27012.0_neutral_~_8wekyb3d8bbwe\",\"content.productId\":\"f41647c9-d567-4378-b2ab-7924e5a152f3\",\"content.targetPlatforms\":[{\"platform.maxVersionTested\":2814750890000384,\"platform.minVer
2024-04-16 20:53:37 UTC	4096	IN	Data Raw: 67 72 61 70 68 69 63 22 7d 5d 2c 22 50 6c 61 74 66 6f 72 6d 44 65 70 65 6e 64 65 6e 63 79 58 6d 6c 42 6c 6f 62 22 3a 22 7b 5c 22 62 6c 6f 62 2e 76 65 72 73 69 6f 6e 5c 22 3a 31 36 38 38 38 36 37 30 34 30 35 32 36 33 33 36 2c 5c 22 63 6f 6e 74 65 6e 74 2e 62 75 6e 64 6c 65 64 50 61 63 6b 61 67 65 73 5c 22 3a 5b 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 33 44 56 69 65 77 65 72 5f 36 2e 31 39 30 33 2e 34 30 31 32 2e 30 5f 78 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 33 44 56 69 65 77 65 72 5f 36 2e 31 39 30 33 2e 34 30 31 32 2e 30 5f 78 38 36 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 Data Ascii: graphic"}],"PlatformDependencyXmlBlob":"{\"blob.version\":1688867040526336,\"content.bundledPackages\":[\"Microsoft.Microsoft3DViewer_6.1903.4012.0_x64__8wekyb3d8bbwe\",\"Microsoft.Microsoft3DViewer_6.1903.4012.0_x86__8wekyb3d8bbwe\",\"Microsoft.Microsoft
2024-04-16 20:53:37 UTC	4096	IN	Data Raw: 6c 6c 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 33 44 56 69 65 77 65 72 5f 37 2e 31 39 30 38 2e 39 30 31 32 2e 30 5f 6e 65 75 74 72 61 6c 5f 7e 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 50 61 63 6b 61 67 65 49 64 22 3a 22 37 37 38 36 37 64 35 64 2d 34 61 63 32 2d 36 33 32 35 2d 66 61 30 66 2d 34 63 32 65 35 34 64 32 33 36 30 65 2d 58 38 36 2d 58 36 34 2d 41 72 6d 36 34 22 2c 22 50 61 63 6b 61 67 65 52 61 6e 6b 22 3a 33 30 30 35 35 2c 22 50 6c 61 74 66 6f 72 6d 44 65 70 65 6e 64 65 6e 63 69 65 73 22 3a 5b 7b 22 4d 61 78 54 65 73 74 65 64 22 3a 32 38 31 34 37 35 30 39 33 31 32 32 32 35 32 38 2c 22 4d 69 6e 56 65 72 73 69 6f 6e 22 3a 32 38 31 34 37 35 30 38 33 35 32 37 37 38 32 34 2c 22 50 6c 61 74 66 6f 72 6d 4e Data Ascii: llName":"Microsoft.Microsoft3DViewer_7.1908.9012.0_neutral_~_8wekyb3d8bbwe","PackageId":"77867d5d-4ac2-6325-fa0f-4c2e54d2360e-X86-X64-Arm64","PackageRank":30055,"PlatformDependencies":[{"MaxTested":2814750931222528,"MinVersion":2814750835277824,"PlatformN
2024-04-16 20:53:37 UTC	4096	IN	Data Raw: 22 70 69 63 74 75 72 65 73 4c 69 62 72 61 72 79 22 2c 22 76 69 64 65 6f 73 4c 69 62 72 61 72 79 22 2c 22 65 6e 74 65 72 70 72 69 73 65 44 61 74 61 50 6f 6c 69 63 79 22 2c 22 72 75 6e 46 75 6c 6c 54 72 75 73 74 22 2c 22 70 72 65 76 69 65 77 48 66 78 22 2c 22 4d 69 63 72 6f 73 6f 66 74 2e 73 74 6f 72 65 46 69 6c 74 65 72 2e 63 6f 72 65 2e 6e 6f 74 53 75 70 70 6f 72 74 65 64 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 5d 2c 22 45 78 70 65 72 69 65 6e 63 65 49 64 73 22 3a 5b 5d 2c 22 4d 61 78 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 31 37 38 33 36 39 33 36 2c 22 4d 61 78 49 6e 73 74 61 6c 6c 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 37 36 39 30 32 34 30 30 2c 22 50 61 63 6b 61 67 65 46 6f 72 6d 61 74 22 3a 22 41 70 70 78 42 75 6e 64 6c Data Ascii: "picturesLibrary","videosLibrary","enterpriseDataPolicy","runFullTrust","previewHfx","Microsoft.storeFilter.core.notSupported_8wekyb3d8bbwe"],"ExperienceIds":[],"MaxDownloadSizeInBytes":117836936,"MaxInstallSizeInBytes":76902400,"PackageFormat":"AppxBundl
2024-04-16 20:53:37 UTC	4096	IN	Data Raw: 48 53 22 2c 22 57 75 42 75 6e 64 6c 65 49 64 22 3a 22 39 61 39 65 37 33 37 32 2d 33 64 63 34 2d 34 36 34 65 2d 62 33 36 36 2d 37 32 63 30 30 30 30 64 34 30 61 32 22 2c 22 57 75 43 61 74 65 67 6f 72 79 49 64 22 3a 22 30 63 37 64 33 30 38 35 2d 36 63 32 31 2d 34 39 61 31 2d 62 32 36 37 2d 35 32 66 64 64 37 32 32 63 61 39 64 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 33 44 56 69 65 77 65 72 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 53 6b 75 49 64 22 3a 22 30 30 31 30 22 2c 22 43 6f 6e 74 65 6e 74 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 46 65 61 74 75 72 65 73 22 3a 6e 75 6c 6c 7d 7d 2c 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 5b 7b 22 41 70 70 6c 69 63 61 Data Ascii: HS","WuBundleId":"9a9e7372-3dc4-464e-b366-72c0000d40a2","WuCategoryId":"0c7d3085-6c21-49a1-b267-52fdd722ca9d","PackageFamilyName":"Microsoft.Microsoft3DViewer_8wekyb3d8bbwe","SkuId":"0010","Content":null,"PackageFeatures":null}},{"Applications":[{"Applica

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49854	52.185.73.156	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:39 UTC	1940	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.17.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:39 UTC	476	IN	HTTP/1.1 200 OK Content-Length: 37675 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:39 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: b3031783-39c0-4ebe-aa08-025e5cdd9a90 MS-RequestId: 1cc8fc4d-f322-43c1-8e31-9027ae494194 MS-CV: UxEEy7KhKESwa2v1.36.0.17.3.1582779202.2179846254.0 X-Content-Type-Options: nosniff MS-ServerId: 877 MS-DocumentVersions: 9WZDNCRD29V9\|5867
2024-04-16 20:53:39 UTC	3620	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 57 5a 44 4e 43 52 44 32 39 56 39 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 31 2d 30 38 54 30 31 3a 35 31 3a 32 38 2e 38 39 39 32 34 36 37 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 32 39 38 39 35 36 38 30 34 34 39 39 32 31 33 31 35 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 2c 22 43 61 70 74 69 Data Ascii: {"BigIds":["9WZDNCRD29V9"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2024-01-08T01:51:28.8992467Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3029895680449921315","EISListingIdentifier":null,"BackgroundColor":"#FFFFFF","Capti
2024-04-16 20:53:39 UTC	4096	IN	Data Raw: 32 36 66 33 34 62 30 66 63 22 2c 22 57 69 64 74 68 22 3a 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 36 33 31 31 39 38 33 37 33 37 33 33 34 36 30 34 35 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 38 36 37 33 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 38 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 49 7a 70 Data Ascii: 26f34b0fc","Width":66},{"FileId":"3063119837373346045","EISListingIdentifier":null,"BackgroundColor":"#FFFFFF","Caption":"","FileSizeInBytes":8673,"ForegroundColor":"","Height":88,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"Izp
2024-04-16 20:53:39 UTC	4096	IN	Data Raw: 65 69 67 68 74 22 3a 33 30 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 70 63 74 65 61 36 32 78 73 5a 4b 69 6c 72 43 46 58 76 36 70 38 68 4f 30 4a 2b 7a 75 4e 69 38 79 45 43 31 43 2f 6a 6a 33 33 41 59 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 32 31 33 33 2e 39 30 30 37 31 39 39 32 36 37 31 36 31 33 39 30 2e 66 36 63 30 64 63 66 30 2d 34 32 31 63 2d 34 33 31 63 2d 62 33 61 37 2d 37 34 61 63 62 62 61 34 65 65 32 32 2e 38 35 36 66 65 30 35 34 2d 31 30 37 30 2d 34 66 35 Data Ascii: eight":300,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"pctea62xsZKilrCFXv6p8hO0J+zuNi8yEC1C/jj33AY=","Uri":"//store-images.s-microsoft.com/image/apps.52133.9007199267161390.f6c0dcf0-421c-431c-b3a7-74acbba4ee22.856fe054-1070-4f5
2024-04-16 20:53:40 UTC	4096	IN	Data Raw: 2c 22 42 47 22 2c 22 43 41 22 2c 22 43 4c 22 2c 22 43 4e 22 2c 22 43 4f 22 2c 22 43 52 22 2c 22 48 52 22 2c 22 43 59 22 2c 22 43 5a 22 2c 22 44 4b 22 2c 22 45 47 22 2c 22 45 45 22 2c 22 46 49 22 2c 22 46 52 22 2c 22 44 45 22 2c 22 47 52 22 2c 22 47 54 22 2c 22 48 4b 22 2c 22 48 55 22 2c 22 49 53 22 2c 22 49 4e 22 2c 22 49 44 22 2c 22 49 51 22 2c 22 49 45 22 2c 22 49 4c 22 2c 22 49 54 22 2c 22 4a 50 22 2c 22 4a 4f 22 2c 22 4b 5a 22 2c 22 4b 45 22 2c 22 4b 57 22 2c 22 4c 56 22 2c 22 4c 42 22 2c 22 4c 49 22 2c 22 4c 54 22 2c 22 4c 55 22 2c 22 4d 59 22 2c 22 4d 54 22 2c 22 4d 52 22 2c 22 4d 58 22 2c 22 4d 41 22 2c 22 4e 4c 22 2c 22 4e 5a 22 2c 22 4e 47 22 2c 22 4e 4f 22 2c 22 4f 4d 22 2c 22 50 4b 22 2c 22 50 45 22 2c 22 50 48 22 2c 22 50 4c 22 2c 22 50 54 22 Data Ascii: ,"BG","CA","CL","CN","CO","CR","HR","CY","CZ","DK","EG","EE","FI","FR","DE","GR","GT","HK","HU","IS","IN","ID","IQ","IE","IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT"
2024-04-16 20:53:40 UTC	4096	IN	Data Raw: 22 48 4d 22 2c 22 48 4e 22 2c 22 41 5a 22 2c 22 42 53 22 2c 22 42 42 22 2c 22 42 59 22 2c 22 42 5a 22 2c 22 42 4a 22 2c 22 42 4d 22 2c 22 42 54 22 2c 22 4b 4d 22 2c 22 43 47 22 2c 22 43 44 22 2c 22 43 4b 22 2c 22 43 58 22 2c 22 43 43 22 2c 22 43 49 22 2c 22 43 57 22 2c 22 4a 4d 22 2c 22 53 4a 22 2c 22 4a 45 22 2c 22 4b 49 22 2c 22 4b 47 22 2c 22 4c 41 22 2c 22 4c 53 22 2c 22 4c 52 22 2c 22 4d 4f 22 2c 22 4d 4b 22 2c 22 4d 47 22 2c 22 4d 57 22 2c 22 49 4d 22 2c 22 4d 48 22 2c 22 4d 51 22 2c 22 4d 55 22 2c 22 59 54 22 2c 22 46 4d 22 2c 22 4d 44 22 2c 22 4d 4e 22 2c 22 4d 53 22 2c 22 4d 5a 22 2c 22 4d 4d 22 2c 22 4e 41 22 2c 22 4e 52 22 2c 22 4e 50 22 2c 22 4d 56 22 2c 22 4d 4c 22 2c 22 4e 43 22 2c 22 4e 49 22 2c 22 4e 45 22 2c 22 4e 55 22 2c 22 4e 46 22 2c Data Ascii: "HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","BT","KM","CG","CD","CK","CX","CC","CI","CW","JM","SJ","JE","KI","KG","LA","LS","LR","MO","MK","MG","MW","IM","MH","MQ","MU","YT","FM","MD","MN","MS","MZ","MM","NA","NR","NP","MV","ML","NC","NI","NE","NU","NF",
2024-04-16 20:53:40 UTC	4096	IN	Data Raw: 65 35 36 32 38 30 61 5c 22 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 61 72 67 65 74 50 6c 61 74 66 6f 72 6d 73 5c 22 3a 5b 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 38 39 30 30 30 30 33 38 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 37 35 34 32 37 35 33 32 38 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 30 7d 2c 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 38 39 30 30 30 30 33 38 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 37 35 34 32 37 35 33 32 38 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 Data Ascii: e56280a\",\"content.targetPlatforms\":[{\"platform.maxVersionTested\":2814750890000384,\"platform.minVersion\":2814750754275328,\"platform.target\":0},{\"platform.maxVersionTested\":2814750890000384,\"platform.minVersion\":2814750754275328,\"platform.targ
2024-04-16 20:53:40 UTC	4096	IN	Data Raw: 22 3a 22 56 61 74 49 6e 63 6c 75 64 65 64 22 2c 22 57 68 6f 6c 65 73 61 6c 65 43 75 72 72 65 6e 63 79 43 6f 64 65 22 3a 22 22 7d 7d 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 4f 72 69 67 69 6e 61 6c 52 65 6c 65 61 73 65 44 61 74 65 22 3a 22 32 30 31 35 2d 30 36 2d 30 39 54 32 33 3a 34 34 3a 35 39 2e 38 31 38 32 34 31 32 5a 22 7d 2c 22 53 6b 75 49 64 22 3a 22 30 30 31 30 22 2c 22 44 69 73 70 6c 61 79 52 61 6e 6b 22 3a 30 2c 22 52 65 6d 65 64 69 61 74 69 6f 6e 52 65 71 75 69 72 65 64 22 3a 66 61 6c 73 65 7d 2c 7b 22 41 63 74 69 6f 6e 73 22 3a 5b 22 4c 69 63 65 6e 73 65 22 2c 22 44 65 74 61 69 6c 73 22 5d 2c 22 41 76 61 69 6c 61 62 69 6c 69 74 79 41 53 63 68 65 6d 61 22 3a 22 41 76 61 69 6c 61 62 69 6c 69 74 79 3b 33 22 2c 22 41 76 61 69 6c 61 62 69 6c Data Ascii: ":"VatIncluded","WholesaleCurrencyCode":""}},"Properties":{"OriginalReleaseDate":"2015-06-09T23:44:59.8182412Z"},"SkuId":"0010","DisplayRank":0,"RemediationRequired":false},{"Actions":["License","Details"],"AvailabilityASchema":"Availability;3","Availabil
2024-04-16 20:53:40 UTC	4096	IN	Data Raw: 49 4c 22 2c 22 49 54 22 2c 22 4a 50 22 2c 22 4a 4f 22 2c 22 4b 5a 22 2c 22 4b 45 22 2c 22 4b 57 22 2c 22 4c 56 22 2c 22 4c 42 22 2c 22 4c 49 22 2c 22 4c 54 22 2c 22 4c 55 22 2c 22 4d 59 22 2c 22 4d 54 22 2c 22 4d 52 22 2c 22 4d 58 22 2c 22 4d 41 22 2c 22 4e 4c 22 2c 22 4e 5a 22 2c 22 4e 47 22 2c 22 4e 4f 22 2c 22 4f 4d 22 2c 22 50 4b 22 2c 22 50 45 22 2c 22 50 48 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 51 41 22 2c 22 52 4f 22 2c 22 52 55 22 2c 22 53 41 22 2c 22 52 53 22 2c 22 53 47 22 2c 22 53 4b 22 2c 22 53 49 22 2c 22 5a 41 22 2c 22 4b 52 22 2c 22 45 53 22 2c 22 53 45 22 2c 22 43 48 22 2c 22 54 57 22 2c 22 54 48 22 2c 22 54 54 22 2c 22 54 4e 22 2c 22 54 52 22 2c 22 55 41 22 2c 22 41 45 22 2c 22 47 42 22 2c 22 56 4e 22 2c 22 59 45 22 2c 22 4c 59 22 2c 22 Data Ascii: IL","IT","JP","JO","KZ","KE","KW","LV","LB","LI","LT","LU","MY","MT","MR","MX","MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","
2024-04-16 20:53:40 UTC	503	IN	Data Raw: 35 33 32 38 2c 22 50 6c 61 74 66 6f 72 6d 4e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 2e 55 6e 69 76 65 72 73 61 6c 22 7d 2c 7b 22 4d 61 78 54 65 73 74 65 64 22 3a 32 38 31 34 37 35 30 38 39 30 30 30 30 33 38 34 2c 22 4d 69 6e 56 65 72 73 69 6f 6e 22 3a 32 38 31 34 37 35 30 37 35 34 32 37 35 33 32 38 2c 22 50 6c 61 74 66 6f 72 6d 4e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 22 7d 5d 2c 22 50 6c 61 74 66 6f 72 6d 44 65 70 65 6e 64 65 6e 63 79 58 6d 6c 42 6c 6f 62 22 3a 22 7b 5c 22 62 6c 6f 62 2e 76 65 72 73 69 6f 6e 5c 22 3a 31 36 38 38 38 36 37 30 34 30 35 32 36 33 33 36 2c 5c 22 63 6f 6e 74 65 6e 74 2e 62 75 6e 64 6c 65 64 50 61 63 6b 61 67 65 73 5c 22 3a 5b 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 4f 66 66 69 63 Data Ascii: 5328,"PlatformName":"Windows.Universal"},{"MaxTested":2814750890000384,"MinVersion":2814750754275328,"PlatformName":"Windows.Desktop"}],"PlatformDependencyXmlBlob":"{\"blob.version\":1688867040526336,\"content.bundledPackages\":[\"Microsoft.MicrosoftOffic
2024-04-16 20:53:40 UTC	1024	IN	Data Raw: 49 64 5c 22 3a 5c 22 66 63 61 34 65 34 30 63 2d 66 64 32 61 2d 34 38 39 38 2d 61 34 37 32 2d 38 65 63 37 38 65 35 36 32 38 30 61 5c 22 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 61 72 67 65 74 50 6c 61 74 66 6f 72 6d 73 5c 22 3a 5b 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 38 39 30 30 30 30 33 38 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 37 35 34 32 37 35 33 32 38 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 30 7d 2c 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 38 39 30 30 30 30 33 38 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f Data Ascii: Id\":\"fca4e40c-fd2a-4898-a472-8ec78e56280a\",\"content.targetPlatforms\":[{\"platform.maxVersionTested\":2814750890000384,\"platform.minVersion\":2814750754275328,\"platform.target\":0},{\"platform.maxVersionTested\":2814750890000384,\"platform.minVersio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49855	20.22.113.133	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:41 UTC	1950	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.19.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:41 UTC	485	IN	HTTP/1.1 200 OK Content-Length: 55010 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:41 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: f64c9e77-75f6-4fe3-95a0-92771265832a MS-RequestId: 1a659e2f-a97c-4933-b636-73073c2c7df2 MS-CV: UxEEy7KhKESwa2v1.36.0.19.3.1582779428.1797678759.0 X-Content-Type-Options: nosniff MS-ServerId: 5fbf6c-4tgxb MS-DocumentVersions: 9WZDNCRFHWD2\|5432
2024-04-16 20:53:41 UTC	3611	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 57 5a 44 4e 43 52 46 48 57 44 32 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 34 2d 30 38 54 31 36 3a 32 30 3a 33 33 2e 34 33 34 33 39 32 36 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 30 38 39 36 32 32 34 31 34 38 32 37 30 33 33 35 36 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 34 22 2c 22 43 61 70 74 69 Data Ascii: {"BigIds":["9WZDNCRFHWD2"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2024-04-08T16:20:33.4343926Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3008962241482703356","EISListingIdentifier":null,"BackgroundColor":"#0078D4","Capti
2024-04-16 20:53:41 UTC	4096	IN	Data Raw: 61 66 65 39 61 64 35 63 63 33 31 22 2c 22 57 69 64 74 68 22 3a 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 35 35 38 30 33 32 33 39 38 35 36 35 37 32 38 35 30 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 34 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 33 38 30 30 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 38 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 79 Data Ascii: afe9ad5cc31","Width":66},{"FileId":"3055803239856572850","EISListingIdentifier":null,"BackgroundColor":"#0078D4","Caption":"","FileSizeInBytes":3800,"ForegroundColor":"","Height":88,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"y
2024-04-16 20:53:41 UTC	4096	IN	Data Raw: 22 3a 33 30 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 32 75 6d 69 77 64 39 6d 54 31 6e 65 4d 33 58 4b 32 46 49 66 36 35 6b 4f 6e 50 6a 69 6f 2f 48 39 73 41 57 53 4e 71 4a 72 61 75 59 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 35 39 38 36 36 2e 39 30 30 37 31 39 39 32 36 36 32 34 36 37 36 31 2e 63 62 30 32 32 39 31 66 2d 64 30 64 39 2d 34 38 61 37 2d 38 37 33 35 2d 39 61 35 65 37 31 39 35 31 39 39 32 2e 36 38 37 39 62 64 63 65 2d 35 36 35 62 2d 34 63 37 36 2d 38 61 31 Data Ascii: ":300,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"2umiwd9mT1neM3XK2FIf65kOnPjio/H9sAWSNqJrauY=","Uri":"//store-images.s-microsoft.com/image/apps.59866.9007199266246761.cb02291f-d0d9-48a7-8735-9a5e71951992.6879bdce-565b-4c76-8a1
2024-04-16 20:53:41 UTC	4096	IN	Data Raw: 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 69 55 7a 54 6a 61 63 37 6a 47 51 6d 6b 4e 37 58 2f 59 49 48 59 4e 6a 38 55 79 63 58 46 63 63 4e 55 6c 52 2b 4b 34 6a 6b 37 2b 6b 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 31 39 35 39 33 2e 39 30 30 37 31 39 39 32 36 36 32 34 36 37 36 31 2e 38 32 38 64 66 61 64 38 2d 37 66 66 65 2d 34 31 32 62 2d 39 39 33 33 2d 37 64 39 30 64 64 39 61 36 34 30 63 2e 62 61 64 61 63 30 61 36 2d 64 35 63 64 2d 34 34 33 61 2d 62 30 39 33 2d 66 38 32 37 65 65 33 38 61 35 64 63 22 2c 22 57 69 64 74 68 22 3a 34 31 34 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 31 31 35 32 39 32 31 35 30 Data Ascii: ","UnscaledImageSHA256Hash":"iUzTjac7jGQmkN7X/YIHYNj8UycXFccNUlR+K4jk7+k=","Uri":"//store-images.s-microsoft.com/image/apps.19593.9007199266246761.828dfad8-7ffe-412b-9933-7d90dd9a640c.badac0a6-d5cd-443a-b093-f827ee38a5dc","Width":414},{"FileId":"115292150
2024-04-16 20:53:41 UTC	4096	IN	Data Raw: 4d 4c 38 4e 78 37 37 58 2f 70 70 47 6a 45 41 47 55 77 67 63 50 44 6b 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 33 34 36 30 36 2e 39 30 30 37 31 39 39 32 36 36 32 34 36 37 36 31 2e 31 65 62 38 36 61 62 62 2d 33 63 36 31 2d 34 34 30 35 2d 38 34 33 35 2d 38 66 39 31 65 38 62 39 39 30 34 33 2e 63 35 38 36 36 38 38 36 2d 35 31 62 64 2d 34 37 37 65 2d 62 37 32 63 2d 39 33 36 62 36 39 35 33 61 65 64 39 22 2c 22 57 69 64 74 68 22 3a 37 32 30 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 31 31 35 32 39 32 31 35 30 34 36 39 34 36 35 31 32 33 34 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 Data Ascii: ML8Nx77X/ppGjEAGUwgcPDk=","Uri":"//store-images.s-microsoft.com/image/apps.34606.9007199266246761.1eb86abb-3c61-4405-8435-8f91e8b99043.c5866886-51bd-477e-b72c-936b6953aed9","Width":720},{"FileId":"1152921504694651234","EISListingIdentifier":null,"Backgrou
2024-04-16 20:53:41 UTC	4096	IN	Data Raw: 39 2d 34 63 61 64 36 64 32 66 61 64 30 65 2e 38 62 66 35 30 38 35 33 2d 62 63 37 62 2d 34 64 66 66 2d 39 34 63 62 2d 65 37 39 37 34 39 39 31 31 31 65 38 22 2c 22 57 69 64 74 68 22 3a 31 39 32 30 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 32 35 36 30 36 36 35 36 36 33 31 38 36 32 39 37 39 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 36 32 31 33 35 39 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 31 30 38 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f Data Ascii: 9-4cad6d2fad0e.8bf50853-bc7b-4dff-94cb-e797499111e8","Width":1920},{"FileId":"3025606656631862979","EISListingIdentifier":null,"BackgroundColor":"","Caption":"","FileSizeInBytes":621359,"ForegroundColor":"","Height":1080,"ImagePositionInfo":"","ImagePurpo
2024-04-16 20:53:41 UTC	4096	IN	Data Raw: 6d 69 64 20 53 6f 6c 69 74 61 69 72 65 5c 72 5c 6e e2 80 a2 5c 74 43 68 61 6c 6c 65 6e 67 65 20 79 6f 75 72 73 65 6c 66 20 74 6f 20 72 65 61 63 68 20 74 68 65 20 74 6f 70 20 6f 66 20 74 68 65 20 50 79 72 61 6d 69 64 20 61 6e 64 20 63 6c 65 61 72 20 61 73 20 6d 61 6e 79 20 53 6f 6c 69 74 61 69 72 65 20 62 6f 61 72 64 73 20 61 73 20 79 6f 75 20 63 61 6e 5c 72 5c 6e e2 80 a2 5c 74 54 68 65 20 6e 65 77 65 73 74 20 65 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 63 6c 61 73 73 69 63 20 63 61 72 64 20 67 61 6d 65 73 5c 72 5c 6e 5c 72 5c 6e 44 61 69 6c 79 20 43 68 61 6c 6c 65 6e 67 65 73 20 26 20 45 76 65 6e 74 73 3a 5c 72 5c 6e 50 6c 61 79 20 6e 65 77 20 73 6f 6c 76 61 62 6c 65 20 63 61 72 64 20 63 68 61 6c 6c 65 6e 67 65 73 20 69 6e 20 61 6c 6c 20 66 69 76 65 20 Data Ascii: mid Solitaire\r\n\tChallenge yourself to reach the top of the Pyramid and clear as many Solitaire boards as you can\r\n\tThe newest edition to the classic card games\r\n\r\nDaily Challenges & Events:\r\nPlay new solvable card challenges in all five
2024-04-16 20:53:41 UTC	4096	IN	Data Raw: 30 32 34 2d 30 34 2d 30 38 54 31 36 3a 32 31 3a 31 33 2e 36 34 31 31 33 32 37 5a 7c 7c 2e 7c 7c 64 63 64 62 65 39 39 38 2d 39 65 38 30 2d 34 36 66 62 2d 39 65 38 63 2d 34 65 39 62 30 30 34 33 38 32 66 66 7c 7c 31 31 35 32 39 32 31 35 30 35 36 39 37 35 37 33 33 35 37 7c 7c 52 45 54 41 49 4c 7c 7c 66 75 6c 6c 72 65 6c 65 61 73 65 22 2c 22 56 61 6c 69 64 61 74 69 6f 6e 52 65 73 75 6c 74 55 72 69 22 3a 22 22 7d 2c 22 4d 65 72 63 68 61 6e 64 69 7a 69 6e 67 54 61 67 73 22 3a 5b 5d 2c 22 50 61 72 74 44 22 3a 22 22 2c 22 50 72 6f 64 75 63 74 46 61 6d 69 6c 79 22 3a 22 47 61 6d 65 73 22 2c 22 50 72 6f 64 75 63 74 4b 69 6e 64 22 3a 22 47 61 6d 65 22 2c 22 44 69 73 70 6c 61 79 53 6b 75 41 76 61 69 6c 61 62 69 6c 69 74 69 65 73 22 3a 5b 7b 22 53 6b 75 22 3a 7b 22 4c Data Ascii: 024-04-08T16:21:13.6411327Z\|\|.\|\|dcdbe998-9e80-46fb-9e8c-4e9b004382ff\|\|1152921505697573357\|\|RETAIL\|\|fullrelease","ValidationResultUri":""},"MerchandizingTags":[],"PartD":"","ProductFamily":"Games","ProductKind":"Game","DisplaySkuAvailabilities":[{"Sku":{"L
2024-04-16 20:53:41 UTC	561	IN	Data Raw: 42 41 22 2c 22 42 57 22 2c 22 42 56 22 2c 22 49 4f 22 2c 22 42 4e 22 2c 22 42 46 22 2c 22 42 49 22 2c 22 4b 48 22 2c 22 43 4d 22 2c 22 43 56 22 2c 22 4b 59 22 2c 22 43 46 22 2c 22 54 44 22 2c 22 54 4c 22 2c 22 44 4a 22 2c 22 44 4d 22 2c 22 44 4f 22 2c 22 45 43 22 2c 22 53 56 22 2c 22 47 51 22 2c 22 45 52 22 2c 22 45 54 22 2c 22 46 4b 22 2c 22 46 4f 22 2c 22 46 4a 22 2c 22 47 46 22 2c 22 50 46 22 2c 22 54 46 22 2c 22 47 41 22 2c 22 47 4d 22 2c 22 47 45 22 2c 22 47 48 22 2c 22 47 49 22 2c 22 47 4c 22 2c 22 47 44 22 2c 22 47 50 22 2c 22 47 55 22 2c 22 47 47 22 2c 22 47 4e 22 2c 22 47 57 22 2c 22 47 59 22 2c 22 48 54 22 2c 22 48 4d 22 2c 22 48 4e 22 2c 22 41 5a 22 2c 22 42 53 22 2c 22 42 42 22 2c 22 42 59 22 2c 22 42 5a 22 2c 22 42 4a 22 2c 22 42 4d 22 2c 22 Data Ascii: BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN","AZ","BS","BB","BY","BZ","BJ","BM","
2024-04-16 20:53:41 UTC	1024	IN	Data Raw: 53 22 2c 22 53 48 22 2c 22 4b 4e 22 2c 22 4c 43 22 2c 22 50 4d 22 2c 22 56 43 22 2c 22 54 4a 22 2c 22 54 5a 22 2c 22 54 47 22 2c 22 54 4b 22 2c 22 54 4f 22 2c 22 54 4d 22 2c 22 54 43 22 2c 22 54 56 22 2c 22 55 4d 22 2c 22 55 47 22 2c 22 56 49 22 2c 22 56 47 22 2c 22 57 46 22 2c 22 45 48 22 2c 22 5a 4d 22 2c 22 5a 57 22 2c 22 55 5a 22 2c 22 56 55 22 2c 22 53 52 22 2c 22 53 5a 22 2c 22 41 44 22 2c 22 4d 43 22 2c 22 53 4d 22 2c 22 4d 45 22 2c 22 56 41 22 2c 22 4e 45 55 54 52 41 4c 22 5d 7d 5d 2c 22 50 72 6f 64 75 63 74 49 64 22 3a 22 39 57 5a 44 4e 43 52 46 48 57 44 32 22 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 46 75 6c 66 69 6c 6c 6d 65 6e 74 44 61 74 61 22 3a 7b 22 50 72 6f 64 75 63 74 49 64 22 3a 22 39 57 5a 44 4e 43 52 46 48 57 44 32 22 2c 22 57 Data Ascii: S","SH","KN","LC","PM","VC","TJ","TZ","TG","TK","TO","TM","TC","TV","UM","UG","VI","VG","WF","EH","ZM","ZW","UZ","VU","SR","SZ","AD","MC","SM","ME","VA","NEUTRAL"]}],"ProductId":"9WZDNCRFHWD2","Properties":{"FulfillmentData":{"ProductId":"9WZDNCRFHWD2","W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49856	20.22.113.133	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:42 UTC	1942	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.21.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:42 UTC	486	IN	HTTP/1.1 200 OK Content-Length: 282434 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:42 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: 3176aaa4-bdbe-4c9a-a984-59c86689b228 MS-RequestId: 79960e68-4d0b-4687-87b9-9a1884bbfed8 MS-CV: UxEEy7KhKESwa2v1.36.0.21.3.1582779663.2344192937.0 X-Content-Type-Options: nosniff MS-ServerId: 5fbf6c-z2dcj MS-DocumentVersions: 9NBLGGH4QGHW\|5882
2024-04-16 20:53:42 UTC	3610	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 4e 42 4c 47 47 48 34 51 47 48 57 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 32 54 32 30 3a 35 33 3a 30 39 2e 36 32 37 38 32 38 33 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 36 38 33 30 37 39 34 38 31 30 36 38 39 37 33 37 30 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 34 31 34 31 34 31 22 2c 22 43 61 70 74 69 Data Ascii: {"BigIds":["9NBLGGH4QGHW"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2024-04-12T20:53:09.6278283Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3068307948106897370","EISListingIdentifier":null,"BackgroundColor":"#414141","Capti
2024-04-16 20:53:42 UTC	4096	IN	Data Raw: 61 62 35 36 2d 62 38 32 66 31 38 38 30 39 36 33 38 22 2c 22 57 69 64 74 68 22 3a 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 35 31 38 38 32 31 30 32 31 35 37 33 34 31 32 33 37 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 34 31 34 31 34 31 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 32 33 32 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 38 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 Data Ascii: ab56-b82f18809638","Width":66},{"FileId":"3051882102157341237","EISListingIdentifier":null,"BackgroundColor":"#414141","Caption":"","FileSizeInBytes":1232,"ForegroundColor":"","Height":88,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Ha
2024-04-16 20:53:42 UTC	4096	IN	Data Raw: 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 33 30 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 33 79 76 5a 69 61 78 72 2f 39 38 64 66 5a 51 51 6b 77 4d 75 37 66 58 69 6a 75 55 47 31 78 39 6c 56 6c 36 39 6c 6c 61 45 47 75 67 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 31 31 32 33 31 2e 31 33 35 31 30 37 39 38 38 38 37 33 39 35 31 30 36 2e 63 30 35 39 66 31 36 31 2d 66 34 33 63 2d 34 30 38 34 2d 62 34 37 65 2d 38 30 33 36 65 30 62 37 65 31 61 65 2e 63 30 31 66 66 Data Ascii: olor":"","Height":300,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"3yvZiaxr/98dfZQQkwMu7fXijuUG1x9lVl69llaEGug=","Uri":"//store-images.s-microsoft.com/image/apps.11231.13510798887395106.c059f161-f43c-4084-b47e-8036e0b7e1ae.c01ff
2024-04-16 20:53:43 UTC	4096	IN	Data Raw: 22 41 49 22 2c 22 41 51 22 2c 22 41 47 22 2c 22 41 4d 22 2c 22 41 57 22 2c 22 42 4f 22 2c 22 42 51 22 2c 22 42 41 22 2c 22 42 57 22 2c 22 42 56 22 2c 22 49 4f 22 2c 22 42 4e 22 2c 22 42 46 22 2c 22 42 49 22 2c 22 4b 48 22 2c 22 43 4d 22 2c 22 43 56 22 2c 22 4b 59 22 2c 22 43 46 22 2c 22 54 44 22 2c 22 54 4c 22 2c 22 44 4a 22 2c 22 44 4d 22 2c 22 44 4f 22 2c 22 45 43 22 2c 22 53 56 22 2c 22 47 51 22 2c 22 45 52 22 2c 22 45 54 22 2c 22 46 4b 22 2c 22 46 4f 22 2c 22 46 4a 22 2c 22 47 46 22 2c 22 50 46 22 2c 22 54 46 22 2c 22 47 41 22 2c 22 47 4d 22 2c 22 47 45 22 2c 22 47 48 22 2c 22 47 49 22 2c 22 47 4c 22 2c 22 47 44 22 2c 22 47 50 22 2c 22 47 55 22 2c 22 47 47 22 2c 22 47 4e 22 2c 22 47 57 22 2c 22 47 59 22 2c 22 48 54 22 2c 22 48 4d 22 2c 22 48 4e 22 2c Data Ascii: "AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK","FO","FJ","GF","PF","TF","GA","GM","GE","GH","GI","GL","GD","GP","GU","GG","GN","GW","GY","HT","HM","HN",
2024-04-16 20:53:43 UTC	4096	IN	Data Raw: 5b 22 78 36 34 22 2c 22 78 38 36 22 5d 2c 22 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 22 69 6e 74 65 72 6e 65 74 43 6c 69 65 6e 74 22 2c 22 70 72 69 76 61 74 65 4e 65 74 77 6f 72 6b 43 6c 69 65 6e 74 53 65 72 76 65 72 22 2c 22 70 72 65 76 69 65 77 50 65 6e 57 6f 72 6b 73 70 61 63 65 22 5d 2c 22 45 78 70 65 72 69 65 6e 63 65 49 64 73 22 3a 5b 5d 2c 22 4d 61 78 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 35 35 33 39 36 30 36 35 2c 22 4d 61 78 49 6e 73 74 61 6c 6c 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 33 30 31 37 31 31 33 36 2c 22 50 61 63 6b 61 67 65 46 6f 72 6d 61 74 22 3a 22 45 41 70 70 78 42 75 6e 64 6c 65 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 Data Ascii: ["x64","x86"],"Capabilities":["internetClient","privateNetworkClientServer","previewPenWorkspace"],"ExperienceIds":[],"MaxDownloadSizeInBytes":55396065,"MaxInstallSizeInBytes":30171136,"PackageFormat":"EAppxBundle","PackageFamilyName":"Microsoft.Microsoft
2024-04-16 20:53:43 UTC	4096	IN	Data Raw: 50 61 63 6b 61 67 65 46 6f 72 6d 61 74 22 3a 22 45 41 70 70 78 42 75 6e 64 6c 65 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 53 74 69 63 6b 79 4e 6f 74 65 73 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 4d 61 69 6e 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 46 6f 72 44 6c 63 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 46 75 6c 6c 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 53 74 69 63 6b 79 4e 6f 74 65 73 5f 32 2e 31 2e 31 38 2e 37 30 5f 6e 65 75 74 72 61 6c 5f 7e 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 50 61 63 6b 61 67 65 49 64 22 3a 22 64 37 31 30 34 66 34 30 2d 33 37 37 32 2d 61 39 62 36 2d 32 63 37 64 2d 38 66 Data Ascii: PackageFormat":"EAppxBundle","PackageFamilyName":"Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe","MainPackageFamilyNameForDlc":null,"PackageFullName":"Microsoft.MicrosoftStickyNotes_2.1.18.70_neutral_~_8wekyb3d8bbwe","PackageId":"d7104f40-3772-a9b6-2c7d-8f
2024-04-16 20:53:43 UTC	4096	IN	Data Raw: 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 53 74 69 63 6b 79 4e 6f 74 65 73 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 4d 61 69 6e 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 46 6f 72 44 6c 63 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 46 75 6c 6c 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 53 74 69 63 6b 79 4e 6f 74 65 73 5f 33 2e 37 2e 31 30 36 2e 37 30 5f 6e 65 75 74 72 61 6c 5f 7e 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 50 61 63 6b 61 67 65 49 64 22 3a 22 34 34 39 65 61 30 35 38 2d 39 38 66 39 2d 65 64 38 64 2d 30 65 66 30 2d 38 35 61 39 37 31 64 36 38 31 66 34 2d 58 38 36 2d 58 36 34 2d 41 72 6d 22 2c 22 50 61 63 6b 61 67 65 52 61 6e Data Ascii: eFamilyName":"Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe","MainPackageFamilyNameForDlc":null,"PackageFullName":"Microsoft.MicrosoftStickyNotes_3.7.106.70_neutral_~_8wekyb3d8bbwe","PackageId":"449ea058-98f9-ed8d-0ef0-85a971d681f4-X86-X64-Arm","PackageRan
2024-04-16 20:53:43 UTC	4096	IN	Data Raw: 63 72 6f 73 6f 66 74 53 74 69 63 6b 79 4e 6f 74 65 73 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 4d 61 69 6e 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 46 6f 72 44 6c 63 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 46 75 6c 6c 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 53 74 69 63 6b 79 4e 6f 74 65 73 5f 33 2e 37 2e 31 32 34 2e 37 30 5f 6e 65 75 74 72 61 6c 5f 7e 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 50 61 63 6b 61 67 65 49 64 22 3a 22 37 33 61 31 32 61 31 37 2d 61 35 35 63 2d 31 62 39 39 2d 36 31 66 32 2d 64 64 32 64 35 30 33 63 66 66 35 39 2d 58 38 36 2d 58 36 34 2d 41 72 6d 22 2c 22 50 61 63 6b 61 67 65 52 61 6e 6b 22 3a 33 30 30 37 33 2c 22 50 6c 61 74 66 6f 72 6d 44 65 70 65 6e 64 65 6e Data Ascii: crosoftStickyNotes_8wekyb3d8bbwe","MainPackageFamilyNameForDlc":null,"PackageFullName":"Microsoft.MicrosoftStickyNotes_3.7.124.70_neutral_~_8wekyb3d8bbwe","PackageId":"73a12a17-a55c-1b99-61f2-dd2d503cff59-X86-X64-Arm","PackageRank":30073,"PlatformDependen
2024-04-16 20:53:43 UTC	4096	IN	Data Raw: 76 65 72 22 2c 22 70 72 65 76 69 65 77 50 65 6e 57 6f 72 6b 73 70 61 63 65 22 5d 2c 22 45 78 70 65 72 69 65 6e 63 65 49 64 73 22 3a 5b 5d 2c 22 4d 61 78 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 30 37 34 35 33 35 36 38 2c 22 4d 61 78 49 6e 73 74 61 6c 6c 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 34 31 30 30 35 30 35 36 2c 22 50 61 63 6b 61 67 65 46 6f 72 6d 61 74 22 3a 22 45 41 70 70 78 42 75 6e 64 6c 65 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 63 72 6f 73 6f 66 74 53 74 69 63 6b 79 4e 6f 74 65 73 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 4d 61 69 6e 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 46 6f 72 44 6c 63 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 Data Ascii: ver","previewPenWorkspace"],"ExperienceIds":[],"MaxDownloadSizeInBytes":107453568,"MaxInstallSizeInBytes":41005056,"PackageFormat":"EAppxBundle","PackageFamilyName":"Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe","MainPackageFamilyNameForDlc":null,"Package
2024-04-16 20:53:43 UTC	4096	IN	Data Raw: 30 22 2c 22 43 6f 6e 74 65 6e 74 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 46 65 61 74 75 72 65 73 22 3a 6e 75 6c 6c 7d 7d 2c 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 5b 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 49 64 22 3a 22 41 70 70 22 7d 5d 2c 22 41 72 63 68 69 74 65 63 74 75 72 65 73 22 3a 5b 22 78 36 34 22 2c 22 78 38 36 22 2c 22 61 72 6d 22 5d 2c 22 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 22 69 6e 74 65 72 6e 65 74 43 6c 69 65 6e 74 22 2c 22 70 72 69 76 61 74 65 4e 65 74 77 6f 72 6b 43 6c 69 65 6e 74 53 65 72 76 65 72 22 2c 22 70 72 65 76 69 65 77 50 65 6e 57 6f 72 6b 73 70 61 63 65 22 5d 2c 22 45 78 70 65 72 69 65 6e 63 65 49 64 73 22 3a 5b 5d 2c 22 4d 61 78 44 6f 77 6e 6c 6f 61 64 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 31 30 37 35 37 Data Ascii: 0","Content":null,"PackageFeatures":null}},{"Applications":[{"ApplicationId":"App"}],"Architectures":["x64","x86","arm"],"Capabilities":["internetClient","privateNetworkClientServer","previewPenWorkspace"],"ExperienceIds":[],"MaxDownloadSizeInBytes":10757

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49857	20.22.113.133	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:45 UTC	1941	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.MixedReality.Portal_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.23.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:46 UTC	485	IN	HTTP/1.1 200 OK Content-Length: 23279 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:45 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: 134f0a2f-95ff-4419-b175-0451c816f928 MS-RequestId: a4e094ee-1584-42ff-ba05-9c1d36c23438 MS-CV: UxEEy7KhKESwa2v1.36.0.23.3.1582780169.2507735796.0 X-Content-Type-Options: nosniff MS-ServerId: 5fbf6c-g54nv MS-DocumentVersions: 9NG1H8B3ZC7M\|3382
2024-04-16 20:53:46 UTC	1024	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 4e 47 31 48 38 42 33 5a 43 37 4d 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 32 54 32 32 3a 34 34 3a 35 38 2e 31 31 32 34 31 38 37 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 33 35 39 39 39 35 32 32 38 30 30 30 35 31 38 35 39 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c Data Ascii: {"BigIds":["9NG1H8B3ZC7M"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2024-04-12T22:44:58.1124187Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3035999522800051859","EISListingIdentifier":null,"BackgroundColor":"","Caption":"",
2024-04-16 20:53:46 UTC	1024	IN	Data Raw: 31 63 22 2c 22 57 69 64 74 68 22 3a 35 30 30 31 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 32 30 30 30 30 30 30 30 30 30 30 31 33 32 37 38 33 34 37 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 33 38 38 32 30 30 36 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 32 38 31 33 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 44 65 73 6b 74 6f 70 2f 31 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 53 63 72 65 65 6e 73 68 6f 74 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 Data Ascii: 1c","Width":5001},{"FileId":"2000000000013278347","EISListingIdentifier":null,"BackgroundColor":"","Caption":"","FileSizeInBytes":3882006,"ForegroundColor":"","Height":2813,"ImagePositionInfo":"Desktop/1","ImagePurpose":"Screenshot","UnscaledImageSHA256Ha
2024-04-16 20:53:46 UTC	1024	IN	Data Raw: 52 20 65 78 70 65 72 69 65 6e 63 65 73 20 66 72 6f 6d 20 53 74 65 61 6d c2 ae 56 52 20 61 6e 64 20 4d 69 63 72 6f 73 6f 66 74 20 53 74 6f 72 65 2e 20 47 65 74 20 65 78 74 72 61 6f 72 64 69 6e 61 72 79 20 61 63 63 65 73 73 20 74 6f 20 6c 69 76 65 20 73 70 6f 72 74 73 20 61 6e 64 20 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 20 61 6e 64 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 6f 74 68 65 72 73 20 69 6e 20 74 68 65 20 75 6c 74 69 6d 61 74 65 20 68 69 67 68 2d 6f 63 74 61 6e 65 20 56 52 20 67 61 6d 69 6e 67 20 65 78 70 65 72 69 65 6e 63 65 2e 2a 20 44 6f 77 6e 6c 6f 61 64 20 74 68 69 73 20 61 70 70 20 74 6f 20 73 65 74 20 75 70 20 61 6e 64 20 6d 61 6e 61 67 65 20 57 69 6e 64 6f 77 73 20 4d 69 78 65 64 20 52 65 61 6c 69 74 79 20 6f 6e 20 79 6f 75 72 20 50 43 2e Data Ascii: R experiences from SteamVR and Microsoft Store. Get extraordinary access to live sports and entertainment and connect with others in the ultimate high-octane VR gaming experience.* Download this app to set up and manage Windows Mixed Reality on your PC.
2024-04-16 20:53:46 UTC	1024	IN	Data Raw: 2c 22 53 45 22 2c 22 43 48 22 2c 22 54 57 22 2c 22 54 48 22 2c 22 54 54 22 2c 22 54 4e 22 2c 22 54 52 22 2c 22 55 41 22 2c 22 41 45 22 2c 22 47 42 22 2c 22 56 4e 22 2c 22 59 45 22 2c 22 4c 59 22 2c 22 4c 4b 22 2c 22 55 59 22 2c 22 56 45 22 2c 22 41 46 22 2c 22 41 58 22 2c 22 41 4c 22 2c 22 41 53 22 2c 22 41 4f 22 2c 22 41 49 22 2c 22 41 51 22 2c 22 41 47 22 2c 22 41 4d 22 2c 22 41 57 22 2c 22 42 4f 22 2c 22 42 51 22 2c 22 42 41 22 2c 22 42 57 22 2c 22 42 56 22 2c 22 49 4f 22 2c 22 42 4e 22 2c 22 42 46 22 2c 22 42 49 22 2c 22 4b 48 22 2c 22 43 4d 22 2c 22 43 56 22 2c 22 4b 59 22 2c 22 43 46 22 2c 22 54 44 22 2c 22 54 4c 22 2c 22 44 4a 22 2c 22 44 4d 22 2c 22 44 4f 22 2c 22 45 43 22 2c 22 53 56 22 2c 22 47 51 22 2c 22 45 52 22 2c 22 45 54 22 2c 22 46 4b 22 Data Ascii: ,"SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","BW","BV","IO","BN","BF","BI","KH","CM","CV","KY","CF","TD","TL","DJ","DM","DO","EC","SV","GQ","ER","ET","FK"
2024-04-16 20:53:46 UTC	1024	IN	Data Raw: 2c 22 50 72 6f 70 65 72 74 69 65 73 22 3a 7b 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 78 65 64 52 65 61 6c 69 74 79 2e 50 6f 72 74 61 6c 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 50 61 63 6b 61 67 65 49 64 65 6e 74 69 74 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 78 65 64 52 65 61 6c 69 74 79 2e 50 6f 72 74 61 6c 22 2c 22 50 75 62 6c 69 73 68 65 72 43 65 72 74 69 66 69 63 61 74 65 4e 61 6d 65 22 3a 22 43 4e 3d 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2c 20 4f 3d 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2c 20 4c 3d 52 65 64 6d 6f 6e 64 2c 20 53 3d 57 61 73 68 69 6e 67 74 6f 6e 2c 20 43 3d 55 53 22 2c 22 58 62 6f 78 43 72 6f 73 73 Data Ascii: ,"Properties":{"PackageFamilyName":"Microsoft.MixedReality.Portal_8wekyb3d8bbwe","PackageIdentityName":"Microsoft.MixedReality.Portal","PublisherCertificateName":"CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US","XboxCross
2024-04-16 20:53:46 UTC	1024	IN	Data Raw: 34 34 3a 35 38 2e 31 31 32 34 31 38 37 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 53 6b 75 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 44 69 73 63 6f 76 65 72 20 57 69 6e 64 6f 77 73 20 4d 69 78 65 64 20 52 65 61 6c 69 74 79 20 61 6e 64 20 64 69 76 65 20 69 6e 74 6f 20 6d 6f 72 65 20 74 68 61 6e 20 33 2c 30 30 30 20 67 61 6d 65 73 20 61 6e 64 20 56 52 20 65 78 70 65 72 69 65 6e 63 65 73 20 66 72 6f 6d 20 53 74 65 61 6d c2 ae 56 52 20 61 6e 64 20 4d 69 63 72 6f 73 6f 66 74 20 53 74 6f 72 65 2e 20 47 65 74 20 65 78 74 72 61 6f 72 64 69 6e 61 72 79 20 61 63 63 65 73 73 20 74 6f 20 6c 69 76 65 20 73 70 6f 72 74 73 20 61 6e 64 20 65 6e 74 65 72 74 61 69 6e 6d 65 6e 74 20 61 6e 64 20 63 6f 6e 6e 65 63 74 20 77 69 74 68 20 Data Ascii: 44:58.1124187Z","LouserzedProperties":[{"SkuDescription":"Discover Windows Mixed Reality and dive into more than 3,000 games and VR experiences from SteamVR and Microsoft Store. Get extraordinary access to live sports and entertainment and connect with
2024-04-16 20:53:46 UTC	1024	IN	Data Raw: 4d 41 22 2c 22 4e 4c 22 2c 22 4e 5a 22 2c 22 4e 47 22 2c 22 4e 4f 22 2c 22 4f 4d 22 2c 22 50 4b 22 2c 22 50 45 22 2c 22 50 48 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 51 41 22 2c 22 52 4f 22 2c 22 52 55 22 2c 22 53 41 22 2c 22 52 53 22 2c 22 53 47 22 2c 22 53 4b 22 2c 22 53 49 22 2c 22 5a 41 22 2c 22 4b 52 22 2c 22 45 53 22 2c 22 53 45 22 2c 22 43 48 22 2c 22 54 57 22 2c 22 54 48 22 2c 22 54 54 22 2c 22 54 4e 22 2c 22 54 52 22 2c 22 55 41 22 2c 22 41 45 22 2c 22 47 42 22 2c 22 56 4e 22 2c 22 59 45 22 2c 22 4c 59 22 2c 22 4c 4b 22 2c 22 55 59 22 2c 22 56 45 22 2c 22 41 46 22 2c 22 41 58 22 2c 22 41 4c 22 2c 22 41 53 22 2c 22 41 4f 22 2c 22 41 49 22 2c 22 41 51 22 2c 22 41 47 22 2c 22 41 4d 22 2c 22 41 57 22 2c 22 42 4f 22 2c 22 42 51 22 2c 22 42 41 22 2c 22 Data Ascii: MA","NL","NZ","NG","NO","OM","PK","PE","PH","PL","PT","QA","RO","RU","SA","RS","SG","SK","SI","ZA","KR","ES","SE","CH","TW","TH","TT","TN","TR","UA","AE","GB","VN","YE","LY","LK","UY","VE","AF","AX","AL","AS","AO","AI","AQ","AG","AM","AW","BO","BQ","BA","
2024-04-16 20:53:46 UTC	1024	IN	Data Raw: 6c 6c 6d 65 6e 74 44 61 74 61 22 3a 7b 22 50 72 6f 64 75 63 74 49 64 22 3a 22 39 4e 47 31 48 38 42 33 5a 43 37 4d 22 2c 22 57 75 43 61 74 65 67 6f 72 79 49 64 22 3a 22 30 36 61 61 30 32 37 63 2d 63 37 61 61 2d 34 63 66 65 2d 61 66 37 36 2d 64 31 66 64 61 38 37 66 33 37 36 61 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 78 65 64 52 65 61 6c 69 74 79 2e 50 6f 72 74 61 6c 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 53 6b 75 49 64 22 3a 22 30 30 31 30 22 7d 2c 22 46 75 6c 66 69 6c 6c 6d 65 6e 74 54 79 70 65 22 3a 22 57 69 6e 64 6f 77 73 55 70 64 61 74 65 22 2c 22 46 75 6c 66 69 6c 6c 6d 65 6e 74 50 6c 75 67 69 6e 49 64 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 73 22 3a 5b 7b 22 41 70 70 6c Data Ascii: llmentData":{"ProductId":"9NG1H8B3ZC7M","WuCategoryId":"06aa027c-c7aa-4cfe-af76-d1fda87f376a","PackageFamilyName":"Microsoft.MixedReality.Portal_8wekyb3d8bbwe","SkuId":"0010"},"FulfillmentType":"WindowsUpdate","FulfillmentPluginId":null,"Packages":[{"Appl
2024-04-16 20:53:46 UTC	1024	IN	Data Raw: 5b 7b 22 4d 61 78 54 65 73 74 65 64 22 3a 32 38 31 34 37 35 30 39 32 36 33 30 37 33 32 38 2c 22 4d 69 6e 56 65 72 73 69 6f 6e 22 3a 32 38 31 34 37 35 30 39 32 36 33 30 37 33 32 38 2c 22 50 6c 61 74 66 6f 72 6d 4e 61 6d 65 22 3a 22 57 69 6e 64 6f 77 73 2e 44 65 73 6b 74 6f 70 22 7d 5d 2c 22 50 6c 61 74 66 6f 72 6d 44 65 70 65 6e 64 65 6e 63 79 58 6d 6c 42 6c 6f 62 22 3a 22 7b 5c 22 62 6c 6f 62 2e 76 65 72 73 69 6f 6e 5c 22 3a 31 36 38 38 38 36 37 30 34 30 35 32 36 33 33 36 2c 5c 22 63 6f 6e 74 65 6e 74 2e 62 75 6e 64 6c 65 64 50 61 63 6b 61 67 65 73 5c 22 3a 5b 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 78 65 64 52 65 61 6c 69 74 79 2e 50 6f 72 74 61 6c 5f 32 30 30 30 2e 32 31 30 34 31 2e 31 30 35 31 2e 30 5f 78 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 Data Ascii: [{"MaxTested":2814750926307328,"MinVersion":2814750926307328,"PlatformName":"Windows.Desktop"}],"PlatformDependencyXmlBlob":"{\"blob.version\":1688867040526336,\"content.bundledPackages\":[\"Microsoft.MixedReality.Portal_2000.21041.1051.0_x64__8wekyb3d8bb
2024-04-16 20:53:46 UTC	1024	IN	Data Raw: 64 31 66 64 61 38 37 66 33 37 36 61 22 2c 22 50 61 63 6b 61 67 65 46 61 6d 69 6c 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 69 78 65 64 52 65 61 6c 69 74 79 2e 50 6f 72 74 61 6c 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 22 2c 22 53 6b 75 49 64 22 3a 22 30 30 31 30 22 2c 22 43 6f 6e 74 65 6e 74 22 3a 6e 75 6c 6c 2c 22 50 61 63 6b 61 67 65 46 65 61 74 75 72 65 73 22 3a 6e 75 6c 6c 7d 7d 2c 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 73 22 3a 5b 7b 22 41 70 70 6c 69 63 61 74 69 6f 6e 49 64 22 3a 22 41 70 70 22 7d 5d 2c 22 41 72 63 68 69 74 65 63 74 75 72 65 73 22 3a 5b 22 78 36 34 22 5d 2c 22 43 61 70 61 62 69 6c 69 74 69 65 73 22 3a 5b 22 69 6e 74 65 72 6e 65 74 43 6c 69 65 6e 74 22 2c 22 73 70 61 74 69 61 6c 50 65 72 63 65 70 74 69 6f 6e 22 2c 22 Data Ascii: d1fda87f376a","PackageFamilyName":"Microsoft.MixedReality.Portal_8wekyb3d8bbwe","SkuId":"0010","Content":null,"PackageFeatures":null}},{"Applications":[{"ApplicationId":"App"}],"Architectures":["x64"],"Capabilities":["internetClient","spatialPerception","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49858	20.22.113.133	443

Timestamp	Bytes transferred	Direction	Data
2024-04-16 20:53:46 UTC	1929	OUT	GET /v7.0/products/lookup?fieldsTemplate=InstallAgent&market=CH&languages=en-CH,en,neutral&alternateId=PackageFamilyName&value=Microsoft.MSPaint_8wekyb3d8bbwe HTTP/1.1 Connection: Keep-Alive Content-Type: application/json Authorization: MSAHW1.0=t=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&p= User-Agent: Install Service MS-CV: UxEEy7KhKESwa2v1.36.0.25.3 Host: displaycatalog.mp.microsoft.com
2024-04-16 20:53:47 UTC	485	IN	HTTP/1.1 200 OK Content-Length: 95633 Connection: close Content-Type: application/json; charset=utf-8 Date: Tue, 16 Apr 2024 20:53:46 GMT Server: Kestrel Cache-Control: no-store, no-cache Vary: Authorization MS-CorrelationId: 1cc58b88-48e4-4ee3-b8ef-aba62bae6ad3 MS-RequestId: 2f938fe1-4873-4ff5-bbd2-6280d6e56d38 MS-CV: UxEEy7KhKESwa2v1.36.0.25.3.1582780325.1914855630.0 X-Content-Type-Options: nosniff MS-ServerId: 5fbf6c-zq4vd MS-DocumentVersions: 9NBLGGH5FV99\|5521
2024-04-16 20:53:47 UTC	3611	IN	Data Raw: 7b 22 42 69 67 49 64 73 22 3a 5b 22 39 4e 42 4c 47 47 48 35 46 56 39 39 22 5d 2c 22 48 61 73 4d 6f 72 65 50 61 67 65 73 22 3a 66 61 6c 73 65 2c 22 50 72 6f 64 75 63 74 73 22 3a 5b 7b 22 4c 61 73 74 4d 6f 64 69 66 69 65 64 44 61 74 65 22 3a 22 32 30 32 34 2d 30 34 2d 31 31 54 31 37 3a 34 38 3a 33 31 2e 32 34 35 36 39 32 39 5a 22 2c 22 4c 6f 63 61 6c 69 7a 65 64 50 72 6f 70 65 72 74 69 65 73 22 3a 5b 7b 22 46 72 61 6e 63 68 69 73 65 73 22 3a 5b 5d 2c 22 49 6d 61 67 65 73 22 3a 5b 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 32 34 33 37 37 32 34 34 31 33 38 32 32 34 34 32 30 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 34 22 2c 22 43 61 70 74 69 Data Ascii: {"BigIds":["9NBLGGH5FV99"],"HasMorePages":false,"Products":[{"LastModifiedDate":"2024-04-11T17:48:31.2456929Z","LouserzedProperties":[{"Franchises":[],"Images":[{"FileId":"3024377244138224420","EISListingIdentifier":null,"BackgroundColor":"#0078D4","Capti
2024-04-16 20:53:47 UTC	4096	IN	Data Raw: 34 31 34 37 2d 61 33 36 36 2d 30 62 62 31 31 38 32 38 39 35 35 35 22 2c 22 57 69 64 74 68 22 3a 36 36 7d 2c 7b 22 46 69 6c 65 49 64 22 3a 22 33 30 32 33 38 35 30 30 32 36 36 39 32 35 33 30 31 31 39 22 2c 22 45 49 53 4c 69 73 74 69 6e 67 49 64 65 6e 74 69 66 69 65 72 22 3a 6e 75 6c 6c 2c 22 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 23 30 30 37 38 44 34 22 2c 22 43 61 70 74 69 6f 6e 22 3a 22 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 32 38 36 31 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 38 38 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 Data Ascii: 4147-a366-0bb118289555","Width":66},{"FileId":"3023850026692530119","EISListingIdentifier":null,"BackgroundColor":"#0078D4","Caption":"","FileSizeInBytes":2861,"ForegroundColor":"","Height":88,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA
2024-04-16 20:53:47 UTC	4096	IN	Data Raw: 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 33 30 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 54 69 6c 65 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 56 37 37 52 55 54 2f 4e 77 77 35 62 61 31 4b 73 6e 30 57 77 66 32 47 42 79 43 72 53 72 4d 50 64 4b 43 6f 4e 79 6d 66 2b 39 67 73 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 69 6d 61 67 65 2f 61 70 70 73 2e 34 38 37 32 37 2e 31 33 35 31 30 37 39 38 38 38 37 30 34 37 31 33 36 2e 38 61 31 38 31 35 62 32 2d 30 31 37 63 2d 34 38 63 38 2d 38 30 63 63 2d 63 61 34 64 31 61 65 35 63 38 63 66 2e Data Ascii: oundColor":"","Height":300,"ImagePositionInfo":"","ImagePurpose":"Tile","UnscaledImageSHA256Hash":"V77RUT/Nww5ba1Ksn0Wwf2GByCrSrMPdKCoNymf+9gs=","Uri":"//store-images.s-microsoft.com/image/apps.48727.13510798887047136.8a1815b2-017c-48c8-80cc-ca4d1ae5c8cf.
2024-04-16 20:53:47 UTC	4096	IN	Data Raw: 69 6f 6e 20 33 44 20 74 6f 20 61 64 64 20 64 65 70 74 68 20 74 6f 20 79 6f 75 72 20 77 6f 72 6b 2e 22 2c 22 46 69 6c 65 53 69 7a 65 49 6e 42 79 74 65 73 22 3a 32 36 34 34 32 34 38 2c 22 46 6f 72 65 67 72 6f 75 6e 64 43 6f 6c 6f 72 22 3a 22 22 2c 22 48 65 69 67 68 74 22 3a 31 30 38 30 2c 22 49 6d 61 67 65 50 6f 73 69 74 69 6f 6e 49 6e 66 6f 22 3a 22 44 65 73 6b 74 6f 70 2f 35 22 2c 22 49 6d 61 67 65 50 75 72 70 6f 73 65 22 3a 22 53 63 72 65 65 6e 73 68 6f 74 22 2c 22 55 6e 73 63 61 6c 65 64 49 6d 61 67 65 53 48 41 32 35 36 48 61 73 68 22 3a 22 63 66 47 38 41 49 42 58 73 5a 49 54 71 54 49 71 76 34 57 77 47 5a 73 4a 71 70 74 79 4f 31 4c 6a 49 61 64 4b 6c 46 63 4c 7a 41 73 3d 22 2c 22 55 72 69 22 3a 22 2f 2f 73 74 6f 72 65 2d 69 6d 61 67 65 73 2e 73 2d 6d 69 Data Ascii: ion 3D to add depth to your work.","FileSizeInBytes":2644248,"ForegroundColor":"","Height":1080,"ImagePositionInfo":"Desktop/5","ImagePurpose":"Screenshot","UnscaledImageSHA256Hash":"cfG8AIBXsZITqTIqv4WwGZsJqptyO1LjIadKlFcLzAs=","Uri":"//store-images.s-mi
2024-04-16 20:53:47 UTC	4096	IN	Data Raw: 61 67 65 49 64 65 6e 74 69 74 79 4e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 53 50 61 69 6e 74 22 2c 22 50 75 62 6c 69 73 68 65 72 43 65 72 74 69 66 69 63 61 74 65 4e 61 6d 65 22 3a 22 43 4e 3d 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2c 20 4f 3d 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2c 20 4c 3d 52 65 64 6d 6f 6e 64 2c 20 53 3d 57 61 73 68 69 6e 67 74 6f 6e 2c 20 43 3d 55 53 22 2c 22 58 62 6f 78 43 72 6f 73 73 47 65 6e 53 65 74 49 64 22 3a 6e 75 6c 6c 2c 22 58 62 6f 78 43 6f 6e 73 6f 6c 65 47 65 6e 4f 70 74 69 6d 69 7a 65 64 22 3a 6e 75 6c 6c 2c 22 58 62 6f 78 43 6f 6e 73 6f 6c 65 47 65 6e 43 6f 6d 70 61 74 69 62 6c 65 22 3a 6e 75 6c 6c 7d 2c 22 41 6c 74 65 72 6e 61 74 65 49 64 73 22 3a 5b 7b 22 49 Data Ascii: ageIdentityName":"Microsoft.MSPaint","PublisherCertificateName":"CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US","XboxCrossGenSetId":null,"XboxConsoleGenOptimized":null,"XboxConsoleGenCompatible":null},"AlternateIds":[{"I
2024-04-16 20:53:47 UTC	4096	IN	Data Raw: 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 37 33 37 30 33 39 33 36 30 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 37 33 37 30 33 39 33 36 30 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 33 7d 2c 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 37 33 37 30 33 39 33 36 30 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 37 33 37 30 33 39 33 36 30 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 36 7d 5d 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 79 70 65 5c 22 3a 37 2c 5c 22 70 6f 6c 69 63 79 5c 22 3a 7b 5c 22 63 61 Data Ascii: atform.maxVersionTested\":2814750737039360,\"platform.minVersion\":2814750737039360,\"platform.target\":3},{\"platform.maxVersionTested\":2814750737039360,\"platform.minVersion\":2814750737039360,\"platform.target\":6}],\"content.type\":7,\"policy\":{\"ca
2024-04-16 20:53:47 UTC	4096	IN	Data Raw: 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 38 33 35 32 37 37 38 32 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 33 7d 2c 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 38 39 30 30 30 30 33 38 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 38 33 35 32 37 37 38 32 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 36 7d 5d 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 79 70 65 5c 22 3a 37 2c 5c 22 70 6f 6c 69 63 79 5c 22 3a 7b 5c 22 63 61 74 65 67 6f 72 79 2e 66 69 72 73 74 5c 22 3a 5c 22 61 70 70 5c 22 2c 5c 22 63 61 74 65 67 6f 72 79 2e 73 65 63 6f 6e 64 5c 22 3a 5c 22 45 6e 74 65 72 74 61 69 Data Ascii: .minVersion\":2814750835277824,\"platform.target\":3},{\"platform.maxVersionTested\":2814750890000384,\"platform.minVersion\":2814750835277824,\"platform.target\":6}],\"content.type\":7,\"policy\":{\"category.first\":\"app\",\"category.second\":\"Entertai
2024-04-16 20:53:47 UTC	4096	IN	Data Raw: 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 38 39 30 30 30 30 33 38 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 38 33 35 32 37 37 38 32 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 36 7d 5d 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 79 70 65 5c 22 3a 37 2c 5c 22 70 6f 6c 69 63 79 5c 22 3a 7b 5c 22 63 61 74 65 67 6f 72 79 2e 66 69 72 73 74 5c 22 3a 5c 22 61 70 70 5c 22 2c 5c 22 63 61 74 65 67 6f 72 79 2e 73 65 63 6f 6e 64 5c 22 3a 5c 22 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 22 2c 5c 22 6f 70 74 4f 75 74 2e 62 61 63 6b 75 70 52 65 73 74 6f 72 65 5c 22 3a 66 61 6c 73 65 2c 5c 22 6f 70 74 4f 75 74 2e 72 65 6d 6f 76 65 61 62 6c 65 4d 65 64 69 61 5c 22 3a 74 Data Ascii: axVersionTested\":2814750890000384,\"platform.minVersion\":2814750835277824,\"platform.target\":6}],\"content.type\":7,\"policy\":{\"category.first\":\"app\",\"category.second\":\"Entertainment\",\"optOut.backupRestore\":false,\"optOut.removeableMedia\":t
2024-04-16 20:53:47 UTC	4096	IN	Data Raw: 32 37 37 38 32 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 36 7d 5d 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 79 70 65 5c 22 3a 37 2c 5c 22 70 6f 6c 69 63 79 5c 22 3a 7b 5c 22 63 61 74 65 67 6f 72 79 2e 66 69 72 73 74 5c 22 3a 5c 22 61 70 70 5c 22 2c 5c 22 63 61 74 65 67 6f 72 79 2e 73 65 63 6f 6e 64 5c 22 3a 5c 22 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 5c 22 2c 5c 22 6f 70 74 4f 75 74 2e 62 61 63 6b 75 70 52 65 73 74 6f 72 65 5c 22 3a 66 61 6c 73 65 2c 5c 22 6f 70 74 4f 75 74 2e 72 65 6d 6f 76 65 61 62 6c 65 4d 65 64 69 61 5c 22 3a 74 72 75 65 7d 2c 5c 22 70 6f 6c 69 63 79 32 5c 22 3a 7b 5c 22 61 67 65 52 61 74 69 6e 67 5c 22 3a 30 2c 5c 22 6f 70 74 4f 75 74 2e 44 56 52 5c 22 3a 74 72 75 65 2c 5c 22 74 68 69 72 64 50 61 72 74 79 41 70 70 Data Ascii: 277824,\"platform.target\":6}],\"content.type\":7,\"policy\":{\"category.first\":\"app\",\"category.second\":\"Entertainment\",\"optOut.backupRestore\":false,\"optOut.removeableMedia\":true},\"policy2\":{\"ageRating\":0,\"optOut.DVR\":true,\"thirdPartyApp
2024-04-16 20:53:47 UTC	4096	IN	Data Raw: 34 37 35 30 38 33 35 32 37 37 38 32 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 33 7d 2c 7b 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 61 78 56 65 72 73 69 6f 6e 54 65 73 74 65 64 5c 22 3a 32 38 31 34 37 35 30 39 37 30 34 37 38 35 39 32 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 6d 69 6e 56 65 72 73 69 6f 6e 5c 22 3a 32 38 31 34 37 35 30 38 33 35 32 37 37 38 32 34 2c 5c 22 70 6c 61 74 66 6f 72 6d 2e 74 61 72 67 65 74 5c 22 3a 36 7d 5d 2c 5c 22 63 6f 6e 74 65 6e 74 2e 74 79 70 65 5c 22 3a 37 2c 5c 22 70 6b 67 73 5c 22 3a 5b 7b 5c 22 70 66 75 6e 5c 22 3a 5c 22 4d 69 63 72 6f 73 6f 66 74 2e 4d 53 50 61 69 6e 74 5f 36 2e 32 31 30 35 2e 34 30 31 37 2e 30 5f 78 36 34 5f 5f 38 77 65 6b 79 62 33 64 38 62 62 77 65 5c 22 2c 5c 22 74 64 66 73 5c 22 3a 5b 7b Data Ascii: 4750835277824,\"platform.target\":3},{\"platform.maxVersionTested\":2814750970478592,\"platform.minVersion\":2814750835277824,\"platform.target\":6}],\"content.type\":7,\"pkgs\":[{\"pfun\":\"Microsoft.MSPaint_6.2105.4017.0_x64__8wekyb3d8bbwe\",\"tdfs\":[{

Target ID:	0
Start time:	22:51:56
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://gmail.com/
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	1
Start time:	22:51:57
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	22:52:03
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5888 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	22:52:03
Start date:	16/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5552 --field-trial-handle=1948,i,11222838486592232605,4256594581684048127,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://gmail.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Chrome Cache Entry: 181

Chrome Cache Entry: 182

Chrome Cache Entry: 183

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
http://gmail.com