Edit tour

Windows Analysis Report
https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmJTNhYiUzYSUyZnIlMmZwZXJzb25hbCUyZmFlcm9kcmlndWV6X2d1bm5hdXRvX2NvbSUyZkRvY3VtZW50cyUyZkF0dGFjaG1lbnRzJTJmSDI0MTQyMy5wZGYlM2Zjc2YlM2QxJTI

Overview

General Information

Sample URL:	https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmJTNhYiUzYSUyZnIlMmZwZXJzb25hbCUyZmF
Analysis ID:	1428919
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1956,i,14686346497288774614,5406002529245603191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmJTNhYiUzYSUyZnIlMmZwZXJzb25hbCUyZmFlcm9kcmlndWV6X2d1bm5hdXRvX2NvbSUyZkRvY3VtZW50cyUyZkF0dGFjaG1lbnRzJTJmSDI0MTQyMy5wZGYlM2Zjc2YlM2QxJTI2d2ViJTNkMSZjPUUsMSxmT1pZNThPOTZjZjNwWkY1eWU3QnhGZWM2eFRWNWtyRDdneUVGdFJaNENCSjVOQkItZ0RyMUlHdlQ1Mi01Vm95d2o4Y2h5WDJXNlFFTWhsU0o2SHJUc3pqNWVoeF9aVUhzNVNZRm8xZjJfSTdwTUNIeDdiRSZ0eXBvPTE=&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RytpUnowc0wwYVZ5TS9IN2pYN0J3ektSZ3pLWEh1Y1FlaUxrM2hUL1kzST0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL

Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0&sso_reload=true

HTTP Parser: <input type="password" .../> found

HTTP Parser: No favicon

Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.56.8.114:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.56.8.114:443 -> 192.168.2.4:49745 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.56.8.114
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmJTNhYiUzYSUyZnIlMmZwZXJzb25hbCUyZmFlcm9kcmlndWV6X2d1bm5hdXRvX2NvbSUyZkRvY3VtZW50cyUyZkF0dGFjaG1lbnRzJTJmSDI0MTQyMy5wZGYlM2Zjc2YlM2QxJTI2d2ViJTNkMSZjPUUsMSxmT1pZNThPOTZjZjNwWkY1eWU3QnhGZWM2eFRWNWtyRDdneUVGdFJaNENCSjVOQkItZ0RyMUlHdlQ1Mi01Vm95d2o4Y2h5WDJXNlFFTWhsU0o2SHJUc3pqNWVoeF9aVUhzNVNZRm8xZjJfSTdwTUNIeDdiRSZ0eXBvPTE=&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RytpUnowc0wwYVZ5TS9IN2pYN0J3ektSZ3pLWEh1Y1FlaUxrM2hUL1kzST0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ HTTP/1.1Host: us-west-2.protection.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /url?a=https%3a%2f%2fgunnauto-my.sharepoint.com%2f%3ab%3a%2fr%2fpersonal%2faerodriguez_gunnauto_com%2fDocuments%2fAttachments%2fH241423.pdf%3fcsf%3d1%26web%3d1&c=E,1,fOZY58O96cf3pZF5ye7BxFec6xTV5krD7gyEFtRZ4CBJ5NBB-gDr1IGvT52-5Voywj8chyX2W6QEMhlSJ6HrTszj5ehx_ZUHs5SYFo1f2_I7pMCHx7bE&typo=1 HTTP/1.1Host: linkprotect.cudasvc.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /:b:/r/personal/aerodriguez_gunnauto_com/Documents/Attachments/H241423.pdf?csf=1&web=1 HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/aerodriguez_gunnauto_com/Documents/Attachments/H241423.pdf?csf=1&web=1&cid=4622afbe-21fc-44e4-af46-8a7a6d9e0de2 HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2FDocuments%2FAttachments%2FH241423%2Epdf%3Fcsf%3D1%26web%3D1%26cid%3D4622afbe%2D21fc%2D44e4%2Daf46%2D8a7a6d9e0de2 HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252FDocuments%252FAttachments%252FH241423%252Epdf%253Fcsf%253D1%2526web%253D1%2526cid%253D4622afbe%252D21fc%252D44e4%252Daf46%252D8a7a6d9e0de2&Source=cookie HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGYWVyb2RyaWd1ZXolNUZndW5uYXV0byU1RmNvbSUyRkRvY3VtZW50cyUyRkF0dGFjaG1lbnRzJTJGSDI0MTQyMyUyRXBkZiUzRmNzZiUzRDElMjZ3ZWIlM0QxJTI2Y2lkJTNENDYyMmFmYmUlMkQyMWZjJTJENDRlNCUyRGFmNDYlMkQ4YTdhNmQ5ZTBkZTI=
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_ChpboAn7HyXj89A22M8mzg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_xtPRDEy3EhlAdpju-Ah7qw2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pxjdzrjcwtmbr-ntjn_f8q2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: us-west-2.protection.sophos.com

Source: chromecache_72.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_66.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_66.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_67.2.dr, chromecache_72.2.dr, chromecache_64.2.dr, chromecache_66.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_53.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_53.2.dr	String found in binary or memory: https://login.windows-ppe.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.56.8.114:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.56.8.114:443 -> 192.168.2.4:49745 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@17/42@18/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1956,i,14686346497288774614,5406002529245603191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmJTNhYiUzYSUyZnIlMmZwZXJzb25hbCUyZmFlcm9kcmlndWV6X2d1bm5hdXRvX2NvbSUyZkRvY3VtZW50cyUyZkF0dGFjaG1lbnRzJTJmSDI0MTQyMy5wZGYlM2Zjc2YlM2QxJTI2d2ViJTNkMSZjPUUsMSxmT1pZNThPOTZjZjNwWkY1eWU3QnhGZWM2eFRWNWtyRDdneUVGdFJaNENCSjVOQkItZ0RyMUlHdlQ1Mi01Vm95d2o4Y2h5WDJXNlFFTWhsU0o2SHJUc3pqNWVoeF9aVUhzNVNZRm8xZjJfSTdwTUNIeDdiRSZ0eXBvPTE=&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RytpUnowc0wwYVZ5TS9IN2pYN0J3ektSZ3pLWEh1Y1FlaUxrM2hUL1kzST0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1956,i,14686346497288774614,5406002529245603191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	0%	URL Reputation	safe
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	unknown
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	unknown
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
d2t07dpvw9bt1v.cloudfront.net	18.244.202.53	true	false	high
www.google.com	173.194.219.106	true	false	high
linkprotect.cudasvc.com	44.208.218.64	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
us-west-2.protection.sophos.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
gunnauto-my.sharepoint.com	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0&sso_reload=true	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg	false	URL Reputation: safe	unknown
https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0	false		high
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js	false		unknown
https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/Documents/Attachments/H241423.pdf?csf=1&web=1&cid=4622afbe-21fc-44e4-af46-8a7a6d9e0de2	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	false	URL Reputation: safe	unknown
https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmJTNhYiUzYSUyZnIlMmZwZXJzb25hbCUyZmFlcm9kcmlndWV6X2d1bm5hdXRvX2NvbSUyZkRvY3VtZW50cyUyZkF0dGFjaG1lbnRzJTJmSDI0MTQyMy5wZGYlM2Zjc2YlM2QxJTI2d2ViJTNkMSZjPUUsMSxmT1pZNThPOTZjZjNwWkY1eWU3QnhGZWM2eFRWNWtyRDdneUVGdFJaNENCSjVOQkItZ0RyMUlHdlQ1Mi01Vm95d2o4Y2h5WDJXNlFFTWhsU0o2SHJUc3pqNWVoeF9aVUhzNVNZRm8xZjJfSTdwTUNIeDdiRSZ0eXBvPTE=&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RytpUnowc0wwYVZ5TS9IN2pYN0J3ektSZ3pLWEh1Y1FlaUxrM2hUL1kzST0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js	false		unknown
https://gunnauto-my.sharepoint.com/:b:/r/personal/aerodriguez_gunnauto_com/Documents/Attachments/H241423.pdf?csf=1&web=1	false		unknown
https://gunnauto-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252FDocuments%252FAttachments%252FH241423%252Epdf%253Fcsf%253D1%2526web%253D1%2526cid%253D4622afbe%252D21fc%252D44e4%252Daf46%252D8a7a6d9e0de2&Source=cookie	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_xtPRDEy3EhlAdpju-Ah7qw2.js	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pxjdzrjcwtmbr-ntjn_f8q2.js	false		unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg	false	URL Reputation: safe	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg	false	URL Reputation: safe	unknown
https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgunnauto-my.sharepoint.com%2f%3ab%3a%2fr%2fpersonal%2faerodriguez_gunnauto_com%2fDocuments%2fAttachments%2fH241423.pdf%3fcsf%3d1%26web%3d1&c=E,1,fOZY58O96cf3pZF5ye7BxFec6xTV5krD7gyEFtRZ4CBJ5NBB-gDr1IGvT52-5Voywj8chyX2W6QEMhlSJ6HrTszj5ehx_ZUHs5SYFo1f2_I7pMCHx7bE&typo=1	false		unknown
https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2FDocuments%2FAttachments%2FH241423%2Epdf%3Fcsf%3D1%26web%3D1%26cid%3D4622afbe%2D21fc%2D44e4%2Daf46%2D8a7a6d9e0de2	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://knockoutjs.com/	chromecache_66.2.dr	false	high
https://github.com/douglascrockford/JSON-js	chromecache_67.2.dr, chromecache_72.2.dr, chromecache_64.2.dr, chromecache_66.2.dr	false	high
https://login.windows-ppe.net	chromecache_53.2.dr	false	high
https://login.microsoftonline.com	chromecache_53.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_66.2.dr	false	high
http://feross.org	chromecache_72.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
44.208.218.64	linkprotect.cudasvc.com	United States	14618	AMAZON-AESUS	false
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
18.244.202.53	d2t07dpvw9bt1v.cloudfront.net	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
173.194.219.106	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428919
Start date and time:	2024-04-19 21:08:53 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmJTNhYiUzYSUyZnIlMmZwZXJzb25hbCUyZmFlcm9kcmlndWV6X2d1bm5hdXRvX2NvbSUyZkRvY3VtZW50cyUyZkF0dGFjaG1lbnRzJTJmSDI0MTQyMy5wZGYlM2Zjc2YlM2QxJTI2d2ViJTNkMSZjPUUsMSxmT1pZNThPOTZjZjNwWkY1eWU3QnhGZWM2eFRWNWtyRDdneUVGdFJaNENCSjVOQkItZ0RyMUlHdlQ1Mi01Vm95d2o4Y2h5WDJXNlFFTWhsU0o2SHJUc3pqNWVoeF9aVUhzNVNZRm8xZjJfSTdwTUNIeDdiRSZ0eXBvPTE=&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RytpUnowc0wwYVZ5TS9IN2pYN0J3ektSZ3pLWEh1Y1FlaUxrM2hUL1kzST0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@17/42@18/8

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 173.194.219.94, 74.125.136.102, 74.125.136.101, 74.125.136.100, 74.125.136.138, 74.125.136.139, 74.125.136.113, 64.233.177.84, 34.104.35.123, 40.126.7.32, 40.126.28.12, 40.126.28.19, 40.126.28.22, 40.126.28.13, 40.126.28.14, 40.126.28.18, 40.126.28.21, 23.50.120.191, 23.50.120.159, 40.126.28.20, 40.126.7.35, 142.251.15.95, 172.217.215.95, 64.233.177.95, 74.125.136.95, 172.253.124.95, 142.250.9.95, 64.233.185.95, 74.125.138.95, 173.194.219.95, 142.250.105.95, 108.177.122.95, 64.233.176.95, 20.114.59.183, 23.40.205.9, 23.40.205.67, 23.40.205.16, 23.40.205.83, 23.40.205.18, 23.40.205.11, 23.40.205.26, 23.40.205.35, 23.40.205.34, 192.229.211.108, 13.85.23.206, 52.165.164.15
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, ak.privatelink.msidentity.com, a1894.dscb.akamai.net, 192965-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net, clients2.google.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, login.mso.msidentity.com, glb.sls.prod.dcat.dsp.trafficmanager.net, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.ak.prd.aadg.akadns.net, www.tm.v4.a.prd.aadg.akadns.net, ctldl.windowsupdate.com, aadcdn.msauth.net, wu-bg-shim.trafficmanager.net, firstparty-azurefd-prod.trafficmanager.net, login.msa.msidentity.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, aadcdnoriginwus2.afd.azureedge.n
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmJTNhYiUzYSUyZnIlMmZwZXJzb25hbCUyZmFlcm9kcmlndWV6X2d1bm5hdXRvX2NvbSUyZkRvY3VtZW50cyUyZkF0dGFjaG1lbnRzJTJmSDI0MTQyMy5wZGYlM2Zjc2YlM2QxJTI2d2ViJTNkMSZjPUUsMSxmT1pZNThPOTZjZjNwWkY1eWU3QnhGZWM2eFRWNWtyRDdneUVGdFJaNENCSjVOQkItZ0RyMUlHdlQ1Mi01Vm95d2o4Y2h5WDJXNlFFTWhsU0o2SHJUc3pqNWVoeF9aVUhzNVNZRm8xZjJfSTdwTUNIeDdiRSZ0eXBvPTE=&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RytpUnowc0wwYVZ5TS9IN2pYN0J3ektSZ3pLWEh1Y1FlaUxrM2hUL1kzST0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	379
Entropy (8bit):	4.942805876241154
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXADQKDTcVEq0FyX4bVGEynbtwag8R+mkbtR1dI1zAmiadc:t4pb8WsQKvkB0wX4gEkbtLv8mkbtvdIe
MD5:	2D8F86059BE176833897099EE6DDEDEB
SHA1:	93A2E327027DEED53076E86BFA7D9EEBBF0CC4B9
SHA-256:	34D8DA073F47030EE94B99D84FBE68E3345BD8AAA37EA909FF2DA00238447486
SHA-512:	64D75B1F35180FF61F5BF11D21544454DF016D0854573D75D277FCB933CE845D1436BDC822445B78C627A1FF730B39FC34B72C27D45A39E237F2CCF0876FCA4E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.982,0A10.573,10.573,0,0,0,13.44,36Zm4.8-16.32A5.76,5.76,0,1,1,24,25.44,5.766,5.766,0,0,1,18.24,19.68Z" fill="#404040"/></svg>

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1378
Entropy (8bit):	4.316299265862323
Encrypted:	false
SSDEEP:	24:t4pb8m3NquUzOqnXmZcU4BC+CaAIA5cAEisx+fUu3fLkY:zoNLUzOeXfU4BJxA5fXUWx
MD5:	F83EBFF69A4A1685E4DC9650CDAB8886
SHA1:	FD21658884945B00157557AE06803DAA6A9F10C6
SHA-256:	7B1669DA90261CDB1483950BB480AD96875F84B09BC48D1055303CE94821BF64
SHA-512:	AA21A03AB84FA0129AFCED8A56E499757A6625C9B24A81EE08F5775B9B542F71BA67EAE817D633CB4E4533A8CF6A0DDA80BD7EE8A90E95AB3D39A77F88073F23
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.494,0,0,1,32.5,40h-17A1.494,1.494,0,0,1,14,38.5v-23A1.494,1.494,0,0,1,15.5,14h4.873l-3-6h2.25l3,6h2.751l3-6h2.25l-3,6ZM32,16H23.623l1.266,2.546A1.13,1.13,0,0,1,25,19a1.009,1.009,0,0,1-1,1,1,1,0,0,1-.534-.149.974.974,0,0,1-.368-.4L21.375,16H16v22H32ZM20,26a3.92,3.92,0,0,1,.312-1.555,4.023,4.023,0,0,1,2.133-2.133,4.041,4.041,0,0,1,3.109,0,4.014,4.014,0,0,1,2.133,2.133A3.886,3.886,0,0,1,28,26a3.937,3.937,0,0,1-.288,1.485,3.987,3.987,0,0,1-.8,1.266A5.7,5.7,0,0,1,28.2,29.7a5.907,5.907,0,0,1,.968,1.251,6.388,6.388,0,0,1,.616,1.461A5.786,5.786,0,0,1,30,34H28a3.877,3.877,0,0,0-.312-1.554,4,4,0,0,0-2.133-2.133,4.011,4.011,0,0,0-3.109,0,4.023,4.023,0,0,0-2.133,2.133A3.912,3.912,0,0,0,20,33.995H18a5.786,5.786,0,0,1,.218-1.586,6.388,6.388,0,0,1,.61

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	379
Entropy (8bit):	4.942805876241154
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbC/yXADQKDTcVEq0FyX4bVGEynbtwag8R+mkbtR1dI1zAmiadc:t4pb8WsQKvkB0wX4gEkbtLv8mkbtvdIe
MD5:	2D8F86059BE176833897099EE6DDEDEB
SHA1:	93A2E327027DEED53076E86BFA7D9EEBBF0CC4B9
SHA-256:	34D8DA073F47030EE94B99D84FBE68E3345BD8AAA37EA909FF2DA00238447486
SHA-512:	64D75B1F35180FF61F5BF11D21544454DF016D0854573D75D277FCB933CE845D1436BDC822445B78C627A1FF730B39FC34B72C27D45A39E237F2CCF0876FCA4E
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.982,0A10.573,10.573,0,0,0,13.44,36Zm4.8-16.32A5.76,5.76,0,1,1,24,25.44,5.766,5.766,0,0,1,18.24,19.68Z" fill="#404040"/></svg>

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3757)
Category:	downloaded
Size (bytes):	4730
Entropy (8bit):	5.1271657856751744
Encrypted:	false
SSDEEP:	96:jPjDXOMS1WflPlZxUWRWKa1RwCEL3Aa1Rj1LjpVZG2:jP7dlZ3K2LtjLNVZG2
MD5:	04C75ABBF4A93DB4E3389D5866E22FC0
SHA1:	B8DA1F0A7DB01BE5E2C6106C79ECE0D2A17811AA
SHA-256:	F496EC64CAD15D3315586359DB1B34E9EA130EDF760C4BD78EABDC9706F460D5
SHA-512:	4BAA39EAAA5F8B358DC63A5CF04EDE531969FC494CD7E9998F26F760B01BF2A20E2D91AA59092C79BA6B0078E391EA3BC423ACD89C2068A5E1D54137C99A6159
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[36],{498:function(t,e,i

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64616)
Category:	downloaded
Size (bytes):	443943
Entropy (8bit):	5.4497506035235626
Encrypted:	false
SSDEEP:	6144:e17tl9prEilRPqNfFXQpgcNspF18AfJ9Oxb4QZE0HfNX4TJ:e1rsFXQpFSpX8z4QO1
MD5:	C6D3D10C4CB71219407698EEF8087BAB
SHA1:	3240590749D7276B00DCF485B72FA78F4F7F3D2E
SHA-256:	F142A844212962C2D1A2CE2ED38B74D60063B52FBF92BAC48FA3C8979E2E6052
SHA-512:	C06F649CED30739E23DD7A0ABAF27521BF7ADD6F6C3332515BA361BCC6761676EC0E165D1081075C35842F7C45FE08D58318A5CF116ACD6F98D5DB0DF7324A74
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_xtPRDEy3EhlAdpju-Ah7qw2.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */!function(e){function n(n){for(var t,i,o=n[0],r=n[1],s=0,c=[];s<o.length;s++)

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64612)
Category:	downloaded
Size (bytes):	113657
Entropy (8bit):	5.491599164368304
Encrypted:	false
SSDEEP:	1536:PKq+7j8gIRPY0+r5qnWiseKVeOIXYx15CevgbSvzNXteFN50Xu:bgDTMnWcdOswvgbmp8Fbiu
MD5:	5B0E3778C74235B06DA49808DD8DF90A
SHA1:	AD25897B0870B81568412F55B19898E406CC11B3
SHA-256:	7530B843A86F3155CE07CDA787A40DA87052664B09C22F3D4DB5E9238664DBE0
SHA-512:	EE1FB8F232311A45A10D2CC2A8F19B6C8F86ECE52688F909B0928C0F65AE0953EB2176D0ADEA893A371300D0E3FEE7AF046865D48FFC2812B3440D01ADAEB727
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[37],{487:function(e,t,r

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61177)
Category:	downloaded
Size (bytes):	113084
Entropy (8bit):	5.285180915082997
Encrypted:	false
SSDEEP:	1536:QpHDgBvguhw+EViazA/PWrF7qvEAFiQcpmchSeC2Jzc6VUWG:xkNh06VUT
MD5:	D62B4EDEB512B07ABEF4688E27ECDDE3
SHA1:	981A7825DA5E29938AB6FE0CBFE2DB622F7B8333
SHA-256:	4B01A0A34CE8ED4BC8A8713BE0442D49DA6A756236B7B4424622CA3DEE820F41
SHA-512:	6E91B285BEA8566EBB7829F592744A6706CF6498E6D5DC1C5A0EBDD0A685D767AA215B275A88568B957E6BE824AEE60521ED1D77D92A697A3CE0F446ECDCDDB9
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	/! Copyright (C) Microsoft Corporation. All rights reserved. //*!.------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------..This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise...//-----------------------------------------------------------------------------.twbs-bootstrap-sass (3.3.0).//-----------------------------------------------------------------------------..The MIT License (MIT)..Copyright (c) 2013 Twitter, Inc..Permission is hereby granted, free of charge, to any person

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43896)
Category:	downloaded
Size (bytes):	223759
Entropy (8bit):	5.257227710687157
Encrypted:	false
SSDEEP:	3072:KO0fqoBmncEhWcjYcB6UpO2jrksurdPvsiQj:UmcKrpO7surRve
MD5:	5252837FFA272234E1CBF2D3D83EF32C
SHA1:	CAA4E48A54A2B1CA09327E42F24F6031FDF21CDA
SHA-256:	DF2E852C347ECF82F70A0C8A4B91713FBB0914D58F2CBAB01316BFE646ABEE7C
SHA-512:	523C59BC0D2861B8F35A8D46E52C935A26001B2A2EF8197F7F6DBFC38E8F0D51A5D3753FD4F0DCCD68DA08505D3313AFCFA7CB236E0363EDA4856D41F05A233A
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js
Preview:	/!. ------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------. * . * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice and the license under which Microsoft received such Third Party IP, are set forth below. Such licenses and notices are provided for informational purposes only. Microsoft licenses the Third Party IP to you under the licensing terms for the Microsoft product. Microsoft reserves all other rights not expressly granted under this agreement, whether by implication, estoppel or otherwise.. * . * json2.js (2016-05-01). * https://github.com/douglascrockford/JSON-js. * License: Public Domain. * . * Provided for Informational Purposes Only. * . * ----------------------------------------------- END OF THIRD PARTY NOTICE ------------------------------------------. */.(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{528:function(e,t,r)

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141339
Category:	downloaded
Size (bytes):	49632
Entropy (8bit):	7.995756058904724
Encrypted:	true
SSDEEP:	1536:XOwJxyZ3lV31cfpmHBoep5KvsXS1SbI+o2Rd8yHk0GOmOY:ZJxyZ3lF3HBl5OSo238yE0GOpY
MD5:	DAF955BF2112F74E4F78B2187A8D6BEF
SHA1:	231CE9BE42327A3BC1AA7F48C03ABA46740DC456
SHA-256:	72D3BBFFAAD400572BF853223BFFD96DC0CC6A336CFA7F3452259BF468590A4D
SHA-512:	B4904C83951533E98F38F2040E22794BAADCFE528E86650DE13394195F004DFDEF66C47D8A7E4EA3A4556A535C7A570E7829CE28B38DFEEE66053DAEB0D80A4A
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_ChpboAn7HyXj89A22M8mzg2.js
Preview:	............[.8.8...+.w..OL..hpp..... .......pw....e .o?u.l.q.}.s....[.R..TUI.?..O.....S.....+.....g..Sx..r.??.;..z......W..DT....W..J.U.`.F.0r..W..7..Ie.....NT.Q.U...2......$\|.T.....Q.\9<5.P....[?..p...wI%...$n.Qm.x.bQ.....w..r.0..I%.#.?.G....?aU.HTb.T.a..q;..B.Zc...1&ph...A.c.(.B....8.A..L.L..Z#....6T.....d....m..v..w0=.....FI=..XD......xT!d....x..@<y..Fn.(W...so#!.E.X.<AE....~....Y..'.t&8.T.....".J.k.....Rm5.[k..F..$..........Qx....C.G.s../.......1....l.-......o...?.a.Ta...W...7.?.N.....2..#lXU./..T.x.....".w.......;.k.\^w.].>..mr.k53r.......k.0.I.<OE......d...#..jhE..jx.].....Y\|W....i...`.. .k.P...@.Uq.\;...T.huu....TK.Y=...I..s.A.en..K.n.;).\|.?.F.....d...\|........`....5.W..._..,$..51Qe...}.^&.J#K......<......8.(r....Y.ZR..G.zc.wc.A.pL.e&w...@<V.!. ..w.:+k..n..4..I.. .....S.....p"....8....v.l.[M.0..q..c;.....0...8.......t.\...n "..km..S...W..]......paJV.(J...g....!.\|........;.zN...5}.....DZ....=q.E.@ .Dv.z...@.d.#tE....

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32153)
Category:	downloaded
Size (bytes):	55052
Entropy (8bit):	5.379588990855403
Encrypted:	false
SSDEEP:	1536:ABqF1tlfretkF7IKbVaqDRx3/ym+d/Px2g+0wtwGixnqTPRUbx3VDg/MB+k:ABrkF7IyJvym+d/Pog+0wtwGiUig/Mt
MD5:	3D725DCEB242C2D99BAFE9D3267FC5F1
SHA1:	CF1BD2E8790F3875DDC2316EF8B055BA15447C35
SHA-256:	33CEA1C907E3D621EAFE2BD781DF9EEE3A2A96E7CE8375B01E103D0533DB8C09
SHA-512:	AEA7B103B1CFCC0EFD0151993874AFCDC2F52F0397A1500BF190E4F622E7E1115B4EA32965F9E0432066689847A2C2EAB9E3CDE0B0B0B343F0FFA8390773AC10
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pxjdzrjcwtmbr-ntjn_f8q2.js
Preview:	!function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.StringsVariantId,s=r.AllowedIdentitiesType;n.registerSource("str",function(e,o){if(e.WF_STR_SignupLink_AriaLabel_Text="Create a Microsoft account",e.WF_STR_SignupLink_AriaLabel_Generic_Text="Create a new account",e.CT_STR_CookieBanner_Link_AriaLabel="Learn more about Microsoft's Cookie Policy",e.WF_STR_HeaderDefault_Title=o.iLoginStringsVariantId===a.CombinedSigninSignupV2WelcomeTitle?"Welcome":"Sign in",e.STR_Footer_IcpLicense_Text=".ICP.13015306.-10",o.oAppCobranding&&o.oAppCobranding.friendlyAppName){var i=o.fBreakBrandingSigninString?"to continue to {0}":"Continue to {0}";e.WF_STR_App_Title=t.format(i,o.oAppCobranding.friendlyAppName)}switch(o.oAppCobranding&&o.oAppCobranding.signinDescription&&(e.WF_STR_Default_Desc=o.oAppCobrand

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1378
Entropy (8bit):	4.316299265862323
Encrypted:	false
SSDEEP:	24:t4pb8m3NquUzOqnXmZcU4BC+CaAIA5cAEisx+fUu3fLkY:zoNLUzOeXfU4BJxA5fXUWx
MD5:	F83EBFF69A4A1685E4DC9650CDAB8886
SHA1:	FD21658884945B00157557AE06803DAA6A9F10C6
SHA-256:	7B1669DA90261CDB1483950BB480AD96875F84B09BC48D1055303CE94821BF64
SHA-512:	AA21A03AB84FA0129AFCED8A56E499757A6625C9B24A81EE08F5775B9B542F71BA67EAE817D633CB4E4533A8CF6A0DDA80BD7EE8A90E95AB3D39A77F88073F23
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.494,0,0,1,32.5,40h-17A1.494,1.494,0,0,1,14,38.5v-23A1.494,1.494,0,0,1,15.5,14h4.873l-3-6h2.25l3,6h2.751l3-6h2.25l-3,6ZM32,16H23.623l1.266,2.546A1.13,1.13,0,0,1,25,19a1.009,1.009,0,0,1-1,1,1,1,0,0,1-.534-.149.974.974,0,0,1-.368-.4L21.375,16H16v22H32ZM20,26a3.92,3.92,0,0,1,.312-1.555,4.023,4.023,0,0,1,2.133-2.133,4.041,4.041,0,0,1,3.109,0,4.014,4.014,0,0,1,2.133,2.133A3.886,3.886,0,0,1,28,26a3.937,3.937,0,0,1-.288,1.485,3.987,3.987,0,0,1-.8,1.266A5.7,5.7,0,0,1,28.2,29.7a5.907,5.907,0,0,1,.968,1.251,6.388,6.388,0,0,1,.616,1.461A5.786,5.786,0,0,1,30,34H28a3.877,3.877,0,0,0-.312-1.554,4,4,0,0,0-2.133-2.133,4.011,4.011,0,0,0-3.109,0,4.023,4.023,0,0,0-2.133,2.133A3.912,3.912,0,0,0,20,33.995H18a5.786,5.786,0,0,1,.218-1.586,6.388,6.388,0,0,1,.61

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 21:09:36.545133114 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 19, 2024 21:09:38.529506922 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 19, 2024 21:09:46.870034933 CEST	49735	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:46.870085001 CEST	443	49735	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:46.870307922 CEST	49735	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:46.870798111 CEST	49736	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:46.870853901 CEST	443	49736	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:46.870929956 CEST	49736	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:46.871381998 CEST	49735	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:46.871411085 CEST	443	49735	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:46.871782064 CEST	49736	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:46.871814013 CEST	443	49736	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.091700077 CEST	443	49735	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.092299938 CEST	49735	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.092335939 CEST	443	49735	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.093766928 CEST	443	49735	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.094110966 CEST	49735	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.098208904 CEST	49735	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.098411083 CEST	443	49735	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.098586082 CEST	49735	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.101697922 CEST	443	49736	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.101962090 CEST	49736	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.101984978 CEST	443	49736	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.103600025 CEST	443	49736	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.103686094 CEST	49736	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.104821920 CEST	49736	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.104911089 CEST	443	49736	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.140163898 CEST	443	49735	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.151786089 CEST	49736	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.151802063 CEST	443	49736	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.151896954 CEST	49735	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.151964903 CEST	443	49735	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.197931051 CEST	49736	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.198057890 CEST	49735	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.674513102 CEST	443	49735	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.674598932 CEST	443	49735	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.674818993 CEST	49735	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.675379992 CEST	49735	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:09:47.675414085 CEST	443	49735	18.244.202.53	192.168.2.4
Apr 19, 2024 21:09:47.787111998 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:09:47.787193060 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:09:47.787426949 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:09:47.787796974 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:09:47.787827969 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:09:48.134022951 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 19, 2024 21:09:48.151587963 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:09:48.151984930 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:09:48.152018070 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:09:48.153486013 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:09:48.153568029 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:09:48.155060053 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:09:48.155149937 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:09:48.155333996 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:09:48.155349970 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:09:48.201329947 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:09:48.322360039 CEST	49740	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:09:48.322475910 CEST	443	49740	173.194.219.106	192.168.2.4
Apr 19, 2024 21:09:48.322554111 CEST	49740	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:09:48.323126078 CEST	49740	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:09:48.323206902 CEST	443	49740	173.194.219.106	192.168.2.4
Apr 19, 2024 21:09:48.574197054 CEST	443	49740	173.194.219.106	192.168.2.4
Apr 19, 2024 21:09:48.575181007 CEST	49740	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:09:48.575239897 CEST	443	49740	173.194.219.106	192.168.2.4
Apr 19, 2024 21:09:48.576935053 CEST	443	49740	173.194.219.106	192.168.2.4
Apr 19, 2024 21:09:48.577085972 CEST	49740	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:09:48.579827070 CEST	49740	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:09:48.579936981 CEST	443	49740	173.194.219.106	192.168.2.4
Apr 19, 2024 21:09:48.624079943 CEST	49740	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:09:48.624164104 CEST	443	49740	173.194.219.106	192.168.2.4
Apr 19, 2024 21:09:48.669554949 CEST	49740	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:09:48.773421049 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:09:48.773504972 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:09:48.773560047 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:09:48.776514053 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:09:48.776555061 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:09:49.016215086 CEST	49741	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.016299009 CEST	443	49741	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.016386032 CEST	49741	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.016577959 CEST	49741	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.016608953 CEST	443	49741	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.343913078 CEST	443	49741	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.344160080 CEST	49741	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.344182968 CEST	443	49741	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.345607996 CEST	443	49741	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.345668077 CEST	49741	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.357215881 CEST	49741	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.357295990 CEST	443	49741	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.357525110 CEST	49741	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.357539892 CEST	443	49741	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.405056000 CEST	49741	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.506170988 CEST	443	49741	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.506253958 CEST	443	49741	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.506314039 CEST	49741	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.511707067 CEST	49741	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.511723042 CEST	443	49741	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.533529997 CEST	49742	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.533561945 CEST	443	49742	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.533649921 CEST	49742	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.534173965 CEST	49742	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.534197092 CEST	443	49742	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.817136049 CEST	49743	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:49.817230940 CEST	443	49743	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:49.817389011 CEST	49743	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:49.820425987 CEST	49743	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:49.820502043 CEST	443	49743	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:49.856395006 CEST	443	49742	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.856918097 CEST	49742	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.856930971 CEST	443	49742	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.857414007 CEST	443	49742	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.860481024 CEST	49742	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.860572100 CEST	443	49742	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:49.861021042 CEST	49742	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:49.904154062 CEST	443	49742	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.068794966 CEST	443	49742	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.068885088 CEST	443	49742	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.068929911 CEST	49742	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.069487095 CEST	49742	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.069509029 CEST	443	49742	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.072268963 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.072338104 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.072431087 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.072830915 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.072865963 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.073103905 CEST	443	49743	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.073236942 CEST	49743	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.080183983 CEST	49743	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.080235004 CEST	443	49743	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.080671072 CEST	443	49743	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.122910976 CEST	49743	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.145109892 CEST	49743	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.188148975 CEST	443	49743	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.291095972 CEST	443	49743	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.291238070 CEST	443	49743	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.291440964 CEST	49743	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.291440964 CEST	49743	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.291532040 CEST	49743	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.291595936 CEST	443	49743	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.329855919 CEST	49745	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.329946995 CEST	443	49745	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.330058098 CEST	49745	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.330348015 CEST	49745	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.330382109 CEST	443	49745	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.394788027 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.395037889 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.395076036 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.395567894 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.395904064 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.396001101 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.396039009 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.440160036 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.449827909 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.556133032 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.556159973 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.556210995 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.556230068 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.556263924 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.556379080 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.557133913 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.557162046 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.557187080 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.557267904 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.569060087 CEST	443	49745	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.569134951 CEST	49745	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.570636034 CEST	49745	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.570656061 CEST	443	49745	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.571013927 CEST	443	49745	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.572261095 CEST	49745	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.620116949 CEST	443	49745	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.695003033 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.695035934 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.695086956 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.698410988 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:50.698422909 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:50.807723045 CEST	443	49745	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.807873011 CEST	443	49745	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.807966948 CEST	49745	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.834621906 CEST	49745	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.834623098 CEST	49745	443	192.168.2.4	23.56.8.114
Apr 19, 2024 21:09:50.834656000 CEST	443	49745	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:50.834681988 CEST	443	49745	23.56.8.114	192.168.2.4
Apr 19, 2024 21:09:51.027785063 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:51.028275967 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:51.028342962 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:51.029500008 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:51.030684948 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:51.030867100 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:51.030966043 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:51.072149992 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:51.345938921 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:51.345958948 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:51.346013069 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:51.346020937 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:51.346055031 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:51.346100092 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:51.346123934 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:51.346147060 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:51.346187115 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:51.348813057 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:09:51.348839998 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:09:52.850544930 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:52.850584984 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:52.850706100 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:52.853167057 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:52.853189945 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.174499035 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.174843073 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.174873114 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.175837994 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.175895929 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.177139044 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.177201033 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.177361965 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.177371979 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.217318058 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.485819101 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.485841036 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.485846996 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.485903025 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.485913992 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.485970974 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.485985994 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.486001015 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.486002922 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.486013889 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.486027956 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.486047983 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.486057997 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.486073971 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.486109972 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.590178967 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.590198040 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.590231895 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.590262890 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.590293884 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.590308905 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:53.590310097 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.590353966 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.590914011 CEST	49748	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:09:53.590928078 CEST	443	49748	13.107.246.41	192.168.2.4
Apr 19, 2024 21:09:54.478880882 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.478959084 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.478996038 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.479047060 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.479077101 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.479079008 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.479150057 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.479165077 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.479240894 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.480652094 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.480690002 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.480868101 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.480947971 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.481142044 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.481221914 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.802686930 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.802937031 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.802968979 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.803842068 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.803900003 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.804786921 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.804842949 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.805015087 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.805023909 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.805248022 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.805408955 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.805437088 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.806888103 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.806952000 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.807781935 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.807862997 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.807912111 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.811043024 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.811523914 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.811580896 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.813235044 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.813348055 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.814069986 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.814232111 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.814246893 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.814307928 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.848118067 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.856448889 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.856479883 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.856528044 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.856537104 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.856585026 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:54.902281046 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:54.902291059 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008037090 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008060932 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008136988 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008146048 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008171082 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008191109 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008200884 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008214951 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008214951 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008280993 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008322001 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008331060 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008342981 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008342981 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008343935 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008346081 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008353949 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008368015 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008385897 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008407116 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008408070 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008434057 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008434057 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008435011 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008435011 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008470058 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008500099 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008572102 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008572102 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008572102 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008572102 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008572102 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008642912 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008685112 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008745909 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.008821964 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.008872986 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.009021044 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.009021044 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.009082079 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010246038 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010368109 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010377884 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010396957 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010406017 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010411978 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.010412931 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010437012 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.010448933 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010458946 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010471106 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.010483980 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.010525942 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010550022 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010575056 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.010582924 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.010605097 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.061415911 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.061491013 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.061537027 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.112251997 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.112282991 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.112330914 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.112446070 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.112473011 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.112473011 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.112473011 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.112543106 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.112593889 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.112596035 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.112598896 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.112617970 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.112621069 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.112653017 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.112664938 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.112729073 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.112760067 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.112848997 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.112971067 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.112983942 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.113027096 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.113046885 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.113070965 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.113111973 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.113418102 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.113430977 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.113460064 CEST	49753	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.113466024 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.113481998 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.113507986 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.113517046 CEST	443	49753	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.113571882 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.114470005 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.114492893 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.114516020 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.114525080 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.114551067 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.114558935 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.114571095 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.114603996 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.114797115 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.114819050 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.114844084 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.114851952 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.114865065 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.114883900 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.152368069 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.152381897 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.152451992 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.152513027 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.152537107 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.152560949 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.152605057 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.152615070 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.152625084 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.152643919 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.152710915 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.200304985 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.200337887 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.200447083 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.200447083 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.200476885 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.200998068 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.218220949 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.218308926 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.218328953 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.218404055 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.220887899 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.220907927 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.221070051 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.221070051 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.221129894 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.221188068 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.221297026 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.221314907 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.221445084 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.221445084 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.221510887 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.221569061 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.221767902 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.221787930 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.221822023 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.221837997 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.221865892 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.221888065 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.221898079 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.222182035 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.222204924 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.222239017 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.222254038 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.222282887 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.222574949 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.222593069 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.222621918 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.222636938 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.222666979 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.222994089 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.223016977 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.223052025 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.223071098 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.223099947 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.245929003 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.245990038 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.246068001 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.246815920 CEST	49755	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.246853113 CEST	443	49755	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.257989883 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.258011103 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.258121967 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.258151054 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.258152008 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.258213043 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.258265972 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.303101063 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.327445984 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.327501059 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.327610970 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.327641010 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.327747107 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.327769995 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.327883959 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.327883959 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.327914953 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.327961922 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.328216076 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.328233957 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.328371048 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.328371048 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.328432083 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.328490973 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.328671932 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.328697920 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.328723907 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.328742027 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.328769922 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.329058886 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.329081059 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.329113007 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.329132080 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.329159975 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.329184055 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.329195976 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.329446077 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.329463959 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.329492092 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.329504967 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.329533100 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.329864979 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.329888105 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.329924107 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.329938889 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.329967976 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.330310106 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.330327988 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.330365896 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.330380917 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.330408096 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.330719948 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.330741882 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.330785990 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.330797911 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.330827951 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.331160069 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.331177950 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.331206083 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.331219912 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.331248999 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.331573009 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.331594944 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.331628084 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.331645966 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.331671000 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.331991911 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.332010984 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.332042933 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.332056046 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.332083941 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.332503080 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.332525015 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.332575083 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.332575083 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.332593918 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.332600117 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.332655907 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.332668066 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.332704067 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.332741022 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.334117889 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.338344097 CEST	49754	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.338402987 CEST	443	49754	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.431586027 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.431617975 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.431720018 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.432177067 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.432265043 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.432342052 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.432429075 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.432442904 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.432595968 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.432634115 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.750504017 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.750842094 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.750879049 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.752341986 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.752422094 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.752851009 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.752969980 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.752969980 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.757055998 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.757237911 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.757247925 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.758976936 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.759046078 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.760157108 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.760293961 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.760469913 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.760477066 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.796768904 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.796791077 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.812273026 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.842798948 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.959305048 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.959672928 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.959682941 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.959700108 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.959717989 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.959724903 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.959743023 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.959773064 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.959799051 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.959822893 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.959834099 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.959860086 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.959902048 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.965619087 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.965758085 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.965780020 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.965810061 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.965821028 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.965845108 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.965854883 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.965862989 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.965873957 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.965897083 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.965920925 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.965929985 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.965940952 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.966100931 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.966160059 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.966165066 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.966197014 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:55.966233969 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.971172094 CEST	49759	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:55.971205950 CEST	443	49759	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.012774944 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.069705009 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.069763899 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.069825888 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.069837093 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.069866896 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.069886923 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.069983959 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.070005894 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.070039034 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.070044041 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.070069075 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.070086956 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.108910084 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.108969927 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.109052896 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.109060049 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.109093904 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.109100103 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.152621984 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.152695894 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.152724981 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.152730942 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.152762890 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.152787924 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.174869061 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.174981117 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175051928 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.175057888 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175185919 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.175192118 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175283909 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175364017 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.175370932 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175411940 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175451994 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175477028 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.175489902 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175518036 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.175610065 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175662041 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175669909 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.175698996 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175724983 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.175889969 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175932884 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175957918 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.175965071 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.175991058 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.176253080 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.176306009 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.176318884 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.176330090 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.176361084 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.213222027 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.213279963 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.213352919 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.213361979 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.213395119 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.213399887 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.213462114 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:56.213468075 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.213612080 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.214014053 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:56.214076042 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.089056015 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.089093924 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.089140892 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.089983940 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.089996099 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.091027975 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.133622885 CEST	49758	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.133641958 CEST	443	49758	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.414784908 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.437961102 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.437973976 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.441895962 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.441984892 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.444153070 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.444442987 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.444577932 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.474931955 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.475014925 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.475120068 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.475531101 CEST	49762	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.475616932 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.475697994 CEST	49762	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.475923061 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.476018906 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.476080894 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.476272106 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.476306915 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.476608038 CEST	49762	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.476644039 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.476862907 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.476898909 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.496150970 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.496157885 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.537025928 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.623486996 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.623626947 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.623650074 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.623683929 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.623696089 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.623717070 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.623722076 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.623738050 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.623769999 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.623779058 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.623795986 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.623807907 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.623807907 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.624062061 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.624108076 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.625796080 CEST	49760	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.625822067 CEST	443	49760	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.794434071 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.799516916 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.800889015 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.844542980 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.844542980 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.844583035 CEST	49762	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.866106987 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.866132975 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.867063999 CEST	49762	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.867089033 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.867396116 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.867415905 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.867794037 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.867857933 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.868293047 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.868417978 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.868691921 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.868793964 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.868815899 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.869153976 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.869956017 CEST	49762	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.870198011 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.871184111 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.871445894 CEST	49762	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.871512890 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.871537924 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.871577024 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.912909031 CEST	49765	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.912983894 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.913058996 CEST	49765	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.914803982 CEST	49765	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.914833069 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.916120052 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:57.923837900 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:57.923840046 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.003459930 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.003541946 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.003586054 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.003602028 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.003621101 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.003664017 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.008567095 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.008791924 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.008811951 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.008852005 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.008852959 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.008872986 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.008874893 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.008893013 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.008922100 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.008922100 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.008939028 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.008940935 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.008976936 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.009027004 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.009140968 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.009183884 CEST	49762	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.009198904 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.009238958 CEST	49762	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.009284019 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.009301901 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.009318113 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.009339094 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.009346008 CEST	49762	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.009350061 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.009358883 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.009396076 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.009396076 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.009396076 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.009419918 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.032813072 CEST	49763	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.032850981 CEST	443	49763	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.049525023 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.054802895 CEST	49762	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.054841995 CEST	443	49762	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.113162041 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.113188982 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.113240004 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.113272905 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.113348961 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.113362074 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.113389015 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.113408089 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.113414049 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.113442898 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.113480091 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.113486052 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.113501072 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.113513947 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.113544941 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.113567114 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.152525902 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.152592897 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.152607918 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.152625084 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.152654886 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.152674913 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.202903032 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.202965021 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.202979088 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.202994108 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.203020096 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.203038931 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.219144106 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.219219923 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.219233036 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.219288111 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.219331980 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.219378948 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.230436087 CEST	49761	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.230457067 CEST	443	49761	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.240581989 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.241441011 CEST	49765	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.241503954 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.242625952 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.286494017 CEST	49765	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.286989927 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.288305998 CEST	49765	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.332139015 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.433808088 CEST	49766	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.433845997 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.433901072 CEST	49766	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.434443951 CEST	49766	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.434463024 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.449927092 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.450072050 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.450153112 CEST	49765	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.450197935 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.450252056 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.450333118 CEST	49765	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.524938107 CEST	49765	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.524974108 CEST	443	49765	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.565721989 CEST	443	49740	173.194.219.106	192.168.2.4
Apr 19, 2024 21:09:58.565778017 CEST	443	49740	173.194.219.106	192.168.2.4
Apr 19, 2024 21:09:58.566009045 CEST	49740	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:09:58.590663910 CEST	49767	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.590696096 CEST	49740	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:09:58.590740919 CEST	443	49767	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.590768099 CEST	443	49740	173.194.219.106	192.168.2.4
Apr 19, 2024 21:09:58.591067076 CEST	49767	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.592518091 CEST	49767	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.592585087 CEST	443	49767	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.757649899 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.758071899 CEST	49766	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.758100033 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.758569956 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.760621071 CEST	49766	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.760709047 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.760876894 CEST	49766	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.808119059 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.916774035 CEST	443	49767	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.917135000 CEST	49767	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.917162895 CEST	443	49767	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.917727947 CEST	443	49767	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.918518066 CEST	49767	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.918667078 CEST	443	49767	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.918729067 CEST	49767	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.960192919 CEST	443	49767	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.965331078 CEST	49767	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.966491938 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.966662884 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.966747046 CEST	49766	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.966774940 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.966816902 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:58.967089891 CEST	49766	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.972493887 CEST	49766	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:58.972521067 CEST	443	49766	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.036252022 CEST	49768	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:59.036336899 CEST	443	49768	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.040641069 CEST	49768	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:59.044496059 CEST	49768	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:59.044531107 CEST	443	49768	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.124995947 CEST	443	49767	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.125137091 CEST	443	49767	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.125288010 CEST	443	49767	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.125335932 CEST	49767	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:59.128508091 CEST	49767	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:59.148215055 CEST	49767	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:59.148272038 CEST	443	49767	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.367270947 CEST	443	49768	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.416536093 CEST	49768	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:59.416598082 CEST	443	49768	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.418761015 CEST	443	49768	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.474821091 CEST	49768	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:59.474988937 CEST	49768	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:09:59.475317955 CEST	443	49768	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.581173897 CEST	443	49768	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.581346035 CEST	443	49768	152.199.4.44	192.168.2.4
Apr 19, 2024 21:09:59.582523108 CEST	49768	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:00.177006960 CEST	49768	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:00.177073002 CEST	443	49768	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:01.769737005 CEST	49672	443	192.168.2.4	173.222.162.32
Apr 19, 2024 21:10:01.769777060 CEST	443	49672	173.222.162.32	192.168.2.4
Apr 19, 2024 21:10:13.351397038 CEST	49777	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.351474047 CEST	443	49777	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.351557970 CEST	49777	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.351708889 CEST	49777	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.351732969 CEST	443	49777	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.352045059 CEST	49778	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.352116108 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.352205992 CEST	49778	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.352427006 CEST	49778	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.352461100 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.352806091 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.352813005 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.352945089 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.353106976 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.353120089 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.679692984 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.679698944 CEST	443	49777	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.679795980 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.680000067 CEST	49778	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.680022955 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.680196047 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.680207968 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.680212021 CEST	49777	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.680272102 CEST	443	49777	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.680383921 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.680778980 CEST	443	49777	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.680929899 CEST	49778	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.680998087 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.681231022 CEST	49777	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.681324959 CEST	443	49777	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.681488037 CEST	49778	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.681595087 CEST	49777	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.681655884 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.681710005 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.682087898 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.682167053 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.682229996 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.682236910 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.723539114 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.724157095 CEST	443	49777	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.728113890 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.888202906 CEST	443	49777	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.888331890 CEST	443	49777	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.888458014 CEST	49777	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.888488054 CEST	443	49777	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.888540030 CEST	49777	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.889489889 CEST	49777	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.889525890 CEST	443	49777	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.890301943 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.890464067 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.890522003 CEST	49778	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.890542030 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.890608072 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.890657902 CEST	49778	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.892167091 CEST	49778	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.892179966 CEST	443	49778	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.894614935 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.894684076 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.894753933 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.894763947 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.894776106 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.894804955 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.894831896 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.896174908 CEST	49779	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.896181107 CEST	443	49779	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.899146080 CEST	49780	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.899226904 CEST	443	49780	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.899293900 CEST	49780	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.899501085 CEST	49780	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.899535894 CEST	443	49780	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.900471926 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.900506020 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:13.900567055 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.900787115 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:13.900801897 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.165738106 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.165827990 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.165905952 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.166564941 CEST	49783	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.166646957 CEST	443	49783	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.166713953 CEST	49783	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.167022943 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.167054892 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.167459965 CEST	49783	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.167494059 CEST	443	49783	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.222486973 CEST	443	49780	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.222707033 CEST	49780	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.222743988 CEST	443	49780	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.223861933 CEST	443	49780	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.224190950 CEST	49780	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.224307060 CEST	49780	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.224353075 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.224376917 CEST	443	49780	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.224533081 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.224545956 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.225656986 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.226000071 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.226130962 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.226167917 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.265677929 CEST	49780	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.267426014 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.429514885 CEST	443	49780	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.429692984 CEST	443	49780	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.429753065 CEST	49780	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.429780006 CEST	443	49780	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.429828882 CEST	443	49780	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.429886103 CEST	49780	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.430530071 CEST	49780	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.430555105 CEST	443	49780	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.431948900 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.432146072 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.432202101 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.432214975 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.432260036 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.432301044 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.432344913 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.432827950 CEST	49781	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.432845116 CEST	443	49781	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.488696098 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.488914967 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.488955975 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.490044117 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.490391016 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.490529060 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.490541935 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.490577936 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.490633011 CEST	443	49783	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.490792036 CEST	49783	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.490825891 CEST	443	49783	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.491933107 CEST	443	49783	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.492219925 CEST	49783	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.492299080 CEST	49783	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.492311954 CEST	443	49783	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.492444038 CEST	443	49783	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.543648958 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.543657064 CEST	49783	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.695806026 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.696027040 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.696254015 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.698111057 CEST	443	49783	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.698162079 CEST	49782	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.698215008 CEST	443	49782	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.698457956 CEST	443	49783	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.698589087 CEST	49783	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.700505972 CEST	49783	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.700536966 CEST	443	49783	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.703465939 CEST	49784	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.703490973 CEST	443	49784	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.703632116 CEST	49784	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.703916073 CEST	49784	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.703933001 CEST	443	49784	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.704746962 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.704770088 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:14.704996109 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.704996109 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:14.705023050 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.027131081 CEST	443	49784	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.027493000 CEST	49784	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.027518988 CEST	443	49784	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.028033018 CEST	443	49784	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.028491020 CEST	49784	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.028491020 CEST	49784	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.028582096 CEST	443	49784	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.030020952 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.030210972 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.030226946 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.031327009 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.031716108 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.031716108 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.031886101 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.075428963 CEST	49784	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.075540066 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.233870983 CEST	443	49784	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.234117031 CEST	443	49784	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.234359026 CEST	49784	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.234829903 CEST	49784	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.234862089 CEST	443	49784	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.237632990 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.237863064 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:15.238118887 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.238493919 CEST	49785	443	192.168.2.4	152.199.4.44
Apr 19, 2024 21:10:15.238502026 CEST	443	49785	152.199.4.44	192.168.2.4
Apr 19, 2024 21:10:17.080913067 CEST	443	49736	18.244.202.53	192.168.2.4
Apr 19, 2024 21:10:17.081084967 CEST	443	49736	18.244.202.53	192.168.2.4
Apr 19, 2024 21:10:17.081190109 CEST	49736	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:10:17.312969923 CEST	49736	443	192.168.2.4	18.244.202.53
Apr 19, 2024 21:10:17.313015938 CEST	443	49736	18.244.202.53	192.168.2.4
Apr 19, 2024 21:10:48.264117002 CEST	49788	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:10:48.264147997 CEST	443	49788	173.194.219.106	192.168.2.4
Apr 19, 2024 21:10:48.264476061 CEST	49788	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:10:48.264849901 CEST	49788	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:10:48.264862061 CEST	443	49788	173.194.219.106	192.168.2.4
Apr 19, 2024 21:10:48.484049082 CEST	443	49788	173.194.219.106	192.168.2.4
Apr 19, 2024 21:10:48.484631062 CEST	49788	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:10:48.484642029 CEST	443	49788	173.194.219.106	192.168.2.4
Apr 19, 2024 21:10:48.485719919 CEST	443	49788	173.194.219.106	192.168.2.4
Apr 19, 2024 21:10:48.486754894 CEST	49788	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:10:48.486918926 CEST	443	49788	173.194.219.106	192.168.2.4
Apr 19, 2024 21:10:48.529247999 CEST	49788	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:10:55.498030901 CEST	49723	80	192.168.2.4	199.232.210.172
Apr 19, 2024 21:10:55.498200893 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 19, 2024 21:10:55.601681948 CEST	80	49723	199.232.210.172	192.168.2.4
Apr 19, 2024 21:10:55.601773977 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 19, 2024 21:10:55.601855993 CEST	80	49723	199.232.210.172	192.168.2.4
Apr 19, 2024 21:10:55.602108002 CEST	49723	80	192.168.2.4	199.232.210.172
Apr 19, 2024 21:10:55.602161884 CEST	80	49724	199.232.210.172	192.168.2.4
Apr 19, 2024 21:10:55.602355957 CEST	49724	80	192.168.2.4	199.232.210.172
Apr 19, 2024 21:10:58.478352070 CEST	443	49788	173.194.219.106	192.168.2.4
Apr 19, 2024 21:10:58.478423119 CEST	443	49788	173.194.219.106	192.168.2.4
Apr 19, 2024 21:10:58.478637934 CEST	49788	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:10:59.313002110 CEST	49788	443	192.168.2.4	173.194.219.106
Apr 19, 2024 21:10:59.313025951 CEST	443	49788	173.194.219.106	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 21:09:44.523010015 CEST	53	58444	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:44.786808968 CEST	53	54750	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:45.530879021 CEST	53	57838	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:46.735807896 CEST	54829	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:46.736027002 CEST	59047	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:46.858269930 CEST	53	54829	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:46.863984108 CEST	53	59047	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:47.681282043 CEST	54506	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:47.681497097 CEST	65079	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:47.785636902 CEST	53	54506	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:47.786469936 CEST	53	65079	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:48.214301109 CEST	54788	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:48.214718103 CEST	51075	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:48.320072889 CEST	53	51075	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:48.320739031 CEST	53	54788	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:48.778281927 CEST	61109	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:48.778687954 CEST	54655	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:51.350117922 CEST	58491	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:51.350615025 CEST	54097	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:54.299252987 CEST	50203	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:54.299597979 CEST	57060	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:54.372153997 CEST	55988	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:54.372509956 CEST	54751	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:54.476946115 CEST	53	55988	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:54.478190899 CEST	53	54751	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:56.052040100 CEST	56846	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:56.052165985 CEST	54826	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:56.157830954 CEST	53	56846	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:56.157895088 CEST	53	54826	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:57.079397917 CEST	49753	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:57.080761909 CEST	52886	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:09:57.184535980 CEST	53	49753	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:57.185693026 CEST	53	52886	1.1.1.1	192.168.2.4
Apr 19, 2024 21:09:57.617219925 CEST	53	58373	1.1.1.1	192.168.2.4
Apr 19, 2024 21:10:03.276300907 CEST	53	55162	1.1.1.1	192.168.2.4
Apr 19, 2024 21:10:07.079828978 CEST	138	138	192.168.2.4	192.168.2.255
Apr 19, 2024 21:10:22.101355076 CEST	53	60833	1.1.1.1	192.168.2.4
Apr 19, 2024 21:10:43.797323942 CEST	53	50885	1.1.1.1	192.168.2.4
Apr 19, 2024 21:10:44.905497074 CEST	53	50811	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 19, 2024 21:09:57.184633017 CEST	192.168.2.4	1.1.1.1	c21b	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 21:09:46.735807896 CEST	192.168.2.4	1.1.1.1	0x3b3b	Standard query (0)	us-west-2.protection.sophos.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:46.736027002 CEST	192.168.2.4	1.1.1.1	0x7294	Standard query (0)	us-west-2.protection.sophos.com	65	IN (0x0001)	false
Apr 19, 2024 21:09:47.681282043 CEST	192.168.2.4	1.1.1.1	0x18a3	Standard query (0)	linkprotect.cudasvc.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:47.681497097 CEST	192.168.2.4	1.1.1.1	0x484e	Standard query (0)	linkprotect.cudasvc.com	65	IN (0x0001)	false
Apr 19, 2024 21:09:48.214301109 CEST	192.168.2.4	1.1.1.1	0xa5a9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:48.214718103 CEST	192.168.2.4	1.1.1.1	0x9217	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 21:09:48.778281927 CEST	192.168.2.4	1.1.1.1	0x4dc1	Standard query (0)	gunnauto-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:48.778687954 CEST	192.168.2.4	1.1.1.1	0xd633	Standard query (0)	gunnauto-my.sharepoint.com	65	IN (0x0001)	false
Apr 19, 2024 21:09:51.350117922 CEST	192.168.2.4	1.1.1.1	0x3b02	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:51.350615025 CEST	192.168.2.4	1.1.1.1	0x73dc	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Apr 19, 2024 21:09:54.299252987 CEST	192.168.2.4	1.1.1.1	0xeed	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:54.299597979 CEST	192.168.2.4	1.1.1.1	0x8ea	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Apr 19, 2024 21:09:54.372153997 CEST	192.168.2.4	1.1.1.1	0x623f	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:54.372509956 CEST	192.168.2.4	1.1.1.1	0xafb8	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 19, 2024 21:09:56.052040100 CEST	192.168.2.4	1.1.1.1	0xbc61	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:56.052165985 CEST	192.168.2.4	1.1.1.1	0xaa0	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 19, 2024 21:09:57.079397917 CEST	192.168.2.4	1.1.1.1	0x4670	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:57.080761909 CEST	192.168.2.4	1.1.1.1	0x16b2	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 21:09:46.858269930 CEST	1.1.1.1	192.168.2.4	0x3b3b	No error (0)	us-west-2.protection.sophos.com	d2t07dpvw9bt1v.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:46.858269930 CEST	1.1.1.1	192.168.2.4	0x3b3b	No error (0)	d2t07dpvw9bt1v.cloudfront.net		18.244.202.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:46.858269930 CEST	1.1.1.1	192.168.2.4	0x3b3b	No error (0)	d2t07dpvw9bt1v.cloudfront.net		18.244.202.107	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:46.858269930 CEST	1.1.1.1	192.168.2.4	0x3b3b	No error (0)	d2t07dpvw9bt1v.cloudfront.net		18.244.202.11	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:46.858269930 CEST	1.1.1.1	192.168.2.4	0x3b3b	No error (0)	d2t07dpvw9bt1v.cloudfront.net		18.244.202.15	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:46.863984108 CEST	1.1.1.1	192.168.2.4	0x7294	No error (0)	us-west-2.protection.sophos.com	d2t07dpvw9bt1v.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:47.785636902 CEST	1.1.1.1	192.168.2.4	0x18a3	No error (0)	linkprotect.cudasvc.com		44.208.218.64	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:47.785636902 CEST	1.1.1.1	192.168.2.4	0x18a3	No error (0)	linkprotect.cudasvc.com		52.45.138.49	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:48.320072889 CEST	1.1.1.1	192.168.2.4	0x9217	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 21:09:48.320739031 CEST	1.1.1.1	192.168.2.4	0xa5a9	No error (0)	www.google.com		173.194.219.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:48.320739031 CEST	1.1.1.1	192.168.2.4	0xa5a9	No error (0)	www.google.com		173.194.219.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:48.320739031 CEST	1.1.1.1	192.168.2.4	0xa5a9	No error (0)	www.google.com		173.194.219.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:48.320739031 CEST	1.1.1.1	192.168.2.4	0xa5a9	No error (0)	www.google.com		173.194.219.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:48.320739031 CEST	1.1.1.1	192.168.2.4	0xa5a9	No error (0)	www.google.com		173.194.219.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:48.320739031 CEST	1.1.1.1	192.168.2.4	0xa5a9	No error (0)	www.google.com		173.194.219.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:48.977834940 CEST	1.1.1.1	192.168.2.4	0xd633	No error (0)	gunnauto-my.sharepoint.com	gunnauto.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:48.977834940 CEST	1.1.1.1	192.168.2.4	0xd633	No error (0)	gunnauto.sharepoint.com	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:48.977834940 CEST	1.1.1.1	192.168.2.4	0xd633	No error (0)	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:48.977834940 CEST	1.1.1.1	192.168.2.4	0xd633	No error (0)	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:49.015594006 CEST	1.1.1.1	192.168.2.4	0x4dc1	No error (0)	gunnauto-my.sharepoint.com	gunnauto.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:49.015594006 CEST	1.1.1.1	192.168.2.4	0x4dc1	No error (0)	gunnauto.sharepoint.com	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:49.015594006 CEST	1.1.1.1	192.168.2.4	0x4dc1	No error (0)	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:49.015594006 CEST	1.1.1.1	192.168.2.4	0x4dc1	No error (0)	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:49.015594006 CEST	1.1.1.1	192.168.2.4	0x4dc1	No error (0)	192965-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:49.015594006 CEST	1.1.1.1	192.168.2.4	0x4dc1	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:49.015594006 CEST	1.1.1.1	192.168.2.4	0x4dc1	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:51.454866886 CEST	1.1.1.1	192.168.2.4	0x3b02	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:51.456187963 CEST	1.1.1.1	192.168.2.4	0x73dc	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:52.796525002 CEST	1.1.1.1	192.168.2.4	0xa20a	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:52.796525002 CEST	1.1.1.1	192.168.2.4	0xa20a	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:52.796525002 CEST	1.1.1.1	192.168.2.4	0xa20a	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:54.403968096 CEST	1.1.1.1	192.168.2.4	0xeed	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:54.405253887 CEST	1.1.1.1	192.168.2.4	0x8ea	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:54.476946115 CEST	1.1.1.1	192.168.2.4	0x623f	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:54.476946115 CEST	1.1.1.1	192.168.2.4	0x623f	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:54.478190899 CEST	1.1.1.1	192.168.2.4	0xafb8	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:56.157830954 CEST	1.1.1.1	192.168.2.4	0xbc61	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:56.157830954 CEST	1.1.1.1	192.168.2.4	0xbc61	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:56.157895088 CEST	1.1.1.1	192.168.2.4	0xaa0	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:57.184535980 CEST	1.1.1.1	192.168.2.4	0x4670	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:09:57.184535980 CEST	1.1.1.1	192.168.2.4	0x4670	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:09:57.185693026 CEST	1.1.1.1	192.168.2.4	0x16b2	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:10:02.215812922 CEST	1.1.1.1	192.168.2.4	0x4b9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:10:02.215812922 CEST	1.1.1.1	192.168.2.4	0x4b9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:10:15.290828943 CEST	1.1.1.1	192.168.2.4	0x5c51	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:10:15.290828943 CEST	1.1.1.1	192.168.2.4	0x5c51	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:10:37.390185118 CEST	1.1.1.1	192.168.2.4	0xe8d6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:10:37.390185118 CEST	1.1.1.1	192.168.2.4	0xe8d6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:10:56.603574038 CEST	1.1.1.1	192.168.2.4	0xd20b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:10:56.603574038 CEST	1.1.1.1	192.168.2.4	0xd20b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

us-west-2.protection.sophos.com

linkprotect.cudasvc.com

gunnauto-my.sharepoint.com

fs.microsoft.com

https:

aadcdn.msauth.net

aadcdn.msftauth.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	18.244.202.53	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:47 UTC	1325	OUT	GET /?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmJTNhYiUzYSUyZnIlMmZwZXJzb25hbCUyZmFlcm9kcmlndWV6X2d1bm5hdXRvX2NvbSUyZkRvY3VtZW50cyUyZkF0dGFjaG1lbnRzJTJmSDI0MTQyMy5wZGYlM2Zjc2YlM2QxJTI2d2ViJTNkMSZjPUUsMSxmT1pZNThPOTZjZjNwWkY1eWU3QnhGZWM2eFRWNWtyRDdneUVGdFJaNENCSjVOQkItZ0RyMUlHdlQ1Mi01Vm95d2o4Y2h5WDJXNlFFTWhsU0o2SHJUc3pqNWVoeF9aVUhzNVNZRm8xZjJfSTdwTUNIeDdiRSZ0eXBvPTE=&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RytpUnowc0wwYVZ5TS9IN2pYN0J3ektSZ3pLWEh1Y1FlaUxrM2hUL1kzST0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ HTTP/1.1 Host: us-west-2.protection.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:47 UTC	916	IN	HTTP/1.1 302 Found Content-Type: text/html Content-Length: 0 Connection: close Date: Fri, 19 Apr 2024 19:09:47 GMT x-amzn-RequestId: aeab05a6-64fa-4bbe-a758-88605e93dd29 Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow x-amz-apigw-id: WfMrVFFZPHcEs4A= Location: https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgunnauto-my.sharepoint.com%2f%3ab%3a%2fr%2fpersonal%2faerodriguez_gunnauto_com%2fDocuments%2fAttachments%2fH241423.pdf%3fcsf%3d1%26web%3d1&c=E,1,fOZY58O96cf3pZF5ye7BxFec6xTV5krD7gyEFtRZ4CBJ5NBB-gDr1IGvT52-5Voywj8chyX2W6QEMhlSJ6HrTszj5ehx_ZUHs5SYFo1f2_I7pMCHx7bE&typo=1 X-Amzn-Trace-Id: Root=1-6622c17b-22f116e63b9494e518857e1e;Parent=5f31d59483cd4cf4;Sampled=0;lineage=b506645d:0 X-Cache: Miss from cloudfront Via: 1.1 7b15a0f404ca1fe5ebdd8fa885007aa8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P4 X-Amz-Cf-Id: cbRuL9fpniq0fRXyNpBe0j6mAOLHX6A7uddmUQYpqbZx3MDNxhvuZg==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	44.208.218.64	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:48 UTC	954	OUT	GET /url?a=https%3a%2f%2fgunnauto-my.sharepoint.com%2f%3ab%3a%2fr%2fpersonal%2faerodriguez_gunnauto_com%2fDocuments%2fAttachments%2fH241423.pdf%3fcsf%3d1%26web%3d1&c=E,1,fOZY58O96cf3pZF5ye7BxFec6xTV5krD7gyEFtRZ4CBJ5NBB-gDr1IGvT52-5Voywj8chyX2W6QEMhlSJ6HrTszj5ehx_ZUHs5SYFo1f2_I7pMCHx7bE&typo=1 HTTP/1.1 Host: linkprotect.cudasvc.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:48 UTC	1163	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' 'unsafe-inline' npmcdn.com unpkg.com cdn.jsdelivr.net; script-src 'self' 'unsafe-inline' npmcdn.com cdnjs.cloudflare.com unpkg.com unpkg.com cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' unpkg.com cdnjs.cloudflare.com fonts.googleapis.com cdn.jsdelivr.net; font-src * data: 'self' 'unsafe-inline' fonts.gstatic.com; frame-src 'self'; worker-src * data: 'unsafe-eval' 'unsafe-inline' blob:; media-src 'self' d2rmfex73stak2.cloudfront.net; img-src 'self' d2rmfex73stak2.cloudfront.net; frame-ancestors 'none' Content-Type: text/html Date: Fri, 19 Apr 2024 19:09:48 GMT Expires: -1 Location: https://gunnauto-my.sharepoint.com/:b:/r/personal/aerodriguez_gunnauto_com/Documents/Attachments/H241423.pdf?csf=1&web=1 Pragma: no-cache Referrer-Policy: no-referrer Server: nginx Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Length: 138 Connection: Close
2024-04-19 19:09:48 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	13.107.136.10	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:49 UTC	754	OUT	GET /:b:/r/personal/aerodriguez_gunnauto_com/Documents/Attachments/H241423.pdf?csf=1&web=1 HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:49 UTC	962	IN	HTTP/1.1 301 Moved Permanently Content-Type: text/plain Location: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/Documents/Attachments/H241423.pdf?csf=1&web=1&cid=4622afbe-21fc-44e4-af46-8a7a6d9e0de2 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,16,3224445,0,525568 SPRequestGuid: 0a9f20a1-a09f-5000-498d-fdd179e918c4 request-id: 0a9f20a1-a09f-5000-498d-fdd179e918c4 MS-CV: oSCfCp+gAFBJjf3ReekYxA.0 Strict-Transport-Security: max-age=31536000 SPRequestDuration: 6 SPIisLatency: 2 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 142644B87B6A4B53B7ED1C14E0EF36AC Ref B: ATL331000104017 Ref C: 2024-04-19T19:09:49Z Date: Fri, 19 Apr 2024 19:09:48 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	13.107.136.10	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:49 UTC	789	OUT	GET /personal/aerodriguez_gunnauto_com/Documents/Attachments/H241423.pdf?csf=1&web=1&cid=4622afbe-21fc-44e4-af46-8a7a6d9e0de2 HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:50 UTC	1195	IN	HTTP/1.1 302 Found Content-Length: 380 Content-Type: text/html; charset=utf-8 Location: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2FDocuments%2FAttachments%2FH241423%2Epdf%3Fcsf%3D1%26web%3D1%26cid%3D4622afbe%2D21fc%2D44e4%2Daf46%2D8a7a6d9e0de2 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,48,2241311,0,525568 X-SharePointHealthScore: 3 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 0a9f20a1-f0bd-5000-498d-ff3b8d7918c1 request-id: 0a9f20a1-f0bd-5000-498d-ff3b8d7918c1 MS-CV: oSCfCr3wAFBJjf87jXkYwQ.0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0F2443E0C3794AA888AD8AD32AEC526E Ref B: ATL331000104045 Ref C: 2024-04-19T19:09:49Z Date: Fri, 19 Apr 2024 19:09:49 GMT Connection: close
2024-04-19 19:09:50 UTC	380	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 75 6e 6e 61 75 74 6f 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 61 65 72 6f 64 72 69 67 75 65 7a 5f 67 75 6e 6e 61 75 74 6f 5f 63 6f 6d 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 3f 53 6f 75 72 63 65 3d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 61 65 72 6f 64 72 69 67 75 65 7a 25 35 46 67 75 6e 6e 61 75 74 6f 25 35 46 63 6f 6d 25 32 46 44 6f 63 75 6d 65 6e 74 73 25 32 46 41 74 74 61 63 68 6d 65 6e Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2FDocuments%2FAttachmen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	23.56.8.114	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 19:09:50 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=129238 Date: Fri, 19 Apr 2024 19:09:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	13.107.136.10	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:50 UTC	897	OUT	GET /personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2FDocuments%2FAttachments%2FH241423%2Epdf%3Fcsf%3D1%26web%3D1%26cid%3D4622afbe%2D21fc%2D44e4%2Daf46%2D8a7a6d9e0de2 HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:50 UTC	2072	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 445 Content-Type: text/html; charset=utf-8 Location: /_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252FDocuments%252FAttachments%252FH241423%252Epdf%253Fcsf%253D1%2526web%253D1%2526cid%253D4622afbe%252D21fc%252D44e4%252Daf46%252D8a7a6d9e0de2&Source=cookie P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGYWVyb2RyaWd1ZXolNUZndW5uYXV0byU1RmNvbSUyRkRvY3VtZW50cyUyRkF0dGFjaG1lbnRzJTJGSDI0MTQyMyUyRXBkZiUzRmNzZiUzRDElMjZ3ZWIlM0QxJTI2Y2lkJTNENDYyMmFmYmUlMkQyMWZjJTJENDRlNCUyRGFmNDYlMkQ4YTdhNmQ5ZTBkZTI=; expires=Fri, 19-Apr-2024 19:19:50 GMT; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,1051136,42,36,10621163,0,1051136 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 0a9f20a1-80e0-5000-498d-f489ee2cfc74 request-id: 0a9f20a1-80e0-5000-498d-f489ee2cfc74 MS-CV: oSCfCuCAAFBJjfSJ7iz8dA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-ATL33r5b&frontEnd=AFD&RemoteIP=81.181.57.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 13 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D532FB83C6E64F6AA305ECAB733A68EC Ref B: ATL331000103031 Ref C: 2024-04-19T19:09:50Z Date: Fri, 19 Apr 2024 19:09:49 GMT Connection: close
2024-04-19 19:09:50 UTC	445	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 5f 66 6f 72 6d 73 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 70 65 72 73 6f 6e 61 6c 25 32 66 61 65 72 6f 64 72 69 67 75 65 7a 5f 67 75 6e 6e 61 75 74 6f 5f 63 6f 6d 25 32 66 5f 6c 61 79 6f 75 74 73 25 32 66 31 35 25 32 66 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 25 33 66 53 6f 75 72 63 65 25 33 64 25 32 35 32 46 70 65 72 73 6f 6e 61 6c 25 32 35 32 46 61 65 72 6f 64 72 69 67 75 65 7a 25 32 35 35 46 67 75 6e 6e 61 75 74 6f 25 32 35 35 46 63 6f 6d 25 32 35 32 46 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	23.56.8.114	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 19:09:50 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=129156 Date: Fri, 19 Apr 2024 19:09:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 19:09:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	13.107.136.10	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:51 UTC	1239	OUT	GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252FDocuments%252FAttachments%252FH241423%252Epdf%253Fcsf%253D1%2526web%253D1%2526cid%253D4622afbe%252D21fc%252D44e4%252Daf46%252D8a7a6d9e0de2&Source=cookie HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGYWVyb2RyaWd1ZXolNUZndW5uYXV0byU1RmNvbSUyRkRvY3VtZW50cyUyRkF0dGFjaG1lbnRzJTJGSDI0MTQyMyUyRXBkZiUzRmNzZiUzRDElMjZ3ZWIlM0QxJTI2Y2lkJTNENDYyMmFmYmUlMkQyMWZjJTJENDRlNCUyRGFmNDYlMkQ4YTdhNmQ5ZTBkZTI=
2024-04-19 19:09:51 UTC	4022	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 884 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://login.microsoftonline.com:443/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D%2D3C06CB1F9610E801921844877ACFB48AE5569AC2A293E0F8669E75578CBFAAC3&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=0b9f20a1%2Da00f%2D5000%2D34a3%2Dd9bf2fb335c0 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: nSGt-66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D=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; expires=Fri, 19-Apr-2024 19:13:51 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: nSGt-66C465E6680E8905E2F7C3EB0CC5AB39B47BE66A019C346D=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly Set-Cookie: RpsContextCookie=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; expires=Fri, 19-Apr-2024 19:19:51 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: RpsContextCookie=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly X-NetworkStatistics: 0,525568,0,0,3892556,0,439988 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: 0b9f20a1-a00f-5000-34a3-d9bf2fb335c0 request-id: 0b9f20a1-a00f-5000-34a3-d9bf2fb335c0 MS-CV: oSCfCw+gAFA0o9m/L7M1wA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ebf86bb9-f642-4b12-a97c-cb5f0f37b474&destinationEndpoint=Edge-Prod-ATL33r5a&frontEnd=AFD&RemoteIP=81.181.57.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 50 SPIisLatency: 0 Include-Referred-Token-Binding-ID: true X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: BDA2C6117FF84C7EA7B2D14D2E0E6587 Ref B: ATL331000101027 Ref C: 2024-04-19T19:09:51Z Date: Fri, 19 Apr 2024 19:09:50 GMT Connection: close
2024-04-19 19:09:51 UTC	124	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3a 34 34 33 2f 65 62 66 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com:443/ebf
2024-04-19 19:09:51 UTC	760	IN	Data Raw: 38 36 62 62 39 2d 66 36 34 32 2d 34 62 31 32 2d 61 39 37 63 2d 63 62 35 66 30 66 33 37 62 34 37 34 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 6d 6f 64 65 3d 66 6f 72 6d 25 35 46 70 6f 73 74 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 74 79 70 65 3d 63 6f 64 65 25 32 30 69 64 25 35 46 74 6f 6b 65 6e 26 61 6d 70 3b 72 65 73 6f 75 72 63 65 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 73 63 6f 70 65 3d 6f 70 65 6e 69 64 26 61 6d Data Ascii: 86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	13.107.246.41	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:53 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_ChpboAn7HyXj89A22M8mzg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:53 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:09:53 GMT Content-Type: application/x-javascript Content-Length: 49632 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 26 Mar 2024 18:07:05 GMT ETag: 0x8DC4DBF8B990C6B x-ms-request-id: dbc78b6f-401e-000a-1894-91eb8b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T190953Z-15497cdd9fd28c6zhavqxs647w0000000250000000005r3k x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-19 19:09:53 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd eb 5b e3 38 d2 38 fa fd fd 2b 82 77 0f 13 4f 4c c8 05 68 70 70 e7 97 06 ba 9b 19 20 0c 81 e9 99 05 96 c7 89 15 70 77 b0 b3 b6 c3 65 20 e7 6f 3f 75 91 6c d9 71 e8 9e 7d cf 73 be 9c b9 04 5b 2a c9 52 a9 aa 54 55 2a 49 eb 3f af fc 4f e5 e7 ca da 8f ff 53 19 9c f7 ce ce 2b fd 8f 95 f3 cf 87 67 fb 95 53 78 fb b3 72 d2 3f 3f dc 3b f8 f1 7a f0 a3 f8 ff f9 9d 1f 57 c6 fe 44 54 e0 ef d0 8d 85 57 09 83 4a 18 55 fc 60 14 46 d3 30 72 13 11 57 ee e1 37 f2 dd 49 65 1c 85 f7 95 e4 4e 54 a6 51 f8 55 8c 92 b8 32 f1 e3 04 0a 0d c5 24 7c ac 54 a1 ba c8 ab 9c ba 51 f2 5c 39 3c 35 eb 50 bf 80 da fc 5b 3f 80 d2 a3 70 fa 0c cf 77 49 25 08 13 7f 24 2a 6e e0 51 6d 13 78 09 62 51 99 05 9e 88 2a 8f 77 fe e8 ae 72 ec 8f a2 30 0e c7 49 25 12 23 e1 Data Ascii: [88+wOLhpp pwe o?ulq}s[RTUI?OS+gSxr??;zWDTWJU`F0rW7IeNTQU2$\|TQ\9<5P[?pwI%$nQmxbQwr0I%#
2024-04-19 19:09:53 UTC	16384	IN	Data Raw: 54 e8 18 15 8b 89 14 57 a2 6c bc e0 07 a6 80 09 c8 16 10 1e f1 47 54 39 1b 8d a5 67 aa e2 65 f5 9d a0 4e c7 2f 5d 04 77 80 5e 40 f9 c1 13 9e 67 01 b0 7d 30 45 bf 32 2d e7 8e d4 14 97 06 1d e8 63 5c 57 4b 8e 64 14 1d bc 32 11 50 05 56 47 38 e6 d3 ca e8 2c 7b ed ec b2 f4 5b 15 79 84 6b 25 52 5f b2 2b 46 0d cf 3d 8c 85 d2 50 b4 8f 98 2f f2 a4 a8 b9 69 35 e8 72 02 40 5c e9 8d 73 0b c7 bf 69 17 8a 45 5a 8d a1 e5 e3 dd 08 e9 3d 72 55 d3 ac a3 e8 a4 8c 65 8d 08 f1 fc 7e 13 af f3 31 cd 37 70 bb 69 5a 74 f6 49 03 8f 15 c7 d3 c0 2c 97 31 9e 9d 25 99 a2 0d 4f 16 c7 83 51 66 8e 8f e7 b4 90 86 4f 07 20 f3 81 fb 7c 28 bc 35 a2 8b e8 eb 63 66 0e 36 ca 51 41 b9 47 b7 25 e6 f8 9c 06 f2 84 0e 99 b1 f8 8c a8 ec 83 9e 76 1c 67 fe 76 bb 89 3a cd 6b 72 29 ae e5 31 8b 13 cb 8d Data Ascii: TWlGT9geN/]w^@g}0E2-c\WKd2PVG8,{[yk%R_+F=P/i5r@\siEZ=rUe~17piZtI,1%OQfO \|(5cf6QAG%vgv:kr)1
2024-04-19 19:09:53 UTC	16384	IN	Data Raw: d5 86 60 33 d4 ee 0e 52 a8 d1 b9 e2 6a 7b c5 bf ea 36 f4 d7 7c 3c 3b 69 d7 d9 b2 bc f5 47 2b a9 c4 5e 81 a5 ae 45 36 4e 76 6d 11 53 b1 a3 55 23 dd 42 e2 1b ac 4b a9 8e 07 0c 6e ab 98 b7 cc 38 3a f1 5b 07 51 fd a0 2f 55 68 5d c6 7a d6 6b 16 2c 47 3a d3 a6 ce 95 39 69 e8 96 da 4f 03 4e 42 db 60 15 1b 66 45 59 20 1d bf 69 a0 6f fd 6b 95 16 c9 84 23 1d f4 85 6b 5f 79 ee b1 29 d6 9a 96 a4 47 2f c0 39 9f 7f 8f e1 54 ec 28 93 bb 73 22 31 36 d6 0d 92 85 85 fc 07 89 eb bc 2f 89 ae a8 2f f8 83 e9 0a 7c fe e0 c9 cb 67 8a 70 21 4f 14 08 1e 28 3c 48 63 d5 b4 6c 76 cd 24 99 d6 21 76 28 a1 76 41 47 26 4b 62 d7 f5 b6 00 61 32 b0 f4 dd 7c ab 3b 59 3f e0 f7 8c 8f a6 55 11 89 2d 90 a4 11 aa 9e cf 05 76 78 98 76 92 1a d4 0d e1 76 a0 63 3a 7d a6 fe 3a a3 aa 45 9c 80 4d 88 4c Data Ascii: `3Rj{6\|<;iG+^E6NvmSU#BKn8:[Q/Uh]zk,G:9iONB`fEY iok#k_y)G/9T(s"16//\|gp!O(<Hclv$!v(vAG&Kba2\|;Y?U-vxvvc:}:EML
2024-04-19 19:09:53 UTC	1298	IN	Data Raw: dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 57 d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e 84 6f dc b5 0c 51 d0 bb ee cc 84 05 26 25 92 1e 94 cd 46 8d dc 13 3a 77 0e ea ae 3c 71 25 c3 84 72 72 e7 c4 a4 e1 cd 68 9e 16 65 c5 b1 5d e3 6c ec 81 f7 8c 45 1d 0f a2 72 ff be b3 5c 66 d3 6c 99 e4 8b b3 8b 74 76 96 9c 5d 4c 2f a6 1f 2f cf 17 d4 96 7c 99 7e 4c 1d 76 b6 c7 4b 70 03 a2 1f c8 6f 23 8e 6b 12 b1 97 79 ed ef b0 ef 8e 02 df b7 67 c5 79 95 1b c7 9c 86 93 8e 72 77 64 cf 6d b8 1a 8e 1c a5 d9 35 ce 2c b6 af 91 eb 98 05 3b 82 33 5d d2 9e 83 f7 65 3d Data Ascii: @_,$E2+q%nL&t}W[79}qp6FGyKU:8oQ&%F:w<q%rrhe]lEr\fltv]L//\|~LvKpo#kygyrwdm5,;3]e=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49755	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:54 UTC	660	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:55 UTC	734	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4602881 Cache-Control: public, max-age=31536000 Content-MD5: kqhA3D0Xczna4D/t8ioitQ== Content-Type: text/css Date: Fri, 19 Apr 2024 19:09:54 GMT Etag: 0x8DC070858CA028D Last-Modified: Wed, 27 Dec 2023 18:19:21 GMT Server: ECAcc (agc/7F47) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: dfa3d384-201e-0075-56b0-682f2c000000 x-ms-version: 2009-09-19 Content-Length: 113084 Connection: close
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 2f 2a 21 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 0a 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 Data Ascii: /! Copyright (C) Microsoft Corporation. All rights reserved. //*!------------------------------------------- START OF THIRD PARTY NOTICE -----------------------------------------This file is based on or incorporates material from the projects listed
2024-04-19 19:09:55 UTC	1	IN	Data Raw: 73 Data Ascii: s
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 2d 31 2c 2e 63 6f 6c 2d 78 73 2d 32 2c 2e 63 6f 6c 2d 78 73 2d 33 2c 2e 63 6f 6c 2d 78 73 2d 34 2c 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 63 6f 6c 2d 78 73 2d 31 32 2c 2e 63 6f 6c 2d 78 73 2d 31 33 2c 2e 63 6f 6c 2d 78 73 2d 31 34 2c 2e 63 6f 6c 2d 78 73 2d 31 35 2c 2e 63 6f 6c 2d 78 73 2d 31 36 2c 2e 63 6f 6c 2d 78 73 2d 31 37 2c 2e 63 6f 6c 2d 78 73 2d 31 38 2c 2e 63 6f 6c 2d 78 73 2d 31 39 2c 2e 63 6f 6c 2d 78 73 2d 32 30 2c 2e 63 6f 6c 2d 78 73 2d 32 31 2c 2e 63 6f 6c 2d 78 73 2d 32 32 2c 2e 63 6f 6c 2d 78 73 2d 32 33 2c 2e 63 6f 6c 2d 78 73 2d 32 34 7b 66 6c 6f 61 74 3a 6c Data Ascii: -1,.col-xs-2,.col-xs-3,.col-xs-4,.col-xs-5,.col-xs-6,.col-xs-7,.col-xs-8,.col-xs-9,.col-xs-10,.col-xs-11,.col-xs-12,.col-xs-13,.col-xs-14,.col-xs-15,.col-xs-16,.col-xs-17,.col-xs-18,.col-xs-19,.col-xs-20,.col-xs-21,.col-xs-22,.col-xs-23,.col-xs-24{float:l
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 39 35 2e 38 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 32 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 25 7d 7d 66 69 65 6c 64 73 65 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 62 6f 72 64 65 72 3a 30 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 7d 6c 65 67 65 6e 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 7d 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f Data Ascii: gin-left:95.83333%}.col-xl-offset-24{margin-left:100%}}fieldset{padding:0;margin:0;border:0;min-width:0}legend{display:block;width:100%;padding:0;border:0}label{display:inline-block;max-width:100%}input[type="search"]{-webkit-box-sizing:border-box;-moz-bo
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 6c 6f 77 2d 78 3a 61 75 74 6f 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 2e 30 31 25 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 35 33 39 70 78 29 7b 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 2d 6d 73 2d 61 75 74 6f 68 69 64 69 6e 67 2d 73 63 72 6f 6c 6c 62 61 72 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 74 61 62 6c 65 2d 72 65 73 70 6f 6e 73 69 76 65 3e 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 Data Ascii: low-x:auto;min-height:.01%}@media screen and (max-width:539px){.table-responsive{width:100%;margin-bottom:15px;overflow-y:hidden;-ms-overflow-style:-ms-autohiding-scrollbar}.table-responsive>.table{margin-bottom:0}.table-responsive>.table>thead>tr>th,.tab
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 49 22 2c 22 54 75 6e 67 61 22 2c 22 4c 61 6f 20 55 49 22 2c 22 52 61 61 76 69 22 2c 22 49 73 6b 6f 6f 6c 61 20 50 6f 74 61 22 2c 22 4c 61 74 68 61 22 2c 22 4c 65 65 6c 61 77 61 64 65 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 48 65 69 20 55 49 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4a 68 65 6e 67 48 65 69 20 55 49 22 2c 22 4d 61 6c 67 75 6e 20 47 6f 74 68 69 63 22 2c 22 45 73 74 72 61 6e 67 65 6c 6f 20 45 64 65 73 73 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 48 69 6d 61 6c 61 79 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 4e 65 77 20 54 61 69 20 4c 75 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 50 68 61 67 73 50 61 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 54 61 69 20 4c 65 22 2c 22 4d 69 63 72 6f 73 6f 66 74 20 59 69 20 42 61 69 74 69 22 2c 22 4d 6f 6e 67 Data Ascii: I","Tunga","Lao UI","Raavi","Iskoola Pota","Latha","Leelawadee","Microsoft YaHei UI","Microsoft JhengHei UI","Malgun Gothic","Estrangelo Edessa","Microsoft Himalaya","Microsoft New Tai Lue","Microsoft PhagsPa","Microsoft Tai Le","Microsoft Yi Baiti","Mong
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 64 61 36 7d 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 2d 66 6f 63 75 73 2c 2e 62 74 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 62 74 6e 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: [type="reset"].btn-primary:hover{background-color:#005da6}.btn.btn-primary-focus,.btn.btn-primary:focus,button.btn-primary:focus,input[type="button"].btn-primary:focus,input[type="submit"].btn-primary:focus,input[type="reset"].btn-primary:focus{background
2024-04-19 19:09:55 UTC	5	IN	Data Raw: 61 72 67 69 6e Data Ascii: argin
2024-04-19 19:09:55 UTC	14780	IN	Data Raw: 2d 74 6f 70 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 2e 33 36 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 2e 33 36 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 31 62 31 62 31 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 Data Ascii: -top:20px;margin-bottom:1.25rem;margin-top:1.25rem;font-size:24px;line-height:28px;font-weight:300;line-height:1.75rem;padding-bottom:2.3632px;padding-top:2.3632px;color:#1b1b1b;font-size:1.5rem;font-weight:600;padding:0;margin-top:16px;margin-bottom:12px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:54 UTC	637	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_xtPRDEy3EhlAdpju-Ah7qw2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:55 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2286063 Cache-Control: public, max-age=31536000 Content-MD5: Lup68J6qO3zOiKJ926MmYw== Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 19:09:54 GMT Etag: 0x8DC45682EEBF93B Last-Modified: Sat, 16 Mar 2024 03:21:34 GMT Server: ECAcc (agc/7F5C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c8176edc-d01e-00ca-36c2-7dd077000000 x-ms-version: 2009-09-19 Content-Length: 443943 Connection: close
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-04-19 19:09:55 UTC	1	IN	Data Raw: 55 Data Ascii: U
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 42 5f 42 49 4e 44 49 4e 47 5f 4e 4f 54 5f 41 4c 4c 4f 57 45 44 3a 22 38 30 30 34 37 38 44 37 22 2c 50 50 5f 45 5f 49 44 50 5f 42 49 4e 44 49 4e 47 5f 45 58 49 53 54 53 5f 53 41 4d 53 55 4e 47 3a 22 38 30 30 34 34 35 33 45 22 2c 50 50 5f 45 5f 54 52 41 4e 53 46 45 52 5f 54 4f 4b 45 4e 5f 49 4e 56 41 4c 49 44 5f 53 45 53 53 49 4f 4e 3a 22 38 30 30 34 33 35 41 30 22 7d 2c 6e 2e 45 73 74 73 45 72 72 6f 72 3d 7b 55 73 65 72 41 63 63 6f 75 6e 74 53 65 6c 65 63 74 69 6f 6e 49 6e 76 61 6c 69 64 3a 22 31 36 30 30 31 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 3a 22 35 30 30 32 30 22 2c 55 73 65 72 55 6e 61 75 74 68 6f 72 69 7a 65 64 41 70 69 56 65 72 73 69 6f 6e 4e 6f 74 53 75 70 70 6f 72 74 65 64 3a 22 35 30 30 32 30 31 22 2c 55 73 65 72 55 6e 61 75 74 Data Ascii: B_BINDING_NOT_ALLOWED:"800478D7",PP_E_IDP_BINDING_EXISTS_SAMSUNG:"8004453E",PP_E_TRANSFER_TOKEN_INVALID_SESSION:"800435A0"},n.EstsError={UserAccountSelectionInvalid:"16001",UserUnauthorized:"50020",UserUnauthorizedApiVersionNotSupported:"500201",UserUnaut
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 6e 64 50 61 74 68 7c 7c 22 22 3b 72 65 74 75 72 6e 20 65 2e 71 75 65 72 79 26 26 28 6e 2b 3d 22 3f 22 2b 63 2e 6a 6f 69 6e 28 65 2e 71 75 65 72 79 2c 22 26 22 2c 22 3d 22 29 29 2c 65 2e 66 72 61 67 6d 65 6e 74 26 26 28 6e 2b 3d 22 23 22 2b 63 2e 6a 6f 69 6e 28 65 2e 66 72 61 67 6d 65 6e 74 2c 22 26 22 2c 22 3d 22 29 29 2c 6e 7d 2c 61 70 70 65 6e 64 43 75 72 72 65 6e 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 49 66 4e 6f 74 45 78 69 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 44 2e 70 61 72 73 65 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 63 2e 66 6f 72 45 61 63 68 28 6e 2e 71 75 65 72 79 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 65 3d 44 2e 61 64 64 49 66 4e 6f 74 45 78 69 73 74 28 Data Ascii: ndPath\|\|"";return e.query&&(n+="?"+c.join(e.query,"&","=")),e.fragment&&(n+="#"+c.join(e.fragment,"&","=")),n},appendCurrentQueryParameterIfNotExist:function(e){var n=D.parse(window.location.href);return c.forEach(n.query,(function(n,t){e=D.addIfNotExist(
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 3d 75 28 22 74 72 61 63 65 42 65 67 69 6e 52 65 71 75 65 73 74 22 29 2c 73 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 69 2c 61 29 7b 6c 3f 6c 2e 74 72 61 63 65 45 6e 64 52 65 71 75 65 73 74 28 65 2c 6e 2c 74 2c 69 2c 61 29 3a 61 26 26 61 28 29 7d 2c 73 2e 73 65 74 50 61 67 65 56 69 65 77 4d 6f 64 65 6c 3d 75 28 22 73 65 74 50 61 67 65 56 69 65 77 4d 6f 64 65 6c 22 29 2c 73 2e 6c 6f 67 43 6f 6d 70 6f 6e 65 6e 74 45 76 65 6e 74 3d 75 28 22 6c 6f 67 43 6f 6d 70 6f 6e 65 6e 74 45 76 65 6e 74 22 29 2c 73 2e 6c 6f 67 56 69 65 77 53 74 61 74 65 3d 75 28 22 6c 6f 67 56 69 65 77 53 74 61 74 65 22 29 2c 73 2e 73 65 74 56 69 65 77 56 69 65 77 4d 6f 64 65 6c 3d 75 28 22 73 65 74 56 69 65 77 56 69 65 77 4d 6f 64 65 Data Ascii: =u("traceBeginRequest"),s.traceEndRequest=function(e,n,t,i,a){l?l.traceEndRequest(e,n,t,i,a):a&&a()},s.setPageViewModel=u("setPageViewModel"),s.logComponentEvent=u("logComponentEvent"),s.logViewState=u("logViewState"),s.setViewViewModel=u("setViewViewMode
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 5d 2e 63 6f 6e 63 61 74 28 6e 3f 5b 5b 22 6d 6b 74 22 2c 6e 5d 5d 3a 5b 5d 2c 74 3f 5b 5b 22 6c 63 69 64 22 2c 74 5d 5d 3a 5b 5d 2c 53 3f 5b 5b 22 69 64 22 2c 53 5d 5d 3a 5b 5d 2c 43 3f 5b 5b 22 63 6c 69 65 6e 74 5f 69 64 22 2c 43 5d 5d 3a 5b 5d 2c 77 3f 5b 5b 22 66 63 69 22 2c 77 5d 5d 3a 5b 5d 2c 78 3f 5b 5b 22 6e 6f 70 61 22 2c 78 5d 5d 3a 5b 5d 29 2c 63 3d 7b 74 61 72 67 65 74 55 72 6c 3a 72 2e 61 64 64 28 22 47 65 74 4f 6e 65 54 69 6d 65 43 6f 64 65 2e 73 72 66 22 2c 61 29 2c 72 65 71 75 65 73 74 54 79 70 65 3a 69 2e 52 65 71 75 65 73 74 54 79 70 65 2e 50 6f 73 74 2c 64 61 74 61 3a 6f 2e 67 65 6e 65 72 61 74 65 52 65 71 75 65 73 74 53 74 72 69 6e 67 28 6d 29 2c 69 73 41 73 79 6e 63 3a 21 30 2c 74 69 6d 65 6f 75 74 3a 5f 2c 73 75 63 63 65 73 73 43 61 Data Ascii: ].concat(n?[["mkt",n]]:[],t?[["lcid",t]]:[],S?[["id",S]]:[],C?[["client_id",C]]:[],w?[["fci",w]]:[],x?[["nopa",x]]:[]),c={targetUrl:r.add("GetOneTimeCode.srf",a),requestType:i.RequestType.Post,data:o.generateRequestString(m),isAsync:!0,timeout:_,successCa
2024-04-19 19:09:55 UTC	4	IN	Data Raw: 22 6d 6b 74 Data Ascii: "mkt
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 22 29 29 29 29 2c 65 3d 70 2e 61 70 70 65 6e 64 4f 72 52 65 70 6c 61 63 65 28 65 2c 22 6c 63 22 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 70 2e 65 78 74 72 61 63 74 28 22 6c 63 22 29 29 29 29 7d 28 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 2c 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 6d 2e 43 6c 6f 75 64 46 65 64 65 72 61 74 69 6f 6e 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 65 64 65 6e 74 69 61 6c 73 2e 46 65 64 65 72 61 74 69 6f 6e 52 65 64 69 72 65 63 74 55 72 6c 3b 62 72 65 61 6b 3b 63 61 73 65 20 6d 2e 4c 69 6e 6b 65 64 49 6e 3a 69 2e 69 64 70 52 65 64 69 72 65 63 74 55 72 6c 3d 6e 2e 43 72 Data Ascii: ")))),e=p.appendOrReplace(e,"lc",encodeURIComponent(decodeURIComponent(p.extract("lc"))))}(n.Credentials.FederationRedirectUrl,e);break;case m.CloudFederation:i.idpRedirectUrl=n.Credentials.FederationRedirectUrl;break;case m.LinkedIn:i.idpRedirectUrl=n.Cr
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 70 65 7c 7c 6d 2e 50 61 73 73 77 6f 72 64 3b 73 77 69 74 63 68 28 6e 2e 63 72 65 64 4c 69 6e 6b 45 72 72 6f 72 28 22 22 29 2c 65 29 7b 63 61 73 65 20 6d 2e 4f 6e 65 54 69 6d 65 43 6f 64 65 3a 69 66 28 4f 2e 70 72 6f 6f 66 2e 63 6c 65 61 72 44 69 67 69 74 73 29 6e 2e 6f 6e 53 77 69 74 63 68 56 69 65 77 28 67 2e 50 72 6f 6f 66 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 2c 21 31 2c 4f 29 3b 65 6c 73 65 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 75 73 65 72 6e 61 6d 65 3a 66 2e 63 6c 65 61 6e 73 65 55 73 65 72 6e 61 6d 65 28 61 29 2c 70 72 6f 6f 66 44 61 74 61 3a 4f 2e 70 72 6f 6f 66 2e 64 61 74 61 2c 70 72 6f 6f 66 54 79 70 65 3a 4f 2e 70 72 6f 6f 66 2e 74 79 70 65 2c 70 75 72 70 6f 73 65 3a 4f 2e 70 72 6f 6f 66 2e 69 73 4e 6f 70 61 Data Ascii: pe\|\|m.Password;switch(n.credLinkError(""),e){case m.OneTimeCode:if(O.proof.clearDigits)n.onSwitchView(g.ProofConfirmation,!1,O);else{var t=function(){var e={username:f.cleanseUsername(a),proofData:O.proof.data,proofType:O.proof.type,purpose:O.proof.isNopa
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 6f 77 45 72 72 6f 72 50 61 67 65 44 65 62 75 67 44 65 74 61 69 6c 73 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 2e 63 75 72 72 65 6e 74 56 69 65 77 48 61 73 4d 65 74 61 64 61 74 61 28 22 65 78 74 72 61 44 65 62 75 67 44 65 74 61 69 6c 73 22 29 7d 29 29 2c 61 2e 73 68 6f 77 46 6f 6f 74 65 72 43 6f 6e 74 72 6f 6c 3d 69 2e 70 75 72 65 43 6f 6d 70 75 74 65 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 72 26 26 61 2e 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 72 6f 6c 4d 65 74 68 6f 64 73 28 29 26 26 61 2e 70 61 Data Ascii: owErrorPageDebugDetails=i.pureComputed((function(){return a.paginationControlMethods()&&a.paginationControlMethods().currentViewHasMetadata("extraDebugDetails")})),a.showFooterControl=i.pureComputed((function(){return!r&&a.paginationControlMethods()&&a.pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49753	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:54 UTC	656	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_pxjdzrjcwtmbr-ntjn_f8q2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:55 UTC	749	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2286063 Cache-Control: public, max-age=31536000 Content-MD5: 0RInCIo6BTf5wagqwDD1kA== Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 19:09:54 GMT Etag: 0x8DC4533BD9666BA Last-Modified: Fri, 15 Mar 2024 21:06:10 GMT Server: ECAcc (agc/7F99) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e278a1c0-f01e-005c-21c2-7dcd0c000000 x-ms-version: 2009-09-19 Content-Length: 55052 Connection: close
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 69 5b 6e 5d 29 72 65 74 75 72 6e 20 69 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 69 5b 6e 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 6e 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 69 3d 7b 7d 3b 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 69 2c 6f 2e 70 3d 22 22 2c 6f 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b 69 28 32 29 3b 76 61 72 20 6e 3d 69 28 31 29 2c 74 3d 69 28 35 29 2c 72 3d 69 28 36 29 2c 61 3d 72 2e 53 74 72 69 6e Data Ascii: !function(e){function o(n){if(i[n])return i[n].exports;var t=i[n]={exports:{},id:n,loaded:!1};return e[n].call(t.exports,t,t.exports,o),t.loaded=!0,t.exports}var i={};return o.m=e,o.c=i,o.p="",o(0)}([function(e,o,i){i(2);var n=i(1),t=i(5),r=i(6),a=r.Strin
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 44 65 73 63 72 69 70 74 69 6f 6e 5f 55 6e 66 61 6d 69 6c 69 61 72 44 65 76 69 63 65 3d 22 54 6f 20 73 69 67 6e 20 69 6e 20 77 69 74 68 20 7b 30 7d 2c 20 70 6c 65 61 73 65 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 6f 6e 20 79 6f 75 72 20 70 68 6f 6e 65 20 61 6e 64 20 65 6e 74 65 72 20 74 68 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 73 65 65 20 62 65 6c 6f 77 2e 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 54 69 74 6c 65 3d 22 52 65 71 75 65 73 74 20 74 69 6d 65 6f 75 74 22 2c 65 2e 43 54 5f 52 4e 47 43 5f 53 54 52 5f 4c 53 5f 54 69 6d 65 6f 75 74 5f 50 61 67 65 44 65 73 63 72 69 70 74 69 6f 6e 3d 22 57 65 20 64 69 64 6e 27 74 20 68 65 61 72 20 66 72 6f 6d 20 79 6f 75 20 69 6e 20 74 69 6d 65 Data Ascii: Description_UnfamiliarDevice="To sign in with {0}, please follow the instructions on your phone and enter the number you see below.",e.CT_RNGC_STR_LS_Timeout_Title="Request timeout",e.CT_RNGC_STR_LS_Timeout_PageDescription="We didn't hear from you in time
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 6f 74 50 61 73 73 77 6f 72 64 30 22 20 68 72 65 66 3d 22 23 22 3e 72 65 73 65 74 20 69 74 20 6e 6f 77 2e 3c 2f 61 3e 27 3a 27 59 6f 75 72 20 65 6d 61 69 6c 20 6f 72 20 70 61 73 73 77 6f 72 64 20 69 73 20 69 6e 63 6f 72 72 65 63 74 2e 20 49 66 20 79 6f 75 20 64 6f 6e 5c 27 74 20 72 65 6d 65 6d 62 65 72 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2c 20 3c 61 20 69 64 3d 22 69 64 41 5f 49 4c 5f 46 6f 72 67 6f 74 50 61 73 73 77 6f 72 64 30 22 20 68 72 65 66 3d 22 23 22 3e 72 65 73 65 74 20 69 74 20 6e 6f 77 2e 3c 2f 61 3e 27 2c 65 2e 43 54 5f 53 54 52 5f 43 6f 6e 66 69 72 6d 53 65 6e 64 5f 4f 74 63 3d 22 57 65 27 6c 6c 20 73 65 6e 64 20 61 20 63 6f 64 65 20 74 6f 20 7b 30 7d 20 74 6f 20 73 69 67 6e 20 79 6f 75 20 69 6e 2e 22 2c 65 2e 43 54 5f 4f 54 43 5f 53 54 Data Ascii: otPassword0" href="#">reset it now.</a>':'Your email or password is incorrect. If you don\'t remember your password, <a id="idA_IL_ForgotPassword0" href="#">reset it now.</a>',e.CT_STR_ConfirmSend_Otc="We'll send a code to {0} to sign you in.",e.CT_OTC_ST
2024-04-19 19:09:55 UTC	5903	IN	Data Raw: 6d 70 61 74 69 62 6c 65 41 70 70 56 65 72 73 69 6f 6e 3a 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 41 70 70 56 65 72 73 69 6f 6e 22 2c 46 6c 6f 77 54 6f 6b 65 6e 45 78 70 69 72 65 64 54 66 61 3a 22 46 6c 6f 77 54 6f 6b 65 6e 45 78 70 69 72 65 64 22 2c 41 70 70 6c 69 63 61 74 69 6f 6e 55 73 65 64 49 73 4e 6f 74 41 6e 41 70 70 72 6f 76 65 64 41 70 70 52 65 71 75 69 72 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 3a 22 35 33 30 30 32 31 22 2c 42 6c 6f 63 6b 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 3a 22 35 33 30 30 33 22 2c 42 6c 6f 63 6b 65 64 42 79 43 6f 6e 64 69 74 69 6f 6e 61 6c 41 63 63 65 73 73 46 6f 72 52 65 6d 6f 74 65 44 65 76 69 63 65 46 6c 6f 77 3a 22 35 33 30 30 33 33 22 2c 42 72 6f 6b 65 72 41 70 70 4e 6f 74 Data Ascii: mpatibleAppVersion:"IncompatibleAppVersion",FlowTokenExpiredTfa:"FlowTokenExpired",ApplicationUsedIsNotAnApprovedAppRequiredByConditionalAccess:"530021",BlockedByConditionalAccess:"53003",BlockedByConditionalAccessForRemoteDeviceFlow:"530033",BrokerAppNot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49759	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:55 UTC	651	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:55 UTC	719	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288125 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 19 Apr 2024 19:09:55 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (agc/7F29) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 12fef581-701e-0054-4ebd-7d951d000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-19 19:09:55 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49758	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:55 UTC	620	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:55 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288114 Cache-Control: public, max-age=31536000 Content-MD5: eZ+IAUPxfkfE79uz/zWlTA== Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 19:09:55 GMT Etag: 0x8DC2E5A3BC19A93 Last-Modified: Thu, 15 Feb 2024 19:13:46 GMT Server: ECAcc (agc/7F21) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b4f08e49-b01e-0074-4ebd-7d042e000000 x-ms-version: 2009-09-19 Content-Length: 223759 Connection: close
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-04-19 19:09:55 UTC	1	IN	Data Raw: 30 Data Ascii: 0
2024-04-19 19:09:55 UTC	16383	IN	Data Raw: 21 3d 3d 28 6e 3d 65 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 2d 74 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 29 7c 7c 30 21 3d 3d 28 6e 3d 65 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 2d 74 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 29 3f 6e 3a 66 28 65 2e 6e 61 6d 65 2c 74 2e 6e 61 6d 65 29 7d 2c 74 2e 63 6f 6d 70 61 72 65 42 79 47 65 6e 65 72 61 74 65 64 50 6f 73 69 74 69 6f 6e 73 49 6e 66 6c 61 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 2d 74 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 3b 72 65 74 75 72 6e 20 30 21 3d 3d 72 7c 7c 30 21 3d 3d 28 72 3d 65 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 2d 74 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 29 7c 7c 30 21 3d 3d 28 72 Data Ascii: !==(n=e.originalLine-t.originalLine)\|\|0!==(n=e.originalColumn-t.originalColumn)?n:f(e.name,t.name)},t.compareByGeneratedPositionsInflated=function(e,t){var r=e.generatedLine-t.generatedLine;return 0!==r\|\|0!==(r=e.generatedColumn-t.generatedColumn)\|\|0!==(r
2024-04-19 19:09:56 UTC	16383	IN	Data Raw: 74 68 3b 69 2b 3d 32 29 6f 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 5b 69 5d 2b 32 35 36 2a 6e 5b 69 2b 31 5d 29 3b 72 65 74 75 72 6e 20 6f 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 2c 72 29 7b 69 66 28 65 25 31 21 3d 30 7c 7c 65 3c 30 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 6f 66 66 73 65 74 20 69 73 20 6e 6f 74 20 75 69 6e 74 22 29 3b 69 66 28 65 2b 74 3e 72 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 54 72 79 69 6e 67 20 74 6f 20 61 63 63 65 73 73 20 62 65 79 6f 6e 64 20 62 75 66 66 65 72 20 6c 65 6e 67 74 68 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 74 2c 72 2c 6e 2c 6f 2c 69 29 7b 69 66 28 21 75 2e 69 73 42 75 66 66 65 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 Data Ascii: th;i+=2)o+=String.fromCharCode(n[i]+256*n[i+1]);return o}function R(e,t,r){if(e%1!=0\|\|e<0)throw new RangeError("offset is not uint");if(e+t>r)throw new RangeError("Trying to access beyond buffer length")}function M(e,t,r,n,o,i){if(!u.isBuffer(e))throw new
2024-04-19 19:09:56 UTC	16383	IN	Data Raw: 65 3d 74 68 69 73 3b 65 3d 65 2e 70 61 72 65 6e 74 3b 29 65 5b 68 5d 3d 21 31 7d 7d 7d 2c 7b 6b 65 79 3a 22 6e 65 78 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 70 61 72 65 6e 74 29 72 65 74 75 72 6e 20 75 6e 64 65 66 69 6e 65 64 3b 76 61 72 20 65 3d 74 68 69 73 2e 70 61 72 65 6e 74 2e 69 6e 64 65 78 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 2e 6e 6f 64 65 73 5b 65 2b 31 5d 7d 7d 2c 7b 6b 65 79 3a 22 70 6f 73 69 74 69 6f 6e 42 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 73 6f 75 72 63 65 2e 73 74 61 72 74 3b 69 66 28 65 2e 69 6e 64 65 78 29 72 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 49 6e 73 69 64 65 28 65 2e 69 6e 64 65 Data Ascii: e=this;e=e.parent;)e[h]=!1}}},{key:"next",value:function(){if(!this.parent)return undefined;var e=this.parent.index(this);return this.parent.nodes[e+1]}},{key:"positionBy",value:function(e,t){var r=this.source.start;if(e.index)r=this.positionInside(e.inde
2024-04-19 19:09:56 UTC	16383	IN	Data Raw: 61 72 73 65 28 29 7d 63 61 74 63 68 28 73 29 7b 74 68 72 6f 77 20 73 7d 72 65 74 75 72 6e 20 69 2e 72 6f 6f 74 7d 3b 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 73 2c 65 2e 65 78 70 6f 72 74 73 3d 74 5b 22 64 65 66 61 75 6c 74 22 5d 7d 2c 35 39 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 5b 22 64 65 66 61 75 6c 74 22 5d 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 28 72 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 29 2e 74 79 70 65 3d 22 63 6f 6d 6d 65 6e 74 22 2c 72 7d 72 65 74 75 72 6e 20 72 Data Ascii: arse()}catch(s){throw s}return i.root};t["default"]=s,e.exports=t["default"]},595:function(e,t,r){"use strict";var n;t.__esModule=!0,t["default"]=void 0;var o=function(e){var t,r;function n(t){var r;return(r=e.call(this,t)\|\|this).type="comment",r}return r
2024-04-19 19:09:56 UTC	16383	IN	Data Raw: 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 74 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 65 29 7d 28 65 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 6e 28 74 29 3f 74 3a 53 74 72 69 6e 67 28 74 29 7d 76 61 72 20 73 3d 72 28 36 33 36 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 72 2c 6e 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 65 Data Ascii: eturn a primitive value.")}return("string"===t?String:Number)(e)}(e,"string");return"symbol"==n(t)?t:String(t)}var s=r(636),a=function(){function e(t,r,n){!function(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,e
2024-04-19 19:09:56 UTC	16383	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 73 79 6e 63 28 29 2e 74 68 65 6e 28 65 2c 65 29 7d 2c 66 2e 68 61 6e 64 6c 65 45 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 69 66 28 74 68 69 73 2e 65 72 72 6f 72 3d 65 2c 22 43 73 73 53 79 6e 74 61 78 45 72 72 6f 72 22 21 3d 3d 65 2e 6e 61 6d 65 7c 7c 65 2e 70 6c 75 67 69 6e 29 7b 69 66 28 74 2e 70 6f 73 74 63 73 73 56 65 72 73 69 6f 6e 29 3b 7d 65 6c 73 65 20 65 2e 70 6c 75 67 69 6e 3d 74 2e 70 6f 73 74 63 73 73 50 6c 75 67 69 6e 2c 65 2e 73 65 74 4d 65 73 73 61 67 65 28 29 7d 63 61 74 63 68 28 72 29 7b 63 6f 6e 73 6f 6c 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 72 29 7d 7d 2c 66 2e 61 73 79 6e 63 54 69 63 6b 3d Data Ascii: tion(e){return this.async().then(e,e)},f.handleError=function(e,t){try{if(this.error=e,"CssSyntaxError"!==e.name\|\|e.plugin){if(t.postcssVersion);}else e.plugin=t.postcssPlugin,e.setMessage()}catch(r){console&&console.error&&console.error(r)}},f.asyncTick=
2024-04-19 19:09:56 UTC	6	IN	Data Raw: 69 6e 65 64 22 21 Data Ascii: ined"!
2024-04-19 19:09:56 UTC	16383	IN	Data Raw: 3d 74 79 70 65 6f 66 20 65 2e 72 61 77 73 2e 62 65 74 77 65 65 6e 29 72 65 74 75 72 6e 20 74 3d 65 2e 72 61 77 73 2e 62 65 74 77 65 65 6e 2e 72 65 70 6c 61 63 65 28 2f 5b 5e 5c 73 3a 5d 2f 67 2c 22 22 29 2c 21 31 7d 29 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 72 61 77 45 6d 70 74 79 42 6f 64 79 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 65 2e 77 61 6c 6b 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 6e 6f 64 65 73 26 26 30 3d 3d 3d 65 2e 6e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 28 74 3d 65 2e 72 61 77 73 2e 61 66 74 65 72 29 29 72 65 74 75 72 6e 21 31 7d 29 29 2c 74 7d 7d 2c 7b 6b 65 79 3a 22 72 61 77 49 6e 64 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e Data Ascii: =typeof e.raws.between)return t=e.raws.between.replace(/[^\s:]/g,""),!1})),t}},{key:"rawEmptyBody",value:function(e){var t;return e.walk((function(e){if(e.nodes&&0===e.nodes.length&&void 0!==(t=e.raws.after))return!1})),t}},{key:"rawIndent",value:function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49760	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:57 UTC	406	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:57 UTC	719	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288127 Cache-Control: public, max-age=31536000 Content-MD5: EuPayFgGHQiAI7K9SOL6lg== Content-Type: image/x-icon Date: Fri, 19 Apr 2024 19:09:57 GMT Etag: 0x8D8731240E548EB Last-Modified: Sun, 18 Oct 2020 03:02:30 GMT Server: ECAcc (agc/7F29) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 12fef581-701e-0054-4ebd-7d951d000000 x-ms-version: 2009-09-19 Content-Length: 17174 Connection: close
2024-04-19 19:09:57 UTC	16383	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-19 19:09:57 UTC	791	IN	Data Raw: 01 80 00 00 01 80 00 28 00 00 00 18 00 00 00 30 00 00 00 01 00 04 00 00 00 00 00 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 22 22 22 22 22 20 33 33 33 33 33 30 Data Ascii: (0"P""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330""""" 333330

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49763	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:57 UTC	664	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:57 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288133 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 19:09:57 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (agc/7F88) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e5c9e6a9-c01e-00bb-6abd-7d0975000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-04-19 19:09:57 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49762	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:57 UTC	665	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:58 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288067 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 19:09:57 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (agc/7F5C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0d294a5a-601e-0019-70bd-7d9917000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-04-19 19:09:58 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49761	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:57 UTC	626	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:58 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288104 Cache-Control: public, max-age=31536000 Content-MD5: V5EQEHVskNWHVMke8e4nZQ== Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 19:09:57 GMT Etag: 0x8DC2E5A3CC5D827 Last-Modified: Thu, 15 Feb 2024 19:13:48 GMT Server: ECAcc (agc/7F31) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b856517d-601e-00d9-1abd-7d1d53000000 x-ms-version: 2009-09-19 Content-Length: 113657 Connection: close
2024-04-19 19:09:58 UTC	16383	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-04-19 19:09:58 UTC	1	IN	Data Raw: 69 Data Ascii: i
2024-04-19 19:09:58 UTC	16383	IN	Data Raw: 74 60 20 70 72 65 73 65 74 2c 20 63 61 6e 27 74 20 62 65 20 65 6d 70 74 79 22 29 3b 72 65 74 75 72 6e 20 65 2e 6f 70 74 69 6f 6e 73 26 26 72 2e 73 65 74 28 65 2e 6f 70 74 69 6f 6e 73 29 2c 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 26 26 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 26 26 72 5b 74 5d 2e 72 75 6c 65 72 2e 65 6e 61 62 6c 65 4f 6e 6c 79 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 29 2c 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e 72 75 6c 65 73 32 26 26 72 5b 74 5d 2e 72 75 6c 65 72 32 2e 65 6e 61 62 6c 65 4f 6e 6c 79 28 65 2e 63 6f 6d 70 6f 6e 65 6e 74 73 5b 74 5d 2e Data Ascii: t` preset, can't be empty");return e.options&&r.set(e.options),e.components&&Object.keys(e.components).forEach((function(t){e.components[t].rules&&r[t].ruler.enableOnly(e.components[t].rules),e.components[t].rules2&&r[t].ruler2.enableOnly(e.components[t].
2024-04-19 19:09:58 UTC	16383	IN	Data Raw: 30 33 66 30 22 2c 22 4b 63 65 64 69 6c 22 3a 22 5c 75 30 31 33 36 22 2c 22 6b 63 65 64 69 6c 22 3a 22 5c 75 30 31 33 37 22 2c 22 4b 63 79 22 3a 22 5c 75 30 34 31 61 22 2c 22 6b 63 79 22 3a 22 5c 75 30 34 33 61 22 2c 22 4b 66 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 30 65 22 2c 22 6b 66 72 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 32 38 22 2c 22 6b 67 72 65 65 6e 22 3a 22 5c 75 30 31 33 38 22 2c 22 4b 48 63 79 22 3a 22 5c 75 30 34 32 35 22 2c 22 6b 68 63 79 22 3a 22 5c 75 30 34 34 35 22 2c 22 4b 4a 63 79 22 3a 22 5c 75 30 34 30 63 22 2c 22 6b 6a 63 79 22 3a 22 5c 75 30 34 35 63 22 2c 22 4b 6f 70 66 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 34 32 22 2c 22 6b 6f 70 66 22 3a 22 5c 75 64 38 33 35 5c 75 64 64 35 63 22 2c 22 4b 73 63 72 22 3a 22 5c 75 64 38 33 35 5c Data Ascii: 03f0","Kcedil":"\u0136","kcedil":"\u0137","Kcy":"\u041a","kcy":"\u043a","Kfr":"\ud835\udd0e","kfr":"\ud835\udd28","kgreen":"\u0138","KHcy":"\u0425","khcy":"\u0445","KJcy":"\u040c","kjcy":"\u045c","Kopf":"\ud835\udd42","kopf":"\ud835\udd5c","Kscr":"\ud835\
2024-04-19 19:09:58 UTC	16383	IN	Data Raw: 63 61 72 6f 6e 22 3a 22 5c 75 30 31 36 30 22 2c 22 73 63 61 72 6f 6e 22 3a 22 5c 75 30 31 36 31 22 2c 22 53 63 22 3a 22 5c 75 32 61 62 63 22 2c 22 73 63 22 3a 22 5c 75 32 32 37 62 22 2c 22 73 63 63 75 65 22 3a 22 5c 75 32 32 37 64 22 2c 22 73 63 65 22 3a 22 5c 75 32 61 62 30 22 2c 22 73 63 45 22 3a 22 5c 75 32 61 62 34 22 2c 22 53 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 65 22 2c 22 73 63 65 64 69 6c 22 3a 22 5c 75 30 31 35 66 22 2c 22 53 63 69 72 63 22 3a 22 5c 75 30 31 35 63 22 2c 22 73 63 69 72 63 22 3a 22 5c 75 30 31 35 64 22 2c 22 73 63 6e 61 70 22 3a 22 5c 75 32 61 62 61 22 2c 22 73 63 6e 45 22 3a 22 5c 75 32 61 62 36 22 2c 22 73 63 6e 73 69 6d 22 3a 22 5c 75 32 32 65 39 22 2c 22 73 63 70 6f 6c 69 6e 74 22 3a 22 5c 75 32 61 31 33 22 2c 22 73 63 73 69 Data Ascii: caron":"\u0160","scaron":"\u0161","Sc":"\u2abc","sc":"\u227b","sccue":"\u227d","sce":"\u2ab0","scE":"\u2ab4","Scedil":"\u015e","scedil":"\u015f","Scirc":"\u015c","scirc":"\u015d","scnap":"\u2aba","scnE":"\u2ab6","scnsim":"\u22e9","scpolint":"\u2a13","scsi
2024-04-19 19:09:58 UTC	16383	IN	Data Raw: 5b 5d 2c 63 3c 30 3f 6c 2e 70 75 73 68 28 5b 22 63 6c 61 73 73 22 2c 72 2e 6c 61 6e 67 50 72 65 66 69 78 2b 64 5d 29 3a 28 6c 5b 63 5d 3d 6c 5b 63 5d 2e 73 6c 69 63 65 28 29 2c 6c 5b 63 5d 5b 31 5d 2b 3d 22 20 22 2b 72 2e 6c 61 6e 67 50 72 65 66 69 78 2b 64 29 2c 70 3d 7b 61 74 74 72 73 3a 6c 7d 2c 22 3c 70 72 65 3e 3c 63 6f 64 65 22 2b 69 2e 72 65 6e 64 65 72 41 74 74 72 73 28 70 29 2b 22 3e 22 2b 61 2b 22 3c 2f 63 6f 64 65 3e 3c 2f 70 72 65 3e 5c 6e 22 29 3a 22 3c 70 72 65 3e 3c 63 6f 64 65 22 2b 69 2e 72 65 6e 64 65 72 41 74 74 72 73 28 68 29 2b 22 3e 22 2b 61 2b 22 3c 2f 63 6f 64 65 3e 3c 2f 70 72 65 3e 5c 6e 22 7d 2c 69 2e 69 6d 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 2c 73 29 7b 76 61 72 20 6f 3d 65 5b 74 5d 3b 72 65 74 75 72 6e Data Ascii: [],c<0?l.push(["class",r.langPrefix+d]):(l[c]=l[c].slice(),l[c][1]+=" "+r.langPrefix+d),p={attrs:l},"<pre><code"+i.renderAttrs(p)+">"+a+"</code></pre>\n"):"<pre><code"+i.renderAttrs(h)+">"+a+"</code></pre>\n"},i.image=function(e,t,r,n,s){var o=e[t];return
2024-04-19 19:09:58 UTC	16383	IN	Data Raw: 6f 75 6e 74 5b 74 5d 2d 65 2e 62 6c 6b 49 6e 64 65 6e 74 3e 3d 34 29 62 72 65 61 6b 3b 66 6f 72 28 4c 3d 21 31 2c 63 3d 30 2c 64 3d 7a 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 63 2b 2b 29 69 66 28 7a 5b 63 5d 28 65 2c 76 2c 72 2c 21 30 29 29 7b 4c 3d 21 30 3b 62 72 65 61 6b 7d 69 66 28 4c 29 62 72 65 61 6b 3b 69 66 28 68 29 7b 69 66 28 28 45 3d 6f 28 65 2c 76 29 29 3c 30 29 62 72 65 61 6b 3b 46 3d 65 2e 62 4d 61 72 6b 73 5b 76 5d 2b 65 2e 74 53 68 69 66 74 5b 76 5d 7d 65 6c 73 65 20 69 66 28 28 45 3d 73 28 65 2c 76 29 29 3c 30 29 62 72 65 61 6b 3b 69 66 28 5f 21 3d 3d 65 2e 73 72 63 2e 63 68 61 72 43 6f 64 65 41 74 28 45 2d 31 29 29 62 72 65 61 6b 7d 72 65 74 75 72 6e 28 52 3d 68 3f 65 2e 70 75 73 68 28 22 6f 72 64 65 72 65 64 5f 6c 69 73 74 5f 63 6c 6f 73 65 Data Ascii: ount[t]-e.blkIndent>=4)break;for(L=!1,c=0,d=z.length;c<d;c++)if(z[c](e,v,r,!0)){L=!0;break}if(L)break;if(h){if((E=o(e,v))<0)break;F=e.bMarks[v]+e.tShift[v]}else if((E=s(e,v))<0)break;if(_!==e.src.charCodeAt(E-1))break}return(R=h?e.push("ordered_list_close
2024-04-19 19:09:58 UTC	15358	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 6e 3d 30 2c 73 3d 65 2e 74 6f 6b 65 6e 73 2c 6f 3d 65 2e 74 6f 6b 65 6e 73 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 74 3d 72 3d 30 3b 74 3c 6f 3b 74 2b 2b 29 73 5b 74 5d 2e 6e 65 73 74 69 6e 67 3c 30 26 26 6e 2d 2d 2c 73 5b 74 5d 2e 6c 65 76 65 6c 3d 6e 2c 73 5b 74 5d 2e 6e 65 73 74 69 6e 67 3e 30 26 26 6e 2b 2b 2c 22 74 65 78 74 22 3d 3d 3d 73 5b 74 5d 2e 74 79 70 65 26 26 74 2b 31 3c 6f 26 26 22 74 65 78 74 22 3d 3d 3d 73 5b 74 2b 31 5d 2e 74 79 70 65 3f 73 5b 74 2b 31 5d 2e 63 6f 6e 74 65 6e 74 3d 73 5b 74 5d 2e 63 6f 6e 74 65 6e 74 2b 73 5b 74 2b 31 5d 2e 63 6f 6e 74 65 6e 74 3a 28 74 21 3d 3d 72 26 26 28 73 5b 72 5d 3d 73 5b 74 5d 29 2c 72 2b 2b 29 3b 74 21 3d 3d 72 26 26 28 73 2e 6c 65 6e 67 Data Ascii: =function(e){var t,r,n=0,s=e.tokens,o=e.tokens.length;for(t=r=0;t<o;t++)s[t].nesting<0&&n--,s[t].level=n,s[t].nesting>0&&n++,"text"===s[t].type&&t+1<o&&"text"===s[t+1].type?s[t+1].content=s[t].content+s[t+1].content:(t!==r&&(s[r]=s[t]),r++);t!==r&&(s.leng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49765	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:58 UTC	665	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:58 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288111 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 19:09:58 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (agc/7FA7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 687a15df-701e-0054-73bd-7d951d000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-04-19 19:09:58 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49766	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:58 UTC	419	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:58 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288134 Cache-Control: public, max-age=31536000 Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 19:09:58 GMT Etag: 0x8DB5C3F466DE917 Last-Modified: Wed, 24 May 2023 10:11:43 GMT Server: ECAcc (agc/7F88) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: e5c9e6a9-c01e-00bb-6abd-7d0975000000 x-ms-version: 2009-09-19 Content-Length: 1864 Connection: close
2024-04-19 19:09:58 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49767	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:58 UTC	420	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:59 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288069 Cache-Control: public, max-age=31536000 Content-MD5: nzaLxFgP7ZB3dfMcaybWzw== Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 19:09:59 GMT Etag: 0x8DB5C3F495F4B8C Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (agc/7F5C) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 0d294a5a-601e-0019-70bd-7d9917000000 x-ms-version: 2009-09-19 Content-Length: 3651 Connection: close
2024-04-19 19:09:59 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49768	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:09:59 UTC	420	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:09:59 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288112 Cache-Control: public, max-age=31536000 Content-MD5: R2FAVxfpONfnQAuxVxXbHg== Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 19:09:59 GMT Etag: 0x8DB5C3F4BB4F03C Last-Modified: Wed, 24 May 2023 10:11:52 GMT Server: ECAcc (agc/7FA7) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 687a15df-701e-0054-73bd-7d951d000000 x-ms-version: 2009-09-19 Content-Length: 1592 Connection: close
2024-04-19 19:09:59 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49778	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:10:13 UTC	622	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_3c78f555810791db83a9.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:10:13 UTC	748	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4115075 Cache-Control: public, max-age=31536000 Content-MD5: aw0rzdLjmyywvatll+RFBQ== Content-Type: application/x-javascript Date: Fri, 19 Apr 2024 19:10:13 GMT Etag: 0x8DC2E5A3CD3F914 Last-Modified: Thu, 15 Feb 2024 19:13:48 GMT Server: ECAcc (agc/7F44) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: d9eea8d0-701e-0044-3120-6d253f000000 x-ms-version: 2009-09-19 Content-Length: 4730 Connection: close
2024-04-19 19:10:13 UTC	4730	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49777	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:10:13 UTC	670	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:10:13 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4602899 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Fri, 19 Apr 2024 19:10:13 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (agc/7F9E) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2734cd67-901e-000e-0bb0-68f83b000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-04-19 19:10:13 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49779	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:10:13 UTC	664	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:10:13 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4384445 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Fri, 19 Apr 2024 19:10:13 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (agc/7F6C) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: f8b5a114-601e-00d9-13ac-6a1d53000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-04-19 19:10:13 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49780	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:10:14 UTC	425	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:10:14 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4602900 Cache-Control: public, max-age=31536000 Content-MD5: Fm3lNHEmUlOrOkVt7+baIw== Content-Type: image/gif Date: Fri, 19 Apr 2024 19:10:14 GMT Etag: 0x8DB5C3F4982FD30 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (agc/7F9E) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2734cd67-901e-000e-0bb0-68f83b000000 x-ms-version: 2009-09-19 Content-Length: 2672 Connection: close
2024-04-19 19:10:14 UTC	2672	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e 69 18 14 00 21 Data Ascii: GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~i!

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49781	152.199.4.44	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:10:14 UTC	419	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:10:14 UTC	715	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 4384446 Cache-Control: public, max-age=31536000 Content-MD5: tUCo5RgDcZLjLE/li/Lbqw== Content-Type: image/gif Date: Fri, 19 Apr 2024 19:10:14 GMT Etag: 0x8DB5C3F492F3EE5 Last-Modified: Wed, 24 May 2023 10:11:48 GMT Server: ECAcc (agc/7F6C) X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: f8b5a114-601e-00d9-13ac-6a1d53000000 x-ms-version: 2009-09-19 Content-Length: 3620 Connection: close
2024-04-19 19:10:14 UTC	3620	IN	Data Raw: 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 0f Data Ascii: GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49782	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:10:14 UTC	669	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:10:14 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288107 Cache-Control: public, max-age=31536000 Content-MD5: b2jpiB3xj44lGrV9V4Yjmw== Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 19:10:14 GMT Etag: 0x8DB5C3F4A04A56D Last-Modified: Wed, 24 May 2023 10:11:49 GMT Server: ECAcc (agc/7F57) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2a796612-501e-0002-67bd-7d0c22000000 x-ms-version: 2009-09-19 Content-Length: 1378 Connection: close
2024-04-19 19:10:14 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 65 36 65 36 65 36 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 61 22 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 32 2e 35 2c 31 34 41 31 2e 34 39 32 2c 31 2e 34 39 32 2c 30 2c 30 2c 31 2c 33 34 2c 31 35 2e 35 56 33 38 2e 35 41 31 2e 34 39 34 2c 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49783	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:10:14 UTC	669	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:10:14 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2287992 Cache-Control: public, max-age=31536000 Content-MD5: hHpCErmbkHbuOTKLJM0wrw== Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 19:10:14 GMT Etag: 0x8DB5C3F4A4E2B5D Last-Modified: Wed, 24 May 2023 10:11:50 GMT Server: ECAcc (agc/7F67) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 36517ff2-f01e-0024-2cbe-7d671d000000 x-ms-version: 2009-09-19 Content-Length: 379 Connection: close
2024-04-19 19:10:14 UTC	379	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 20 66 69 6c 6c 3d 22 23 65 36 65 36 65 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 34 34 2c 33 36 68 31 2e 39 32 61 38 2e 36 34 2c 38 2e 36 34 2c 30 2c 31 2c 31 2c 31 37 2e 32 38 2c 30 68 31 2e 39 32 61 31 30 2e 35 37 33 2c 31 30 2e 35 37 33 2c 30 2c 30 2c 30 2d 36 2e 35 36 39 2d 39 2e 37 37 31 2c 37 2e 36 38 2c 37 2e 36 38 2c 30 2c 31 2c 30 2d 37 2e 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49784	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:10:15 UTC	424	OUT	GET /shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:10:15 UTC	737	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2288108 Cache-Control: public, max-age=31536000 Content-MD5: b2jpiB3xj44lGrV9V4Yjmw== Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 19:10:15 GMT Etag: 0x8DB5C3F4A04A56D Last-Modified: Wed, 24 May 2023 10:11:49 GMT Server: ECAcc (agc/7F57) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 2a796612-501e-0002-67bd-7d0c22000000 x-ms-version: 2009-09-19 Content-Length: 1378 Connection: close
2024-04-19 19:10:15 UTC	1378	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 23 65 36 65 36 65 36 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 63 69 72 63 6c 65 20 63 6c 61 73 73 3d 22 61 22 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 33 32 2e 35 2c 31 34 41 31 2e 34 39 32 2c 31 2e 34 39 32 2c 30 2c 30 2c 31 2c 33 34 2c 31 35 2e 35 56 33 38 2e 35 41 31 2e 34 39 34 2c 31 2e 34 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:#e6e6e6;}.b{fill:#404040;}</style></defs><circle class="a" cx="24" cy="24" r="24"/><path class="b" d="M32.5,14A1.492,1.492,0,0,1,34,15.5V38.5A1.494,1.4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49785	152.199.4.44	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:10:15 UTC	424	OUT	GET /shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:10:15 UTC	736	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2287993 Cache-Control: public, max-age=31536000 Content-MD5: hHpCErmbkHbuOTKLJM0wrw== Content-Type: image/svg+xml Date: Fri, 19 Apr 2024 19:10:15 GMT Etag: 0x8DB5C3F4A4E2B5D Last-Modified: Wed, 24 May 2023 10:11:50 GMT Server: ECAcc (agc/7F67) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 36517ff2-f01e-0024-2cbe-7d671d000000 x-ms-version: 2009-09-19 Content-Length: 379 Connection: close
2024-04-19 19:10:15 UTC	379	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 34 22 20 63 79 3d 22 32 34 22 20 72 3d 22 32 34 22 20 66 69 6c 6c 3d 22 23 65 36 65 36 65 36 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 34 34 2c 33 36 68 31 2e 39 32 61 38 2e 36 34 2c 38 2e 36 34 2c 30 2c 31 2c 31 2c 31 37 2e 32 38 2c 30 68 31 2e 39 32 61 31 30 2e 35 37 33 2c 31 30 2e 35 37 33 2c 30 2c 30 2c 30 2d 36 2e 35 36 39 2d 39 2e 37 37 31 2c 37 2e 36 38 2c 37 2e 36 38 2c 30 2c 31 2c 30 2d 37 2e 39 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><title>assets</title><circle cx="24" cy="24" r="24" fill="#e6e6e6"/><path d="M13.44,36h1.92a8.64,8.64,0,1,1,17.28,0h1.92a10.573,10.573,0,0,0-6.569-9.771,7.68,7.68,0,1,0-7.9

Target ID:	0
Start time:	21:09:40
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:09:42
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2012 --field-trial-handle=1956,i,14686346497288774614,5406002529245603191,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	21:09:45
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmJTNhYiUzYSUyZnIlMmZwZXJzb25hbCUyZmFlcm9kcmlndWV6X2d1bm5hdXRvX2NvbSUyZkRvY3VtZW50cyUyZkF0dGFjaG1lbnRzJTJmSDI0MTQyMy5wZGYlM2Zjc2YlM2QxJTI2d2ViJTNkMSZjPUUsMSxmT1pZNThPOTZjZjNwWkY1eWU3QnhGZWM2eFRWNWtyRDdneUVGdFJaNENCSjVOQkItZ0RyMUlHdlQ1Mi01Vm95d2o4Y2h5WDJXNlFFTWhsU0o2SHJUc3pqNWVoeF9aVUhzNVNZRm8xZjJfSTdwTUNIeDdiRSZ0eXBvPTE=&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RytpUnowc0wwYVZ5TS9IN2pYN0J3ektSZ3pLWEh1Y1FlaUxrM2hUL1kzST0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets