Edit tour

Windows Analysis Report
https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmcGVyc29uYWwlMmZhZXJvZHJpZ3Vlel9ndW5uYXV0b19jb20lMmZfbGF5b3V0cyUyZjE1JTJmUmV2b2tlSW52aXRlLmFzcHglM2ZpbnZpdGF0aW9uJTNkYW5vbnltb3VzJTI2bGl

Overview

General Information

Sample URL:	https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmcGVyc29uYWwlMmZhZXJvZHJpZ3Vlel9ndW5
Analysis ID:	1428923
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

HTML body contains low number of good links

HTML title does not match URL

Submit button contains javascript call

Classification

Process Tree

System is w10x64

chrome.exe (PID: 908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1980,i,11233055407409997117,13529957178688894726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6468 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_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&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RSt1V2wxeFozSmkzRlNIb3h4a0Rwb1Z3Tmd0eVovYlNhSDltbVpxaTEwdz0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: Iframe src: https://fpt.live.com/?session_id=23a3a2931a4e47fbb320e51cd5e4f175&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Source: https://www.microsoft.com/en-us/servicesagreement/	HTTP Parser: Iframe src: https://fpt.microsoft.com/tags?session_id=10341422-9bae-4adf-9da7-22b5559dbaec
Source: https://www.microsoft.com/en-us/servicesagreement/	HTTP Parser: Iframe src: https://fpt.microsoft.com/tags?session_id=10341422-9bae-4adf-9da7-22b5559dbaec
Source: https://www.microsoft.com/en-us/servicesagreement/	HTTP Parser: Iframe src: https://mscom.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.microsoft.com

Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9%2D754088AC550404B3F34AF17BDBD92764A5912F1816A0C3E940AD7D9190356D0E&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ad9f20a1%2Dd0a4%2D5000%2D498d%2Df35e97ae8794	HTTP Parser: Number of links: 0
Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: Number of links: 0

Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b	HTTP Parser: Title: Redirecting does not match URL
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9%2D754088AC550404B3F34AF17BDBD92764A5912F1816A0C3E940AD7D9190356D0E&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ad9f20a1%2Dd0a4%2D5000%2D498d%2Df35e97ae8794	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: Title: Create account does not match URL

Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: On click: OnBack(); return false;
Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: On click: OnBack(); return false;
Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();
Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: On click: HOSTUI.evt_inlineBack_onclick();

Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b&sso_reload=true	HTTP Parser: <input type="password" .../> found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9%2D754088AC550404B3F34AF17BDBD92764A5912F1816A0C3E940AD7D9190356D0E&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ad9f20a1%2Dd0a4%2D5000%2D498d%2Df35e97ae8794	HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b	HTTP Parser: No favicon
Source: https://fpt.live.com/?session_id=23a3a2931a4e47fbb320e51cd5e4f175&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU	HTTP Parser: No favicon
Source: https://fpt.microsoft.com/tags?session_id=10341422-9bae-4adf-9da7-22b5559dbaec	HTTP Parser: No favicon

Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9%2D754088AC550404B3F34AF17BDBD92764A5912F1816A0C3E940AD7D9190356D0E&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ad9f20a1%2Dd0a4%2D5000%2D498d%2Df35e97ae8794	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9%2D754088AC550404B3F34AF17BDBD92764A5912F1816A0C3E940AD7D9190356D0E&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ad9f20a1%2Dd0a4%2D5000%2D498d%2Df35e97ae8794	HTTP Parser: No <meta name="author".. found
Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: No <meta name="author".. found
Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: No <meta name="author".. found
Source: https://www.microsoft.com/en-us/servicesagreement/	HTTP Parser: No <meta name="author".. found
Source: https://www.microsoft.com/en-us/servicesagreement/	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9%2D754088AC550404B3F34AF17BDBD92764A5912F1816A0C3E940AD7D9190356D0E&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ad9f20a1%2Dd0a4%2D5000%2D498d%2Df35e97ae8794	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9%2D754088AC550404B3F34AF17BDBD92764A5912F1816A0C3E940AD7D9190356D0E&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ad9f20a1%2Dd0a4%2D5000%2D498d%2Df35e97ae8794	HTTP Parser: No <meta name="copyright".. found
Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: No <meta name="copyright".. found
Source: https://signup.live.com/?lc=1033&wreply=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3fsignInProvider%3dlive%26invitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&lic=1	HTTP Parser: No <meta name="copyright".. found
Source: https://www.microsoft.com/en-us/servicesagreement/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.microsoft.com/en-us/servicesagreement/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.44.104.130:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.104.130:443 -> 192.168.2.4:49742 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.104.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.205.48
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.239.132
Source: unknown	TCP traffic detected without corresponding DNS query: 173.223.239.132
Source: unknown	TCP traffic detected without corresponding DNS query: 23.40.205.48
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_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&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RSt1V2wxeFozSmkzRlNIb3h4a0Rwb1Z3Tmd0eVovYlNhSDltbVpxaTEwdz0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ HTTP/1.1Host: us-west-2.protection.sophos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /url?a=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3finvitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&c=E,1,yfCuoyElu4g2cC3vjihhEQ_2ynbXm46TZ87TVcpGUqCJgRjKizQCDp4RJPwOAaq2WXcRuYHMYn6sz9HbWJksgf80fKYtlvagjvAUOEc2QI2uGW105hZu3w,,&typo=1 HTTP/1.1Host: linkprotect.cudasvc.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272 HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/O365BrandSuite.png?rev=47 HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/WindowsLiveHotmail.png HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/MicrosoftOnlineServiceID.png HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/O365BrandSuite.png?rev=47 HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/WindowsLiveHotmail.png HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/MicrosoftOnlineServiceID.png HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_layouts/15/images/favicon.ico HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df-334f-4aed-90a6-0c0ae6b6d5dd&itemId=8be457aa-091b-415b-8d7a-caf1cddd4272&signInProvider=live HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2F%5Flayouts%2F15%2FRevokeInvite%2Easpx%3Finvitation%3Danonymous%26listId%3D7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd%26itemId%3D8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272%26signInProvider%3Dlive HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252F%255Flayouts%252F15%252FRevokeInvite%252Easpx%253Finvitation%253Danonymous%2526listId%253D7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%2526itemId%253D8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272%2526signInProvider%253Dlive&Source=cookie HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGYWVyb2RyaWd1ZXolNUZndW5uYXV0byU1RmNvbSUyRiU1RmxheW91dHMlMkYxNSUyRlJldm9rZUludml0ZSUyRWFzcHglM0ZpbnZpdGF0aW9uJTNEYW5vbnltb3VzJTI2bGlzdElkJTNENzE1OGU0ZGYlMkQzMzRmJTJENGFlZCUyRDkwYTYlMkQwYzBhZTZiNmQ1ZGQlMjZpdGVtSWQlM0Q4YmU0NTdhYSUyRDA5MWIlMkQ0MTViJTJEOGQ3YSUyRGNhZjFjZGRkNDI3MiUyNnNpZ25JblByb3ZpZGVyJTNEbGl2ZQ==
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_3b4rnVNi70Sso4_c42_ImQ2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_jHSrlUosdD1xxbmcR_lMNA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l2bvdjfwt697xziuhxpwsg2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df-334f-4aed-90a6-0c0ae6b6d5dd&itemId=8be457aa-091b-415b-8d7a-caf1cddd4272&signInProvider=mso HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nSGt-DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944=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; RpsContextCookie=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
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2F%5Flayouts%2F15%2FRevokeInvite%2Easpx%3Finvitation%3Danonymous%26listId%3D7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd%26itemId%3D8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272%26signInProvider%3Dmso HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nSGt-DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944=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; RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGYWVyb2RyaWd1ZXolNUZndW5uYXV0byU1RmNvbSUyRiU1RmxheW91dHMlMkYxNSUyRlJldm9rZUludml0ZSUyRWFzcHglM0ZpbnZpdGF0aW9uJTNEYW5vbnltb3VzJTI2bGlzdElkJTNENzE1OGU0ZGYlMkQzMzRmJTJENGFlZCUyRDkwYTYlMkQwYzBhZTZiNmQ1ZGQlMjZpdGVtSWQlM0Q4YmU0NTdhYSUyRDA5MWIlMkQ0MTViJTJEOGQ3YSUyRGNhZjFjZGRkNDI3MiUyNnNpZ25JblByb3ZpZGVyJTNEbGl2ZSZQcmV2aW91c1JlcXVlc3RDb3JyZWxhdGlvbklkPWFjOWYyMGExJTJEZTAyMSUyRDUwMDAlMkQ1YWU4JTJEMTg0NWU2YTA2YjRiJlJldHVyblVybD0lMkZwZXJzb25hbCUyRmFlcm9kcmlndWV6JTVGZ3VubmF1dG8lNUZjb20lMkYlNUZsYXlvdXRzJTJGMTUlMkZBdXRoZW50aWNhdGUlMkVhc3B4JTNGU291cmNlJTNEJTI1MkZwZXJzb25hbCUyNTJGYWVyb2RyaWd1ZXolMjU1Rmd1bm5hdXRvJTI1NUZjb20lMjUyRiUyNTVGbGF5b3V0cyUyNTJGMTUlMjUyRlJldm9rZUludml0ZSUyNTJFYXNweCUyNTNGaW52aXRhdGlvbiUyNTNEYW5vbnltb3VzJTI1MjZsaXN0SWQlMjUzRDcxNThlNGRmJTI1MkQzMzRmJTI1MkQ0YWVkJTI1MkQ5MGE2JTI1MkQwYzBhZTZiNmQ1ZGQlMjUyNml0ZW1JZCUyNTNEOGJlNDU3YWElMjUyRDA5MWIlMjUyRDQxNWIlMjUyRDhkN2ElMjUyRGNhZjFjZGRkNDI3MiUyNTI2c2lnbkluUHJvdmlkZXIlMjUzRGxpdmU=
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252F%255Flayouts%252F15%252FRevokeInvite%252Easpx%253Finvitation%253Danonymous%2526listId%253D7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%2526itemId%253D8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272%2526signInProvider%253Dmso&Source=cookie HTTP/1.1Host: gunnauto-my.sharepoint.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: nSGt-DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944=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; RpsContextCookie=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
Source: global traffic	HTTP traffic detected: GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lightweightsignuppackage_MwksSuxFBgQ4Y619ES0DZQ2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signup.live.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signup.live.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon.ico?v=2 HTTP/1.1Host: acctcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mscc/lib/v2/wcp-consent.js HTTP/1.1Host: wcpstatic.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MS0=2d470abf00e14d009504460133884a20
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1713554473345 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1713554473345 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: mscom.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=26107920449527268090926781646765029347&ts=1713554473956 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=26107920449527268090926781646765029347&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MC1%01749eee6039c5489b9db3000c7ab3f399%012&ts=1713554474609 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=26107920449527268090926781646765029347&ts=1713554473956 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=26389280685137111260898653323266367212 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=MjYzODkyODA2ODUxMzcxMTEyNjA4OTg2NTMzMjMyNjYzNjcyMTI= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=26107920449527268090926781646765029347&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MC1%01749eee6039c5489b9db3000c7ab3f399%012&ts=1713554474609 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021; dpm=26389280685137111260898653323266367212
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomMjYzODkyODA2ODUxMzcxMTEyNjA4OTg2NTMzMjMyNjYzNjcyMTIQABoNCKyIi7EGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=e4hTswpaEMXd5mClAadxsUS6nRpwHJZoGE/ZOrtrwZo=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=O6o5GhbE32qsxaB0HIJ1fblnaIZQJS92xvi4KzC_EWAVz2cfsJZaHRjaM99A99quMGsLop8YDUnMNspBmQDRRk__RonFIp9htJ4y1Ye6FU4.; receive-cookie-deprecation=1; uuid2=774620743932450137
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=26389280685137111260898653323266367212&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=MjYzODkyODA2ODUxMzcxMTEyNjA4OTg2NTMzMjMyNjYzNjcyMTI=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=1wuv5adz37oi2 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=7c83c21a24cf8cd12a8fef63091a9790525ed605b0d5dca058d567e46e368457b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=774620743932450137 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEHZZI_UPriJ7zaZlyCVS4v4&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=26389280685137111260898653323266367212&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_mYH8t0d7Enl9BO9j8knHKg=="
Source: global traffic	HTTP traffic detected: GET /i.match?p=b13&u=26389280685137111260898653323266367212&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=ADOBE&_hosted_id=26389280685137111260898653323266367212&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=5953B2DFE3273B&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=1wuv5adz37oi2 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=7c83c21a24cf8cd12a8fef63091a9790525ed605b0d5dca058d567e46e368457b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=774620743932450137 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEHZZI_UPriJ7zaZlyCVS4v4&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b13&u=26389280685137111260898653323266367212&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: s.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aPnoeUwZcF1voXarrecb7XsTqqSXaZaV0VpTLjms8a
Source: global traffic	HTTP traffic detected: GET /getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=6622c42d-8479f-f9c4c-97408
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588
Source: global traffic	HTTP traffic detected: GET /dmp/adobe/user?dd_uuid=26389280685137111260898653323266367212 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=26389280685137111260898653323266367212&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBC3EImYCED2yUVI90XtLlcPKj9-owZkFEgEBAQEVJGYsZvGAziMA_eMAAA&S=AQAAAmMGZcOuxlXcBzKh8VTpBMA
Source: global traffic	HTTP traffic detected: GET /dv/sync?tid=6 HTTP/1.1Host: ag.innovid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncAdobe HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=26389280685137111260898653323266367212?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=3461195966407693141416; tluid=3461195966407693141416
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=AF316644E9C7D9165ECD79E0FBEC1395 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7668408781822501030 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=43007455-0780-4ae3-9e60-f61159d50f9d HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=5953B2DFE3273B&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=26389280685137111260898653323266367212?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /dmp/adobe/user?dd_uuid=26389280685137111260898653323266367212 HTTP/1.1Host: bttrack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WmlMRUt3QUFBTDE5eXdOdw== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7Wh-jfCRsWe7Nungmu515OKwdCUtCIH6WhHU1JhL5EjxhfFu9dYXKZtquN1U
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=3461195966407693141416&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=8647ef753ba0b6bc0c21c4f679cc985b HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=AF316644E9C7D9165ECD79E0FBEC1395 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=43007455-0780-4ae3-9e60-f61159d50f9d HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7668408781822501030 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=ZiLEKwAAAL19ywNw HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=158&code=ZiLEKwAAAL19ywNw HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=O6o5GhbE32qsxaB0HIJ1fblnaIZQJS92xvi4KzC_EWAVz2cfsJZaHRjaM99A99quMGsLop8YDUnMNspBmQDRRk__RonFIp9htJ4y1Ye6FU4.; receive-cookie-deprecation=1; uuid2=774620743932450137
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=ZiLEKwAAAL19ywNw&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZiLEMMAoImAAADurAsfBWwAA; CMPS=2047; CMPRO=2047
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=3461195966407693141416&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873\|144236-1-1713554478986\|144237-1-1713554479093\|147592-1-1713554479200\|390122-1-1713554479301
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873\|144236-1-1713554478986\|144237-1-1713554479093\|147592-1-1713554479200\|390122-1-1713554479301
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=8647ef753ba0b6bc0c21c4f679cc985b HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873\|144236-1-1713554478986\|144237-1-1713554479093\|147592-1-1713554479200\|390122-1-1713554479301
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=ZiLEKwAAAL19ywNw HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WmlMRUt3QUFBTDE5eXdOdw== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7Wh-jfCRsWe7Nungmu515OKwdCUtCIH6WhHU1JhL5EjxhfFu9dYXKZtquN1U
Source: global traffic	HTTP traffic detected: GET /sync?nid=adobe HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=ZiLEKwAAAL19ywNw HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=ZiLEKwAAAL19ywNw&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=390122&dpuuid=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873\|144236-1-1713554478986\|144237-1-1713554479093\|147592-1-1713554479200\|390122-1-1713554479301
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=ZiLEKwAAAL19ywNw HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=ZiLEKwAAAL19ywNw&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=ZiLEMMAoImAAADurAsfBWwAA; CMPS=2047; CMPRO=2047
Source: global traffic	HTTP traffic detected: GET /setuid?entity=158&code=ZiLEKwAAAL19ywNw HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=774620743932450137; anj=dTM7k!M4.FErk#WF']wIg2IledV+kv!]tbPl1MwL(!R7qUY#RMS2rO<YWJXJXp1kKCg-yqRudrG(j#iP(Md+uBZ.Nkx3I%>=Y`s=B+NK1Q67Oe!@GG:*CBKv
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=ZiLEKwAAAL19ywNw HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=390122&dpuuid=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873\|144236-1-1713554478986\|144237-1-1713554479093\|147592-1-1713554479200\|390122-1-1713554479301
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=ZiLEKwAAAL19ywNw&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown

DNS traffic detected: queries for: us-west-2.protection.sophos.com

Source: chromecache_124.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_103.2.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_151.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_103.2.dr	String found in binary or memory: https://accessadvance.com/hevc-advance-patent-list/
Source: chromecache_103.2.dr	String found in binary or memory: https://account.live.com/closeaccount.aspx
Source: chromecache_167.2.dr	String found in binary or memory: https://aka.ms/mac-manageaddress
Source: chromecache_167.2.dr	String found in binary or memory: https://aka.ms/mac-manageusers
Source: chromecache_167.2.dr	String found in binary or memory: https://aka.ms/mac-payment
Source: chromecache_167.2.dr	String found in binary or memory: https://aka.ms/mac-privacystatement
Source: chromecache_167.2.dr	String found in binary or memory: https://aka.ms/mac-recentorders
Source: chromecache_167.2.dr	String found in binary or memory: https://aka.ms/mac-redirect
Source: chromecache_103.2.dr	String found in binary or memory: https://aka.ms/redeemrewards
Source: chromecache_103.2.dr	String found in binary or memory: https://aka.ms/reportconcerns
Source: chromecache_103.2.dr	String found in binary or memory: https://aka.ms/reportconcerns).
Source: chromecache_103.2.dr	String found in binary or memory: https://aka.ms/taxservice
Source: chromecache_103.2.dr	String found in binary or memory: https://aka.ms/trustandsafety
Source: chromecache_103.2.dr	String found in binary or memory: https://aka.ms/trustandsafety).
Source: chromecache_103.2.dr	String found in binary or memory: https://aka.ms/useterms
Source: chromecache_103.2.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_135.2.dr	String found in binary or memory: https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c
Source: chromecache_167.2.dr	String found in binary or memory: https://axios-http.com
Source: chromecache_140.2.dr	String found in binary or memory: https://breeze.aimon.applicationinsights.io
Source: chromecache_99.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=12681
Source: chromecache_99.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_99.2.dr	String found in binary or memory: https://bugzil.la/548397
Source: chromecache_99.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=277178
Source: chromecache_99.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=308064
Source: chromecache_167.2.dr	String found in binary or memory: https://cart.perf.store-web.dynamics.com/cart/v1.0/cart/loadCart
Source: chromecache_167.2.dr	String found in binary or memory: https://cart.ppe.store-web.dynamics.com/cart/v1.0/cart/loadCart
Source: chromecache_167.2.dr	String found in binary or memory: https://cart.production.store-web.dynamics.com/cart/v1.0/cart/loadCart
Source: chromecache_167.2.dr	String found in binary or memory: https://cart.staging.store-web.dynamics.com/cart/v1.0/cart/loadCart
Source: chromecache_103.2.dr	String found in binary or memory: https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js
Source: chromecache_140.2.dr	String found in binary or memory: https://dc-int.services.visualstudio.com
Source: chromecache_140.2.dr	String found in binary or memory: https://dc.services.visualstudio.com
Source: chromecache_99.2.dr	String found in binary or memory: https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494
Source: chromecache_99.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values
Source: chromecache_99.2.dr	String found in binary or memory: https://elad.medium.com/css-position-sticky-how-it-really-works-54cd01dc2d46
Source: chromecache_109.2.dr	String found in binary or memory: https://fpt.live.com/
Source: chromecache_169.2.dr	String found in binary or memory: https://gethatch.com/?utm_source
Source: chromecache_169.2.dr	String found in binary or memory: https://gethatch.com/resources/images/hatch-logo.svg
Source: chromecache_167.2.dr	String found in binary or memory: https://github.com/axios/axios.git
Source: chromecache_167.2.dr	String found in binary or memory: https://github.com/axios/axios/issues
Source: chromecache_98.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/es-shims/es5-shim/issues/150
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/kitcambridge/es5-shim/commit/4f738ac066346
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/tc39/proposal-array-filtering
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/w3c/aria-practices/pull/1757
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.26.0/LICENSE
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.27.2/LICENSE
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1128
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/1130
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/475
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/677
Source: chromecache_99.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_132.2.dr	String found in binary or memory: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?i
Source: chromecache_103.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: chromecache_135.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31&h=
Source: chromecache_135.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE4FCgr?ver=05b8
Source: chromecache_99.2.dr	String found in binary or memory: https://javascript.info/size-and-scroll-window#width-height-of-the-document
Source: chromecache_180.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_180.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_180.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_99.2.dr	String found in binary or memory: https://keycode.info/table-of-all-keycodes
Source: chromecache_127.2.dr	String found in binary or memory: https://login.live.com/Me.srf?wa
Source: chromecache_93.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_127.2.dr	String found in binary or memory: https://login.microsoftonline.com/forgetuser
Source: chromecache_127.2.dr	String found in binary or memory: https://login.microsoftonline.com/savedusers?appid
Source: chromecache_127.2.dr	String found in binary or memory: https://login.microsoftonline.com/uxlogout?appid
Source: chromecache_93.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_167.2.dr	String found in binary or memory: https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/
Source: chromecache_167.2.dr	String found in binary or memory: https://s7d2.scene7.com/is/image/microsoftcorp/mwf-placeholder?wid
Source: chromecache_103.2.dr	String found in binary or memory: https://secure.skype.com/en/skype-number/
Source: chromecache_132.2.dr	String found in binary or memory: https://signup.live.com/?lc=1033&wreply=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2Fpersona
Source: chromecache_180.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_103.2.dr	String found in binary or memory: https://skype.com/go/myaccount
Source: chromecache_103.2.dr	String found in binary or memory: https://support.xbox.com/en-US/help/subscriptions-billing/manage-subscriptions/xbox-subscription-ina
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype-
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.every
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.filter
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.find
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.findIndex
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.foreach
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.map
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.push
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.some
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.splice
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-arrayspeciescreate
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isarray
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isconstructor
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-isregexp
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.create
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperties
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.entries
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.keys
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.tostring
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.values
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-parseint-string-radix
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.includes
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trim
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimend
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-string.prototype.trimstart
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_99.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey
Source: chromecache_103.2.dr	String found in binary or memory: https://www.adr.org
Source: chromecache_103.2.dr	String found in binary or memory: https://www.google.com/intl/en_ALL/help/terms_maps.html
Source: chromecache_103.2.dr	String found in binary or memory: https://www.mpegla.com
Source: chromecache_103.2.dr	String found in binary or memory: https://www.mpegla.com).
Source: chromecache_103.2.dr	String found in binary or memory: https://www.skype.com
Source: chromecache_103.2.dr	String found in binary or memory: https://www.skype.com).
Source: chromecache_103.2.dr	String found in binary or memory: https://www.skype.com/en/
Source: chromecache_103.2.dr	String found in binary or memory: https://www.skype.com/go/allrates
Source: chromecache_103.2.dr	String found in binary or memory: https://www.skype.com/go/emergency.
Source: chromecache_103.2.dr	String found in binary or memory: https://www.skype.com/go/legal
Source: chromecache_103.2.dr	String found in binary or memory: https://www.skype.com/go/legal.broadcast
Source: chromecache_103.2.dr	String found in binary or memory: https://www.skype.com/go/store.reactivate.credit
Source: chromecache_103.2.dr	String found in binary or memory: https://www.skype.com/go/ustax
Source: chromecache_103.2.dr	String found in binary or memory: https://www.xbox.com/
Source: chromecache_103.2.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/pc-game-pass/cfq7ttc0kgq8?icid=CNavAllPCGamePass
Source: chromecache_103.2.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass
Source: chromecache_103.2.dr	String found in binary or memory: https://www.xbox.com/en-us/legal/subscription-terms
Source: chromecache_103.2.dr	String found in binary or memory: https://www.xbox.com/en-us/legal/subscription-terms).
Source: chromecache_103.2.dr	String found in binary or memory: https://www.xbox.com/xbox-game-studios
Source: chromecache_103.2.dr	String found in binary or memory: https://www.xbox.com/xbox-game-studios)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.44.104.130:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.44.104.130:443 -> 192.168.2.4:49742 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@25/170@133/42

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1980,i,11233055407409997117,13529957178688894726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_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&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RSt1V2wxeFozSmkzRlNIb3h4a0Rwb1Z3Tmd0eVovYlNhSDltbVpxaTEwdz0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1980,i,11233055407409997117,13529957178688894726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	1 Scripting	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://tc39.es/ecma262/#sec-object.prototype.tostring	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-arrayspeciescreate	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.push	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-tointegerorinfinity	0%	URL Reputation	safe
https://axios-http.com	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-getmethod	0%	URL Reputation	safe
https://rtb.adentifi.com/CookieSyncAdobe	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-parseint-string-radix	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-string.prototype.includes	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.map	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-tolength	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype-	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.foreach	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-string.prototype.trimstart	0%	URL Reputation	safe
https://bugzil.la/548397	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-object.entries	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.find	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-object.keys	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-array.prototype.every	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-toprimitive	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-isconstructor	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-object.getownpropertynames	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-object.create	0%	URL Reputation	safe
https://tc39.es/ecma262/#sec-isarray	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s.tribalfusion.com	104.18.25.173	true	false	high
dual-spo-0005.spo-msedge.net	13.107.136.10	true	false	unknown
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
global.px.quantserve.com	192.184.67.40	true	false	high
sni1gl.wpc.alphacdn.net	152.195.19.97	true	false	unknown
us-east-eb2.3lift.com	35.71.139.29	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
bttrack.com	192.132.33.68	true	false	unknown
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	34.232.189.32	true	false	high
idsync.rlcdn.com	35.244.154.8	true	false	high
dualstack.tls13.taboola.map.fastly.net	151.101.1.44	true	false	unknown
sync.crwdcntrl.net	44.195.233.246	true	false	high
cm.g.doubleclick.net	64.233.176.154	true	false	high
pug-vac.pubmnet.com	8.28.7.83	true	false	unknown
aragorn-prod-va-lb.inbake.com	34.195.34.170	true	false	unknown
rtb.adentifi.com	44.206.22.2	true	false	unknown
www.google.com	64.233.176.147	true	false	high
part-0012.t-0009.t-msedge.net	13.107.213.40	true	false	unknown
sync.srv.stackadapt.com	52.72.43.196	true	false	high
msftenterprise.sc.omtrdc.net	63.140.39.35	true	false	unknown
match.adsrvr.org	3.33.220.150	true	false	high
star-mini.c10r.facebook.com	31.13.88.35	true	false	high
us-u.openx.net	35.244.159.8	true	false	high
s.twitter.com	104.244.42.3	true	false	high
linkprotect.cudasvc.com	44.208.218.64	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
part-0013.t-0009.t-msedge.net	13.107.213.41	true	false	unknown
d2t07dpvw9bt1v.cloudfront.net	99.84.191.68	true	false	high
dsum-sec.casalemedia.com	104.18.36.155	true	false	high
a.tribalfusion.com	104.18.24.173	true	false	high
ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	34.200.65.202	true	false	unknown
ib.anycast.adnxs.com	68.67.160.117	true	false	high
ag.innovid.com	unknown	unknown	false	high
us-west-2.protection.sophos.com	unknown	unknown	false	high
idpix.media6degrees.com	unknown	unknown	false	high
px.owneriq.net	unknown	unknown	false	high
ds.reson8.com	unknown	unknown	false	unknown
ups.analytics.yahoo.com	unknown	unknown	false	high
cm.everesttech.net	unknown	unknown	false	high
jadserve.postrelease.com	unknown	unknown	false	high
image2.pubmatic.com	unknown	unknown	false	high
dmpsync.3lift.com	unknown	unknown	false	high
fpt.live.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
rtd-tm.everesttech.net	unknown	unknown	false	high
servedby.flashtalking.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
signup.live.com	unknown	unknown	false	high
rtd.tubemogul.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
pixel.rubiconproject.com	unknown	unknown	false	high
trc.taboola.com	unknown	unknown	false	high
mscom.demdex.net	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
cms.quantserve.com	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
cms.analytics.yahoo.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high
sync.search.spotxchange.com	unknown	unknown	false	high
gunnauto-my.sharepoint.com	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	high
acctcdn.msftauth.net	unknown	unknown	false	unknown
sync-tm.everesttech.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2F%5Flayouts%2F15%2FRevokeInvite%2Easpx%3Finvitation%3Danonymous%26listId%3D7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd%26itemId%3D8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272%26signInProvider%3Dlive	false		unknown
https://dmpsync.3lift.com/getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D	false		high
https://msftenterprise.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=26107920449527268090926781646765029347&ts=1713554473956	false		unknown
https://dpm.demdex.net/ibs:dpid=80742&dpuuid=43007455-0780-4ae3-9e60-f61159d50f9d	false		high
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZiLEKwAAAL19ywNw&C=1	false		high
https://image2.pubmatic.com/AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=ZiLEKwAAAL19ywNw	false		high
https://mscom.demdex.net/dest5.html?d_nsid=0	false		high
https://cms.quantserve.com/pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent=	false		high
https://dpm.demdex.net/ibs:dpid=358&dpuuid=774620743932450137	false		high
https://sync.srv.stackadapt.com/sync?nid=adobe	false		high
https://rtb.adentifi.com/CookieSyncAdobe	false	URL Reputation: safe	unknown
https://dpm.demdex.net/ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE	false		high
https://ag.innovid.com/dv/sync?tid=6	false		high
https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b	false		high
https://a.tribalfusion.com/i.match?p=b13&u=26389280685137111260898653323266367212&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$	false		high
https://dmpsync.3lift.com/getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false		high
https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272	false		unknown
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID	false		high
https://gunnauto-my.sharepoint.com/_layouts/15/images/WindowsLiveHotmail.png	false		unknown
https://sync.crwdcntrl.net/map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=26389280685137111260898653323266367212?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id}	false		high
https://fpt.live.com/?session_id=23a3a2931a4e47fbb320e51cd5e4f175&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU	false		high
https://analytics.twitter.com/i/adsct?p_user_id=26389280685137111260898653323266367212&p_id=38594	false		high
https://gunnauto-my.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252F%255Flayouts%252F15%252FRevokeInvite%252Easpx%253Finvitation%253Danonymous%2526listId%253D7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%2526itemId%253D8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272%2526signInProvider%253Dmso&Source=cookie	false		unknown
https://login.microsoftonline.com/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9%2D754088AC550404B3F34AF17BDBD92764A5912F1816A0C3E940AD7D9190356D0E&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ad9f20a1%2Dd0a4%2D5000%2D498d%2Df35e97ae8794	false		high
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZiLEKwAAAL19ywNw	false		high
https://dpm.demdex.net/ibs:dpid=22054	false		high
https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df-334f-4aed-90a6-0c0ae6b6d5dd&itemId=8be457aa-091b-415b-8d7a-caf1cddd4272&signInProvider=live	false		unknown
https://idsync.rlcdn.com/365868.gif?partner_uid=26389280685137111260898653323266367212	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_99.2.dr	false		high
https://login.microsoftonline.com/uxlogout?appid	chromecache_127.2.dr	false		high
https://tc39.es/ecma262/#sec-object.prototype.tostring	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-arrayspeciescreate	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js	chromecache_99.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.push	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/v8/issues/detail?id=12681	chromecache_99.2.dr	false		high
https://github.com/tc39/proposal-array-filtering	chromecache_99.2.dr	false		high
https://aka.ms/taxservice	chromecache_103.2.dr	false		high
https://skype.com/go/myaccount	chromecache_103.2.dr	false		high
https://www.skype.com	chromecache_103.2.dr	false		high
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://support.xbox.com/en-US/help/subscriptions-billing/manage-subscriptions/xbox-subscription-ina	chromecache_103.2.dr	false		high
https://cdnssl.clicktale.net/www32/ptc/05d32363-d534-4d93-9b65-cde674775e71.js	chromecache_103.2.dr	false		high
https://github.com/es-shims/es5-shim/issues/150	chromecache_99.2.dr	false		high
https://github.com/w3c/aria-practices/pull/1757	chromecache_99.2.dr	false		high
https://axios-http.com	chromecache_167.2.dr	false	URL Reputation: safe	unknown
https://keycode.info/table-of-all-keycodes	chromecache_99.2.dr	false		high
https://tc39.es/ecma262/#sec-getmethod	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://www.skype.com/en/	chromecache_103.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	chromecache_99.2.dr	false		high
https://tc39.es/ecma262/#sec-parseint-string-radix	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-string.prototype.includes	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js/issues/1130	chromecache_99.2.dr	false		high
https://jquery.com/	chromecache_180.2.dr	false		high
https://aka.ms/trustandsafety).	chromecache_103.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.map	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-tolength	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype-	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://www.skype.com/go/legal	chromecache_103.2.dr	false		high
https://breeze.aimon.applicationinsights.io	chromecache_140.2.dr	false		high
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.foreach	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-string.prototype.trimstart	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js/issues/677	chromecache_99.2.dr	false		high
https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?i	chromecache_132.2.dr	false		unknown
https://sizzlejs.com/	chromecache_180.2.dr	false		high
https://secure.skype.com/en/skype-number/	chromecache_103.2.dr	false		high
https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass	chromecache_103.2.dr	false		high
https://bugzil.la/548397	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://aka.ms/mac-payment	chromecache_167.2.dr	false		high
https://github.com/zloirock/core-js/issues/1128	chromecache_99.2.dr	false		high
https://login.windows-ppe.net	chromecache_93.2.dr	false		high
https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/	chromecache_167.2.dr	false		high
https://www.skype.com/go/emergency.	chromecache_103.2.dr	false		high
https://www.google.com/intl/en_ALL/help/terms_maps.html	chromecache_103.2.dr	false		high
https://dc-int.services.visualstudio.com	chromecache_140.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=277178	chromecache_99.2.dr	false		high
https://cart.staging.store-web.dynamics.com/cart/v1.0/cart/loadCart	chromecache_167.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=308064	chromecache_99.2.dr	false		high
https://login.microsoftonline.com	chromecache_93.2.dr	false		high
https://tc39.es/ecma262/#sec-object.entries	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-array.prototype.find	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-object.keys	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://github.com/kitcambridge/es5-shim/commit/4f738ac066346	chromecache_99.2.dr	false		high
https://www.skype.com/go/store.reactivate.credit	chromecache_103.2.dr	false		high
https://tc39.es/ecma262/#sec-array.prototype.every	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-toprimitive	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://gethatch.com/?utm_source	chromecache_169.2.dr	false		high
https://github.com/axios/axios.git	chromecache_167.2.dr	false		high
https://tc39.es/ecma262/#sec-isconstructor	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494	chromecache_99.2.dr	false		high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_103.2.dr	false		high
https://www.skype.com/go/allrates	chromecache_103.2.dr	false		high
https://jquery.org/license	chromecache_180.2.dr	false		high
https://tc39.es/ecma262/#sec-object.getownpropertynames	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://www.xbox.com/xbox-game-studios	chromecache_103.2.dr	false		high
https://javascript.info/size-and-scroll-window#width-height-of-the-document	chromecache_99.2.dr	false		high
https://tc39.es/ecma262/#sec-object.create	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://tc39.es/ecma262/#sec-isarray	chromecache_99.2.dr	false	URL Reputation: safe	unknown
https://account.live.com/closeaccount.aspx	chromecache_103.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.41	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.40	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
63.140.38.189	unknown	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
104.18.25.173	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
104.18.24.173	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
192.184.67.40	global.px.quantserve.com	United States	27281	QUANTCASTUS	false
192.184.67.84	unknown	United States	27281	QUANTCASTUS	false
8.28.7.83	pug-vac.pubmnet.com	United States	62713	AS-PUBMATICUS	false
13.107.213.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
63.140.39.35	msftenterprise.sc.omtrdc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
35.71.131.137	unknown	United States	237	MERIT-AS-14US	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
18.211.200.227	unknown	United States	14618	AMAZON-AESUS	false
18.213.234.13	unknown	United States	14618	AMAZON-AESUS	false
44.195.233.246	sync.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
99.84.191.68	d2t07dpvw9bt1v.cloudfront.net	United States	16509	AMAZON-02US	false
44.206.22.2	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
13.107.136.10	dual-spo-0005.spo-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
3.225.218.10	unknown	United States	14618	AMAZON-AESUS	false
68.67.161.208	unknown	United States	29990	ASN-APPNEXUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
52.72.43.196	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
64.233.176.154	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
108.177.122.154	unknown	United States	15169	GOOGLEUS	false
31.13.88.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
34.200.65.202	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud	United States	14618	AMAZON-AESUS	false
192.132.33.68	bttrack.com	United States	18568	BIDTELLECTUS	false
44.208.218.64	linkprotect.cudasvc.com	United States	14618	AMAZON-AESUS	false
34.195.34.170	aragorn-prod-va-lb.inbake.com	United States	14618	AMAZON-AESUS	false
68.67.160.117	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
35.71.139.29	us-east-eb2.3lift.com	United States	237	MERIT-AS-14US	false
104.244.42.3	s.twitter.com	United States	13414	TWITTERUS	false
34.232.189.32	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.244.42.195	unknown	United States	13414	TWITTERUS	false
151.101.129.44	unknown	United States	54113	FASTLYUS	false
64.233.176.147	www.google.com	United States	15169	GOOGLEUS	false
54.157.18.178	unknown	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428923
Start date and time:	2024-04-19 21:19:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_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&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RSt1V2wxeFozSmkzRlNIb3h4a0Rwb1Z3Tmd0eVovYlNhSDltbVpxaTEwdz0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@25/170@133/42
Cookbook Comments:	Browse: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df-334f-4aed-90a6-0c0ae6b6d5dd&itemId=8be457aa-091b-415b-8d7a-caf1cddd4272&signInProvider=live Browse: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df-334f-4aed-90a6-0c0ae6b6d5dd&itemId=8be457aa-091b-415b-8d7a-caf1cddd4272&signInProvider=mso Browse: https://signup.live.com/?lc=1033&wreply=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2F%5Flayouts%2F15%2FRevokeInvite%2Easpx%3FsignInProvider%3Dlive%26invitation%3Danonymous%26listId%3D7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3D8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272 Browse: https://go.microsoft.com/fwlink/p/?LinkId=530144

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 64.233.185.94, 142.250.105.84, 142.250.105.102, 142.250.105.100, 142.250.105.138, 142.250.105.113, 142.250.105.101, 142.250.105.139, 34.104.35.123, 52.165.165.26, 199.232.210.172, 192.229.211.108, 40.126.29.12, 40.126.29.13, 40.126.29.5, 40.126.29.8, 40.126.29.9, 40.126.29.10, 40.126.29.7, 20.190.157.11, 13.85.23.206, 23.199.71.89, 23.199.71.25, 40.126.7.32, 40.126.7.35, 40.126.28.21, 40.126.28.19, 40.126.28.12, 40.126.28.14, 40.126.28.13, 40.126.28.18, 64.233.176.95, 108.177.122.95, 64.233.185.95, 64.233.177.95, 142.251.15.95, 172.217.215.95, 172.253.124.95, 173.194.219.95, 142.250.105.95, 74.125.136.95, 74.125.138.95, 142.250.9.95, 13.107.42.22, 40.126.29.6, 52.167.30.171, 20.42.73.26, 23.63.205.212, 20.72.243.62, 23.63.157.112, 23.0.175.170, 23.0.175.192, 20.189.173.1, 44.207.11.65, 107.22.246.47, 52.206.38.125, 44.194.74.108, 107.23.170.82, 18.235.62.181, 20.189.173.3, 151.101.2.49, 151.101.66.49, 151.101.130.49, 151.101.194.49, 104.18.36.18, 172.64.151.238, 13.10
Excluded domains from analysis (whitelisted): greenid-prod-pme.eastus2.cloudapp.azure.com, onedscolprdwus00.westus.cloudapp.azure.com, pme-greenid-prod.trafficmanager.net, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, ak.privatelink.msidentity.com, e11290.dspg.akamaiedge.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, login.live.com, onedscolprdeus09.eastus.cloudapp.azure.com, update.googleapis.com, acctcdnvzeuno.azureedge.net, acctcdnvzeuno.ec.azureedge.net, fpt2.microsoft.com, fs.microsoft.com, acctcdnmsftuswe2.azureedge.net, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, www.tm.v4.a.prd.aadg.akadns.net, cm.everesttech.net.akadns.net, ds.reson8.com.cdn.cloudflare.net, aadcdn.msauth.net, edgedl.me.gvt1.com, nel.measure.office.net.edgesuite.net, c.bing.com, servedby.flashtalking.com-v1.edgekey.net, map.media6degrees.com.cdn.cloudflare.net, aadc
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_YT1odHRwcyUzYSUyZiUyZmd1bm5hdXRvLW15LnNoYXJlcG9pbnQuY29tJTJmcGVyc29uYWwlMmZhZXJvZHJpZ3Vlel9ndW5uYXV0b19jb20lMmZfbGF5b3V0cyUyZjE1JTJmUmV2b2tlSW52aXRlLmFzcHglM2ZpbnZpdGF0aW9uJTNkYW5vbnltb3VzJTI2bGlzdElkJTNkNzE1OGU0ZGYlMjUyRDMzNGYlMjUyRDRhZWQlMjUyRDkwYTYlMjUyRDBjMGFlNmI2ZDVkZCUyNml0ZW1JZCUzZDhiZTQ1N2FhJTI1MkQwOTFiJTI1MkQ0MTViJTI1MkQ4ZDdhJTI1MkRjYWYxY2RkZDQyNzImYz1FLDEseWZDdW95RWx1NGcyY0MzdmppaGhFUV8yeW5iWG00NlRaODdUVmNwR1VxQ0pnUmpLaXpRQ0RwNFJKUHdPQWFxMldYY1J1WUhNWW42c3o5SGJXSmtzZ2Y4MGZLWXRsdmFnanZBVU9FYzJRSTJ1R1cxMDVoWnUzdywsJnR5cG89MQ==&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RSt1V2wxeFozSmkzRlNIb3h4a0Rwb1Z3Tmd0eVovYlNhSDltbVpxaTEwdz0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/favicon.ico?v=2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://signup.live.com/Resources/images/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (4989)
Category:	downloaded
Size (bytes):	268632
Entropy (8bit):	5.088790060398066
Encrypted:	false
SSDEEP:	6144:AQ0bHmi6vsW5ACZbIfa7LN7iHi/tC+ZGRM6RpbQV0zGd+A+zzJxD4ucJKbo:AhbHy4otCvRJoKbo
MD5:	373C8AB6E7C11209C2B1C4AD806D682B
SHA1:	AD3B27E27379F5C738D65CAFE79F4FC0FC4D26BB
SHA-256:	6C4D854AA00E44D04053551BC11672DB0F659CEDCD2C3FED4B36802B5FCFBA4B
SHA-512:	6CA1D6BADDE9100877052AD710C3F5873EE5AFE22423DA17E4750C867F41E7E2105A949F724EB15FF15CBA38F5FCCE9BD1DEC300261EB5763A21B62F5557EEC4
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/en-us/servicesagreement/
Preview:	<!DOCTYPE HTML>..<html lang="en-US" dir="ltr">.<head>. . .. ..... . . . . . . . .. . Start of ADDITIONAL DEBUG INFO cv.html .. CVToken: CASMicrosoftCV32fbd740.0. End of ADDITIONAL DEBUG INFO -->.... . . . . . <meta charset="UTF-8"/>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/>. <meta http-equiv="x-ua-compatible" content="ie=edge"/>. . <link rel="SHORTCUT ICON" href="/favicon.ico?v2" type="image/x-icon"/>.. .. .. . <meta name="robots" content="index, follow"/>. . .. <meta name="template" content="servicesagreement-template"/>.. <meta name="awa-canvasType" content="web"/>. <meta name="awa-isTented" content="false"/>..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 95 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2122
Entropy (8bit):	7.483951836932628
Encrypted:	false
SSDEEP:	48:DitNn2VKCXGJ3kN8JIjWpei+ueUMkZfl8R25y+H+mDenc8MCGzr+:822JIWpei+gBemD9i
MD5:	2A04CECE8324B32FC3ED2344CC1D4D31
SHA1:	2603EB780304F4E47DA5B61654905CDC868F8AEF
SHA-256:	80EE541DF476D7A3A5E2CD242233B2C089189AF831CC62D8F0B1778D8075EBA1
SHA-512:	CB762244D4E3F3CEDD25D54514D28864CF68E93A7754BCA720132017C5800E7004E676757D261652CE6F768E00BFC627DDE0CD854AA96B7D623F626AD601E2C8
Malicious:	false
Reputation:	low
URL:	https://gunnauto-my.sharepoint.com/_layouts/15/images/O365BrandSuite.png?rev=47
Preview:	.PNG........IHDR..._.........JH.<....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:C9636D5FA06611E1B9C2A40F76FE35A3" xmpMM:DocumentID="xmp.did:C9636D60A06611E1B9C2A40F76FE35A3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C9636D5DA06611E1B9C2A40F76FE35A3" stRef:documentID="xmp.did:C9636D5EA06611E1B9C2A40F76FE35A3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..ylUE..K..=MA.(."....A%..!.?.k... .D.....!.........es.........!T.MZ.M .-...7.w..x.....dN..Y...3g.s.$

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65298)
Category:	downloaded
Size (bytes):	372346
Entropy (8bit):	5.092231050428225
Encrypted:	false
SSDEEP:	6144:pkz1b3b99G9gR7N1xf6ilX1b3b99G9gR7N1xf6iPyD1b3b99G9gR7N1xf6ilfsP3:yYfW1foh8
MD5:	FD071803266BA1F4336B43868366299A
SHA1:	88097ADEB2B9D68CAB0CB17BB9CFA59E49D70C88
SHA-256:	7253CFA1E19069CD0C227811DA7F548000D3AF4575F12FAD5C5C0611FFA6E9C3
SHA-512:	B897DA8695B6169AD78C1875EE2A876873D5FA3E87071235DB7EACE8189BFFE4087C7267C1F78ED4D6DF690E5B1E784A51015AA9ECD46011884EBB3C5451076C
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASHfd071803266ba1f4336b43868366299a.css
Preview:	@charset "UTF-8";/!. MWF (Moray) Extensions v2.15.0. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */@font-face{font-family:MWF-FLUENT-ICONS;src:url(resources/fonts/MWFFluentIcons.woff2) format("woff2"),url(resources/fonts/MWFFluentIcons.woff) format("woff"),url(resources/fonts/MWFFluentIcons.ttf) format("truetype")}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff2) format("woff2"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.woff) format("woff"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/normal/latest.ttf) format("ttf");font-weight:400}@font-face{font-family:SegoeUI;src:local("Segoe UI"),url(//c.s-microsoft.com/static/fonts/segoe-ui/west-european/light/latest.woff2) format("woff2"),url(//c.s-microsoft.com/static/fonts/segoe-

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=ZiLEKwAAAL19ywNw&C=1
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141320
Category:	downloaded
Size (bytes):	49617
Entropy (8bit):	7.995534454154058
Encrypted:	true
SSDEEP:	1536:IohTdtbswK1RfDDUDXsbGSKtnbiR+fU6I/dUG:PywkRLDwXSG2R+PI/qG
MD5:	97A274B38A866C3FEFFF29003D3511D1
SHA1:	0752DA49A4F7E374C76D0573AFD9CD1A074FBF00
SHA-256:	6B1FF2587733BD9F44BC787C319AF8C23D01C14ED633DC8CB6F5DF55B5178E9B
SHA-512:	62C400A3013A96A9B1AB5FEB2ADFF64CD3FA219C407B10F028AB04A96863F925D8D8D9AAF937ACDAF9091AC1B1DC262AAB92C2DD483C3B8715C71F3F1EC6D401
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_3b4rnVNi70Sso4_c42_ImQ2.js
Preview:	...........m[.8.0........'&..hp.'.t73@...g.X.'V......4.9...d.C..}....K...,..JU.......T~.l..?...w>..?T.....g..g.?<.?..z.....+...w....A%.~0..Y....+.....2...Jr'.(.".I\..q..Fb.>V.P].U..(y....u._@m...@.q8{.....?..7.)......OD..;.\|W9..Q..........#....n$.H.0J.....!e.1}....84......u.~..~.M...X&..Ou..ie..\|.IXy...Y....x...;..U.M....f,..l.tZ..<...bl{E\|..@<}..Fn.(W...so#!.E.X.<AEGO..~....Y..'.l&.8.T.....".J.K......Rm5.;...F..$.......G.qx.....C.._.s../.......3....\|.-.......o...?.a.La...W...7.?.O.....6..clXU....T.x.....".w.......;.k.\^w.~}.....jf......!..a..0y........@.L.1..0.......2.^_..g..../.........$@.....]+...2.v\.1............z\|.O..Y5..........XtR,....R...k3..<..\.2.>.;T..$...kj.5-.i?/..YH`!jb..Z..=.&.L..F... [..y....K5qzQ.>i.1.......0..P...@...L.".n.x..!.0..w.:+...n..4..H.. .....S.....h....8....v.l.[M.0..q..c;.....0..*.8.......l.T...n "..km..3..T..]......paJV.(J...g....!.\|.].......;.zN...%}....DZ..i.....j .a".i=O.R Q2..."....

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23303), with CRLF line terminators
Category:	downloaded
Size (bytes):	23767
Entropy (8bit):	5.767007554447823
Encrypted:	false
SSDEEP:	384:HoYKbbHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpn:IYKPH9yF1IBBdq5yF/2dE
MD5:	BF7FA91176869930E2744B55F0DB6248
SHA1:	C1445CF3E2C8931CBA58862AA67F568F1AD3CB3A
SHA-256:	DAF487A7F26B35B998F9277B622684E5E4F7369481D7A1948D3488F08FB4C129
SHA-512:	2C9A4B1B6B727A270D80C6EDE1061530C3C10B03C0180F9F632CA1EC29E845668D1AF460F987C5EE9BC40482D41B2A34CF162FBF04626778E11E9532C0C081EE
Malicious:	false
Reputation:	low
URL:	https://fpt.live.com/?session_id=23a3a2931a4e47fbb320e51cd5e4f175&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d&PageId=SU
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.live.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='23a3a2931a4e47fbb320e51cd5e4f175',ticks='8DC60A5DBC104FB',rid='00666063-d3a1-a78a-3fef-57e9a883777c',authKey='taBcrIH61PuCVH7eNCyH0MJojnuUODHcZ6x9WoxhgCmtTp2jV1vNxbd7ijmeVWB0E%252beIfBv%252bhqtKdFrXIwV5huNKGj6Q5ke1EWa6xlLVCGiA%252f3Da%252fTrOLwBf5DjJx91KsaX8sDdJ%252fA43KWp5SOIAkQ0IK9hnwsnb6oOmcUdl2jsIf92FZavULrQoOxVoeJRyb0JGa4VPmqKiVinwI8H37gYqDiz2HZxFTt3cO7myaOOvX7W1GpGuGYEgtDDOJJHiZB8jOlbm4ZFZyru3p%252bTt%252fJe7ULNnrodq9WaVtg8HduOq2EAHbSl5A0JokP%252b8qFdz',cid='33e01921-4d64-4f8c-a055-5bdaffd5e33d',assessment='',waitresponse=false,bbwait=false,commonquery='&PageId=SU',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1713554465249,ipv6Url='https://fpt6.microsoft.com/probe?session_id=23a3a2931a4e47fbb320e51cd5e4f175&instanceId=33e01921-4d64-4f8c-a055-5bd

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	327
Entropy (8bit):	4.8106554529785175
Encrypted:	false
SSDEEP:	6:qOjii5cLItuJYycLbj0I+cLbBFu5bGmsrRhm2Y339ZCX5DVgY:VluJojrBFEsrRELeJJgY
MD5:	7C868839B56EC9FA05D4FA4849348CFD
SHA1:	E379C2E17C4314B99AC5879BA75C0A9F0A0EDE7E
SHA-256:	367E082E55E4BF4678F1DBDC2967DEFDADE86C9E5DF095F9FD2C30600462E61C
SHA-512:	99AD387D304489B89977DBCC9DBB851B8C34511A85F4620CDF5BE05DA0412BD515BAD53B775AA16C03713B34E4D31115D1FD38B211219AE0B5A63499EC0C92A2
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/mlsd/components/content/print/v1/print/clientlibs/site.min.ACSHASH7c868839b56ec9fa05d4fa4849348cfd.css
Preview:	.print .div_print{padding-top:.15em}..print .print-btn{cursor:pointer;padding:0 5px}..print .print-glyph{margin:auto}.[html=rtl] .print .print-glyph{display:flex;flex-direction:row-reverse}..print .glyph-prepend-print::before{content:".";vertical-align:middle}.@media print{#headerArea,#footerArea,.uhf,.print{display:none}.}

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
URL:	https://match.adsrvr.org/track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.6086949695628414
Encrypted:	false
SSDEEP:	3:KAam:Kjm
MD5:	6BB67F495601048D153FBC0E1B5D05CE
SHA1:	23A3E77DB69B11287E84568C2E94192A1EBE4E2C
SHA-256:	5B053E9B260D50775B96A767F054A10724CF5EC33A2A5AD06842AB96B439A108
SHA-512:	A0D0736DC0249FCC064019486F59F7F82D0861FE3B32E87D1E177B5E7D593279CBC55D25781674F40D88516CCB63722A431BD22F29003A521AE096D40336E3CA
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkuJsum9Yzc8RIFDbT67LQ=?alt=proto
Preview:	Cg0KCw20+uy0GgQIZBgC

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/sd?id=537148856&val=ZiLEKwAAAL19ywNw
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 209473
Category:	downloaded
Size (bytes):	53469
Entropy (8bit):	7.995462070686393
Encrypted:	true
SSDEEP:	768:XBXGl8SBDAD1ShSDg7r8EyWC/LUkJ4Sopon9ib3bGyQI8dOw/HjI6cXFfUrOAl:J3SCsUDaoES/QSopewLGgw/HErIl
MD5:	21FB34953E9C14B9D9AF42A16B01EEDA
SHA1:	5725579A2A405A8595835AB0D1C0266EB095F026
SHA-256:	843C1FEEDDF2F3EBD449DDBE12938ED61D0E5A8385E9798873024180068DAA39
SHA-512:	E03AC1EE74E23DBE1D0D65E75711FC74BC9F3D14E76ACD8A49BF98A8F520A8EFD5C9F3697BD4EA325409158B2974F387AE27AF602577614A001F0A269BE9C403
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/lightweightsignuppackage_MwksSuxFBgQ4Y619ES0DZQ2.js?v=1
Preview:	...........}y.......2...H.D...%i.ln.4m]5..).5E.$..g.3...7..i...{='...X...0....(v........XwX.\|f.wWVX...a?.v..T.[q.:.v.#+rt....6.N.?#K.c._x.i:.%......._..U`.Z.Kk...[.............]V.UQ.[.....y....Y..ruUT._..[..~.........`.~].....`..'~L@..M..8.,p"+_.z...S.@.V.;.Y.dA......e....r.-\|....ck....kARM.e."...+.^..\...4..F....H}....8t....<S.7c..\..$..,d......bf.E/..X.u....0.Yf..[.....C.O+..f.....O.. .En....P&...A.a.....z..M..(....!+..v.O..\c.....S.K...V:..u'[.J.ca.)...c......>.p...<.7..............o..\|..oq.o..Z.n.oi'..>f...(K.....?K.s..i.#D....r2s....S..C..Q...N._..D....w..w.]....{.[.+.6T&.....5=....!8.z.......7..zwo..p.....<....6.....{..n............z}.....(..5z{].q.....G.F......i,....i..f.....>....7.8..sd.e...]w.....b..,.>.C.V..X".v2...FlZ.mh..m..0..s......>{.......cA...g;.'....m1,@..U6.F_.3.=.f8..........Z.....zY.'l..i......dU:-....;`.}....n....8.V....P....3.....M?....99..._..%..L+.1..)8..~."....?.Q,9\|...s...!xs..P..p........$..Q...G.-...t

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	4.661188988961239
Encrypted:	false
SSDEEP:	3:agWqLss4aXD5R20gJYRnd7HtOx1L5HQhLIzseX5LxfYLk21:QqPXD5bDRd7H8L5whLzeJSI21
MD5:	C22EA5B46F3FCAD90DA0ABCC0A3F73D4
SHA1:	2DB789C63AFB63D98932D7B55907DC3508E318B4
SHA-256:	8334DAA260516BB896407461E5F10E8E3041B06C56846BBB9D3435C6E77513AD
SHA-512:	A0359F8C25DC40CEFFD14A41BA81794717B99DABE78CBF8A8678F3E3EC57F317388CA0DC55B1CC6AD2D6C13D2B3CAEB5A64527BB2C646ED2D93775437DA646F1
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/featurecontrol.min.ACSHASHc22ea5b46f3fcad90da0abcc0a3f73d4.js
Preview:	'use strict';function isFeatureEnabled(b){var a=document.getElementById("customFeatureControl").getAttribute("enabledFeatures");return null!=a&&a.includes(b)};

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	544
Entropy (8bit):	5.221040627274746
Encrypted:	false
SSDEEP:	12:Yz+uu8HDeNucEuKEZEuwdaXOVWMsk2lntX2F3/v2d7oyxCJNe:YauZStKa5nltX2Fvege
MD5:	383B23D12DF0D9265D7569A7102C2F96
SHA1:	B78FB17F58484F5CD29B3FE307936181E1B30B57
SHA-256:	BBF608E321107D6C4EEAF31A4A0EEB9DD8A9AB825F645FA963651688FD3D3914
SHA-512:	8CA27D482871CAFF41C2D86CA743F075ED97465C12624B1841396B423229A90AFB7E62211BB02DFC0211C45BBABFD12F82EFF8863E6FD3D176FCD99C84747F60
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-greenid.min.ACSHASH383b23d12df0d9265d7569a7102c2f96.js
Preview:	'use strict';(function(){(function(b){var a=document.createElement("iframe");a.setAttribute("src","https://fpt.microsoft.com/tags?session_id\x3d"+b);a.style.width="100px";a.style.height="100px";a.style.cssText="display: none; color: rgb(0,0,0); float:left; position:absolute; top:-200px; left:-200px; border:0px";a.title="greenID";a.setAttribute("id","greenID");document.body.append(a)})(function(){return"10000000-1000-4000-8000-100000000000".replace(/[018]/g,b=>(b^crypto.getRandomValues(new Uint8Array(1))[0]&.15>>b/4).toString(16))}())})();

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.68043398329258
Encrypted:	false
SSDEEP:	3:agWqLs3KOBmKL8ELDSzEfYZBAeOE8c/yCN9xGV9LH1CNILWAcELDlpKOBmKL8ELQ:QqtgLSH9xGf1OILWAfkgXe
MD5:	96F0C5B1219E39B8788028F5C17A5AD9
SHA1:	D6DCE0DE065B0D13905EAEDA0BA5C0DEA3D8F67C
SHA-256:	1FC2BCE2D46DF4565B8C488B22225CFE7ADB7C37CC9A542D4F85B61995B306CB
SHA-512:	057810FA0558506C6B8ABECB1A7A58FF61DA0609B3A5798BB42DE3A9B801CA0D8B20C4C1F9A250EE33D30492452CC5C4553332B16300408AA0C45B1515D4AF10
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-cookieconsent.min.ACSHASH96f0c5b1219e39b8788028f5c17a5ad9.js
Preview:	'use strict';function AEMOnCookieConsentChangedCallback(a){}if("undefined"!=typeof WcpConsent&&null!=WcpConsent)WcpConsent.onConsentChanged(AEMOnCookieConsentChangedCallback);

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (442)
Category:	downloaded
Size (bytes):	4082
Entropy (8bit):	5.141573705798668
Encrypted:	false
SSDEEP:	96:bV8irqJfqdqD7c1Q4vYLXWOXblopFB5nj6Fcw:huYPYCOWrB6D
MD5:	93513BF809E3FBDC2661B36786949A5F
SHA1:	D86455449E20FC2F29835ED118DDA0601CBCBFEA
SHA-256:	C47AF5A6235741800A9DD3BD1FBD4D3D43614A39F9FEF19D170FC6170E074CDD
SHA-512:	8A2181900520FFA822F3A02949D8EE466E3038A6F5370526FE91F40037A7C8A2CD3CDB38E80DC73A86D9852D27275CF1FABD8BF0CCF8754342C2323022FA8008
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/mlsd/clientlibs/clientlib-site.min.ACSHASH93513bf809e3fbdc2661b36786949a5f.css
Preview:	.MLSD .border-radius-8px{border-radius:8px}..MLSD .border-radius-4px{border-radius:4px}..MLSD .border-radius-img img{border-radius:8px}..MLSD .mlsd-articles-2col-r.col-md-4 .content-card .row.row-cols-1.row-cols-md-2 .col{flex:0 0 100%;max-width:100%;padding-bottom:3rem}..MLSD .cards-without-image .card-group>.card{padding:7rem 2em}..MLSD .container .sticky-tabs .container{width:100%;padding:0}..MLSD .col-md-8 .richtext ol li,.MLSD .col-md-8 .richtext ul li{padding-bottom:10px}.#uhf-footer.c-uhff{margin-top:0}..MLSD .mlsd-compare-chart .compare-chart{overflow-x:hidden !important}..font-w-normal{font-weight:normal !important}..font-w-600{font-weight:600 !important}..font-w-900{font-weight:900 !important}..color-light-for-mobile .card-body,.color-light-for-mobile .card-body a{color:#fff !important}..color-dark-for-mobile .card-body,.color-dark-for-mobile .card-body a{color:#000 !important}..color-grey-for-mobile .card-body,.color-grey-for-mobile .card-body a{color:#808080 !important}.@me

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 80144
Category:	downloaded
Size (bytes):	28582
Entropy (8bit):	7.990835795085235
Encrypted:	true
SSDEEP:	768:SUSXTBiGf3+ifgoT+C2k8EJCHSJxknJc+OAf51u+NrKMWINuz+:8ViGf3VJkc+O+ea2MWINH
MD5:	A37BDBB8F418A4014C99AC1393E58A58
SHA1:	00C49FEF2C56BC87AAF99FAEE903E05986234BC8
SHA-256:	99EF7CD8BC7584B2645FA63F11E101B1377CE314D7738FA57CB886813906BBD1
SHA-512:	6C93DC6F08B440B070616A10BDB832CDB9DE3C52A98580D3E4535E5E45723F1575E91BA43AD7561636AA697BF238F50A2D9BA2CD2CF225416CFBC546467D05DF
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1
Preview:	...........is.H.6..... ^...R.T.3....%.V.,.%...i.....\D.Z,...... .w..uW.@".........?...:.....ZW.O.......uv~urxl..Z.?{..j0..0K-...<M.....$..g.y.HskL...0.z...Z.Rk6.~M.Ene.\|A..4..Y.U7O...\|.`.\|t=..N...pB......k2]....'....$O..$I...`.....x>...5O.txK..KJ.6!.p.Zy..z..b ..Y..j...b......@./.p8E.gK.4.L'.gt.......ZL...R....p.h..9....:.B...^e.y:.E...R......Vz?..y.`....S.......4......K.h.`..3...LXi...fi.....y.Y...../.i<......mx..3.8......'.'o..9.k]...tb].h>..c......;R.\|.x:....r.\|....www.tF...<N....ww<\..o6....Gs.N..Q..9.....(..#-.0.)7v8.;..)...S.=+...~.......M.E8.`.C.......N....\|..C,I2..X......r....M$).\|8../..p1.../..X....l....s6.......!T.2......O.a..).j.......Qu.\Pb.D.&.Q....i.gt....N.:..P.j.......H.Q...5.r.dJ..-.d ..{..*..O'..#.}K.$..hz.>.0..Y...S>...R5g.4.ph.h....Zy@2.m.d}......<.{....uri}.8............o'W..?]Y.....@/A.._N..u.........u.....1.....~::9{g..r......T....UU'........{J8xsrzr....\...T..C...O.....O.../...GT.........t.......9..

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42133)
Category:	downloaded
Size (bytes):	138067
Entropy (8bit):	5.225028044529473
Encrypted:	false
SSDEEP:	3072:1f4HuF7pxnISnJ9d1EwgXA7nKRZMK/xw/:1f4Hu1I+kw/
MD5:	B9C3E4320DB870036919F1EE117BDA6E
SHA1:	29B5A9066B5B1F1FE5AFE7EE986E80A49E86606A
SHA-256:	A1FE019388875B696EDB373B51A51C0A8E3BAD52CD489617D042C0722BDB1E48
SHA-512:	A878B55E8C65D880CDF14850BAEE1F82254C797C3284485498368F9128E42DCA46F54D9D92750EEEB547C42CAB9A9823AA9AFAB7D881090EBBFA1135CDD410B6
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/shell/_scrf/js/themes=default/d6-d6e6df/89-746ba4/df-3feeb0/f5-14aef8/bd-f5f332/27-13b2c3/e9-07937b/33-b505e5/fa-7a47db/6e-e2d05f/74-0b2d48/88-5b9b75/1b-240b37/4e-8e1a50/c2-370434/6f-bf5d0f/ea-315ddf/2e-e273bf/17-02d9ee/cf-2a93c7/c0-2ffa80/77-785548/48-4f52bb/3c-6c8ad0/3a-0d7cd3/5f-7d882b/c1-621df2/38-e8e647/17-c82a09/85-bd536d/44-776362/f8-86938e/61-951d1b/39-3d9dc2/81-96da47/ec-e44e19/6c-7627b9?ver=2.0&_cf=20210618&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52717), with no line terminators
Category:	downloaded
Size (bytes):	52717
Entropy (8bit):	5.462668685745912
Encrypted:	false
SSDEEP:	1536:tjspYRrxlhd0fq3agV3IcgPPPI3r7DAQHCloIB3Tj7xHw:tjZLCtxQ
MD5:	413FCC759CC19821B61B6941808B29B5
SHA1:	1AD23B8A202043539C20681B1B3E9F3BC5D55133
SHA-256:	DAF7759FEDD9AF6C4D7E374B0D056547AE7CB245EC24A1C4ACF02932F30DC536
SHA-512:	E9BF8A74FEF494990AAFD15A0F21E0398DC28B4939C8F9F8AA1F3FFBD18056C8D1AB282B081F5C56F0928C48E30E768F7E347929304B55547F9CA8C1AABD80B8
Malicious:	false
Reputation:	low
URL:	https://wcpstatic.microsoft.com/mscc/lib/v2/wcp-consent.js
Preview:	var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=3)}([function(e,t,o)

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (584)
Category:	downloaded
Size (bytes):	6798
Entropy (8bit):	5.383941368080596
Encrypted:	false
SSDEEP:	192:2+ocdo4VYgB9G/0y/qhNJ5k4iflBDHndCjOGGWr:2+ocdo4B7G/0yyNSflhndCjOGGA
MD5:	1DABD5CC3F7B68C178B59EA74DC62947
SHA1:	B8DF9D8FD267B8B74325667DC97278CCC90A1464
SHA-256:	E49EFB0A75AF4995902362EA679A0FC4EB120A881A090CB8424D5CBD183436A2
SHA-512:	8C26E45CA37AC5DCCCC0C7BBCA92E0E8E11FB807A6D9A6916D5A0CC1CF198A7942DD5583C31ACBD1A11DDE004C252806D205E9CFDA7F494A6F7D5BBFA42920E4
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/universalheader/v1/universalheader/clientlibs/site.min.ACSHASH1dabd5cc3f7b68c178b59ea74dc62947.js
Preview:	'use strict';(()=>{function m(f){var e=G[f];if(void 0!==e)return e.exports;e=G[f]={exports:{}};return I[f](e,e.exports,m),e.exports}var I={1623:()=>{$(function(){function f(){-1!==document.cookie.indexOf("".concat("Cascade.AuthSSO","\x3d"))&&(document.cookie="".concat("Cascade.AuthSSO","\x3d; expires\x3dThu, 01 Jan 1970 00:00:00 UTC;"))}function e(){var a=function(){var d=document.cookie.match(/(^\|;\s)(Cascade.AuthSSO)=([^;])/);return d?(d=parseInt(decodeURIComponent(d[3])),!isNaN(d)&&d>n.DefaultAttempted?.n.SharedStateAttempted:n.DefaultAttempted):n.NotAttempted}(),c=!(!window.msauthRpsShare\|\|b.accountConstraint===w.AAD);if(a===n.NotAttempted\|\|c&&a!==n.SharedStateAttempted)!function(d){$("#".concat("cascadeauthsso")).remove();var g=document.createElement("iframe");g.src=d;g.setAttribute("width","0");g.setAttribute("height","0");g.setAttribute("border","0");g.setAttribute("frameborder","0");g.setAttribute("style","display: none");g.id="cascadeauthsso";document.body.appendChild(g)}(""

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2955
Entropy (8bit):	7.853182148758864
Encrypted:	false
SSDEEP:	48:CocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODh+YPLIdqc:CZ/I09Da01l+gmkyTt6Hk8nTtc
MD5:	2F6B2AC283DCE9A4930FF7AAD20556B0
SHA1:	D552F0DD2FA493111D303CF014F350FF3C5D789D
SHA-256:	DA7B1E7C0E95A9CABA46BE191F562268CEE236556F67E4B10F2B3A05785B9CAD
SHA-512:	9326C5F1FE1B8EF2FD095DBC40FB94F72D6BCBD38BC63598467C3F9AFD9A5E6E182CF88B67F3797F78D31535B4465ECA62118395C96598CA34ABD98DF89F24AD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............pHYs...#...#.x.?v...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3286
Entropy (8bit):	7.926839129611943
Encrypted:	false
SSDEEP:	48:S/6SQFKpfQpH3VwUOFx2dihHC41L+A6qK/lt+kFpToE6GISHdc/c3EwsFvlN48N:SSKgXGBad816lt+AErSy00wsFV
MD5:	A43BBF66F39FAA3565A0F8F9D9698721
SHA1:	85F427BE871E0CDDDD7196B7C9CF1B569579917D
SHA-256:	91FF9FE81DE8C2F8262C6A3C6BBA15B92E97A70BA78873011A691D7D70D8FDF2
SHA-512:	093207580366E3B71AAC64E0C291CBF9F9B3563A06FAACBF413520C98E2E43452E76CC95630288EBA1C7BB599AB57085817D97E6F6041409A9FFBB8EE52561D4
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RW1iGSh?ver=9383
Preview:	.PNG........IHDR...0...0.....W.......pHYs.................sRGB.........gAMA......a....kIDATx..Y].]W.^k.s...$.....v..T......t.".`&`.E4.X.E;....L\|.OI.C..vR..?2.`.e..".CF.j..mi..hg....s..[k.s.in.I.[6sf........%..n..j\|57M-.....q.p..!..i../.~y..};.=.w.....S....^NR^..zO..._.khW4.?.f.49...tPT...4.xpM.!C..{t.W.w.8..(IX78..\|....&m.........u.\/.K......].M...k..9.)..OS..j.$.g.....62..=.2.;...G..........I......"..4..#21.T#.F l.;..[.......I.}.v.2..7..g...x>:_..%}..+..e.zf..%....J..\'.m.....5`....s?.../..a.....1(f\...\.....9.....9..x".....x ...w.......P......E .`2..:...+nu5...~..Mn..$.......].\.I.R1.\.8d..T...c`.......W.Hn.>.f.=..@Z@fr.H. ...r.}.k...l`O...pO.x...k%m.PG._..%T.Rl.'..P....D`......&...S.J.\.,J..fK....d...m..<.~...u...:.&.$.....!5..!.)H........(l...zm&pw......4`.h.)$../.ql........I&....p.>..3.F.A.!....1.....%.3&%A....l ).....&....3.G.(t.Ci2....I....3...8...1D.@..C.~..iJ.;......(4..b#...f...te5H..l!... ....p..W.....r.l>..o.....?...}r.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUul/Re/FemxhkYltxlzeze:E07ize
MD5:	58A7930CD4577FC33C35828C271EAB8F
SHA1:	406E57F86DC101E10F3A57BE1E2F7B93C4580474
SHA-256:	8D70B3E6BADB6973663B398D297BB32EAEDD08826A1AF98D0A1CFCE5324FFCE0
SHA-512:	F7A5F748F4C0D3096A3CA972886FE9A9DFF5DCE7792779EC6FFC42FA880B3815E2E4C3BDEA452352F3844B81864C9BFB7861F66AC961CFA66CB9CB4FEBE568E8
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
URL:	https://signup.live.com/Resources/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (449), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	5087
Entropy (8bit):	5.546243395951739
Encrypted:	false
SSDEEP:	96:cA4plUfmlSRXMesxKobUaiI2kkNdJJ+hXeXMG05N2m1H27WawDy+p5N2mWzUMCIM:PGUG+87p2rVJcOq5N2mM61p5N2mWzXeH
MD5:	81129A34785EB91E000E15309B094C70
SHA1:	BA8420D13BF69996E0E68E07D393615F261A8AE7
SHA-256:	D7C347A4E17A6622D160E68775493AED86C8C22A0AC942DDE02A2D3EA61C5823
SHA-512:	95BB890F8AF94A8B4F3526CF84C61F70001ED3849F21706D2DB30B54F569370F0CAF0A3BE8E59B3A16811ED42F9694B3F8CACA40C6875E65964E5FB81B9857BF
Malicious:	false
Reputation:	low
URL:	https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr">.. <head><meta name="GENERATOR" content="Microsoft SharePoint" /><meta name="progid" content="SharePoint.WebPartPage.Document" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="Expires" content="0" /><meta name="ROBOTS" content="NOHTMLINDEX" /><title>...Welcome to SharePoint Online..</title><link rel="shortcut icon" href="/_layouts/15/images/favicon.ico" type="image/vnd.microsoft.icon" />...<style type="text/css" media="screen, print, projection">..body..{...font-family: Segoe UI, Arial;...margin: 0px;...font-size: 0.93em;...height: 100%;...overflow: visible;..}..h1..{...font-family: Segoe UI Light, Segoe UI, Arial;...font-size: 2.4em;...font-weight: 200;...color: #eb3c00;...margin: 0px;..}..a..{...color: #336699;...text-decoration: none;..}...desc..{...marg

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2658), with CRLF line terminators
Category:	downloaded
Size (bytes):	2779
Entropy (8bit):	5.679354289869474
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd46TQT0SKKFO3FbWJQUvfIIQ:H9W3iuV96wDrHBZ4QQTWcIKuUIn/
MD5:	997FABE27D5789073065DDC1E0809224
SHA1:	E8D2EFA84065F8BE2F0ADB2A515753E19B821FF7
SHA-256:	FDBB4D1BE0194802A5EBE7FCDAB9CC0CAF740C0DE77F397E22F6A1A63CB6F49D
SHA-512:	C02239C48FCA9AF276ACF14F8C44D4232000EE0C0DA1E367D9EFBD50A5F8C02C0E154527235C2A8037B6BB623E9E4384509C8A70D30C30F5523F3565F1F5B541
Malicious:	false
Reputation:	low
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=10341422-9bae-4adf-9da7-22b5559dbaec&id=375e6f2e-0d8f-6b9c-2ceb-7c8e098f6dfe&w=8DC60A5E06EE948&tkt=H3ihr9e92IdW6yd1ZgQ9SxNMSL5fwIGS0iyEDx6kB49GaY2gjSVVLw%252bwXomIeI79Hz%252bSPYCiYPGpENyUp7jdogKuaNs1J5yXoffhbq408y3jy%252b8bTkFqjGJTFSSmMjB3WcvAsBiExtvgXqSD196l1ucloKuHQQMBfzyOCxF%252fkXc9kXq2AWgUfEnU4YlnDVhb6MVhlcpvI0BZqSObLAzOLkfyzua%252fFHpP1DyHlVS2e2t4u2z1WwWCwWlzPjJWdjULgSC12eSBS9lIapnp1vvbxUEWzFYQoopf8iXOly7Z3XL%252bxjx6ddX5a2X5A7RDii2F&CustomerId=02C58649-E822-405B-B6C3-17A7509D2FCC
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4261
Entropy (8bit):	4.306936456347197
Encrypted:	false
SSDEEP:	48:0WRCmDpJU5clgYFud0i5breZWOehAtGgWqF1hVEQDVFFYreZGbJxDvWOHuKRmv:rCmFJU5cU3breSAxFFYreWJRY
MD5:	AC32EF9E5B0F16E7FB30ECC708AA7BAD
SHA1:	0AE887C7F29D17379A32C4FD6088257BA7D252E2
SHA-256:	381AF4EB603572DA90C43730CB1BFD825780D9E5350B7A01530E52C0301C9E01
SHA-512:	C1268BE9A808E29F6F07FD16AD01118DD91B725C8D87D88252AA5E59021A3B7455F6F7C00E14C369B0D8C696B54CE2D2B2DDD6380A90338B6386424E76BFB9C9
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/favicon.ico?v2
Preview:	<!doctype html>..<html lang="en">....<head>.. <meta charset="utf-8">.. <title>Microsoft</title>.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <meta name="robots" content="noindex, nofollow">.... <link href="https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css" rel="stylesheet" type="text/css" />.... <style>.. body {.. margin: 0;.. font-family: Segoe UI, SegoeUI, "Helvetica Neue", Helvetica, Arial, sans-serif;.. display: flex;.. flex-direction: column;.. }.... .header {.. height: 52px;.. display: flex;.. }.... .header-logo {.. margin-left: auto;.. margin-right: auto;.. margin-top: 15px;.. margin-bottom: 15px;.. }.... .main {.. margin-top: 30px;.. display: flex;.. flex-direction: column;.. align

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 444227
Category:	downloaded
Size (bytes):	121212
Entropy (8bit):	7.9972852524966695
Encrypted:	true
SSDEEP:	1536:iD6XUiMe8qYwKDImT4zkhRc8JbmxMwGysvrO/Q0wjsFUUXbBHfy18nZIH9JxhmTK:wHHDZT33eAvrn0wjsm8Z0otE
MD5:	0868DA2DD5EFFED92904047439E49D48
SHA1:	D760173E5E6B25461B0D2A0B32D384FE659B2338
SHA-256:	8C41E973CB5EE0194EBF3BAA0716EEEB57EED53552F042E200190E3C37F08CFD
SHA-512:	9F430A42D5380D12C553255A324E347A37337E659D623F50314CF47FE52889FD4120F8DD2895DE3327ED97B65DE4E78C982DA966A3F5253286AB0DE0260817CB
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_jHSrlUosdD1xxbmcR_lMNA2.js
Preview:	...........m{.8....~.......%..J....Te;.3q..wS.<.D;..W..2.......e......X$H. .. .~.i....T........MexZ..\|v}\.....\.o.N...l.....O.?`..;v..U.....?t.x..N.....}'.L.hVI.Xe.G.27M...Ph..R..b.r...k..V.....O..J....~?..0J}.U.......VY...+....P...8J.IZ....'h$Y@z........2....Q...R.P3.....'..'.Q..:.G..\|...2Q....$...."..4..F..}..?.V.n......:@.[.i....O.b.T"..+D..q...9.$.ke.;!.\6...Lc.f,Lu .....?..".3..4..Y.cK.?...K6.T.L..Q.3.T....7...Y.Y.i:O....~.....h......I.u..:.}....r...8.W.1`P9.f....T....%.?..K....4?N.........."t...-..JX..+..O.._....o.;=.?....w...Q=`.4}8H..j...&w.p......F.....d...I.......W....:....[./..~@+5....."...V..wU..)TYe....?5......;........Vk..Jt.^.t.^6Z..:...!..I...j1K.qX..u.S......1.^.V.....Lk.Z..B.....,..z.;..G`..y..T`.tz...[5..q.*...E}K.[.b.&........Z...t..s..RO....m....s.IQ...+...Re....T...ag.0.F...T.}<].<Nt........ ..k..5..X....El_..w..\|..VC=...H$F..~r%..'U..!.k1=.e.)y!`)....Y.c%.....{.Kx.........s...dZ....^:3V..H..\|Sz.1%C..G..a2:v

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576)
Category:	downloaded
Size (bytes):	59868
Entropy (8bit):	5.549823852454853
Encrypted:	false
SSDEEP:	768:SlQWqrpRvrzvd49MgfvayRB5lQm6jIlY/rv0/Qql+eGH3Sc1QR40V2JoHivz1U1i:3rpRDzV49wyRBsmBlMXSY70pnduA8
MD5:	30368A72D017E4133BFD3B5D073D06FF
SHA1:	7BD9259C475D46707628108E5A1C33DDAEE43BF3
SHA-256:	ED425C2855B7269156A549BFA9C2594882C8813B1FB3CB52D067D5A9B5471E96
SHA-512:	0A3E298D69906024DC0FB5854F3E57816A81506E513A1823127F4AC7A943A0D942AD8F3D41EB5EC0DB4D2AD8ABE1F39A0B6CDB024C4F547733B9922F676A9BB3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/visitor.ACSHASH30368a72d017e4133bfd3b5d073d06ff.min.js
Preview:	/.. Adobe Visitor API for JavaScript version: 4.4.0. Copyright 2019 Adobe, Inc. All Rights Reserved. More info available at https://marketing.adobe.com/resources/help/en_US/mcvid/./.'use strict';var e=function(){function N(d){return(N="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(f){return typeof f}:function(f){return f&&"function"==typeof Symbol&&f.constructor===Symbol&&f!==Symbol.prototype?"symbol":typeof f})(d)}function O(d,f,g){return f in d?Object.defineProperty(d,f,{value:g,enumerable:!0,configurable:!0,writable:!0}):d[f]=g,d}function P(d,f,g){d=null==d?void 0:d[f];return void 0===d?g:d}function R(d,f){if(d===f)return 0;d=d.toString().split(".");.f=f.toString().split(".");a:{var g=d.concat(f);for(var c=/^\d+$/,k=0,m=g.length;k<m;k++)if(!c.test(g[k])){g=!1;break a}g=!0}if(g){for(;d.length<f.length;)d.push("0");for(;f.length<d.length;)f.push("0");a:{for(g=0;g<d.length;g++){c=parseInt(d[g],10);k=parseInt(f[g],10);if(c>k){d=1;break a}if(k>c){d=-1;break a}}d=0

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2521
Entropy (8bit):	7.872892141940767
Encrypted:	false
SSDEEP:	48:NzmFl/vk8XSvBl5LhOBi2HUbDYVKXNz3W7F1V9dgRxvZh6hCirhz:NKnELkisUb8VEN3WRb9d+dZhEz
MD5:	5E933C5F37ACCD2769A2E3DBC91FC4AF
SHA1:	C985D379E07A572C5C82627F3BE384FCDC84D71E
SHA-256:	989B447AE71AF111EF417AC1C41B09E8F6A6C34AB4B222E78CFA2B0F3C935B11
SHA-512:	498FF705714542F6BECABB64406C28228BB1947FD5857035AFE262081EF32CEF2775F6CD3E9B02FCE9AE151A16BF8011F1DA95444672B1F9086B14AD06A5144F
Malicious:	false
Reputation:	low
URL:	https://gunnauto-my.sharepoint.com/_layouts/15/images/MicrosoftOnlineServiceID.png
Preview:	.PNG........IHDR...P...P......se.....sBIT.....O.....pHYs...........~.....tEXtCreation Time.08/14/12h%G.....tEXtSoftware.Adobe Fireworks CS5.1..H....0IDATx..\_L....l.k{m...b;)`..q..S.AOJ...R...R.\....Z....[....R.m...Z.>]....!..#..U.H12.W.l .v....^...}X..g.xfv.\.Oxgvv~3...o........V......,.{.Y.K.'....}o..t........F..............~V>...........w>]i6[`.0.`./-n.....S.....9n..n/..H4Y.....Z.`gP.j...\|.....6.y.....?....~....e~qw}wo.xOP.b.%...s...8...k:/..I.\|.2..t.5i..\ea.%..n........SLZ..F..K.q......jU.&..\|.rdf,.93,..2_.....t..Zm.Qf..K....8...*5=.ZZ..s....g...B.T.[-...?&~..f...V....;..K)!.WuR.....h..M[..>.-.. 6..h....W...e>.,........er.L...@....o.t.K.#..H..V._....{......{..N.G..\._.7;..B.\..B.-.J\..v..3w.d.3.0. ..H..}....$../...~75..D.N.......G.....F&{M"\.....:_..l....r...O...n/../..,I.[......}p..W@.--..<d/.6..#.h$...9>[LKEJ.}.3....HNX.P...D:W9....~4Y.c.......%`..b..7vJZ..?...T.w."..`Mn@.........wD;..a7m.J.5I.....)..O..../..k.hRX{Q.\u.'.R:WN...n..t.s.9.`..j&_

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.645093417199183
Encrypted:	false
SSDEEP:	12:M9BAG1/qAT9BAs1/qKdDYT9BAR6T9BAOk/CMRZcJfRDZ:M9p/qS91/qfT9J9yRC5N
MD5:	F9F2395C582FA601707B7A5DFAE9F05F
SHA1:	27B15AECD0BFDD3B25556AC00755856D4D331E0D
SHA-256:	D7D6D06624D4BDF6935B848DF342CE322D02B58D12BF12149DF92D557E5E9BC4
SHA-512:	F3378927D96B0B172981A821A8C2A16D0F397ED92E835B7C46316FC48350402D972A5411F0FA4C260F205AA1F7917F83F8247BF8A62C7F22E0076B168275B1E9
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-uhf.min.ACSHASHf9f2395c582fa601707b7a5dfae9f05f.css
Preview:	.c-uhfh .c-action-trigger.glyph-shopping-cart span:not(.shopping-cart-amount),.c-uhfh .c-action-trigger.glyph-shopping-bag span:not(.shopping-cart-amount){line-height:48px !important}..c-uhfh .c-action-trigger.glyph-shopping-cart:after,.c-uhfh .c-action-trigger.glyph-shopping-bag:after{line-height:43px}..c-uhfh.c-sgl-stck .c-search button{line-height:18px}..msame_Header_name{line-height:44px !important}

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (552)
Category:	downloaded
Size (bytes):	181466
Entropy (8bit):	5.554874109955879
Encrypted:	false
SSDEEP:	3072:Sfyz+8hxjR20cgOl4L9nH2BrWNeE5Q6nRyWK/wCG4X5GFnX45Ti6ZssSBodxD4t:Sfy6gFXxH2BrWwejZcwC15GuTDZtUgu
MD5:	B4F0B5100B03A879DD5D2E97636EFC37
SHA1:	72C5001013A7514373D5CC4918B0A0D95C65617A
SHA-256:	5BACAEE30D72B76D83BC5FDD190BF027CDD4C270CF7D081E487ABFB8EA63EBFF
SHA-512:	99BF0AFAF3BB642032669DF2E934BE7FACE9A95DD79E9BF59E6D565E6355754796B1F389B32DD12AFEEC4A95B5E627ED58C8C355E9828452448F6B7EA9F2EDB1
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/structure/page/clientlibs/custom-oneds.min.ACSHASHb4f0b5100b03a879dd5d2e97636efc37.js
Preview:	/. Microsoft Dynamic Proto Utility, 1.1.9. Copyright (c) Microsoft and contributors. All rights reserved../.'use strict';!function(Kb){function la(xa){var ca;return(n[xa]\|\|(ca=n[xa]={i:xa,l:!1,exports:{}},Kb[xa].call(ca.exports,ca,ca.exports,la),ca.l=!0,ca)).exports}var n={};la.m=Kb;la.c=n;la.d=function(xa,ca,P){la.o(xa,ca)\|\|Object.defineProperty(xa,ca,{enumerable:!0,get:P})};la.r=function(xa){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(xa,Symbol.toStringTag,{value:"Module"});Object.defineProperty(xa,"__esModule",{value:!0})};la.t=function(xa,ca){if((1&ca&&(xa=la(xa)),8&ca)\|\|4&.ca&&"object"==typeof xa&&xa&&xa.__esModule)return xa;var P=Object.create(null);if(la.r(P),Object.defineProperty(P,"default",{enumerable:!0,value:xa}),2&ca&&"string"!=typeof xa)for(var $a in xa)la.d(P,$a,function(Ua){return xa[Ua]}.bind(null,$a));return P};la.n=function(xa){var ca=xa&&xa.__esModule?function(){return xa.default}:function(){return xa};return la.d(ca,"a",ca),ca};la.o=func

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32372, version 1.31457
Category:	downloaded
Size (bytes):	32372
Entropy (8bit):	7.993995967802269
Encrypted:	true
SSDEEP:	768:SV9/x9u8VMS/4zsy6FpLTVBZlVJnRt3HeJDFAT7MlVI94NpBB5:SVNMSSsy6FNplHnuVaT7B94NpL5
MD5:	0C7DD36AD55FE6D0EF1971DEC6A3FC93
SHA1:	76A7E768908DC16009C58100150BDAA4C3C38F3C
SHA-256:	528961B18C15D0350AD5635713E448C83F2FAF991176211E5546D35D62CF5FAF
SHA-512:	DC267F7F3C389AC56229303847899606BAB0E579F261522008F7ED7FDFC7C333241718A213FDAB1ED00DDE21A98AD2CC6F358518353BEF8252F8429A672FF6FC
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/resources/fonts/MWFFluentIcons.woff2
Preview:	wOF2......~t......d..~%..z......................`..V...D....6.$..~..... ..R..`[t.q.o:M.v0.o..j6....T..?b6.....7Wq...i.J...S/P.p[...Hvu.C....W)....VZv..u..."~...&.....Vj.g.k.P..1Cf.{.v......X....5F..Ak...?..Q`.0.;.....E].x..!..H.....lz..m...}..p.........z.7..S..a..@>..F.....E..>.Z.=.{z(..#..d...N..4..............d...k........K.k.,)-.I..m;..O.~Ru3zW.....q.0......b0P.f.G.S.O.....AJ3W4.^uEu..Z..=...L.....^...Q...L..st......Z.##...Xk.p\YKO..vY........`A.F..%..0........l.1.Q%..+ (...b.&F....Q..u^..qz.....U.2.N. .rV9.h..uT....u.F.X%.za..c.V..v.z... hY....a.49k....c~...L.....X.{.~mQ~,e4..<.'...K.l{...;.........D. .......U......3..a......5....8'(.........v..0.BJ...rt}.x...W.e6..X.FEF.....r..5U....._....fg..A.>a.i....m..J..}.....?.\Ti......,.....2E..h../..=......hG...~.?.7.\.$.IQ%..U.2..).j.L..L..oS.U.\.).~;.......Gw~t....%.._.I.....~w.8.K.KNJ..l'.......o...=.....8..).d..j.m...<..8.Q...C...m...x.m.v.>...{...d..Tl..9.....>...Fmf.b.J(!D!.....4

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (23170), with CRLF line terminators
Category:	downloaded
Size (bytes):	23634
Entropy (8bit):	5.765719753130274
Encrypted:	false
SSDEEP:	384:HWd1bHIEsQdsQvZxyF1Aw8B7Nv0edjuDNaFTLLb2M/zvyMEZWpn:2d5H9yF1IBBdq5yF/2dE
MD5:	CF476B432619AD85B3DE28BA9B1E7241
SHA1:	9707DC10C2271007EEC85323815598E65FC40F61
SHA-256:	54681E03D6076341DA9403FE01CA1084DB1423BD4CA72446D3F5149CFB370AC0
SHA-512:	90995A25156E52FB50111C39D3B702F18587D38DBE00CCCBF15C6CA51BC033FE6BEF0B9012289A992AF11FE4B1F5786EAD1A9FEEABBD67580172E14E3483D49F
Malicious:	false
Reputation:	low
URL:	https://fpt.microsoft.com/tags?session_id=10341422-9bae-4adf-9da7-22b5559dbaec
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>.. <script>var localTarget='https://fpt.microsoft.com/',target='https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&',txnId='10341422-9bae-4adf-9da7-22b5559dbaec',ticks='8DC60A5E06EE948',rid='375e6f2e-0d8f-6b9c-2ceb-7c8e098f6dfe',authKey='H3ihr9e92IdW6yd1ZgQ9SxNMSL5fwIGS0iyEDx6kB49GaY2gjSVVLw%252bwXomIeI79Hz%252bSPYCiYPGpENyUp7jdogKuaNs1J5yXoffhbq408y3jy%252b8bTkFqjGJTFSSmMjB3WcvAsBiExtvgXqSD196l1ucloKuHQQMBfzyOCxF%252fkXc9kXq2AWgUfEnU4YlnDVhb6MVhlcpvI0BZqSObLAzOLkfyzua%252fFHpP1DyHlVS2e2t4u2z1WwWCwWlzPjJWdjULgSC12eSBS9lIapnp1vvbxUEWzFYQoopf8iXOly7Z3XL%252bxjx6ddX5a2X5A7RDii2F',cid='02C58649-E822-405B-B6C3-17A7509D2FCC',assessment='',waitresponse=false,bbwait=false,commonquery='',lsInfo=true,splitFonts=false,noFonts=false,UCH=true,PTO=100,rticks=1713554473100,ipv6Url='',txnKey='session_id',ridKey='id',lskey='MUID';(function(){function w(){var i=0,n;return t&&t.length&&(i=t.length),n="",wind

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
URL:	https://signup.live.com/Resources/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	126
Entropy (8bit):	4.698100458149446
Encrypted:	false
SSDEEP:	3:agWHNApRBEBc2LGRFf7BcpcLItjNNN3Y67VMGbLGffDtMpMYMhen:QGULk7BcpcLItxNbmGeXpsZMI
MD5:	846036D371B8AAD220017D0AF9B56292
SHA1:	A43749483B26D03DA33E2AF19D4060BD185F105B
SHA-256:	A029E906A61B4FA234286EA21A804490C1612439C10E4EBA0334060F5B05F401
SHA-512:	72EEE6B7EA313F0545A27BAE7A97012D9EADE0A17D960F035126AD5425263B84E9DB477EBB078CC9C26380A72541DD6A3DE6468133DE248B4AF3FAD97699F21E
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/mlsd/components/content/print/v1/print/clientlibs/site.min.ACSHASH846036d371b8aad220017d0af9b56292.js
Preview:	'use strict';$(document).ready(function(){$(".print .print-btn").each((b,a)=>{$(a).on("click",function(){window.print()})})});

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2955
Entropy (8bit):	7.853182148758864
Encrypted:	false
SSDEEP:	48:CocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODh+YPLIdqc:CZ/I09Da01l+gmkyTt6Hk8nTtc
MD5:	2F6B2AC283DCE9A4930FF7AAD20556B0
SHA1:	D552F0DD2FA493111D303CF014F350FF3C5D789D
SHA-256:	DA7B1E7C0E95A9CABA46BE191F562268CEE236556F67E4B10F2B3A05785B9CAD
SHA-512:	9326C5F1FE1B8EF2FD095DBC40FB94F72D6BCBD38BC63598467C3F9AFD9A5E6E182CF88B67F3797F78D31535B4465ECA62118395C96598CA34ABD98DF89F24AD
Malicious:	false
Reputation:	low
URL:	https://gunnauto-my.sharepoint.com/_layouts/15/images/WindowsLiveHotmail.png
Preview:	.PNG........IHDR...P...P............pHYs...#...#.x.?v...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WmlMRUt3QUFBTDE5eXdOdw==
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7862)
Category:	downloaded
Size (bytes):	84153
Entropy (8bit):	4.997174278097072
Encrypted:	false
SSDEEP:	1536:BRN1GDsWcOiVWEec7ynw+OwnZ7aGogbp0H2EHE8z2nqzfPD236qyP0Vlbw5ZwQE4:BkDsmoyfhaRlE0
MD5:	BEFE94BB74F320523B985D2F5EC1DB26
SHA1:	29AA3F3B6BC6A643FB5EB8477B8A1BE958FB7275
SHA-256:	0AE0984365C43DC54033F433EB069018A3F9411067B23EEE3853460C2DCFF9AA
SHA-512:	4F09DEA7B013A4D62F0EA23CA3ACFCE60431467066ACDAAA045EBC9807DB1B78694C79B59C9D50A11CEC0B5013BD8C1F1E68F23A2F91F4D42DDB995AAC77360E
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASHbefe94bb74f320523b985d2f5ec1db26.js
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 223759
Category:	downloaded
Size (bytes):	54325
Entropy (8bit):	7.996017457525811
Encrypted:	true
SSDEEP:	768:MBOXdNQNgHZp9Ga0EqoitKVFF9dMVtakANyFeDpz3ZSgaDpk4JGUISrX+pk7RU/P:bDQNg5pFneONYu9ZpfUv7+m7aITS2Du
MD5:	799F880143F17E47C4EFDBB3FF35A54C
SHA1:	8CECC74EB422322F78EDE1111F175A28725CCA9F
SHA-256:	EA70CC2977F4DEB5236041A7A0628FA671FB8AD20A5E9E3FD6885A11359EF2FE
SHA-512:	46E811AA3D03023596B47DB39B6FABCC1A4B7388C7F0A187A4C23B024695593702A70227F5B770174A258A265A48D4F87EF01281210229E51022E9BC6948214B
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js
Preview:	...........k{.F.0.}...gF.L."..eR..v.y.O....g...............~...@....f<...F./...u...;............x.y.C...y...sx.....^=}.....N.W.I.Y$.....".w....$..\|..a...+.7O.eg.gW..2...8..2)J..<^f.:.4..;....<}.....ZK.......5..,;iV&Q...9......;U:....$....DyVd....Q...N......N..".;.,//.8...X..ZP7......&shpA...a.I.C\U0i.&K..}m..1..9.N.u....^.'I/:......r...a^Ee.f..oq..e'..y..U..;...T(...<L..;X.."..8-}.^L.._w.....f.w..V.x.kK..K../.A..[....oE....G..ao0...\........Qv.7..eX..70.....\|.s.}.#...:..t...$.}=....s..g.}Q..........SO.....p.%..v..\|.Fo.. ..,e.......=;;..7....J#......{7o....;.........<..?.....G._..}..(..k?....2.......J.E.z.^.O.....}...XWe.....O...,C...+......O.r..he.............$Y.;..?).y....&.$..u..m.~.Z...2./..\|9..(.m....W.8.?QO}.....]....Y..z..=..2........>..8...87.&..ajn.m.E.,.<...n.t..`......\|..s7..v.w.z....d{...m.^..Y..AA...,C^...:0.~A.]....,...........6xR..8.p,./?..~v.+../c..Z...$.....Ysg....U....H....._q....o..acC...fpv.fb.....\|.?.-V

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2632), with CRLF line terminators
Category:	downloaded
Size (bytes):	2753
Entropy (8bit):	5.664549111486897
Encrypted:	false
SSDEEP:	48:t1XXw+kOhX/BxVgnK/Q6GiuGq9juwbae13NhcKBLd4sQT0SKr0jT9iLaIIQoNfk:H9W3iuV96wDrHBZ4sQTWojpiL/n/
MD5:	70372E535348150B589B7E1B9CF30F06
SHA1:	BC2A86D744232B4344C8C528074E1E43C32A3BA9
SHA-256:	116A6379277B611AFA7517EC6B93987BF050CDF468EAB9D74D88C40568306CB7
SHA-512:	FB9E20EE3247B0965F317F5F4635E94F6D0A94B4DF54B9AC95772F7274F890D6232619922FFDF7BC101B69A599DE847852D1EDB76175C6A4AA93C65EBEC0C940
Malicious:	false
Reputation:	low
URL:	https://fpt2.microsoft.com/Clear.HTML?ctx=Ls1.0&wl=False&session_id=23a3a2931a4e47fbb320e51cd5e4f175&id=00666063-d3a1-a78a-3fef-57e9a883777c&w=8DC60A5DBC104FB&tkt=taBcrIH61PuCVH7eNCyH0MJojnuUODHcZ6x9WoxhgCmtTp2jV1vNxbd7ijmeVWB0E%252beIfBv%252bhqtKdFrXIwV5huNKGj6Q5ke1EWa6xlLVCGiA%252f3Da%252fTrOLwBf5DjJx91KsaX8sDdJ%252fA43KWp5SOIAkQ0IK9hnwsnb6oOmcUdl2jsIf92FZavULrQoOxVoeJRyb0JGa4VPmqKiVinwI8H37gYqDiz2HZxFTt3cO7myaOOvX7W1GpGuGYEgtDDOJJHiZB8jOlbm4ZFZyru3p%252bTt%252fJe7ULNnrodq9WaVtg8HduOq2EAHbSl5A0JokP%252b8qFdz&CustomerId=33e01921-4d64-4f8c-a055-5bdaffd5e33d
Preview:	<!DOCTYPE html>..<html xmlns="http://www.w3.org/1999/xhtml">..<head>.. <title></title>..</head>..<script>function BaseStamp() { this.GetStorageQsInfo = function () { if (window.localStorage) { var n = window.localStorage.getItem(lsKey); var lsupd = "False"; if (lsupd === "true" && n) { var xhr = new XMLHttpRequest(), method = "GET", url = target + "updatels.html?ofid=" + n + "&session_id=" + sid + "&CustomerId=" + cid; xhr.open(method, url, true); xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE && xhr.status === 200) { var update = xhr.responseText; if (update && update.toLowerCase() === "true") { window.localStorage.setItem(lsKey, id); } } }; xhr.send(); } if (n && n != null && n != "" \|\| (window.localStorage.setItem(lsKey, id), n = id), id != n) return "session_id=" + sid + "&CustomerId=" + cid + "&fid=" + id + "&ofid=" + n + "&w=" + ticks + "&auth=" + encodeURIComponent(authKey) } return "" }; this.newXMLHttp = function () { var n = null; return

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	318601
Entropy (8bit):	4.937382205258339
Encrypted:	false
SSDEEP:	3072:Uwtki9QkGoO4QPwGY5DPMwqGsbkyvLUi4beyAX/bSe2yUXaemHqOOkwsik7oZtI+:Rj9p
MD5:	24E963C5973B1072ED7B92DE5BD89AD2
SHA1:	3022D0CFC4EDA6A80AE929C6E6604FFD37ED6F0A
SHA-256:	1B7D8B28E1477457E3C874F870D817CC17B23E3E220627AFEEBF275732536920
SHA-512:	9AC313DF896804EBDF4B8EF086F1B1C1FEDF5608C8CDD42534A118D0FBCA91336CDA2BB44DB6B36403A092ADCD5B472B5D594AB55ED8B39A49436568BAC4F764
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-base.min.ACSHASH24e963c5973b1072ed7b92de5bd89ad2.css
Preview:	.cmp-image__image{width:100%}..aem-Grid{display:block;width:100%}..aem-Grid::before,.aem-Grid::after{display:table;content:" "}..aem-Grid::after{clear:both}..aem-Grid-newComponent{clear:both;margin:0}..aem-GridColumn{box-sizing:border-box;clear:both}..aem-GridShowHidden>.aem-Grid>.aem-GridColumn{display:block !important}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--1>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--1{float:left;clear:none;width:50%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--default--2{float:left;clear:none;width:100%}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--0{margin-left:0}..aem-Grid.aem-Grid--2>.aem-GridColumn.aem-GridColumn--offset--default--1{margin-left:50%}..aem-Grid.aem-Grid--2>.a

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (590)
Category:	downloaded
Size (bytes):	1716
Entropy (8bit):	5.2304068952006615
Encrypted:	false
SSDEEP:	48:4435HDQ258U3JqVnCG/6YyTrkzRLj9tSRAE9P:hU25ZqVC6ByTrWRLjSRAE9P
MD5:	4CFFC2C9B55F8BDE649E0D2535A1EEBD
SHA1:	2AAF4DF1E02ED4F5BB48F00A7423F748BF544E0C
SHA-256:	7BB50A050792F761855CC330E0248D037B37DD68FD23FBB7DB8A7E8694F50A94
SHA-512:	599C87219B7E264CFF8E6951192C691E26DFFA88EFC607EDFE9205F1BB08DA28FD61B508FAE93652BE36BE1ADA57E50661490925B247A43C3EB7F24D8CA0C8D0
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/exp-analytics/v1.min.ACSHASH4cffc2c9b55f8bde649e0d2535a1eebd.js
Preview:	'use strict';var experimentationAnalytics=function(){function g(a){return a&&0<a.length?!1:!0}function m(a){return Object.keys(a).map(function(b){return b+""+a[b]}).join("")}function n(a){var b=a.reduce(function(c,e){c[m(e)]=e;return c},{});return Object.keys(b).map(function(c){return b[c]})}function h(a){console.log("sendToVortex Call");a&&a.analytics&&f(a)}function k(a){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:a&&a.analytics?a.analytics.tnta:""}}}function l(a,.b){return{actionType:"A",behavior:"12",content:JSON.stringify({}),pageTags:{tnta:"",at_activity_name:a&&a.responseTokens[b]?a.responseTokens[b]["activity.name"]:"",at_exp_name:a&&a.responseTokens[b]?a.responseTokens[b]["experience.name"]:"",at_activity_id:a&&a.responseTokens[b]?a.responseTokens[b]["activity.id"]:"",at_exp_id:a&&a.responseTokens[b]?a.responseTokens[b]["experience.id"]:""}}}function f(a,b,c){b="number"===typeof b?b:25;c="number"===typeof c?c:200;var e=0;if(window.expAnalytics&

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.999363379384117
Encrypted:	false
SSDEEP:	12:ks6KjE5TkTDphV19fuYRTHVGeVphV1cRIKacdvNeJR4:kAI5gXpJ9fu8FpJgIK/dUf4
MD5:	DF20EB81FA2AF3A1C0B0246A9A6A9485
SHA1:	6A76AA264C75B186F9291C351373E89DC3B6D59B
SHA-256:	99E81FEE9CAB25A579FDDFCA6EFCB65A196545FB79FD5FA5D711C5C377C4BFFF
SHA-512:	22F39F69A3FC0A603DA2F169005B6CE35E21B3454C0379792F7DE266CE30063BE4F66B5264E04226B783AFD7E1328951174D470B0E1395AB4A3D4E52BCE73D77
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/mlsd/clientlibs/clientlib-experimentations.min.ACSHASHdf20eb81fa2af3a1c0b0246a9a6a9485.css
Preview:	.experimentation{-webkit-box-ordinal-group:-1 !important;-ms-flex-order:-2 !important;order:-2 !important}..wayFindingModel-mlsd-exp.modal.show .modal-dialog{background:rgb(255,255,255,0.9);max-width:100% !important;justify-content:center}..wayFindingModel-mlsd-exp.modal.show .modal-dialog .modal-content{max-width:800px;border:1px solid #0067b8}..wayFindingModel-mlsd-exp .modal-images img{max-width:50%}

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 28981
Category:	downloaded
Size (bytes):	7203
Entropy (8bit):	7.957414144235107
Encrypted:	false
SSDEEP:	192:hxLf1m7xU3bfEQ2Ki5vY92Nm5cQqSDhJAd:hxT1mIwQ1ava5Ad
MD5:	E136BF6A4163DFAF362EE33A5CCE2141
SHA1:	6BF60E30FD6DC097BD7F50F67622C6ED2E9117FC
SHA-256:	4C9D555EA3719C873C5EDDA8B109BD4A136ACBECE2DD0324FD7634F63BB4584E
SHA-512:	9717178B54637299A4B5AFFA39F27712176B7B70A89C939D9B6920F06BED4AE97224C1FAD4B1B0D9CE13AAA2758C8BD2DD32C7A4A9B535649A9A93C9ACD8A942
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1
Preview:	...........\.r.Hr..)..#...Q......DI.[$..)....D.,...(N....1...!\|........&~.g.@"...................g...^}.U...R..J.ka.W.....Y..{..:..B..$........J..._KZ..:p...4]:..x.J..Nn......%...{..x..d..\K.. .^ORq.\..p5.:-,\|.......S...(\g~.k_.eA.....`).:y.b.).W+.:...E..<...0.q...g..0..V...e$j.....uh}R...,[y...K.k.X.....u.%\..#\.....f..Z...?[.........p..~0...>8.r ......\|..s......qKX..qh.])`.@o-...p.+.....<.Lb.J..k.W.]..eH...Ac..1B...p......\|.........B.Ur....Qj.~...j...x0?_...pq........Y.......K...x.f.....BY3a?...z..Z...WK1.F+.cX.#.6...G.$.YV..P;....S..SW...q#..?2......v...q....G.Mb?....;......h.3.D.9x.....BD...@...v..%....?.P..1.............y........_....5..~.\|].......C.'....8.lf.u]....n.T.....s..k......@.,.;..tR.]..%..B.G..W....\{-..;.b....H].....j.\...w.M.=..vQ.lZ..v.....~<.....o.$$9i...q.'..\.....(..3..$...Rq...<9.A......./..i._(P.Z..B.I.=..K.0..& ja.0..s...!....H.C....Q..U\|k.p.+..#D..;.,.m...............`.\|..q.YC....c,.r.....Z...u..).H!-....@..J...H1..

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	171486
Entropy (8bit):	5.043877429718187
Encrypted:	false
SSDEEP:	3072:jzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCx1:jlZAW9kJeqg
MD5:	B7AF9FB8EB3F12D3BAA37641537BEDC2
SHA1:	A3FBB622FD4D19CDB371F0B71146DD9F2605D8A4
SHA-256:	928ACFBA36CCD911340D2753DB52423F0C7F6FEAA72824E2A1EF6F5667ED4A71
SHA-512:	1023C4D81F68C73E247850F17BF048615DDABB69ACF2429644BDAF8DC2A95930F7A29CEAE6FBD985E1162897483A860C8248557CDA2F1F3D3FF0589158625A49
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_mobile_webkit_ios/29-591900/68-c3a397/f4-0855a6/a8-3dc4a6/f1-3221a1/dc-d4cb46/1f-806835/7a-c9e644?ver=2.0&_cf=20210618
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 22961
Category:	downloaded
Size (bytes):	5564
Entropy (8bit):	7.96911120289624
Encrypted:	false
SSDEEP:	96:26I4XZXVk41B1hFdJqnP/x0rTuwfifl0h3yajulA2TxxBM0iUGR+MrBN6Fz+w:26Zlpvv7J6P/TwfifK5yb9vM0iUGdrnY
MD5:	B59E39F9921CAFCA149EB9685B51F656
SHA1:	CE99E1B2CA50537D61B5F6004EA2D0F528725979
SHA-256:	72DE626A972E4867B3D7A5E1E3A08812FD74C25FAD1132E934AD3565FFD5AD78
SHA-512:	BA49F13506CD1648109B8684132794F7749129432DC0F89B2CB3869FC39D4DF107F08E0EF69958DDD993C8C09ED3060D35C193922BD5433897CE2B0583EB6559
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1
Preview:	...........<k..8...+.....pg..`.bd3...f..6..;.F...&2...4...W.DR...d..[.EV...".{..9.g_....B.y).%<$..itOF#2._..M!..b..".K..g.>.../..BG9...r#........Q.k......;g...J.Z..\|..].I."HSq..)Et.e../0...;....6."...Y.N.<%c.C.Iy...B..&)_....K.y.H....bN.......UUQE.. .7,_.M.4.....V...s"...A.fF.......6O..yV..2....A./..57..)...j...EJ....= ..j........X..&+/o)..pq.d....;..Qv./..........1. j..)#f"%S.B.x...F.H.1$..WQ\|.l.x.T.......5.%}.......2%@D...D@..A&)...u.$et...M.........<U0O..8.Y.C2?_.x.?...t..U..;.YD.P...zN...X.,-...A..().2..Y.M..E....J..K....S...W.> (a.e.`.j..A.......m..%e..l.Al.O.....-..~..$.D.d.....}..^.s.J...V...Q,....&/V.%..!.?.bOj.3..-3d0...........;....5.=.T-.5LF.- j...-d\....."..hD.K...D...q... ....K$..'jU.....h2Lk..!.wk....$...,...;..p.G<j..U.mq..s..`........K..f......88o..kp.M7z@.kZ...W#a....Jn..7.7..WW.)..A.,q."..\|.@........=s..3..1.D.Z.-=U.l..Ll.r,6..6;..I... .".[..9...5.B#..V.....6.<..F=.A.x./7.P.6%....V.6.Ab.}4.O;.....e&........ACU.\

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 95910
Category:	downloaded
Size (bytes):	17755
Entropy (8bit):	7.985805274338916
Encrypted:	false
SSDEEP:	384:7P/snh9IWQT5yz/+u+ZoU9a5pXAeTHNxDyG6d1zC9pvFe5:j/HWWyqu+ZoU9atAeTHzeGgv5
MD5:	5E5918E943A26D2E4037BD7418076110
SHA1:	06B96FC7B61F3EF879A3D37536AE28BC47B0CF48
SHA-256:	1F0A2E09C97C138320FBA7E9291D31247912914223FBFE953917005BAC107A88
SHA-512:	DB49B108F7EBF7431ACB9215605C2D39813F2E7DE7A982632F1C69BE6F77FFC8217D1A7D94661F93DA1D17C1F6C6295852387413CC5B780B4829BAD1975CCF3D
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1
Preview:	...........}is.F..w...\.XY..-J.....Y.K..V.."!.k.`..e.....s_=.(...D.D...\===3}\|......H..U...~.&..y._U.^.."..<..gi.P.2(.2.>..0......n....g./.w?...N..........N_....<zt.H..I...^Fe<..,. .f..q.,.w.DipU..Z........iRVP.2N..).+..YTT....~.\.l..M2(=...U2..(.Sl)\|..8Xg..n..l.._.....)(.nV...".....Z.v..9..XKZ.......O...^...%..h.j..&e.,...FHd..f...n.5o..O.].0n..C..:h.\|=.B......@!9...N..A.y..ez.\.QF.\T...].q..........A.\ACh.:A\V.j..dn)........Z.TusYv/.."Zu.,...p......G...^..9.=./...i.q...z.apq.T0...4.=zt...%...{...R.l..<....f....;d~..6X.EI..e.%...R.#...@f....7.v>K"2Q.\|.&.Cg..6..B.{...>.d.G.$.."..h."_S.d.f.Vg...6..4Y&..R.Q.#@.......`..+.7..Z./a..:.<!./..$.$..f...; .2N.G.!!...h].-.....$)7..dO.........0d.F.JH....SX.k.<.'.G.....2.....L.J..*.d1].\|...${D.Dw.R}Y........gw3.._....~........<8{.._./O^.{....^'....../..x..-pc`....'........g.O..w....9{}z.i.o_........P..w......^..H.....9A.....W.........<....-.....3................@./....?..ZN.....VH.N.._..W.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://www.facebook.com/fr/b.php?p=1531105787105294&e=ZiLEKwAAAL19ywNw&t=2592000&o=0
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3065)
Category:	downloaded
Size (bytes):	42493
Entropy (8bit):	5.497785854799792
Encrypted:	false
SSDEEP:	768:fdPbwzR2NrRVofDZm8LQ9ePlkeI0OFc0h4Oe2IieryS6:FjQR2BRVMVk6C0op2Pe
MD5:	1FB4C508CF4AD619D7F72DDF7C70481D
SHA1:	12DFA6139609EFEC54BE35B194355C219ED72512
SHA-256:	7AAD571053F0E32BF25A66D27DAEA307542A21CD90A89E850B89FC88217DD6A0
SHA-512:	B246F42A40FFE030B57055D6D4C34DF89C1076AD5AC477E4E284266AA48A19770F525DF565154CFDD72D61742B75F60752669804C65B501E24C3CB64435F17D8
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-httpclient.min.ACSHASH1fb4c508cf4ad619d7f72ddf7c70481d.js
Preview:	'use strict';!function(l){function d(c){if(b[c])return b[c].exports;var g=b[c]={i:c,l:!1,exports:{}};return l[c].call(g.exports,g,g.exports,d),g.l=!0,g.exports}var b={};d.m=l;d.c=b;d.d=function(c,g,e){d.o(c,g)\|\|Object.defineProperty(c,g,{enumerable:!0,get:e})};d.r=function(c){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(c,Symbol.toStringTag,{value:"Module"});Object.defineProperty(c,"__esModule",{value:!0})};d.t=function(c,g){if((1&g&&(c=d(c)),8&g)\|\|4&g&&"object"==typeof c&&.c&&c.__esModule)return c;var e=Object.create(null);if(d.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:c}),2&g&&"string"!=typeof c)for(var f in c)d.d(e,f,function(k){return c[k]}.bind(null,f));return e};d.n=function(c){var g=c&&c.__esModule?function(){return c.default}:function(){return c};return d.d(g,"a",g),g};d.o=function(c,g){return Object.prototype.hasOwnProperty.call(c,g)};d.p="";d(d.s=125)}([,function(l,d,b){b.d(d,"X",function(){return c});b.d(d,"Y",function(){return g});

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUkrllHh/:qJ/
MD5:	C2196DE8BA412C60C22AB491AF7B1409
SHA1:	5FBD472222FEB8A22CF5B8AA5DC5B8E13AF88E2B
SHA-256:	6ADC3D4C1056996E4E8B765A62604C78B1F867CCEB3B15D0B9BEDB7C4857F992
SHA-512:	84E24A70B78E9DE9C9D0DFEB49F3F4247DBC1C715D8844471EE40669270682E199D48F5FBEC62BD984C9C0270534B407C4D2561DD6C05ADEC3C83C1534F32D5C
Malicious:	false
Reputation:	low
URL:	https://bttrack.com/dmp/adobe/user?dd_uuid=26389280685137111260898653323266367212
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (728)
Category:	downloaded
Size (bytes):	11405
Entropy (8bit):	5.337832455968521
Encrypted:	false
SSDEEP:	192:ei4mI8A10VNEHbnIB89tGRbvlG/bUgck7L8Dap8z+vRjQfymrQy1Zy1Gy1M+qmWW:eiy1F7nIB89tGRbvaUBvk8qjQfymrQy8
MD5:	FF9CACB22668C4F6174E0AF4A2BE89F9
SHA1:	EC9ED15001A3E13404660B6EA09F99C512E08882
SHA-256:	EF39A5CC6826231852FD8D60736867DA31E7E9036F3575B1DC4846DC6FB86A3B
SHA-512:	267064DCB16AB4B9B19756C2313CCB9E5B467A41427DE9BF46158A1C2231699EC43D51C2F201D97C02AFA31BF5011FF471035CF10C7DC6003299B86D85C52806
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/mlsd/clientlibs/clientlib-site.min.ACSHASHff9cacb22668c4f6174e0af4a2be89f9.js
Preview:	'use strict';var UHFButton=$("header #c-uhf-nav-cta \x3e a");0<$("meta[name\x3d'blue-cta']").length&&UHFButton.addClass("blue-cta");UHFButton.css("visibility","visible");var mainLandmark=$("main"),rootNode=$(".root");0< !mainLandmark.length&&0<rootNode.length&&rootNode.attr("role","main");.function changeSupToAnchor(){try{var a="",b="",c=[];$("sup:not(.no-link)").each(function(){a=$(this).text();a=a.replace("*(","");a=a.replace(")","");c=a.split(", ");for(var e=0;e<c.length;e++)b+="\x3ca aria-label\x3d'Footnote "+c[e]+"' href\x3d'javascript:void(0);' class\x3d'c-hyperlink supBLink'\x3e\x3cspan class\x3d'supText'\x3e"+c[e]+"\x3c/span\x3e\x3c/a\x3e\x3cspan\x3e, \x3c/span\x3e";$(this).html(b);b=""});$("sup").find("span:last").remove();var d=$(".list-unstyled li a.superscript");d.attr("href",."javascript:void(0);");d.addClass("supLink");d.each(function(){0==$(this).find(".supFn").length&&$(this).wrapInner("\x3cspan class\x3d'supFn'\x3e\x3c/span\x3e")})}catch(e){console.log(e)}}.function n

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 55071
Category:	downloaded
Size (bytes):	15799
Entropy (8bit):	7.985179973188672
Encrypted:	false
SSDEEP:	384:UwXl87i4naaFtPESJ2DWOq1IcQS0SL7EOONPk:UwXW7i4naTSOAszOG8
MD5:	978A6C1AA934E5B1C5320D515FD25662
SHA1:	64636EF3E1AD607F095DBA6CB01447AC133B483D
SHA-256:	D1963B1837F4087E988FD18BB4CF25B38D61D675C4B6A6FC01158BD39945F10A
SHA-512:	411A51CC19890DC5B27E4800E5BB4BFB4D0E3DC076010C6AB8B10396524F4C996D86420888AF3A1632D5FB281CEB4373C18B0EEFC9F8A84AA59D295450393DA7
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l2bvdjfwt697xziuhxpwsg2.js
Preview:	...........}Ms#G.....uh.O=.>...4..p.O$...P.IF4.".K....1..5.......7.\|.....S6..w8?......9...B.AwUeeeeeefee..f.Oc/._..G.............{..._..%.q..q........j<.w..O.7..."pgbV.C..k.T`..X....'v....<p....I.'..k<j@Ai..NP.6<..j..N.....0.......=..ox/+...9.sB..p.q.ai...?.....qw.D.X..b..?.bOD.x.B1..X..`.N..b..E...%JWg..x8.ys..:...I.....b1...q.......[..a..7q..N........._..4....&.. ........m&6.F.\.@.e.B..`.'.....0............]/.........`..iZ6......./f8..BCz_...i....MQ>..E,/x>v......{.........._.........Z.rP+......e..R.\.Z.u..3@./.oJ7.'.......%.;.WP.9.b..z._..b....0......X...Ro^k.lI..t..K7~.ep.`.)......'."".."....../..S....M..B5nEc2..g..m..\|f.{...pbi(.0.@[_Lc.Z.....U`./!..@.....p.-..kQ@T..8...-...0.....AX.D.?...".....5.NE..\...VQa.....,......?..M.0......_<......C..fOq..bz'..z/BF.;&.K......%.....g........f!..^.:Z...g...j...7.._........S.2/.2.n.....>.<P!!.Bv..J........e!d....B.Ra$.......N........> f.C.....^.D.-.e.c+...............!....$.9x...{.....p~._.0.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	557
Entropy (8bit):	5.017920631493034
Encrypted:	false
SSDEEP:	12:DEARGUGLqcidEEblemSFxEARuWGBUGLqcSWGBdEEbleeESFZ:D1Jcsl21uWHcSWilv
MD5:	A722775809D2312F435036DEF15BCD62
SHA1:	2C6CF2D7ED0D1810B6C96269A4509071575E5771
SHA-256:	4DF68C42ED06B94BC6C7655FFA3F84487DCF88F2452B8BF43C217427E36E31A2
SHA-512:	3A4325C787C32BB7373B73CF419E94200167AA7CF2E689E4E1F8D46C8D9DE7607A4EAA3A346F25C3711723A30C678DE61F8813EBF81EEB66EA536968825F6B43
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/back-to-top-button/v1/back-to-top-button/clientlibs/sites.min.ACSHASHa722775809d2312f435036def15bcd62.css
Preview:	@media screen and (max-width:540px){.sticky.back-to-top.stuck{position:static}.}.@media screen and (min-width:540px){.sticky.back-to-top.pageHasChatContainer{bottom:32px !important;left:12px}.}.div.backToTopEditView[data-mount='back-to-top']{opacity:1 !important}.@media screen and (max-width:540px){.fixed-sticky.fixed-back-to-top.stuck{position:static}.}.@media screen and (min-width:540px){.fixed-sticky.fixed-back-to-top.pageHasChatContainer{bottom:32px !important;left:12px}.}.div.backToTopEditView[data-mount='fixed-back-to-top']{opacity:1 !important}

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3651
Entropy (8bit):	4.094801914706141
Encrypted:	false
SSDEEP:	96:wO4DZ+Stb/jY+eo4hAryAes9mBYYQgWLDm9:wToSBjlevudl9nO
MD5:	EE5C8D9FB6248C938FD0DC19370E90BD
SHA1:	D01A22720918B781338B5BBF9202B241A5F99EE4
SHA-256:	04D29248EE3A13A074518C93A18D6EFC491BF1F298F9B87FC989A6AE4B9FAD7A
SHA-512:	C77215B729D0E60C97F075998E88775CD0F813B4D094DC2FDD13E5711D16F4E5993D4521D0FBD5BF7150B0DBE253D88B1B1FF60901F053113C5D7C1919852D58
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0,0,1,.419-.967,1.413,1.413,0,0,1,1-.39,1.392,1.392,0,0,1,1.02.4,1.3,1.3,0,0,1,.4.958,1.248,1.248,0,0,1-.414.953,1.428,1.428,0,0,1-1.01.385A1.4,1.4,0,0,1,47.25,6.6a1.261,1.261,0,0,1-.409-.948M49.41,18.4H47.081V8.507H49.41Zm7.064-1.694a3.213,3.213,0,0,0,1.145-.241,4.811,4.811,0,0,0,1.155-.635V18a4.665,4.665,0,0,1-1.266.481,6.886,6.886,0,0,1-1.554.164,4.707,4.707,0,0,1-4.918-4.908,5.641,5.641,0,0,1,1.4-3.932,5.055,5.055,0,0,1,3.955-1.545,5.414,5.414,0,0,1,1.324.168,4.431,4.431,0,0,1,1.063.39v2.233a4.763,4.763,0,0,0-1.1-.611,3.184,3.184,0,0,0-1.15-.217,2.919,2.919,0,0,0-2.223.9,3.37,3.37,0,0,0-.847,2.416,3.216,3.216,0,0,0,.813,2.338,2.936,2.936,0,0,0,2.209.837M65.4,8.343a2.952,2.952,0,0,1,.5.039,2.1,2.1,0,0,1,.375.1v2.358a2.04,2.04,0,0,0-.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3286
Entropy (8bit):	7.926839129611943
Encrypted:	false
SSDEEP:	48:S/6SQFKpfQpH3VwUOFx2dihHC41L+A6qK/lt+kFpToE6GISHdc/c3EwsFvlN48N:SSKgXGBad816lt+AErSy00wsFV
MD5:	A43BBF66F39FAA3565A0F8F9D9698721
SHA1:	85F427BE871E0CDDDD7196B7C9CF1B569579917D
SHA-256:	91FF9FE81DE8C2F8262C6A3C6BBA15B92E97A70BA78873011A691D7D70D8FDF2
SHA-512:	093207580366E3B71AAC64E0C291CBF9F9B3563A06FAACBF413520C98E2E43452E76CC95630288EBA1C7BB599AB57085817D97E6F6041409A9FFBB8EE52561D4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......pHYs.................sRGB.........gAMA......a....kIDATx..Y].]W.^k.s...$.....v..T......t.".`&`.E4.X.E;....L\|.OI.C..vR..?2.`.e..".CF.j..mi..hg....s..[k.s.in.I.[6sf........%..n..j\|57M-.....q.p..!..i../.~y..};.=.w.....S....^NR^..zO..._.khW4.?.f.49...tPT...4.xpM.!C..{t.W.w.8..(IX78..\|....&m.........u.\/.K......].M...k..9.)..OS..j.$.g.....62..=.2.;...G..........I......"..4..#21.T#.F l.;..[.......I.}.v.2..7..g...x>:_..%}..+..e.zf..%....J..\'.m.....5`....s?.../..a.....1(f\...\.....9.....9..x".....x ...w.......P......E .`2..:...+nu5...~..Mn..$.......].\.I.R1.\.8d..T...c`.......W.Hn.>.f.=..@Z@fr.H. ...r.}.k...l`O...pO.x...k%m.PG._..%T.Rl.'..P....D`......&...S.J.\.,J..fK....d...m..<.~...u...:.&.$.....!5..!.)H........(l...zm&pw......4`.h.)$../.ql........I&....p.>..3.F.A.!....1.....%.3&%A....l ).....&....3.G.(t.Ci2....I....3...8...1D.@..C.~..iJ.;......(4..b#...f...te5H..l!... ....p..W.....r.l>..o.....?...}r.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2521
Entropy (8bit):	7.872892141940767
Encrypted:	false
SSDEEP:	48:NzmFl/vk8XSvBl5LhOBi2HUbDYVKXNz3W7F1V9dgRxvZh6hCirhz:NKnELkisUb8VEN3WRb9d+dZhEz
MD5:	5E933C5F37ACCD2769A2E3DBC91FC4AF
SHA1:	C985D379E07A572C5C82627F3BE384FCDC84D71E
SHA-256:	989B447AE71AF111EF417AC1C41B09E8F6A6C34AB4B222E78CFA2B0F3C935B11
SHA-512:	498FF705714542F6BECABB64406C28228BB1947FD5857035AFE262081EF32CEF2775F6CD3E9B02FCE9AE151A16BF8011F1DA95444672B1F9086B14AD06A5144F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P......se.....sBIT.....O.....pHYs...........~.....tEXtCreation Time.08/14/12h%G.....tEXtSoftware.Adobe Fireworks CS5.1..H....0IDATx..\_L....l.k{m...b;)`..q..S.AOJ...R...R.\....Z....[....R.m...Z.>]....!..#..U.H12.W.l .v....^...}X..g.xfv.\.Oxgvv~3...o........V......,.{.Y.K.'....}o..t........F..............~V>...........w>]i6[`.0.`./-n.....S.....9n..n/..H4Y.....Z.`gP.j...\|.....6.y.....?....~....e~qw}wo.xOP.b.%...s...8...k:/..I.\|.2..t.5i..\ea.%..n........SLZ..F..K.q......jU.&..\|.rdf,.93,..2_.....t..Zm.Qf..K....8...*5=.ZZ..s....g...B.T.[-...?&~..f...V....;..K)!.WuR.....h..M[..>.-.. 6..h....W...e>.,........er.L...@....o.t.K.#..H..V._....{......{..N.G..\._.7;..B.\..B.-.J\..v..3w.d.3.0. ..H..}....$../...~75..D.N.......G.....F&{M"\.....:_..l....r...O...n/../..,I.[......}p..W@.--..<d/.6..#.h$...9>[LKEJ.}.3....HNX.P...D:W9....~4Y.c.......%`..b..7vJZ..?...T.w."..`Mn@.........wD;..a7m.J.5I.....)..O..../..k.hRX{Q.\u.'.R:WN...n..t.s.9.`..j&_

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 8111
Category:	downloaded
Size (bytes):	3505
Entropy (8bit):	7.945008338787512
Encrypted:	false
SSDEEP:	96:ziS8LmnrKD6nrzRydFgkoVfemimQY/W+X:ziarzrzR04GmP7/fX
MD5:	1A9078EB7795CC2AB9BE86D02D21A853
SHA1:	0CD912EEE4E1FE283AD99FA0C69CDC1F32DA7025
SHA-256:	B68C76624B9979DA1E4138A3570F2F944CF67343AFE8EC089C15E0266E8E2D35
SHA-512:	3E3AA3A4BB67BF617276C27F17AC7FC390C6520009EE9478AC28934AC50F195B2985153AD2DD9DA8ADCE0192572A4385CBE153F53BAFE3C2419AAAA13DDB0CA8
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js
Preview:	...........Y[s.6.~..Q.L.`FI...D..q..c+....$$1.I..-+...~..M....N......~..&e..(MlgY.Z....U.U.c..n.\|%..{=[.Y...7..JH.......!...O..1....7.......>..'e....!0...>1.M.......s+..^>...Z..q9...M ..[..(e.^o..[.z...`.Z.$L.n!.8..i..)/..=wG...D...w....C.,....m....I.....K........9. \|.a#;u...... ....5..+I..AeV&.0J..F..$.......V...!..RK...F.\..\.. .8.07...{$......h...O8..Jw[..Y6..Qh..`.(...K...8..09P..#.,`..f.qI..\|...{.h....pm.\.m.&.s...tI@....Y.m.sg.x.j.og]..+.AY6.&.8...7.5..Y.$...Z....6....w.f.d..Q.LV..3qTh....X5Ih.%....j..tb..kfB..o..;....3...8C...l.:.W..jF...1!..5..~/.j....t....3.......e..:".9........_.,.h..<.. .x..9.HD...1...w..Kq..Q^FW....VA'K.&..<.H.3l..>........M.....t.._....+B ..e6jK..A. ..+9...nRX.M.....\.....b...j55<..X...U...U0S...we..8.kY...@&._.......;h.e.=..&.H.e.d...;%.R.YH...tg~.a.\|....E..p..Q.Gj.T;.....'3.iQP....m..U.......KC..k.b0...w...z...9r[..R.h....K?.#.....e.!..5y.....s....G.oa.;..:............H......._Y&.W...X.u.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (889)
Category:	downloaded
Size (bytes):	92962
Entropy (8bit):	5.482012211093105
Encrypted:	false
SSDEEP:	1536:wB4vGoYlmQr+IDv1Ty/6RsSz5TGF/46nNUgDbC03vu9FnHKDfa6Z/VUhdIKq6Tjv:wqxNrNG9FnHKD/oIKq6Tjv
MD5:	35986A813756F39AB6B922979FFEDB03
SHA1:	C8E2213BBAFAF535DA9C6676F3DBA43449E4D15A
SHA-256:	E2D92BDAAD925C6D355331A338384EE3FF82492352975DD4EFDA791AEF4AB3F5
SHA-512:	289F1C432E73F611D54EB1130013174174222A0C5EEF8E2464C5FD51EE33DC702326EEECA80B2AAE213DB2FCCB149297FC37CC9A0B6CF6E928A66BC27843F930
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery.min.ACSHASH35986a813756f39ab6b922979ffedb03.js
Preview:	/. jQuery JavaScript Library v3.5.1. https://jquery.com/.. Includes Sizzle.js. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://jquery.org/license.. Date: 2020-05-04T22:49Z. Sizzle CSS Selector Engine v2.3.5. https://sizzlejs.com/.. Copyright JS Foundation and other contributors. Released under the MIT license. https://js.foundation/.. Date: 2020-03-14./.'use strict';(function(H,Sa){"object"===typeof module&&"object"===typeof module.exports?module.exports=H.document?Sa(H,!0):function(Ta){if(!Ta.document)throw Error("jQuery requires a window with a document");return Sa(Ta)}:Sa(H)})("undefined"!==typeof window?window:this,function(H,Sa){function Ta(a,b,c){c=c\|\|M;var d,f=c.createElement("script");f.text=a;if(b)for(d in Kc)(a=b[d]\|\|b.getAttribute&&b.getAttribute(d))&&f.setAttribute(d,a);c.head.appendChild(f).parentNode.removeChild(f)}function Ia(a){return null==.a?a+"":"object"===typeof a\|\|"function"===typeof a?db[Ob.call(a)]

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	273
Entropy (8bit):	4.935550956354982
Encrypted:	false
SSDEEP:	6:Q3RnadmyWRLnadIrM9nadYErmC+LGonbWJ/cxLZ/c8en:cYdIRGdIg8dlHEGKbWNq3e
MD5:	48D949B834ED32DFD8266989E9DAB912
SHA1:	CA65B388C56F18256DC5EB3EB1FFC20578E45C76
SHA-256:	A01677A70917A26959BD831C8728392B90EA24185C0A45E0ECC927E8E558D289
SHA-512:	CD6A491474312DC3605BA3259BE5C6F4AD6D14C34DB43FD4658AC15A1C129507A4F085065ACB15F2D3135D479A856736676A7F500C8654B1079E1AD23036931D
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/components/content/back-to-top-button/v1/back-to-top-button/clientlibs/sites.min.ACSHASH48d949b834ed32dfd8266989e9dab912.js
Preview:	'use strict';$(function(){var a=document.querySelector("#msChatContainer"),b=document.querySelector(".back-to-top.sticky"),c=document.querySelector(".fixed-back-to-top.fixed-sticky");a&&b&&$(b).addClass("pageHasChatContainer");a&&c&&$(c).addClass("pageHasChatContainer")});

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113084
Category:	downloaded
Size (bytes):	20314
Entropy (8bit):	7.979540464295058
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IM6mxqrghTvUty7T9Q:9CGEiL/w7R8DW9Z5B6AasTv37T9Q
MD5:	92A840DC3D177339DAE03FEDF22A22B5
SHA1:	C1C9A6E6442388D07A9D9D72C12DA25094D6920F
SHA-256:	4A986BA8875F22A0EABC356112A6790F90E114ADB72EAEC4632E03812EC1EDE4
SHA-512:	98C705395DD249501D8069A03E0068BC9CCF4F2D139BEC63A00564C69CD21C05CB25CF56BA7B40822963737989D5048AD310E20D6022E84346C982CFCEF79E11
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113657
Category:	downloaded
Size (bytes):	35813
Entropy (8bit):	7.9933603091137355
Encrypted:	true
SSDEEP:	768:GuwXn8kBZAqgpsnCq63v9K6eodOamRz3YkdBSqwSsg84Yk5RFB6:Jc8kBBnChQodOamRz3YQFSLk3q
MD5:	57911010756C90D58754C91EF1EE2765
SHA1:	BAA48FEF4866D7DAFD9F59417745EE838F0E63CA
SHA-256:	87C5385BA17F84CC25FB7BBE1EDB4169BC702842BD74B758ACDC130986D55BC2
SHA-512:	FF5A7B638CD9117C89C277F6846506D41768D3A30F81B63768379294160AEE89F0D60E853F938D28A654226E18FE3389808ECCDA7D106F76EBE95A53A00DD560
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js
Preview:	...........{..8.(.........,.-.......gglu.. .m..I....~..oRv......i.(....P(......k............o.6>.\|..d..........O...V..}.G..4......9.l..F.mDI.f.4...o,..EA.1...F1g..,...E..Gy...,No6.@..l....n..;....P.fQ...ty...b#I.(d.A2!j1$..m....6n.Q8.x..Y...b#c!....\|.p..w#..F..i..s.Gc..b..9U.k......&@pJ..'40J......e.$.k.L(b...F.n.+..nO..6@n...A.&.,LVa......Y......V..o..% ....,......:..e.-XR. <FE.w..b..P......r.b.["~..!.....y.......V...4.;M..Y.X.{.......0].N..,.r`=...Mv....;...k....w.1p.q...(.u.3....;).. }...s....'....c...o.d....Ax.W..._...?.9...........3..MWI..3.p3..u.m$~Vo:n.'.8..!5h....y...6=7...hz.......f.-.).......Nc..:...g...~.8..4.....0P......$.=.a....#._..3.t..7Q...-....6..j.\|....5-...B...}.VQ.&/...e.XeI.C../.y...{...1...Y..g..`'..F..h.o.]SHW...,..Ac_%y...M..u.O..U..`.&...Y.}....Tu..z..iv.....5..M.q.. .Bz.,..oSS.%..y.....gS1s.(.........%,fE.m.@~.4.........7.x.$0mQ..o....J.J^....~......u!.~Z.iw.b...Q~).=..Tq.:.7HH.E.&6.D`.(..Cxmf.(o...^y_.v.{..K<Y.5.

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 95 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2122
Entropy (8bit):	7.483951836932628
Encrypted:	false
SSDEEP:	48:DitNn2VKCXGJ3kN8JIjWpei+ueUMkZfl8R25y+H+mDenc8MCGzr+:822JIWpei+gBemD9i
MD5:	2A04CECE8324B32FC3ED2344CC1D4D31
SHA1:	2603EB780304F4E47DA5B61654905CDC868F8AEF
SHA-256:	80EE541DF476D7A3A5E2CD242233B2C089189AF831CC62D8F0B1778D8075EBA1
SHA-512:	CB762244D4E3F3CEDD25D54514D28864CF68E93A7754BCA720132017C5800E7004E676757D261652CE6F768E00BFC627DDE0CD854AA96B7D623F626AD601E2C8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..._.........JH.<....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:C9636D5FA06611E1B9C2A40F76FE35A3" xmpMM:DocumentID="xmp.did:C9636D60A06611E1B9C2A40F76FE35A3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C9636D5DA06611E1B9C2A40F76FE35A3" stRef:documentID="xmp.did:C9636D5EA06611E1B9C2A40F76FE35A3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..ylUE..K..=MA.(."....A%..!.?.k... .D.....!.........es.........!T.MZ.M .-...7.w..x.....dN..Y...3g.s.$

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 273170
Category:	downloaded
Size (bytes):	105716
Entropy (8bit):	7.9966881199454365
Encrypted:	true
SSDEEP:	3072:/IuCFZmgGfas/n8fHSFYXfFmO7scECa0Ht15HhSd:/dY7sE/MwfFmyscEfgBK
MD5:	68B3385A6DFFC8D64E019832ACC918ED
SHA1:	7D29DDA429CED1040EE8959B5688387D4DD1B4E0
SHA-256:	17190922204C288B25C7DB6B10EB4130B147C53171E442B25BC1F2D56BB74AEC
SHA-512:	3C90DEEBED1C066B1629ADDA526ADA2821BA66DC523910C71D84BAC4D88BFB830965AF355C132BA9D7AA84ACB58BF602ED9B4C70F6E2F42A1B4CAE203AE85426
Malicious:	false
Reputation:	low
URL:	https://acctcdn.msauth.net/oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1
Preview:	............is.H...}".?.....Y.Im..].....Zlwst..Y.`Q..E.-..~.......{...L[D.[VVfVf.....[.Fw.....q.....'J4V.+..N.'OIx}.5.....I..WY#.F.a.eIx.gq.....q.s..D..W.6W.V...L%Q0n.F.'../.... iD2..S..U...0......j...0sz.u$."...t..o....G#u.Fj.T:.$...i...#.. =\|...x......<..Qf..\\...ix..M..&.8.O]gQR.....s.FF.x.+.....&..q...FGJ.--..lv<.fi)z~v...q=./..)..).ZZ..T.....0%R5..y...Q.?..(~.9.7..e.]...G.......d7I...C..I.8....d.....f...\|.....s.......%E?GKK.\G.A.\..]...........}....h.d$..&>s.........N.....e<.U...S%.<o....^W4"...DW$2H..;.ei{.....NzY.....F.5T.o..{...0..]%B.k>...?^1/.T...Z..X...b...)8..n_\.\\...i..Y..1..I.<--.+..ev.....Zt<.{...f...:I..z.uZM.WS.dl.6mw.......f].zb.5l..n.i75.c..Q...j8-.r.a.bB........'.s."..f0....U..2.(.V... ~.....Z.."...r....Rv^-....N..Y.....;n...w..t.Uv.g....u.?).` .........#......BG..h.W.5a.$...@...A.F..8..FU....uDB.....2J..4=.iuD.q..t..o..R........aJ+...JL.]\|....)=...Q<...u..?..#..G[..d.2....8.........$...?...=..!.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (578)
Category:	downloaded
Size (bytes):	3369
Entropy (8bit):	5.407239613237824
Encrypted:	false
SSDEEP:	96:yjXZ9sAK618PFA5H12sy1sv29sfsTYxYwd9Tf:yjXPT2S1Y1sv0axYwd9z
MD5:	C343DFB005AC8C14AE0DD22DD17FB2FC
SHA1:	6C3C4F71156EBD4549E4A461BF5B995B3287D7E8
SHA-256:	C3BFBD629D284635AD35313D8C90449964A470186B876CC5BA6C9FE201C6FDA7
SHA-512:	7983CFC7AF069704C6F10E89905142F86023753A12834459A1BC714257B540B315F1B1EBEB250E706284A1ACC7567FB4EAD4F1C3B6F40EEE4C1E873C11CDDC9F
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/exp-cookiecomp/v1.min.ACSHASHc343dfb005ac8c14ae0dd22dd17fb2fc.js
Preview:	'use strict';window.ExpConsentUtils=window.ExpConsentUtils\|\|{};window.ExpConsentUtils=function(){return{waitForObj:function(f){return new Promise(function(d,c){var h=0,k=setInterval(function(){100>h?"visitor"==f&&"object"===typeof visitor&&visitor\|\|"consent"==f&&"undefined"!==typeof WcpConsent&&WcpConsent&&"undefined"!==typeof WcpConsent.siteConsent&&WcpConsent.siteConsent&&"undefined"!==typeof GPC_DataSharingOptIn&&null!=GPC_DataSharingOptIn?(clearInterval(k),d()):h++:(clearInterval(k),c())},50)})}}}();.var ExpConsentHandler=function(){function f(){window.ExpConsentUtils.waitForObj("visitor").then(function(){visitor.getVisitorValues(function(a){adobe.target.trackEvent({mbox:"personalizationConsent"})})}).catch(function(a){console.log(a)})}function d(){return WcpConsent&&WcpConsent.siteConsent&&void 0!==WcpConsent.siteConsent.isConsentRequired&&null!==WcpConsent.siteConsent.isConsentRequired?WcpConsent.siteConsent.isConsentRequired:!0}function c(){var a=WcpConsent&&WcpConsent.siteConse

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
Category:	downloaded
Size (bytes):	2347
Entropy (8bit):	5.290031538794594
Encrypted:	false
SSDEEP:	48:gCgF0+kNL5iQ6+GhB+SYWzGuesAFcsGJOzgO6FIEv+sj+M++sx+suse+swsosmC0:gC3Na5+GX+Ti2XsYE2sqAsosushswsoB
MD5:	E86EF8B6111E5FB1D1665BCDC90888C9
SHA1:	994BF7651CB967CD9053056AF2D69ACB74DB7F29
SHA-256:	3410242720DE50B090D07A23AEE2DAD879B31D36F2615732962EC4CFA8A9D458
SHA-512:	2486B491681EE91A9CD1ECC9AA011A3FB34B48358C5D7A4D503A5357BC5CE4CA22999F918D40AC60A3063940D5F326FC7E4E5713D89D5C102DE68824E371B3AB
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(n,t){for(var e in t)n[e]=t[e]}(this,function(n){function t(i){if(e[i])return e[i].exports;var s=e[i]={exports:{},id:i,loaded:!1};return n[i].call(s.exports,s,s.exports,t),s.loaded=!0,s.exports}var e={};return t.m=n,t.c=e,t.p="",t(0)}([function(n,t){function e(n){for(var t=g[c],e=0,i=t.length;e<i;++e)if(t[e]===n)return!0;return!1}function i(n){if(!n)return null;for(var t=n+"=",e=document.cookie.split(";"),i=0,s=e.length;i<s;i++){var o=e[i].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===o.indexOf(t))return o.substring(t.length)}return null}function s(n,t,e){if(n)for(var i=n.split(":"),s=null,o=0,a=i.length;o<a;++o){var l=null,c=i[o].split("$");if(0===o&&(s=parseInt(c.shift()),!s))return;var p=c.length;if(p>=1){var f=r(s,c[0]);if(!f\|\|e[f])continue;l={signInName:f,idp:"msa",isSignedIn:!0}}if(p>=3&&(l.firstName=r(s,c[1]),l.lastName=r(s,c[2])),p>=4){var g=c[3],m=g.split("\|");l.otherHashedAliases=m}if(p>=5){var h=parseInt(c[4],16);h&&(l.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
URL:	https://gunnauto-my.sharepoint.com/_layouts/15/images/favicon.ico
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	5.222032823730197
Encrypted:	false
SSDEEP:	48:yvswNIBLBpJawmMH44log6gw/MHm7pJroog6gwkMH9Xog6gwdMHdqdyqog7C:ykfXYx+odPcs9B
MD5:	BC3D32A696895F78C19DF6C717586A5D
SHA1:	9191CB156A30A3ED79C44C0A16C95159E8FF689D
SHA-256:	0E88B6FCBB8591EDFD28184FA70A04B6DD3AF8A14367C628EDD7CABA32E58C68
SHA-512:	8D4F38907F3423A86D90575772B292680F7970527D2090FC005F9B096CC81D3F279D59AD76EAFCA30C3D4BBAF2276BBAA753E2A46A149424CF6F1C319DED5A64
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6z" fill="url(#A)"/><path d="M394.2 1815.6c746.58 0 1351.8-493.2 1351.8-1101.6S1140.78-387.6 394.2-387.6-957.6 105.603-957.6 714-352.38 1815.6 394.2 1815.6z" fill="url(#B)"/><path d="M1548.6 1885.2c631.92 0 1144.2-417.45 1144.2-932.4S2180.52 20.4 1548.6 20.4 404.4 437.85 404.4 952.8s512.276 932.4 1144.2 932.4z" fill="url(#C)"/><path d="M265.8 1215.6c690.246 0 1249.8-455.595 1249.8-1017.6S956.046-819.6 265.8-819.6-984-364.005-984 198-424.445 1215.6 265.8 1215.6z" fill="url(#D)"/></g><defs><radialGradient id="A" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(1466.4 393.6) rotate(90) scale(1401.6 1720.8)"><stop stop-color="#107c10"/><stop offset="1" stop-color="#c4c4c4" stop-opacity="0"/></radialGradient><r

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 32x32, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	7886
Entropy (8bit):	3.9482833105763633
Encrypted:	false
SSDEEP:	48:gubb4a2MNTgopLqyhFTv07EVc91JbV5FIXH0wp53O:Bbb4a5NTX1c9L6E
MD5:	0B60F3C9E4DA6E807E808DA7360F24F2
SHA1:	9AFC7ABB910DE855EFB426206E547574A1E074B7
SHA-256:	ADDEEDEEEF393B6B1BE5BBB099B656DCD797334FF972C495CCB09CFCB1A78341
SHA-512:	1328363987ABBAD1B927FC95F0A3D5646184EF69D66B42F32D1185EE06603AE1A574FAC64472FB6E349C2CE99F9B54407BA72B2908CA7AB01D023EC2F47E7E80
Malicious:	false
Reputation:	low
Preview:	...... .... .....6......... ............... .h...f...(... ...@..... ...........................................................................70..7...7...7...7...7...7...70..............................................................................................7`..7...7...7...7...7...7...7...7...7`......................................................................................7P..7...7...7...7...7...7...7...7...7...7...7P..............................................................................7...7...7...7...7...7...7...7...7...7...7...7...7...7...........................................................................7`..7...7...7...7...7...7...7...7...7...7...7...7...7`..........................................................................,...,...,...,...,...,...,.......7...7...7...7...7...7...........................................................................'...'...'...'...'...'...'...'...2...7...7...7...7...,....................`..........................

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (505)
Category:	downloaded
Size (bytes):	1418
Entropy (8bit):	5.418786110345074
Encrypted:	false
SSDEEP:	24:gkWndJbDZVHGCGH0199EYCDNQNFHOS91AqCCoW40HJtmz2Xw+mlu4oFU5kveTOwD:gkw9ZVHG3HEuvNQNFv16XW1HJEkmEhUh
MD5:	20AAFDF6904D3DC5DB0E0E33ABBFC1A4
SHA1:	CC1A639FF69FE0D8A8F1EFEE7FCB04941E7B57C8
SHA-256:	EE4E620F350907CE3867454B2BD45984BE949EB46B113183D4B8B403032DA14D
SHA-512:	91B0BD81FCD2D3D040D9FC1DB74F5CA916EF88E7887D2868530BF1319EAF5462CC54421AB80FC97B258B569B9AF40F2B9FD1B6D417C9A4561BBA22EDF785D905
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/cascade.component.authoring/clientlibs/clientlib-jquery-cookie.min.ACSHASH20aafdf6904d3dc5db0e0e33abbfc1a4.js
Preview:	/. jQuery Cookie Plugin v1.4.1. https://github.com/carhartl/jquery-cookie.. Copyright 2013 Klaus Hartl. Released under the MIT license./.'use strict';(function(d){"function"===typeof define&&define.amd?define(["jquery"],d):"object"===typeof exports?d(require("jquery")):d(jQuery)})(function(d){function l(a,c){if(e.raw)var b=a;else a:{0===a.indexOf('"')&&(a=a.slice(1,-1).replace(/\\"/g,'"').replace(/\\\\/g,"\\"));try{a=decodeURIComponent(a.replace(m," "));b=e.json?JSON.parse(a):a;break a}catch(h){}b=void 0}return d.isFunction(c)?c(b):b}var m=/\+/g,e=d.cookie=function(a,c,b){if(void 0!==c&&!d.isFunction(c)){b=d.extend({},e.defaults,b);.if("number"===typeof b.expires){var h=b.expires,g=b.expires=new Date;g.setTime(+g+864E5*h)}a=e.raw?a:encodeURIComponent(a);c=e.json?JSON.stringify(c):String(c);c=e.raw?c:encodeURIComponent(c);return document.cookie=[a,"\x3d",c,b.expires?"; expires\x3d"+b.expires.toUTCString():"",b.path?"; path\x3d"+b.path:"",b.domain?"; domain\x3d"+b.domain:"",b.secure?";

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1998)
Category:	downloaded
Size (bytes):	530455
Entropy (8bit):	5.155959645089342
Encrypted:	false
SSDEEP:	12288:DJpYYYb5T2ZggigVl1e/zXJ5lbgutNPzedZTyatWY0e0dZshIw:DJpYb5T2Zggigv1e/zXJLbgunzedZTy0
MD5:	E3FD481804126AAD70E99FE060FE8DCA
SHA1:	C49DF658D9D403279B48E504109E381EFB440690
SHA-256:	9F86B103FEEA61EB16741CC16DA15BB8AC39A2F3FE34715907C403EC3095D53F
SHA-512:	B8B7C9830A10334DABDE4FC58CA07DB0F5B0ED42DA2DB32DAAA49455377293490D6C38B9CFE377BE04B6A6347895F55C0A14CE12F13DC719AA5E83E56D123C31
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/etc.clientlibs/microsoft/clientlibs/clientlib-mwf-new/main-light.min.ACSHASHe3fd481804126aad70e99fe060fe8dca.js
Preview:	./!. MWF (Moray) Extensions v2.15.0. * Copyright (c) Microsoft Corporation. All rights reserved.. * Copyright 2011-2022 The Bootstrap Authors and Twitter, Inc.. * Copyright .2022 W3C. (MIT, ERCIM, Keio, Beihang).. */..(function (global, factory) {..typeof exports === 'object' && typeof module !== 'undefined' ? factory(exports) :..typeof define === 'function' && define.amd ? define(['exports'], factory) :..(global = typeof globalThis !== 'undefined' ? globalThis : global \|\| self, factory(global.mwf = {}));.})(this, (function (exports) { 'use strict';...var commonjsGlobal = typeof globalThis !== 'undefined' ? globalThis : typeof window !== 'undefined' ? window : typeof global !== 'undefined' ? global : typeof self !== 'undefined' ? self : {};...var check = function (it) {.. return it && it.Math == Math && it;..};...// https://github.com/zloirock/core-js/issues/86#issuecomment-115759028..var global$a =.. // eslint-disable-next-line es/no-global-this -- safe.. check(typeof globalTh

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 21:20:26.126529932 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 19, 2024 21:20:27.860646963 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 19, 2024 21:20:36.449215889 CEST	49735	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.449302912 CEST	443	49735	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.449385881 CEST	49735	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.449841976 CEST	49736	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.449907064 CEST	49735	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.449924946 CEST	443	49736	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.449940920 CEST	443	49735	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.450016022 CEST	49736	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.450150013 CEST	49736	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.450180054 CEST	443	49736	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.702126026 CEST	443	49735	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.702419043 CEST	49735	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.702480078 CEST	443	49735	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.703361034 CEST	443	49735	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.703425884 CEST	49735	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.703821898 CEST	443	49736	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.705393076 CEST	49736	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.705401897 CEST	49735	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.705451012 CEST	443	49736	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.705468893 CEST	443	49735	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.706149101 CEST	49735	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.706166983 CEST	443	49735	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.707010984 CEST	443	49736	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.707199097 CEST	49736	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.708600044 CEST	49736	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.708745956 CEST	443	49736	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.752203941 CEST	49735	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.752424955 CEST	49736	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:36.752481937 CEST	443	49736	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:36.799640894 CEST	49736	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:37.114892006 CEST	443	49735	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:37.114989042 CEST	443	49735	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:37.115113020 CEST	49735	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:37.115475893 CEST	49735	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:20:37.115518093 CEST	443	49735	99.84.191.68	192.168.2.4
Apr 19, 2024 21:20:37.223618984 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:37.223649979 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:20:37.223721981 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:37.223969936 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:37.223978043 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:20:37.470895052 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 19, 2024 21:20:37.599951982 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:20:37.600466013 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:37.600478888 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:20:37.601629019 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:20:37.601703882 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:37.611594915 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:37.611680984 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:20:37.612055063 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:37.612061024 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:20:37.658875942 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:38.067405939 CEST	49740	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:20:38.067445040 CEST	443	49740	64.233.176.147	192.168.2.4
Apr 19, 2024 21:20:38.067513943 CEST	49740	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:20:38.068214893 CEST	49740	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:20:38.068232059 CEST	443	49740	64.233.176.147	192.168.2.4
Apr 19, 2024 21:20:38.300358057 CEST	443	49740	64.233.176.147	192.168.2.4
Apr 19, 2024 21:20:38.301101923 CEST	49740	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:20:38.301120043 CEST	443	49740	64.233.176.147	192.168.2.4
Apr 19, 2024 21:20:38.302095890 CEST	443	49740	64.233.176.147	192.168.2.4
Apr 19, 2024 21:20:38.302161932 CEST	49740	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:20:38.304141998 CEST	49740	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:20:38.304208994 CEST	443	49740	64.233.176.147	192.168.2.4
Apr 19, 2024 21:20:38.346585989 CEST	49740	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:20:38.346602917 CEST	443	49740	64.233.176.147	192.168.2.4
Apr 19, 2024 21:20:38.390217066 CEST	49740	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:20:39.179610968 CEST	49741	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.179692030 CEST	443	49741	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.179778099 CEST	49741	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.182513952 CEST	49741	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.182549953 CEST	443	49741	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.401844025 CEST	443	49741	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.401922941 CEST	49741	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.421449900 CEST	49741	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.421477079 CEST	443	49741	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.421716928 CEST	443	49741	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.467799902 CEST	49741	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.493499041 CEST	49741	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.536197901 CEST	443	49741	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.606090069 CEST	443	49741	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.606141090 CEST	443	49741	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.606203079 CEST	49741	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.606481075 CEST	49741	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.606494904 CEST	443	49741	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.606504917 CEST	49741	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.606509924 CEST	443	49741	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.649723053 CEST	49742	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.649764061 CEST	443	49742	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.649904966 CEST	49742	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.650369883 CEST	49742	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.650384903 CEST	443	49742	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.869457006 CEST	443	49742	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.869573116 CEST	49742	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.871377945 CEST	49742	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.871407032 CEST	443	49742	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.871901989 CEST	443	49742	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:39.873800993 CEST	49742	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:39.920141935 CEST	443	49742	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:40.075154066 CEST	443	49742	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:40.075303078 CEST	443	49742	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:40.075371027 CEST	49742	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:40.076189995 CEST	49742	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:40.076246977 CEST	443	49742	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:40.076281071 CEST	49742	443	192.168.2.4	23.44.104.130
Apr 19, 2024 21:20:40.076297998 CEST	443	49742	23.44.104.130	192.168.2.4
Apr 19, 2024 21:20:40.213701010 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:20:40.213896036 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:20:40.213948965 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:40.398247004 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:40.398273945 CEST	443	49739	44.208.218.64	192.168.2.4
Apr 19, 2024 21:20:40.398384094 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:40.398395061 CEST	49739	443	192.168.2.4	44.208.218.64
Apr 19, 2024 21:20:40.670584917 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:40.670636892 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:40.670715094 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:40.671681881 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:40.671694994 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:41.010795116 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:41.011368990 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:41.011398077 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:41.012948036 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:41.013042927 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:41.020199060 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:41.020281076 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:41.020678043 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:41.020688057 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:41.065932989 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.132361889 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.132431030 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.132503033 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.132531881 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.132695913 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.132757902 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.132772923 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.132833958 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.132858038 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.132982016 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.133037090 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.289655924 CEST	49743	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.289700985 CEST	443	49743	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.341161013 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.341219902 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.341420889 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.341911077 CEST	49745	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.341952085 CEST	443	49745	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.342124939 CEST	49745	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.342674971 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.342762947 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.342838049 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.343002081 CEST	49745	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.343018055 CEST	443	49745	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.343182087 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.343208075 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.345941067 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.345974922 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.669933081 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.670624971 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.670686960 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.672171116 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.672236919 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.672622919 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.672740936 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.672827005 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.672843933 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.673953056 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.674042940 CEST	443	49745	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.674248934 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.674283028 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.674524069 CEST	49745	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.674535036 CEST	443	49745	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.675435066 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.675708055 CEST	443	49745	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.676145077 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.676311016 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.676752090 CEST	49745	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.676928997 CEST	443	49745	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.676944017 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.677007914 CEST	49745	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.714905024 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.720140934 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.720144987 CEST	443	49745	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.815510988 CEST	443	49745	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.815670967 CEST	443	49745	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.815840960 CEST	443	49745	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.815896988 CEST	49745	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.823148012 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.823313951 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.823388100 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.823419094 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.823467970 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.823494911 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.823626041 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.826812983 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.826879025 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.826936960 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.826982975 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.827007055 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.827027082 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.827075005 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.960823059 CEST	49746	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.960891962 CEST	443	49746	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.962291956 CEST	49744	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.962353945 CEST	443	49744	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.962414026 CEST	49745	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.962428093 CEST	443	49745	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.986401081 CEST	49747	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.986438036 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:42.986491919 CEST	49747	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.987296104 CEST	49747	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:42.987310886 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.252315044 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.252351046 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.252409935 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.253065109 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.253144026 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.253221035 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.253519058 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.253556013 CEST	443	49750	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.253621101 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.254117966 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.254147053 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.254196882 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.254668951 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.254678965 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.254916906 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.254954100 CEST	443	49750	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.255183935 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.255250931 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.255305052 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.255320072 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.317445040 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.317720890 CEST	49747	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.317779064 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.318274975 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.318702936 CEST	49747	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.318794012 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.318886042 CEST	49747	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.364118099 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.456306934 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.456352949 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.456495047 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.456506968 CEST	49747	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.456537008 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.456562042 CEST	49747	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.456746101 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.456795931 CEST	49747	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.457963943 CEST	49747	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.457986116 CEST	443	49747	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.463469028 CEST	49752	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.463514090 CEST	443	49752	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.463572979 CEST	49752	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.463768959 CEST	49752	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.463781118 CEST	443	49752	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.576606035 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.577151060 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.577179909 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.578871012 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.578964949 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.579319000 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.579627037 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.579773903 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.580776930 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.581012011 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.581038952 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.584058046 CEST	443	49750	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.584492922 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.584520102 CEST	443	49750	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.584593058 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.584655046 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.585190058 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.585313082 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.585371971 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.585793972 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.586134911 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.586152077 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.588419914 CEST	443	49750	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.588577986 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.589165926 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.589165926 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.589405060 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.589453936 CEST	443	49750	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.589469910 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.590178967 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.590262890 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.590348005 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.590356112 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.625339031 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.625433922 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.630485058 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.630500078 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.630527020 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.640935898 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.640963078 CEST	443	49750	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.672091007 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.672147036 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.691009045 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.728509903 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.728533983 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.728540897 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.728579998 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.728595972 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.728595972 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.728631020 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.728662014 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.728688955 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.728691101 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.728707075 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.728734970 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.728770018 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.728777885 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.728924990 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.728974104 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.731298923 CEST	49748	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.731314898 CEST	443	49748	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.733577013 CEST	443	49750	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.733630896 CEST	443	49750	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.733777046 CEST	443	49750	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.733791113 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.733823061 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.734711885 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.734730005 CEST	443	49751	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.734741926 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.734781981 CEST	49751	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.739197969 CEST	49750	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.739226103 CEST	443	49750	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.764601946 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.764759064 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.764822960 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.764879942 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.765160084 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.765214920 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.765657902 CEST	49749	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.765683889 CEST	443	49749	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.790117979 CEST	443	49752	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.790379047 CEST	49752	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.790410995 CEST	443	49752	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.791851997 CEST	443	49752	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.791910887 CEST	49752	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.792334080 CEST	49752	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.792413950 CEST	443	49752	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.844233036 CEST	49752	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:43.844266891 CEST	443	49752	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:43.891115904 CEST	49752	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:48.309469938 CEST	443	49740	64.233.176.147	192.168.2.4
Apr 19, 2024 21:20:48.309614897 CEST	443	49740	64.233.176.147	192.168.2.4
Apr 19, 2024 21:20:48.309741974 CEST	49740	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:20:48.713159084 CEST	49740	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:20:48.713188887 CEST	443	49740	64.233.176.147	192.168.2.4
Apr 19, 2024 21:20:48.743710041 CEST	49757	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:48.743747950 CEST	443	49757	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:48.744431019 CEST	49758	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:48.744465113 CEST	443	49758	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:48.744481087 CEST	49757	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:48.744606972 CEST	49758	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:48.744834900 CEST	49758	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:48.744853020 CEST	443	49758	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:48.745332003 CEST	49757	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:48.745346069 CEST	443	49757	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:49.074649096 CEST	443	49758	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:49.075237989 CEST	49758	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:49.075267076 CEST	443	49758	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:49.075679064 CEST	443	49757	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:49.076458931 CEST	443	49758	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:49.077450991 CEST	49757	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:49.077476978 CEST	443	49757	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:49.077476978 CEST	49758	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:49.077609062 CEST	49758	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:49.077614069 CEST	443	49758	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:49.077681065 CEST	443	49758	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:49.078604937 CEST	443	49757	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:49.079312086 CEST	49757	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:49.079483032 CEST	443	49757	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:49.124900103 CEST	49757	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:49.124985933 CEST	49758	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.178430080 CEST	443	49758	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.178661108 CEST	443	49758	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.178726912 CEST	49758	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.179866076 CEST	49758	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.179889917 CEST	443	49758	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.183629036 CEST	49757	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.228125095 CEST	443	49757	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.441332102 CEST	443	49757	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.441549063 CEST	49757	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.441591978 CEST	443	49757	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.441808939 CEST	49757	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.461916924 CEST	49757	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.461954117 CEST	443	49757	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.483503103 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.483561993 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.483769894 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.483963966 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.483972073 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.812309027 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.812774897 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.812798977 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.814279079 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.814946890 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.815367937 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:50.815526009 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:50.860117912 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:51.126185894 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:51.126247883 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:51.126322985 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:51.126348019 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:51.126425982 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:51.126432896 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:51.126583099 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:51.126666069 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:51.259702921 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:51.259702921 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:51.259723902 CEST	443	49760	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:51.259871006 CEST	49760	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:52.471977949 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:52.472048998 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:52.472222090 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:52.472723007 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:52.472759008 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:52.798626900 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:52.805969954 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:52.805999041 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:52.807552099 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:52.807627916 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:52.809063911 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:52.809201002 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:52.809441090 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:52.809451103 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:52.860671043 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.112366915 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.112426996 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.112447023 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.112468958 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.112493038 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.112512112 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.112519026 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.112519026 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.112534046 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.112566948 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.112567902 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.112579107 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.112634897 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.112728119 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.112772942 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.112796068 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.112812042 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.112849951 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.112868071 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.216016054 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.216085911 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.216115952 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.216154099 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.216176987 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.216202021 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.216209888 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.216342926 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.216403961 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.223654032 CEST	49766	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.223680019 CEST	443	49766	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.529489040 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.529567003 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.529798031 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.530090094 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.530123949 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.658468962 CEST	49771	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:53.658509970 CEST	443	49771	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:53.658581972 CEST	49771	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:53.658871889 CEST	49771	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:53.658885956 CEST	443	49771	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:53.856224060 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.856539011 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.856569052 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.858112097 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.858182907 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.858787060 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.858864069 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.913332939 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.913362980 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:53.954344034 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:53.986187935 CEST	443	49771	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:53.988071918 CEST	49771	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:53.988089085 CEST	443	49771	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:53.989540100 CEST	443	49771	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:53.989609003 CEST	49771	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:53.990036964 CEST	49771	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:53.990268946 CEST	443	49771	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:54.033088923 CEST	49771	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:54.033145905 CEST	443	49771	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:54.079497099 CEST	49771	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:54.257986069 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.258038998 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.258256912 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.258640051 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.258676052 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.373944044 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.373985052 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.374067068 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.374439001 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.374516010 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.374716043 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.374735117 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.374784946 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.375005960 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.375042915 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.581625938 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.582056999 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.582084894 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.582545042 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.582967043 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.583043098 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.583139896 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.624385118 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.624404907 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.697619915 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.697909117 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.697976112 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.698038101 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.698216915 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.698247910 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.698530912 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.698982000 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.699074030 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.699162960 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.699821949 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.699898958 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.700304985 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.700390100 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.700419903 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.735490084 CEST	49777	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:54.735532999 CEST	443	49777	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:54.735599995 CEST	49777	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:54.735802889 CEST	49778	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:54.735837936 CEST	443	49778	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:54.735934973 CEST	49778	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:54.736056089 CEST	49777	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:54.736072063 CEST	443	49777	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:54.736237049 CEST	49778	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:54.736253977 CEST	443	49778	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:54.744117975 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.748111963 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.748795986 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.748805046 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.801901102 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.902704954 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.902766943 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.902786970 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.902825117 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.902832985 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.902865887 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.902898073 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.902899027 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.902915955 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.902940035 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.902973890 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.902986050 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.903012991 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.903047085 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.903058052 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.903131962 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:54.903189898 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.904484987 CEST	49772	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:54.904508114 CEST	443	49772	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.014228106 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.014266968 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.014290094 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.014345884 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.014394045 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.014420986 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.014446020 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.015816927 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.015837908 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.015906096 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.015917063 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.015935898 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.016041040 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.016120911 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.016201019 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.016222954 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.016247988 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.016288996 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.016309977 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.016334057 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.016334057 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.016334057 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.016334057 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.016386032 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.016417027 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.016443014 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.016452074 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.016535044 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.016653061 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.019881010 CEST	49775	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.019897938 CEST	443	49775	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.058116913 CEST	443	49778	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:55.058341026 CEST	49778	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:55.058355093 CEST	443	49778	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:55.059047937 CEST	443	49778	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:55.059453964 CEST	49778	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:55.059542894 CEST	443	49778	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:55.059648991 CEST	49778	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:55.059681892 CEST	443	49778	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:55.060636044 CEST	443	49777	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:55.060827017 CEST	49777	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:55.060854912 CEST	443	49777	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:55.062328100 CEST	443	49777	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:55.063375950 CEST	49777	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:55.063811064 CEST	443	49777	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:55.112248898 CEST	49777	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:55.118881941 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.118911028 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.118969917 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.119039059 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.119077921 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.119101048 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.119992971 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.120037079 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.120083094 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.120098114 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.120147943 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.120148897 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.120275974 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.120304108 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.120340109 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.120352983 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.120397091 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.120397091 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.223241091 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.223277092 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.223331928 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.223464966 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.223464966 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.223464966 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.223503113 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.223575115 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.223757982 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.223841906 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.223850012 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.223866940 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.223890066 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.223922968 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.225656033 CEST	49774	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.225687981 CEST	443	49774	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.263972998 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.294475079 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.294514894 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.294615984 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.294991970 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.295021057 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.308149099 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475085974 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475122929 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475132942 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475228071 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475275040 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475300074 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475305080 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.475306034 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.475306034 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.475348949 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475362062 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475362062 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.475362062 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.475392103 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475415945 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475424051 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.475424051 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.475461960 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.475522995 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.475523949 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.475523949 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.580833912 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.580862999 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.581089973 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.581089973 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.581149101 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.581232071 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.581321001 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.581325054 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.581851959 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.583889961 CEST	49770	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.583947897 CEST	443	49770	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.615092993 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.615657091 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.615689039 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.616184950 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.616692066 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.616734982 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.616748095 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.616815090 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.642544031 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.642621994 CEST	443	49781	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.642738104 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.643353939 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.643429995 CEST	443	49781	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.644398928 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.644474983 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.644556999 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.644916058 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.644989014 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.657289982 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.929620028 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.929652929 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.929663897 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.929702044 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.929768085 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.929801941 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.929801941 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.929836988 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.929862022 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.929904938 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.930696964 CEST	49780	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.930712938 CEST	443	49780	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.933804989 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.933830976 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.933907032 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.934778929 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.934798002 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.967070103 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.968601942 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.968657970 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.968945980 CEST	443	49781	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.969156981 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.969347000 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.969432116 CEST	443	49781	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.969532013 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.969656944 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.969676018 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.969887018 CEST	443	49781	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.970315933 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.970316887 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:55.970408916 CEST	443	49781	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:55.970485926 CEST	443	49781	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.016128063 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.020580053 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.020654917 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.042567968 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.042588949 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.042773008 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.042970896 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.042974949 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.086724997 CEST	49786	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.086811066 CEST	443	49786	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.086896896 CEST	49786	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.087153912 CEST	49786	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.087174892 CEST	443	49786	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.177475929 CEST	443	49781	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.177553892 CEST	443	49781	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.177690029 CEST	443	49781	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.177762032 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.177762032 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.179358006 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.179358006 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.179418087 CEST	443	49781	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.179524899 CEST	49781	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.180737972 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.181747913 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.181893110 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.182218075 CEST	49782	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.182276011 CEST	443	49782	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.185084105 CEST	49787	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.185134888 CEST	443	49787	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.185435057 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.185488939 CEST	443	49788	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.185492039 CEST	49787	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.185535908 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.185937881 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.185950041 CEST	443	49788	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.186189890 CEST	49787	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.186216116 CEST	443	49787	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.256870985 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.257134914 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.257149935 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.258553028 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.258622885 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.258924007 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.259000063 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.259063005 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.259074926 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.299866915 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.369658947 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.369888067 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.369899988 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.371551037 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.371624947 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.371912003 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.371992111 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.372033119 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.395484924 CEST	443	49778	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.395850897 CEST	443	49778	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.395908117 CEST	49778	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.396368027 CEST	49778	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.396394968 CEST	443	49778	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.398437023 CEST	49777	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.398716927 CEST	443	49777	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.406476021 CEST	443	49786	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.407057047 CEST	49786	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.407090902 CEST	443	49786	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.407526016 CEST	443	49786	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.407830954 CEST	49786	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.407922029 CEST	443	49786	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.408029079 CEST	49786	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.415764093 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.415771008 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.448154926 CEST	443	49786	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.456223965 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.504720926 CEST	443	49788	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.504981995 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.505002975 CEST	443	49788	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.506753922 CEST	443	49788	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.506827116 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.507097006 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.507215977 CEST	443	49788	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.507219076 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.509349108 CEST	443	49787	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.509558916 CEST	49787	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.509576082 CEST	443	49787	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.513108015 CEST	443	49787	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.513176918 CEST	49787	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.513447046 CEST	49787	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.513545990 CEST	49787	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.513619900 CEST	443	49787	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.548631907 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.548646927 CEST	443	49788	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.564393044 CEST	49787	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.564410925 CEST	443	49787	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.575227976 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.575254917 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.575264931 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.575315952 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.575330019 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.575393915 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.575402975 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.575409889 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.575479031 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.596337080 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.611653090 CEST	49787	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.616250992 CEST	443	49786	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.616333008 CEST	443	49786	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.616394997 CEST	49786	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.616681099 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.616755009 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.616764069 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.616776943 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.616820097 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.617396116 CEST	49786	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.617423058 CEST	443	49786	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.617785931 CEST	49784	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:56.617799044 CEST	443	49784	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:56.623141050 CEST	49789	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.623218060 CEST	443	49789	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.623313904 CEST	49789	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.623686075 CEST	49789	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.623758078 CEST	443	49789	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.655627966 CEST	443	49777	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.655693054 CEST	49777	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.655711889 CEST	443	49777	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.655726910 CEST	443	49777	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.655772924 CEST	49777	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.656642914 CEST	49777	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.656655073 CEST	443	49777	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.660583973 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.660659075 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.660731077 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.661113024 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.661168098 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.684818983 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.684880972 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.684911013 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.684943914 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.684952021 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.684981108 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.685004950 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.685012102 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.685028076 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.685055971 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.685061932 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.685082912 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.685105085 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.685175896 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.685224056 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.685231924 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.685311079 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.685517073 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.685524940 CEST	443	49785	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.685533047 CEST	49785	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.714513063 CEST	443	49788	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.714551926 CEST	443	49788	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.714612961 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.714623928 CEST	443	49788	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.714791059 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.715245008 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.715265989 CEST	443	49788	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.715277910 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.715401888 CEST	49788	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.720176935 CEST	443	49787	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.720375061 CEST	443	49787	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.720447063 CEST	49787	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.722426891 CEST	49787	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.722443104 CEST	443	49787	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.942822933 CEST	443	49789	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.943409920 CEST	49789	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.943465948 CEST	443	49789	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.944191933 CEST	443	49789	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.944649935 CEST	49789	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.944730997 CEST	49789	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.944782019 CEST	443	49789	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:56.986130953 CEST	49789	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:56.989658117 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.990154982 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.990211010 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.991519928 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.991924047 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.992150068 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:56.992185116 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:56.992311001 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:57.031852961 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:57.151773930 CEST	443	49789	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:57.151835918 CEST	443	49789	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:57.152060986 CEST	49789	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:57.153575897 CEST	49789	443	192.168.2.4	13.107.246.41
Apr 19, 2024 21:20:57.153633118 CEST	443	49789	13.107.246.41	192.168.2.4
Apr 19, 2024 21:20:57.285708904 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:57.285777092 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:57.285857916 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:57.285887957 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:57.285948992 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:57.286046028 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:57.286218882 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:57.286278963 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:57.289257050 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:57.289257050 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:57.289318085 CEST	443	49790	13.107.136.10	192.168.2.4
Apr 19, 2024 21:20:57.289386988 CEST	49790	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:20:58.051333904 CEST	49792	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:58.051364899 CEST	443	49792	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:58.051908970 CEST	49792	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:58.052510977 CEST	49792	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:58.052526951 CEST	443	49792	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:58.376466036 CEST	443	49792	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:58.377607107 CEST	49792	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:58.377621889 CEST	443	49792	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:58.378088951 CEST	443	49792	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:58.378647089 CEST	49792	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:20:58.378724098 CEST	443	49792	13.107.213.41	192.168.2.4
Apr 19, 2024 21:20:58.423533916 CEST	49792	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.134449959 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.134531021 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.134608030 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.146380901 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.146446943 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.159689903 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.159723997 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.159805059 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.160186052 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.160214901 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.160285950 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.160892010 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.160973072 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.161077976 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.161184072 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.161197901 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.161562920 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.161578894 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.161854982 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.161895990 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.162311077 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.162360907 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.162559986 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.163062096 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.163141012 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.163218021 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.163466930 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.163486004 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.163635015 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.163661003 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.263679981 CEST	443	49792	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.263776064 CEST	443	49792	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.263834953 CEST	49792	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.488306046 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.488545895 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.488569975 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.489473104 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.489675045 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.489711046 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.490015984 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.490083933 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.491019964 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.491111040 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.491168976 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.491175890 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.491190910 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.491257906 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.491458893 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.491537094 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.491548061 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.491565943 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.492168903 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.492366076 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.492415905 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.495012999 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.495240927 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.495268106 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.495942116 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.496023893 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.496311903 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.496329069 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.496429920 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.496445894 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.496505976 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.496702909 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.496746063 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.497348070 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.497416973 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.498173952 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.498239040 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.499094963 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.499180079 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.499252081 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.499325037 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.499332905 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.499341011 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.499484062 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.499499083 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.499922037 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.500092030 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.500155926 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.502018929 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.502094984 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.502907038 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.503000021 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.503240108 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.503256083 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.540038109 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.540052891 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.540057898 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.540057898 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.540069103 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.540088892 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.540153980 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.555483103 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.586141109 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.586195946 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.695379019 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.695447922 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.695496082 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.695528984 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.695569038 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.695627928 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.695663929 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.695759058 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.697158098 CEST	49798	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.697194099 CEST	443	49798	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.700799942 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.700854063 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.700887918 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.700920105 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.700959921 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.701013088 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.701025963 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.701102972 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.702208996 CEST	49800	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.702241898 CEST	443	49800	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.794414997 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.794442892 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.794451952 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.794471979 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.794511080 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.794533014 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.794574022 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.794579983 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.794595957 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.794634104 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.794645071 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.794656992 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.794720888 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.798964024 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.798991919 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.799000978 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.799031019 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.799038887 CEST	49797	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.799053907 CEST	443	49797	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.799062014 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.799191952 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.799192905 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.799259901 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.799294949 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.799328089 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.799417019 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.799417019 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.799449921 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.799881935 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.799945116 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.799966097 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.799988031 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.800017118 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.800028086 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.800050020 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.800051928 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.800081015 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.800084114 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.800137043 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.800163031 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.800257921 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.800312996 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.800358057 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.800381899 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.800409079 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.800431967 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.809503078 CEST	49796	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.809516907 CEST	443	49796	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.903636932 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.903696060 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.903755903 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.903775930 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.903810024 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.903831005 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.903835058 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.903861046 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.903896093 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.903935909 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.903947115 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.904000044 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.904057026 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.905602932 CEST	49799	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.905630112 CEST	443	49799	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.985081911 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.985176086 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.985316038 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.985332012 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.985373974 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.988023043 CEST	49801	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.988066912 CEST	443	49801	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:03.994313002 CEST	49792	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:03.994338036 CEST	443	49792	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.034585953 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.034621000 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.034689903 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.037700891 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.037714958 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.038304090 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.038389921 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.038469076 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.038635969 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.038675070 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.130060911 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.130167961 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.130263090 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.132280111 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.132318974 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.136173964 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.136250973 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.136338949 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.137877941 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.137921095 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.149364948 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.149399996 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.149492979 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.151906967 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.151930094 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.361027956 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.361679077 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.361718893 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.362997055 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.363959074 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.364218950 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.364228010 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.368242025 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.368426085 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.368438005 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.369019032 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.369339943 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.369422913 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.369437933 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.408149958 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.411238909 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.411381006 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.411389112 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.452083111 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.452403069 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.452445030 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.453881979 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.453974009 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.454346895 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.454433918 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.454492092 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.458373070 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.458611965 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.458668947 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.459134102 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.459444046 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.459528923 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.459614038 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.476372004 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.476655960 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.476715088 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.478840113 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.478928089 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.479238033 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.479321003 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.479341984 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.500117064 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.500144958 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.502206087 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.502264023 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.502280951 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.520159960 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.532704115 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.532758951 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.548465967 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.580813885 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.662528038 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.662604094 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.662728071 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.662764072 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.662808895 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.664531946 CEST	49805	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.664551973 CEST	443	49805	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.669395924 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.669459105 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.669548988 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.669605970 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.669639111 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.669672012 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.669735909 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.677450895 CEST	49806	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.677478075 CEST	443	49806	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.680579901 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.680636883 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.680655956 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.680694103 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.680706024 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.680768013 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.680798054 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.680849075 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.680877924 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.680882931 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.680941105 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.680943012 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.680974007 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.681010008 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.684849024 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.685010910 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.685264111 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.686235905 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.686265945 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.686276913 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.686331034 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.686338902 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.686382055 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.686392069 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.686424017 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.686451912 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.686470985 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.686494112 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.686532974 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.686561108 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.691479921 CEST	49810	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.691510916 CEST	443	49810	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.695661068 CEST	49803	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.695693016 CEST	443	49803	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.727807999 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.772437096 CEST	49814	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.772512913 CEST	443	49814	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.772619963 CEST	49814	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.773188114 CEST	49814	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.773221970 CEST	443	49814	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.776520014 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.776555061 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.776624918 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.776901960 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:04.776927948 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:04.784301043 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.784333944 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.784378052 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.784388065 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.784423113 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.784533024 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.784565926 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.784604073 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.784610033 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.784643888 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.784667969 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.784882069 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.784924030 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.784960985 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.784966946 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.785006046 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.888350010 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.888413906 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.888434887 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.888451099 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.888477087 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.888501883 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.888534069 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.888602018 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.888609886 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.888695955 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:04.888746977 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.890042067 CEST	49802	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:04.890054941 CEST	443	49802	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:05.097995996 CEST	443	49814	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.098278999 CEST	49814	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.098294020 CEST	443	49814	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.098628044 CEST	443	49814	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.099268913 CEST	49814	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.099332094 CEST	443	49814	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.100837946 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.101644993 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.101660013 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.101910114 CEST	49814	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.102761984 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.103523970 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.103693008 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.103858948 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.144138098 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.144181967 CEST	443	49814	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.306510925 CEST	443	49814	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.306673050 CEST	443	49814	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.306736946 CEST	49814	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.307605028 CEST	49814	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.307635069 CEST	443	49814	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.415864944 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.415936947 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.416021109 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.416066885 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.416136026 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.416191101 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.416199923 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.416199923 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.416240931 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.416351080 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:05.416373968 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.416410923 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.417582989 CEST	49815	443	192.168.2.4	13.107.246.40
Apr 19, 2024 21:21:05.417608976 CEST	443	49815	13.107.246.40	192.168.2.4
Apr 19, 2024 21:21:06.691310883 CEST	443	49736	99.84.191.68	192.168.2.4
Apr 19, 2024 21:21:06.691488981 CEST	443	49736	99.84.191.68	192.168.2.4
Apr 19, 2024 21:21:06.691618919 CEST	49736	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:21:06.704266071 CEST	49736	443	192.168.2.4	99.84.191.68
Apr 19, 2024 21:21:06.704307079 CEST	443	49736	99.84.191.68	192.168.2.4
Apr 19, 2024 21:21:10.229199886 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.229296923 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.230082989 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.253638029 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.253679037 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.584554911 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.584999084 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.585058928 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.586687088 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.586775064 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.588368893 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.588368893 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.588401079 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.588471889 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.641985893 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.641995907 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.682696104 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.802901030 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.849179983 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.908090115 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908138037 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908155918 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908195019 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.908200026 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908220053 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908242941 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.908248901 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908263922 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.908272982 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908287048 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.908447027 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908490896 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.908497095 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908531904 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908557892 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.908566952 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908596039 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908611059 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.908636093 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:10.908655882 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:10.908876896 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:11.012202978 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:11.012262106 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:11.012306929 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:11.012329102 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:11.012356997 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:11.012389898 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:11.012428999 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:11.012437105 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:11.012459040 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:11.012538910 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:11.012816906 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:11.013401031 CEST	49847	443	192.168.2.4	13.107.213.41
Apr 19, 2024 21:21:11.013416052 CEST	443	49847	13.107.213.41	192.168.2.4
Apr 19, 2024 21:21:14.851387024 CEST	49870	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:14.851453066 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:14.851521969 CEST	49870	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:14.851794958 CEST	49870	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:14.851829052 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.096014023 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.096390009 CEST	49870	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:15.096410990 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.097534895 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.097599030 CEST	49870	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:15.098649979 CEST	49870	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:15.098705053 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.098813057 CEST	49870	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:15.098819971 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.142604113 CEST	49870	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:15.329879045 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.329898119 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.329937935 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.329967022 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.329967976 CEST	49870	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:15.330050945 CEST	49870	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:15.330491066 CEST	49870	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:15.330509901 CEST	443	49870	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.440524101 CEST	49872	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:15.440584898 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.440681934 CEST	49872	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:15.440876007 CEST	49872	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:15.440907955 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.468525887 CEST	49874	443	192.168.2.4	63.140.39.35
Apr 19, 2024 21:21:15.468565941 CEST	443	49874	63.140.39.35	192.168.2.4
Apr 19, 2024 21:21:15.468668938 CEST	49874	443	192.168.2.4	63.140.39.35
Apr 19, 2024 21:21:15.468883991 CEST	49874	443	192.168.2.4	63.140.39.35
Apr 19, 2024 21:21:15.468904018 CEST	443	49874	63.140.39.35	192.168.2.4
Apr 19, 2024 21:21:15.472259998 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.472306967 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.472388983 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.472548008 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.472575903 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.682004929 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.682286978 CEST	49872	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:15.682310104 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.683758020 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.683815956 CEST	49872	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:15.684257030 CEST	49872	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:15.684334993 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.684403896 CEST	49872	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:15.684417963 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.717087030 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.717333078 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.717366934 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.718795061 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.718868017 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.719888926 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.719971895 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.720027924 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.725729942 CEST	443	49874	63.140.39.35	192.168.2.4
Apr 19, 2024 21:21:15.725903988 CEST	49874	443	192.168.2.4	63.140.39.35
Apr 19, 2024 21:21:15.725923061 CEST	443	49874	63.140.39.35	192.168.2.4
Apr 19, 2024 21:21:15.727353096 CEST	443	49874	63.140.39.35	192.168.2.4
Apr 19, 2024 21:21:15.727557898 CEST	49874	443	192.168.2.4	63.140.39.35
Apr 19, 2024 21:21:15.727698088 CEST	49872	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:15.728430986 CEST	49874	443	192.168.2.4	63.140.39.35
Apr 19, 2024 21:21:15.728430986 CEST	49874	443	192.168.2.4	63.140.39.35
Apr 19, 2024 21:21:15.728446960 CEST	443	49874	63.140.39.35	192.168.2.4
Apr 19, 2024 21:21:15.728523016 CEST	443	49874	63.140.39.35	192.168.2.4
Apr 19, 2024 21:21:15.760157108 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.766585112 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.766599894 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.773607016 CEST	49874	443	192.168.2.4	63.140.39.35
Apr 19, 2024 21:21:15.773616076 CEST	443	49874	63.140.39.35	192.168.2.4
Apr 19, 2024 21:21:15.819392920 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.819415092 CEST	49874	443	192.168.2.4	63.140.39.35
Apr 19, 2024 21:21:15.932270050 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.932295084 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.932336092 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.932391882 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.932521105 CEST	49872	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:15.932521105 CEST	49872	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:15.934784889 CEST	49872	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:15.934829950 CEST	443	49872	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:15.953314066 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.953349113 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.953377008 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.953452110 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.953452110 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.953504086 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.953553915 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.953574896 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.953684092 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.954018116 CEST	49875	443	192.168.2.4	18.211.200.227
Apr 19, 2024 21:21:15.954046965 CEST	443	49875	18.211.200.227	192.168.2.4
Apr 19, 2024 21:21:15.970679998 CEST	49876	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:15.970698118 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:15.970767975 CEST	49876	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:15.971076012 CEST	49876	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:15.971086979 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.003602982 CEST	443	49874	63.140.39.35	192.168.2.4
Apr 19, 2024 21:21:16.003675938 CEST	443	49874	63.140.39.35	192.168.2.4
Apr 19, 2024 21:21:16.004031897 CEST	49874	443	192.168.2.4	63.140.39.35
Apr 19, 2024 21:21:16.004724979 CEST	49874	443	192.168.2.4	63.140.39.35
Apr 19, 2024 21:21:16.004744053 CEST	443	49874	63.140.39.35	192.168.2.4
Apr 19, 2024 21:21:16.008882046 CEST	49877	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.008943081 CEST	443	49877	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.009402990 CEST	49877	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.009840012 CEST	49877	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.009874105 CEST	443	49877	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.117810965 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.117887974 CEST	443	49878	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.117959023 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.118247986 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.118283033 CEST	443	49878	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.134766102 CEST	49879	443	192.168.2.4	63.140.38.189
Apr 19, 2024 21:21:16.134829998 CEST	443	49879	63.140.38.189	192.168.2.4
Apr 19, 2024 21:21:16.134886980 CEST	49879	443	192.168.2.4	63.140.38.189
Apr 19, 2024 21:21:16.135111094 CEST	49879	443	192.168.2.4	63.140.38.189
Apr 19, 2024 21:21:16.135149956 CEST	443	49879	63.140.38.189	192.168.2.4
Apr 19, 2024 21:21:16.217566013 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.217875004 CEST	49876	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.217901945 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.218388081 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.218786001 CEST	49876	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.218863010 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.218945980 CEST	49876	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.230562925 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.230609894 CEST	443	49881	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.230678082 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.230899096 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.230927944 CEST	443	49881	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.253866911 CEST	443	49877	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.254106998 CEST	49877	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.254173994 CEST	443	49877	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.254656076 CEST	443	49877	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.255065918 CEST	49877	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.255156994 CEST	443	49877	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.255266905 CEST	49877	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.260138035 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.268966913 CEST	49876	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.296214104 CEST	443	49877	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.374337912 CEST	443	49879	63.140.38.189	192.168.2.4
Apr 19, 2024 21:21:16.374753952 CEST	49879	443	192.168.2.4	63.140.38.189
Apr 19, 2024 21:21:16.374816895 CEST	443	49879	63.140.38.189	192.168.2.4
Apr 19, 2024 21:21:16.376296043 CEST	443	49879	63.140.38.189	192.168.2.4
Apr 19, 2024 21:21:16.376382113 CEST	49879	443	192.168.2.4	63.140.38.189
Apr 19, 2024 21:21:16.376985073 CEST	49879	443	192.168.2.4	63.140.38.189
Apr 19, 2024 21:21:16.376985073 CEST	49879	443	192.168.2.4	63.140.38.189
Apr 19, 2024 21:21:16.377078056 CEST	443	49879	63.140.38.189	192.168.2.4
Apr 19, 2024 21:21:16.415302992 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.415332079 CEST	443	49882	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.415405989 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.415673971 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.415688992 CEST	443	49882	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.426053047 CEST	49879	443	192.168.2.4	63.140.38.189
Apr 19, 2024 21:21:16.426095009 CEST	443	49879	63.140.38.189	192.168.2.4
Apr 19, 2024 21:21:16.456127882 CEST	443	49881	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.456471920 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.456490040 CEST	443	49881	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.457902908 CEST	443	49881	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.457969904 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.459459066 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.459539890 CEST	443	49881	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.459606886 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.459619045 CEST	443	49881	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.464087009 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.464179993 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.464222908 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.464245081 CEST	49876	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.464262962 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.464342117 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.464370012 CEST	49876	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.464395046 CEST	49876	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.464917898 CEST	49876	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.464936018 CEST	443	49876	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.471648932 CEST	49884	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.471687078 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.471821070 CEST	49884	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.472043037 CEST	49884	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.472069979 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.473582983 CEST	49879	443	192.168.2.4	63.140.38.189
Apr 19, 2024 21:21:16.494103909 CEST	443	49877	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.494205952 CEST	443	49877	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.494260073 CEST	49877	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.494932890 CEST	49877	443	192.168.2.4	34.232.189.32
Apr 19, 2024 21:21:16.494963884 CEST	443	49877	34.232.189.32	192.168.2.4
Apr 19, 2024 21:21:16.499690056 CEST	49885	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.499727011 CEST	443	49885	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.499809027 CEST	49885	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.500082970 CEST	49885	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.500128031 CEST	443	49885	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.505192995 CEST	443	49878	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.505419016 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.505474091 CEST	443	49878	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.506341934 CEST	443	49878	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.506408930 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.507381916 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.507447004 CEST	443	49878	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.507508993 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.511807919 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.548156977 CEST	443	49878	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.557466030 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.557483912 CEST	443	49878	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.601303101 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.631413937 CEST	443	49882	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.631638050 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.631655931 CEST	443	49882	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.632509947 CEST	443	49882	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.632575989 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.633560896 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.633615971 CEST	443	49882	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.633841038 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.633847952 CEST	443	49882	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.650201082 CEST	443	49878	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.650253057 CEST	443	49878	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.650259018 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.650320053 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.651719093 CEST	49878	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.651736975 CEST	443	49878	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.652455091 CEST	49888	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.652529955 CEST	443	49888	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.652626991 CEST	49888	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.652803898 CEST	49888	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.652839899 CEST	443	49888	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.654309034 CEST	443	49879	63.140.38.189	192.168.2.4
Apr 19, 2024 21:21:16.654391050 CEST	443	49879	63.140.38.189	192.168.2.4
Apr 19, 2024 21:21:16.654618979 CEST	49879	443	192.168.2.4	63.140.38.189
Apr 19, 2024 21:21:16.654864073 CEST	49879	443	192.168.2.4	63.140.38.189
Apr 19, 2024 21:21:16.654906034 CEST	443	49879	63.140.38.189	192.168.2.4
Apr 19, 2024 21:21:16.681721926 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.687951088 CEST	443	49881	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.688163042 CEST	443	49881	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.688227892 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.689105034 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.689119101 CEST	443	49881	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.689135075 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.689160109 CEST	49881	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.689724922 CEST	49889	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.689805031 CEST	443	49889	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.689877987 CEST	49889	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.690092087 CEST	49889	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.690131903 CEST	443	49889	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.722177029 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.722466946 CEST	49884	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.722490072 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.723589897 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.723931074 CEST	49884	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.724129915 CEST	49884	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.724131107 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.731348991 CEST	49890	443	192.168.2.4	104.244.42.3
Apr 19, 2024 21:21:16.731422901 CEST	443	49890	104.244.42.3	192.168.2.4
Apr 19, 2024 21:21:16.731533051 CEST	49890	443	192.168.2.4	104.244.42.3
Apr 19, 2024 21:21:16.731766939 CEST	49890	443	192.168.2.4	104.244.42.3
Apr 19, 2024 21:21:16.731798887 CEST	443	49890	104.244.42.3	192.168.2.4
Apr 19, 2024 21:21:16.745435953 CEST	443	49885	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.745656013 CEST	49885	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.745680094 CEST	443	49885	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.746161938 CEST	443	49885	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.746675014 CEST	49885	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.746763945 CEST	443	49885	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.746835947 CEST	49885	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.768134117 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.772945881 CEST	49884	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.788116932 CEST	443	49885	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.838488102 CEST	49891	443	192.168.2.4	3.33.220.150
Apr 19, 2024 21:21:16.838562012 CEST	443	49891	3.33.220.150	192.168.2.4
Apr 19, 2024 21:21:16.838634014 CEST	49891	443	192.168.2.4	3.33.220.150
Apr 19, 2024 21:21:16.838824987 CEST	49891	443	192.168.2.4	3.33.220.150
Apr 19, 2024 21:21:16.838857889 CEST	443	49891	3.33.220.150	192.168.2.4
Apr 19, 2024 21:21:16.845838070 CEST	443	49882	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.845946074 CEST	443	49882	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.845997095 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.846301079 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.846313953 CEST	443	49882	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.846332073 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.846357107 CEST	49882	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.848174095 CEST	49892	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.848191023 CEST	443	49892	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.848242044 CEST	49892	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.848484993 CEST	49892	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:16.848496914 CEST	443	49892	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:16.905679941 CEST	443	49889	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.905963898 CEST	49889	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.906003952 CEST	443	49889	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.906474113 CEST	443	49889	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.906908989 CEST	49889	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.907001019 CEST	443	49889	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.907057047 CEST	49889	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.907408953 CEST	443	49888	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.907617092 CEST	49888	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.907634974 CEST	443	49888	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.907960892 CEST	443	49888	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.908348083 CEST	49888	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.908404112 CEST	443	49888	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.908498049 CEST	49888	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:16.944045067 CEST	49893	443	192.168.2.4	192.184.67.40
Apr 19, 2024 21:21:16.944089890 CEST	443	49893	192.184.67.40	192.168.2.4
Apr 19, 2024 21:21:16.944246054 CEST	49893	443	192.168.2.4	192.184.67.40
Apr 19, 2024 21:21:16.944991112 CEST	49893	443	192.168.2.4	192.184.67.40
Apr 19, 2024 21:21:16.945020914 CEST	443	49893	192.184.67.40	192.168.2.4
Apr 19, 2024 21:21:16.947401047 CEST	49889	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:16.947432995 CEST	443	49889	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:16.952115059 CEST	443	49888	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:16.961962938 CEST	443	49890	104.244.42.3	192.168.2.4
Apr 19, 2024 21:21:16.962924004 CEST	49890	443	192.168.2.4	104.244.42.3
Apr 19, 2024 21:21:16.962951899 CEST	443	49890	104.244.42.3	192.168.2.4
Apr 19, 2024 21:21:16.964587927 CEST	443	49890	104.244.42.3	192.168.2.4
Apr 19, 2024 21:21:16.964668036 CEST	49890	443	192.168.2.4	104.244.42.3
Apr 19, 2024 21:21:16.968432903 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.968498945 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.968653917 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.968672991 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.970325947 CEST	49884	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.971133947 CEST	49890	443	192.168.2.4	104.244.42.3
Apr 19, 2024 21:21:16.971223116 CEST	443	49890	104.244.42.3	192.168.2.4
Apr 19, 2024 21:21:16.972093105 CEST	49884	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.972122908 CEST	443	49884	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.972604990 CEST	49890	443	192.168.2.4	104.244.42.3
Apr 19, 2024 21:21:16.972621918 CEST	443	49890	104.244.42.3	192.168.2.4
Apr 19, 2024 21:21:16.985002995 CEST	443	49885	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.985096931 CEST	443	49885	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:16.985387087 CEST	49885	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.985986948 CEST	49885	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:16.986011982 CEST	443	49885	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:17.020814896 CEST	49890	443	192.168.2.4	104.244.42.3
Apr 19, 2024 21:21:17.061167955 CEST	443	49892	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:17.061441898 CEST	49892	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:17.061460972 CEST	443	49892	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:17.061779976 CEST	443	49892	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:17.062194109 CEST	49892	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:17.062254906 CEST	443	49892	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:17.062352896 CEST	49892	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:17.108114004 CEST	443	49892	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:17.143712044 CEST	443	49889	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:17.143791914 CEST	443	49889	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:17.143847942 CEST	49889	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:17.145366907 CEST	49889	443	192.168.2.4	35.244.154.8
Apr 19, 2024 21:21:17.145402908 CEST	443	49889	35.244.154.8	192.168.2.4
Apr 19, 2024 21:21:17.202697039 CEST	443	49890	104.244.42.3	192.168.2.4
Apr 19, 2024 21:21:17.202840090 CEST	443	49890	104.244.42.3	192.168.2.4
Apr 19, 2024 21:21:17.202909946 CEST	49890	443	192.168.2.4	104.244.42.3
Apr 19, 2024 21:21:17.203665972 CEST	49890	443	192.168.2.4	104.244.42.3
Apr 19, 2024 21:21:17.203696012 CEST	443	49890	104.244.42.3	192.168.2.4
Apr 19, 2024 21:21:17.205931902 CEST	443	49888	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:17.206065893 CEST	443	49888	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:17.206115007 CEST	49888	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:17.207406044 CEST	443	49891	3.33.220.150	192.168.2.4
Apr 19, 2024 21:21:17.207942009 CEST	49891	443	192.168.2.4	3.33.220.150
Apr 19, 2024 21:21:17.207961082 CEST	443	49891	3.33.220.150	192.168.2.4
Apr 19, 2024 21:21:17.208822012 CEST	443	49891	3.33.220.150	192.168.2.4
Apr 19, 2024 21:21:17.208884954 CEST	49891	443	192.168.2.4	3.33.220.150
Apr 19, 2024 21:21:17.210144997 CEST	49891	443	192.168.2.4	3.33.220.150
Apr 19, 2024 21:21:17.210206032 CEST	443	49891	3.33.220.150	192.168.2.4
Apr 19, 2024 21:21:17.210481882 CEST	49891	443	192.168.2.4	3.33.220.150
Apr 19, 2024 21:21:17.210496902 CEST	443	49891	3.33.220.150	192.168.2.4
Apr 19, 2024 21:21:17.211561918 CEST	49888	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:17.211577892 CEST	443	49888	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:17.242324114 CEST	49897	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.242362022 CEST	443	49897	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.242626905 CEST	49897	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.258172989 CEST	49891	443	192.168.2.4	3.33.220.150
Apr 19, 2024 21:21:17.272711992 CEST	49898	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.272756100 CEST	443	49898	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.272874117 CEST	49898	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.273680925 CEST	49899	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.273730993 CEST	443	49899	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.273842096 CEST	49899	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.275489092 CEST	49897	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.275537014 CEST	443	49897	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.277530909 CEST	49899	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.277550936 CEST	443	49899	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.278626919 CEST	49898	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.278656960 CEST	443	49898	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.280956030 CEST	443	49892	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:17.281059980 CEST	443	49892	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:17.281101942 CEST	49892	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:17.284693003 CEST	49892	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:17.284701109 CEST	443	49892	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:17.290580988 CEST	49900	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.290637016 CEST	443	49900	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.290690899 CEST	49900	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.291224003 CEST	49900	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.291245937 CEST	443	49900	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.310913086 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.310931921 CEST	443	49902	104.18.24.173	192.168.2.4
Apr 19, 2024 21:21:17.311261892 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.311261892 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.311286926 CEST	443	49902	104.18.24.173	192.168.2.4
Apr 19, 2024 21:21:17.321011066 CEST	49903	443	192.168.2.4	104.244.42.195
Apr 19, 2024 21:21:17.321036100 CEST	443	49903	104.244.42.195	192.168.2.4
Apr 19, 2024 21:21:17.321255922 CEST	49903	443	192.168.2.4	104.244.42.195
Apr 19, 2024 21:21:17.321548939 CEST	49903	443	192.168.2.4	104.244.42.195
Apr 19, 2024 21:21:17.321567059 CEST	443	49903	104.244.42.195	192.168.2.4
Apr 19, 2024 21:21:17.338845015 CEST	443	49891	3.33.220.150	192.168.2.4
Apr 19, 2024 21:21:17.339576006 CEST	443	49891	3.33.220.150	192.168.2.4
Apr 19, 2024 21:21:17.339646101 CEST	49891	443	192.168.2.4	3.33.220.150
Apr 19, 2024 21:21:17.340544939 CEST	49891	443	192.168.2.4	3.33.220.150
Apr 19, 2024 21:21:17.340579033 CEST	443	49891	3.33.220.150	192.168.2.4
Apr 19, 2024 21:21:17.450352907 CEST	49904	443	192.168.2.4	34.200.65.202
Apr 19, 2024 21:21:17.450387001 CEST	443	49904	34.200.65.202	192.168.2.4
Apr 19, 2024 21:21:17.450499058 CEST	49904	443	192.168.2.4	34.200.65.202
Apr 19, 2024 21:21:17.451210022 CEST	49904	443	192.168.2.4	34.200.65.202
Apr 19, 2024 21:21:17.451227903 CEST	443	49904	34.200.65.202	192.168.2.4
Apr 19, 2024 21:21:17.453831911 CEST	49905	443	192.168.2.4	35.71.131.137
Apr 19, 2024 21:21:17.453917027 CEST	443	49905	35.71.131.137	192.168.2.4
Apr 19, 2024 21:21:17.454068899 CEST	49905	443	192.168.2.4	35.71.131.137
Apr 19, 2024 21:21:17.454500914 CEST	49905	443	192.168.2.4	35.71.131.137
Apr 19, 2024 21:21:17.454529047 CEST	443	49905	35.71.131.137	192.168.2.4
Apr 19, 2024 21:21:17.455781937 CEST	443	49893	192.184.67.40	192.168.2.4
Apr 19, 2024 21:21:17.456336975 CEST	49893	443	192.168.2.4	192.184.67.40
Apr 19, 2024 21:21:17.456356049 CEST	443	49893	192.184.67.40	192.168.2.4
Apr 19, 2024 21:21:17.457917929 CEST	443	49893	192.184.67.40	192.168.2.4
Apr 19, 2024 21:21:17.458013058 CEST	49893	443	192.168.2.4	192.184.67.40
Apr 19, 2024 21:21:17.459639072 CEST	49893	443	192.168.2.4	192.184.67.40
Apr 19, 2024 21:21:17.459742069 CEST	443	49893	192.184.67.40	192.168.2.4
Apr 19, 2024 21:21:17.460072041 CEST	49893	443	192.168.2.4	192.184.67.40
Apr 19, 2024 21:21:17.460103035 CEST	443	49893	192.184.67.40	192.168.2.4
Apr 19, 2024 21:21:17.503407001 CEST	49893	443	192.168.2.4	192.184.67.40
Apr 19, 2024 21:21:17.517462969 CEST	443	49898	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.517987967 CEST	49898	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.518011093 CEST	443	49898	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.518867016 CEST	443	49898	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.518939018 CEST	49898	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.519680023 CEST	49898	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.519740105 CEST	443	49898	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.519970894 CEST	49898	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.519987106 CEST	443	49898	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.522655964 CEST	443	49897	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.523776054 CEST	49897	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.523832083 CEST	443	49897	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.524369001 CEST	49906	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.524394035 CEST	443	49906	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.524566889 CEST	49906	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.524735928 CEST	443	49899	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.525059938 CEST	49906	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.525089025 CEST	443	49906	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.525269032 CEST	49899	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.525278091 CEST	443	49899	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.527245998 CEST	443	49897	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.527317047 CEST	49897	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.528597116 CEST	443	49899	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.528650045 CEST	49899	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.529009104 CEST	49897	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.529098034 CEST	443	49897	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.529886961 CEST	443	49900	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.529930115 CEST	49897	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.529947042 CEST	443	49897	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.530360937 CEST	49900	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.530390978 CEST	443	49900	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.531039953 CEST	49899	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.531116962 CEST	443	49899	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.531279087 CEST	443	49900	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.531342030 CEST	49900	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.531611919 CEST	49899	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.531619072 CEST	443	49899	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.532614946 CEST	49900	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.532675028 CEST	443	49900	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.533051968 CEST	49900	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.533061028 CEST	443	49900	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.534301996 CEST	443	49903	104.244.42.195	192.168.2.4
Apr 19, 2024 21:21:17.534611940 CEST	49903	443	192.168.2.4	104.244.42.195
Apr 19, 2024 21:21:17.534621000 CEST	443	49903	104.244.42.195	192.168.2.4
Apr 19, 2024 21:21:17.535914898 CEST	443	49902	104.18.24.173	192.168.2.4
Apr 19, 2024 21:21:17.536031961 CEST	443	49903	104.244.42.195	192.168.2.4
Apr 19, 2024 21:21:17.536092997 CEST	49903	443	192.168.2.4	104.244.42.195
Apr 19, 2024 21:21:17.536334038 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.536340952 CEST	443	49902	104.18.24.173	192.168.2.4
Apr 19, 2024 21:21:17.537302017 CEST	49903	443	192.168.2.4	104.244.42.195
Apr 19, 2024 21:21:17.537383080 CEST	443	49903	104.244.42.195	192.168.2.4
Apr 19, 2024 21:21:17.537697077 CEST	49903	443	192.168.2.4	104.244.42.195
Apr 19, 2024 21:21:17.537705898 CEST	443	49903	104.244.42.195	192.168.2.4
Apr 19, 2024 21:21:17.537775993 CEST	443	49902	104.18.24.173	192.168.2.4
Apr 19, 2024 21:21:17.537825108 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.539644003 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.539731026 CEST	443	49902	104.18.24.173	192.168.2.4
Apr 19, 2024 21:21:17.540530920 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.540539026 CEST	443	49902	104.18.24.173	192.168.2.4
Apr 19, 2024 21:21:17.541421890 CEST	49907	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.541445017 CEST	443	49907	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.541562080 CEST	49907	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.541820049 CEST	49907	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.541845083 CEST	443	49907	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.571619034 CEST	49898	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.571640968 CEST	49897	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.572876930 CEST	49899	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.574114084 CEST	49900	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.590034008 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.590039968 CEST	49903	443	192.168.2.4	104.244.42.195
Apr 19, 2024 21:21:17.626496077 CEST	443	49893	192.184.67.40	192.168.2.4
Apr 19, 2024 21:21:17.626578093 CEST	443	49893	192.184.67.40	192.168.2.4
Apr 19, 2024 21:21:17.626759052 CEST	49893	443	192.168.2.4	192.184.67.40
Apr 19, 2024 21:21:17.629194021 CEST	49893	443	192.168.2.4	192.184.67.40
Apr 19, 2024 21:21:17.629229069 CEST	443	49893	192.184.67.40	192.168.2.4
Apr 19, 2024 21:21:17.700596094 CEST	443	49904	34.200.65.202	192.168.2.4
Apr 19, 2024 21:21:17.701045036 CEST	49904	443	192.168.2.4	34.200.65.202
Apr 19, 2024 21:21:17.701066971 CEST	443	49904	34.200.65.202	192.168.2.4
Apr 19, 2024 21:21:17.702688932 CEST	443	49904	34.200.65.202	192.168.2.4
Apr 19, 2024 21:21:17.702750921 CEST	49904	443	192.168.2.4	34.200.65.202
Apr 19, 2024 21:21:17.702758074 CEST	443	49904	34.200.65.202	192.168.2.4
Apr 19, 2024 21:21:17.702805996 CEST	49904	443	192.168.2.4	34.200.65.202
Apr 19, 2024 21:21:17.704114914 CEST	49904	443	192.168.2.4	34.200.65.202
Apr 19, 2024 21:21:17.704262972 CEST	443	49904	34.200.65.202	192.168.2.4
Apr 19, 2024 21:21:17.704571962 CEST	49904	443	192.168.2.4	34.200.65.202
Apr 19, 2024 21:21:17.704577923 CEST	443	49904	34.200.65.202	192.168.2.4
Apr 19, 2024 21:21:17.745383024 CEST	49909	443	192.168.2.4	192.184.67.84
Apr 19, 2024 21:21:17.745462894 CEST	443	49909	192.184.67.84	192.168.2.4
Apr 19, 2024 21:21:17.745556116 CEST	49909	443	192.168.2.4	192.184.67.84
Apr 19, 2024 21:21:17.746385098 CEST	49909	443	192.168.2.4	192.184.67.84
Apr 19, 2024 21:21:17.746417999 CEST	443	49909	192.184.67.84	192.168.2.4
Apr 19, 2024 21:21:17.747231960 CEST	49904	443	192.168.2.4	34.200.65.202
Apr 19, 2024 21:21:17.754825115 CEST	443	49898	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.754874945 CEST	443	49898	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.754992962 CEST	49898	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.756033897 CEST	49898	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.756056070 CEST	443	49898	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.756493092 CEST	49910	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.756568909 CEST	443	49910	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.756640911 CEST	49910	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.757348061 CEST	49910	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.757381916 CEST	443	49910	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.760431051 CEST	443	49897	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.760598898 CEST	443	49897	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.760797977 CEST	49897	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.761835098 CEST	49897	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.761852980 CEST	443	49897	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.762258053 CEST	443	49899	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.762417078 CEST	443	49899	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.762464046 CEST	49899	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.763886929 CEST	49899	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.763901949 CEST	443	49899	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.765804052 CEST	443	49900	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.765966892 CEST	443	49900	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.766037941 CEST	49900	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.767534971 CEST	49900	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.767561913 CEST	443	49900	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.768965960 CEST	443	49906	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.769735098 CEST	49906	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.769742966 CEST	443	49906	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.770219088 CEST	443	49906	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.770884991 CEST	49906	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.770963907 CEST	443	49906	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.771188974 CEST	49906	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.779786110 CEST	49911	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.779861927 CEST	443	49911	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:17.780015945 CEST	49911	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.780306101 CEST	49911	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.780340910 CEST	443	49911	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:17.781265020 CEST	49912	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.781301022 CEST	443	49912	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:17.781389952 CEST	49912	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.781873941 CEST	49912	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.781892061 CEST	443	49912	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:17.785232067 CEST	49913	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.785247087 CEST	443	49913	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:17.785460949 CEST	49913	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.786041021 CEST	49913	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.786067009 CEST	443	49913	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:17.788923979 CEST	49914	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.788954020 CEST	443	49914	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:17.789011002 CEST	49914	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.789114952 CEST	443	49907	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.789544106 CEST	49907	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.789566994 CEST	443	49903	104.244.42.195	192.168.2.4
Apr 19, 2024 21:21:17.789571047 CEST	443	49907	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.789747953 CEST	443	49903	104.244.42.195	192.168.2.4
Apr 19, 2024 21:21:17.789797068 CEST	49903	443	192.168.2.4	104.244.42.195
Apr 19, 2024 21:21:17.790025949 CEST	49914	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:17.790044069 CEST	443	49914	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:17.790106058 CEST	443	49907	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.790790081 CEST	49903	443	192.168.2.4	104.244.42.195
Apr 19, 2024 21:21:17.790811062 CEST	443	49903	104.244.42.195	192.168.2.4
Apr 19, 2024 21:21:17.792081118 CEST	49907	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.792188883 CEST	443	49907	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.792468071 CEST	49907	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.812123060 CEST	443	49906	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.819010973 CEST	443	49905	35.71.131.137	192.168.2.4
Apr 19, 2024 21:21:17.819529057 CEST	49905	443	192.168.2.4	35.71.131.137
Apr 19, 2024 21:21:17.819570065 CEST	443	49905	35.71.131.137	192.168.2.4
Apr 19, 2024 21:21:17.821036100 CEST	443	49905	35.71.131.137	192.168.2.4
Apr 19, 2024 21:21:17.821116924 CEST	49905	443	192.168.2.4	35.71.131.137
Apr 19, 2024 21:21:17.821867943 CEST	49905	443	192.168.2.4	35.71.131.137
Apr 19, 2024 21:21:17.821954012 CEST	443	49905	35.71.131.137	192.168.2.4
Apr 19, 2024 21:21:17.822287083 CEST	49905	443	192.168.2.4	35.71.131.137
Apr 19, 2024 21:21:17.822303057 CEST	443	49905	35.71.131.137	192.168.2.4
Apr 19, 2024 21:21:17.836147070 CEST	443	49907	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.850040913 CEST	443	49902	104.18.24.173	192.168.2.4
Apr 19, 2024 21:21:17.850290060 CEST	443	49902	104.18.24.173	192.168.2.4
Apr 19, 2024 21:21:17.850347042 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.851080894 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.851097107 CEST	443	49902	104.18.24.173	192.168.2.4
Apr 19, 2024 21:21:17.851223946 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.851232052 CEST	49902	443	192.168.2.4	104.18.24.173
Apr 19, 2024 21:21:17.873859882 CEST	49905	443	192.168.2.4	35.71.131.137
Apr 19, 2024 21:21:17.875008106 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:17.875040054 CEST	443	49917	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:17.875113010 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:17.875502110 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:17.875523090 CEST	443	49917	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:17.930562973 CEST	443	49904	34.200.65.202	192.168.2.4
Apr 19, 2024 21:21:17.930660009 CEST	443	49904	34.200.65.202	192.168.2.4
Apr 19, 2024 21:21:17.930706978 CEST	49904	443	192.168.2.4	34.200.65.202
Apr 19, 2024 21:21:17.932266951 CEST	49904	443	192.168.2.4	34.200.65.202
Apr 19, 2024 21:21:17.932290077 CEST	443	49904	34.200.65.202	192.168.2.4
Apr 19, 2024 21:21:17.943274021 CEST	443	49905	35.71.131.137	192.168.2.4
Apr 19, 2024 21:21:17.943317890 CEST	443	49905	35.71.131.137	192.168.2.4
Apr 19, 2024 21:21:17.943661928 CEST	49905	443	192.168.2.4	35.71.131.137
Apr 19, 2024 21:21:17.970562935 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:17.970594883 CEST	443	49918	104.18.25.173	192.168.2.4
Apr 19, 2024 21:21:17.970711946 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:17.971210003 CEST	49919	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:17.971255064 CEST	443	49919	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:17.971304893 CEST	49919	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:17.972187996 CEST	49919	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:17.972204924 CEST	443	49919	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:17.972915888 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:17.972944021 CEST	443	49918	104.18.25.173	192.168.2.4
Apr 19, 2024 21:21:17.974917889 CEST	49905	443	192.168.2.4	35.71.131.137
Apr 19, 2024 21:21:17.974971056 CEST	443	49905	35.71.131.137	192.168.2.4
Apr 19, 2024 21:21:17.998156071 CEST	443	49910	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.998564005 CEST	49910	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.998583078 CEST	443	49910	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.999036074 CEST	443	49910	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.999458075 CEST	49910	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:17.999533892 CEST	443	49910	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:17.999784946 CEST	49910	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:18.007416010 CEST	443	49906	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:18.007512093 CEST	443	49906	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:18.007611036 CEST	49906	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:18.008527994 CEST	49906	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:18.008558035 CEST	443	49906	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:18.017003059 CEST	49920	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.017024040 CEST	443	49920	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.017074108 CEST	49920	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.017421007 CEST	49920	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.017432928 CEST	443	49920	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.023561954 CEST	443	49907	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:18.023721933 CEST	443	49907	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:18.023787975 CEST	49907	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:18.024724960 CEST	49907	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:18.024760008 CEST	443	49907	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:18.027934074 CEST	443	49911	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.028317928 CEST	49911	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.028337002 CEST	443	49911	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.028798103 CEST	443	49911	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.029628038 CEST	49911	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.029725075 CEST	443	49911	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.029947042 CEST	49911	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.031754017 CEST	49921	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.031814098 CEST	443	49921	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.031872034 CEST	49921	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.032301903 CEST	49921	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.032336950 CEST	443	49921	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.032617092 CEST	443	49913	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.032891989 CEST	49913	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.032916069 CEST	443	49913	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.036375999 CEST	443	49914	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.036473989 CEST	443	49913	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.036546946 CEST	49913	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.036705017 CEST	49914	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.036715031 CEST	443	49914	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.037312031 CEST	49913	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.037405014 CEST	443	49913	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.037532091 CEST	49913	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.037547112 CEST	443	49913	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.037666082 CEST	443	49914	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.037724018 CEST	49914	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.038608074 CEST	49914	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.038667917 CEST	443	49914	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.039261103 CEST	49914	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.039268017 CEST	443	49914	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.040658951 CEST	443	49912	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.040819883 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.040836096 CEST	443	49922	3.225.218.10	192.168.2.4
Apr 19, 2024 21:21:18.040887117 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.041477919 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.041491032 CEST	443	49922	3.225.218.10	192.168.2.4
Apr 19, 2024 21:21:18.041750908 CEST	49912	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.041776896 CEST	443	49912	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.042885065 CEST	443	49912	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.043417931 CEST	49912	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.043591976 CEST	443	49912	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.043967962 CEST	49912	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.044120073 CEST	443	49910	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:18.076164007 CEST	443	49911	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.079328060 CEST	49914	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.079329014 CEST	49913	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.088180065 CEST	443	49912	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.118777990 CEST	49923	443	192.168.2.4	34.195.34.170
Apr 19, 2024 21:21:18.118830919 CEST	443	49923	34.195.34.170	192.168.2.4
Apr 19, 2024 21:21:18.119246006 CEST	49923	443	192.168.2.4	34.195.34.170
Apr 19, 2024 21:21:18.119730949 CEST	49923	443	192.168.2.4	34.195.34.170
Apr 19, 2024 21:21:18.119765043 CEST	443	49923	34.195.34.170	192.168.2.4
Apr 19, 2024 21:21:18.187716961 CEST	443	49918	104.18.25.173	192.168.2.4
Apr 19, 2024 21:21:18.188010931 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:18.188045979 CEST	443	49918	104.18.25.173	192.168.2.4
Apr 19, 2024 21:21:18.189909935 CEST	443	49918	104.18.25.173	192.168.2.4
Apr 19, 2024 21:21:18.190038919 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:18.196597099 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:18.196672916 CEST	443	49918	104.18.25.173	192.168.2.4
Apr 19, 2024 21:21:18.214484930 CEST	443	49919	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:18.220002890 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:18.220020056 CEST	443	49918	104.18.25.173	192.168.2.4
Apr 19, 2024 21:21:18.220879078 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:18.220936060 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:18.221002102 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:18.234146118 CEST	443	49910	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:18.234215021 CEST	443	49910	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:18.234280109 CEST	49910	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:18.246012926 CEST	49919	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:18.246032953 CEST	443	49919	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:18.247034073 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:18.247087002 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:18.249073982 CEST	49910	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:18.249100924 CEST	443	49910	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:18.249802113 CEST	443	49919	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:18.249881029 CEST	49919	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:18.250833988 CEST	443	49917	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:18.250936985 CEST	443	49909	192.184.67.84	192.168.2.4
Apr 19, 2024 21:21:18.258025885 CEST	49919	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:18.258214951 CEST	443	49919	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:18.258456945 CEST	49919	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:18.258465052 CEST	443	49919	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:18.259469986 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:18.261316061 CEST	443	49920	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.264861107 CEST	443	49911	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.265016079 CEST	443	49911	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.265081882 CEST	49911	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.273830891 CEST	443	49913	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.273966074 CEST	443	49913	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.274046898 CEST	49913	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.277095079 CEST	443	49914	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.277151108 CEST	443	49914	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.277218103 CEST	49914	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.279153109 CEST	443	49922	3.225.218.10	192.168.2.4
Apr 19, 2024 21:21:18.281820059 CEST	443	49912	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.281946898 CEST	443	49912	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.282022953 CEST	49912	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.286556005 CEST	443	49921	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.291543961 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:18.294982910 CEST	49909	443	192.168.2.4	192.184.67.84
Apr 19, 2024 21:21:18.307560921 CEST	49919	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:18.307564020 CEST	49920	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.324569941 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.335098982 CEST	49909	443	192.168.2.4	192.184.67.84
Apr 19, 2024 21:21:18.335155010 CEST	443	49909	192.184.67.84	192.168.2.4
Apr 19, 2024 21:21:18.335719109 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:18.335726976 CEST	443	49917	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:18.336772919 CEST	443	49909	192.184.67.84	192.168.2.4
Apr 19, 2024 21:21:18.336844921 CEST	49909	443	192.168.2.4	192.184.67.84
Apr 19, 2024 21:21:18.337058067 CEST	49921	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.339732885 CEST	443	49917	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:18.339796066 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:18.435596943 CEST	49909	443	192.168.2.4	192.184.67.84
Apr 19, 2024 21:21:18.435758114 CEST	443	49909	192.184.67.84	192.168.2.4
Apr 19, 2024 21:21:18.436168909 CEST	49921	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.436197042 CEST	443	49921	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.437202930 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.437213898 CEST	443	49922	3.225.218.10	192.168.2.4
Apr 19, 2024 21:21:18.437571049 CEST	443	49921	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.438292980 CEST	443	49922	3.225.218.10	192.168.2.4
Apr 19, 2024 21:21:18.438365936 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.438374043 CEST	443	49922	3.225.218.10	192.168.2.4
Apr 19, 2024 21:21:18.438411951 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.438724041 CEST	49920	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.438730001 CEST	443	49920	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.439692974 CEST	443	49920	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.439743996 CEST	49920	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.440572977 CEST	49912	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.440578938 CEST	443	49912	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.441214085 CEST	49921	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.441406012 CEST	443	49921	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.441580057 CEST	49914	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.441592932 CEST	443	49914	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.441951036 CEST	49913	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.441982985 CEST	443	49913	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.442589045 CEST	49911	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.442620993 CEST	443	49911	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.443351984 CEST	49920	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.443416119 CEST	443	49920	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.443667889 CEST	49909	443	192.168.2.4	192.184.67.84
Apr 19, 2024 21:21:18.443696022 CEST	443	49909	192.184.67.84	192.168.2.4
Apr 19, 2024 21:21:18.444242001 CEST	49921	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.444324017 CEST	49920	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.444329977 CEST	443	49920	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.446974993 CEST	443	49919	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:18.447067022 CEST	443	49919	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:18.447272062 CEST	49919	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:18.471731901 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:18.472086906 CEST	443	49917	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:18.472126961 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.472193003 CEST	443	49922	3.225.218.10	192.168.2.4
Apr 19, 2024 21:21:18.472671032 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:18.472687960 CEST	443	49917	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:18.472867966 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.472876072 CEST	443	49922	3.225.218.10	192.168.2.4
Apr 19, 2024 21:21:18.485114098 CEST	443	49923	34.195.34.170	192.168.2.4
Apr 19, 2024 21:21:18.485465050 CEST	49923	443	192.168.2.4	34.195.34.170
Apr 19, 2024 21:21:18.485521078 CEST	443	49923	34.195.34.170	192.168.2.4
Apr 19, 2024 21:21:18.487168074 CEST	443	49923	34.195.34.170	192.168.2.4
Apr 19, 2024 21:21:18.487262964 CEST	49923	443	192.168.2.4	34.195.34.170
Apr 19, 2024 21:21:18.488138914 CEST	443	49921	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.488279104 CEST	49923	443	192.168.2.4	34.195.34.170
Apr 19, 2024 21:21:18.488372087 CEST	443	49923	34.195.34.170	192.168.2.4
Apr 19, 2024 21:21:18.488393068 CEST	49923	443	192.168.2.4	34.195.34.170
Apr 19, 2024 21:21:18.496093988 CEST	49909	443	192.168.2.4	192.184.67.84
Apr 19, 2024 21:21:18.496822119 CEST	49920	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.502240896 CEST	443	49918	104.18.25.173	192.168.2.4
Apr 19, 2024 21:21:18.502370119 CEST	443	49918	104.18.25.173	192.168.2.4
Apr 19, 2024 21:21:18.502629042 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:18.513037920 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:18.528745890 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.528847933 CEST	49923	443	192.168.2.4	34.195.34.170
Apr 19, 2024 21:21:18.528903008 CEST	443	49923	34.195.34.170	192.168.2.4
Apr 19, 2024 21:21:18.551484108 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:18.551527023 CEST	443	49918	104.18.25.173	192.168.2.4
Apr 19, 2024 21:21:18.551688910 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:18.551688910 CEST	49918	443	192.168.2.4	104.18.25.173
Apr 19, 2024 21:21:18.566767931 CEST	443	49920	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.566771984 CEST	443	49921	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.566859961 CEST	443	49920	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.566925049 CEST	49920	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.566962957 CEST	443	49921	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.567156076 CEST	49921	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.568486929 CEST	49920	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.568500042 CEST	443	49920	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.569003105 CEST	49921	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:18.569041014 CEST	443	49921	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:18.584883928 CEST	49923	443	192.168.2.4	34.195.34.170
Apr 19, 2024 21:21:18.591557026 CEST	443	49917	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:18.592731953 CEST	443	49922	3.225.218.10	192.168.2.4
Apr 19, 2024 21:21:18.592782021 CEST	443	49922	3.225.218.10	192.168.2.4
Apr 19, 2024 21:21:18.592835903 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.601811886 CEST	49922	443	192.168.2.4	3.225.218.10
Apr 19, 2024 21:21:18.601819992 CEST	443	49922	3.225.218.10	192.168.2.4
Apr 19, 2024 21:21:18.608155012 CEST	443	49923	34.195.34.170	192.168.2.4
Apr 19, 2024 21:21:18.608218908 CEST	443	49923	34.195.34.170	192.168.2.4
Apr 19, 2024 21:21:18.608272076 CEST	49923	443	192.168.2.4	34.195.34.170
Apr 19, 2024 21:21:18.608747959 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:18.610976934 CEST	443	49909	192.184.67.84	192.168.2.4
Apr 19, 2024 21:21:18.611124039 CEST	443	49909	192.184.67.84	192.168.2.4
Apr 19, 2024 21:21:18.611186028 CEST	49909	443	192.168.2.4	192.184.67.84
Apr 19, 2024 21:21:18.636969090 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:18.636991978 CEST	443	49917	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:18.661449909 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:18.664787054 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:18.664803982 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:18.665791035 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:18.665831089 CEST	443	49927	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:18.665894985 CEST	49909	443	192.168.2.4	192.184.67.84
Apr 19, 2024 21:21:18.665909052 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:18.665946007 CEST	443	49909	192.184.67.84	192.168.2.4
Apr 19, 2024 21:21:18.666301966 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:18.666317940 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:18.666377068 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:18.666522980 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:18.666547060 CEST	443	49927	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:18.682702065 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:18.683043003 CEST	443	49917	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:18.683130026 CEST	49917	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:18.684314013 CEST	49923	443	192.168.2.4	34.195.34.170
Apr 19, 2024 21:21:18.684370041 CEST	443	49923	34.195.34.170	192.168.2.4
Apr 19, 2024 21:21:19.041846037 CEST	443	49927	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.042201996 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.042215109 CEST	443	49927	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.043829918 CEST	443	49927	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.043893099 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.250190020 CEST	49919	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:19.250220060 CEST	443	49919	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:19.257718086 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:19.257874012 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:19.257889032 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:19.263647079 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.263910055 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.263937950 CEST	443	49927	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.270425081 CEST	49928	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.270478010 CEST	443	49928	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.270698071 CEST	49928	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.271248102 CEST	49928	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.271275997 CEST	443	49928	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.272491932 CEST	49929	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:19.272571087 CEST	443	49929	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:19.272650003 CEST	49929	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:19.273482084 CEST	49929	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:19.273516893 CEST	443	49929	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:19.300142050 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:19.301033974 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:19.301058054 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:19.304152966 CEST	443	49927	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.314714909 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.314728022 CEST	443	49927	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.332433939 CEST	49931	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.332464933 CEST	443	49931	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.332567930 CEST	49931	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.332963943 CEST	49931	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.332976103 CEST	443	49931	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.338512897 CEST	49932	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.338587046 CEST	443	49932	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.338665962 CEST	49932	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.338888884 CEST	49932	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.338917017 CEST	443	49932	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.339598894 CEST	49933	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.339674950 CEST	443	49933	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.339751959 CEST	49933	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.340286970 CEST	49933	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.340318918 CEST	443	49933	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.346059084 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:19.360876083 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.362179995 CEST	49934	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:19.362257004 CEST	443	49934	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:19.362349033 CEST	49934	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:19.362647057 CEST	49934	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:19.362673998 CEST	443	49934	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:19.375154018 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:19.375231981 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:19.375365019 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:19.378808022 CEST	49925	443	192.168.2.4	44.206.22.2
Apr 19, 2024 21:21:19.378829956 CEST	443	49925	44.206.22.2	192.168.2.4
Apr 19, 2024 21:21:19.384525061 CEST	443	49927	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.384676933 CEST	443	49927	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.384730101 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.385329008 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.385337114 CEST	443	49927	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.385366917 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.385379076 CEST	49927	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.387289047 CEST	49939	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.387310028 CEST	443	49939	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.387454987 CEST	49939	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.387831926 CEST	49939	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.387847900 CEST	443	49939	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.500427961 CEST	443	49929	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:19.500873089 CEST	49929	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:19.500929117 CEST	443	49929	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:19.501224041 CEST	443	49929	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:19.502094984 CEST	49929	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:19.502156973 CEST	443	49929	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:19.502413988 CEST	49929	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:19.513750076 CEST	443	49928	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.514043093 CEST	49928	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.514065981 CEST	443	49928	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.514389992 CEST	443	49928	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.514859915 CEST	49928	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.514921904 CEST	443	49928	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.515276909 CEST	49928	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.516732931 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:19.516766071 CEST	443	49941	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:19.516835928 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:19.517354012 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:19.517371893 CEST	443	49941	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:19.544138908 CEST	443	49929	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:19.556117058 CEST	443	49928	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.580986023 CEST	443	49931	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.584039927 CEST	49931	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.584050894 CEST	443	49931	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.584362984 CEST	443	49931	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.584840059 CEST	49931	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.584925890 CEST	443	49931	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.585434914 CEST	49931	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.586098909 CEST	443	49933	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.586323977 CEST	49933	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.586360931 CEST	443	49933	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.587069988 CEST	443	49932	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.587601900 CEST	49932	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.587640047 CEST	443	49932	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.589117050 CEST	443	49932	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.589196920 CEST	49932	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.589720011 CEST	443	49933	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.589786053 CEST	49933	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.589905024 CEST	49932	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.589998007 CEST	443	49932	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.590029955 CEST	49932	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.590755939 CEST	49933	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.590842009 CEST	443	49933	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.590991974 CEST	49933	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.591008902 CEST	443	49933	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.609491110 CEST	443	49934	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:19.609776974 CEST	49934	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:19.609797001 CEST	443	49934	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:19.611243963 CEST	443	49934	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:19.611783981 CEST	49934	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:19.611901999 CEST	49934	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:19.611913919 CEST	443	49934	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:19.611974001 CEST	443	49934	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:19.630892038 CEST	443	49939	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.631541014 CEST	49939	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.631587982 CEST	443	49939	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.632117033 CEST	443	49931	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.632724047 CEST	443	49939	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.633296013 CEST	49939	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.633481979 CEST	443	49939	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.633652925 CEST	49939	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.636112928 CEST	443	49932	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.644268036 CEST	49933	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.644273996 CEST	49932	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.644296885 CEST	443	49932	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.664864063 CEST	49934	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:19.676143885 CEST	443	49939	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.698740005 CEST	49932	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.741027117 CEST	443	49929	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:19.741065025 CEST	443	49929	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:19.741316080 CEST	49929	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:19.754539967 CEST	443	49928	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.754606009 CEST	443	49928	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.754784107 CEST	49928	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.756161928 CEST	49928	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.756190062 CEST	443	49928	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.817533016 CEST	443	49931	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.817585945 CEST	443	49931	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.817656994 CEST	49931	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.819585085 CEST	49931	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.819597006 CEST	443	49931	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.819714069 CEST	443	49933	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.820082903 CEST	443	49933	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.820158958 CEST	49933	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.828910112 CEST	443	49932	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.829099894 CEST	443	49932	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.829157114 CEST	49932	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.843583107 CEST	49933	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.843640089 CEST	443	49933	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.844141960 CEST	49932	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:19.844201088 CEST	443	49932	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:19.845668077 CEST	443	49934	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:19.845834017 CEST	443	49934	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:19.846529007 CEST	49934	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:19.848259926 CEST	49934	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:19.848345041 CEST	443	49934	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:19.878918886 CEST	443	49939	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.879091978 CEST	443	49939	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:19.879151106 CEST	49939	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:19.903769970 CEST	443	49941	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:19.912534952 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:19.912550926 CEST	443	49941	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:19.913405895 CEST	443	49941	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:19.913458109 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:19.914069891 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:19.914130926 CEST	443	49941	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:19.920396090 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:19.920404911 CEST	443	49941	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:19.961818933 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:20.011831999 CEST	49939	443	192.168.2.4	44.195.233.246
Apr 19, 2024 21:21:20.011845112 CEST	443	49939	44.195.233.246	192.168.2.4
Apr 19, 2024 21:21:20.045922995 CEST	443	49941	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:20.095513105 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:20.095527887 CEST	443	49941	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:20.117518902 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:20.117568970 CEST	443	49941	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:20.117701054 CEST	443	49941	192.132.33.68	192.168.2.4
Apr 19, 2024 21:21:20.117727041 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:20.117747068 CEST	49941	443	192.168.2.4	192.132.33.68
Apr 19, 2024 21:21:20.238691092 CEST	49929	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:20.238691092 CEST	49929	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:20.238745928 CEST	443	49929	35.71.139.29	192.168.2.4
Apr 19, 2024 21:21:20.238802910 CEST	49929	443	192.168.2.4	35.71.139.29
Apr 19, 2024 21:21:20.240072966 CEST	49945	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.240158081 CEST	443	49945	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.240230083 CEST	49945	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.240437031 CEST	49945	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.240484953 CEST	443	49945	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.250988960 CEST	49947	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.251025915 CEST	443	49947	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.251081944 CEST	49947	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.251272917 CEST	49947	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.251292944 CEST	443	49947	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.252870083 CEST	49948	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:20.252897978 CEST	443	49948	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:20.252970934 CEST	49948	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:20.253161907 CEST	49948	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:20.253187895 CEST	443	49948	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:20.257700920 CEST	49949	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.257777929 CEST	443	49949	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.257863998 CEST	49949	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.258236885 CEST	49949	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.258272886 CEST	443	49949	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.278050900 CEST	49950	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.278098106 CEST	443	49950	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.278228998 CEST	49950	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.278717041 CEST	49951	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.278737068 CEST	443	49951	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.278827906 CEST	49951	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.279470921 CEST	49952	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.279489994 CEST	443	49952	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.279553890 CEST	49952	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.280059099 CEST	49953	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.280067921 CEST	443	49953	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.280154943 CEST	49953	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.280715942 CEST	49953	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.280728102 CEST	443	49953	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.281007051 CEST	49952	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.281039953 CEST	443	49952	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.281192064 CEST	49951	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.281203032 CEST	443	49951	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.281363964 CEST	49950	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.281383038 CEST	443	49950	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.367856979 CEST	49955	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.367887974 CEST	443	49955	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.367954016 CEST	49955	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.368139982 CEST	49955	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.368182898 CEST	443	49955	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.472810984 CEST	443	49948	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:20.473040104 CEST	49948	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:20.473062038 CEST	443	49948	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:20.474172115 CEST	443	49948	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:20.474495888 CEST	49948	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:20.474622965 CEST	49948	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:20.474633932 CEST	443	49948	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:20.474677086 CEST	443	49948	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:20.481811047 CEST	443	49945	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.481993914 CEST	49945	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.482007027 CEST	443	49945	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.482510090 CEST	443	49945	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.482805014 CEST	49945	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.482892036 CEST	443	49945	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.482918978 CEST	49945	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.494965076 CEST	443	49947	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.495167017 CEST	49947	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.495198011 CEST	443	49947	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.495486021 CEST	443	49947	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.495825052 CEST	49947	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.495882988 CEST	443	49947	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.495932102 CEST	49947	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.497787952 CEST	443	49949	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.497965097 CEST	49949	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.497989893 CEST	443	49949	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.498894930 CEST	443	49949	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.498946905 CEST	49949	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.499260902 CEST	49949	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.499315023 CEST	443	49949	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.499385118 CEST	49949	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.524116039 CEST	443	49945	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.525567055 CEST	443	49952	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.525778055 CEST	49952	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.525835991 CEST	443	49952	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.526355028 CEST	443	49952	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.526700020 CEST	49952	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.526823044 CEST	49952	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.526835918 CEST	443	49952	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.526854992 CEST	443	49952	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.527961016 CEST	49945	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.527961016 CEST	49948	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:20.528461933 CEST	443	49953	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.528664112 CEST	49953	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.528676033 CEST	443	49953	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.529195070 CEST	443	49953	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.529498100 CEST	49953	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.529567957 CEST	49953	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.529572010 CEST	443	49953	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.529597998 CEST	443	49953	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.531239033 CEST	443	49951	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.531390905 CEST	49951	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.531409979 CEST	443	49951	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.536132097 CEST	443	49947	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.536571980 CEST	443	49950	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.536689997 CEST	443	49951	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.536751986 CEST	49950	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.536784887 CEST	443	49950	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.536812067 CEST	49951	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.537086010 CEST	49951	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.537086010 CEST	49951	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.537097931 CEST	443	49951	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.537266016 CEST	443	49951	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.538717985 CEST	443	49950	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.538772106 CEST	49950	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.539041042 CEST	49950	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.539119959 CEST	443	49950	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.539181948 CEST	49950	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.539191961 CEST	443	49950	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.540141106 CEST	443	49949	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.543318033 CEST	49949	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.543350935 CEST	443	49949	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.573900938 CEST	49952	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.574086905 CEST	49953	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.589142084 CEST	49951	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.589149952 CEST	49949	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.589150906 CEST	49950	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.589158058 CEST	443	49951	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.593316078 CEST	443	49955	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.593501091 CEST	49955	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.593523979 CEST	443	49955	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.595140934 CEST	443	49955	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.595217943 CEST	49955	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.635612965 CEST	49951	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.691160917 CEST	443	49948	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:20.691344023 CEST	443	49948	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:20.691417933 CEST	49948	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:20.691848993 CEST	49948	443	192.168.2.4	64.233.176.154
Apr 19, 2024 21:21:20.691864967 CEST	443	49948	64.233.176.154	192.168.2.4
Apr 19, 2024 21:21:20.720128059 CEST	443	49945	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.720218897 CEST	443	49945	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.720279932 CEST	49945	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.720925093 CEST	49945	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.720937014 CEST	443	49945	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.734596968 CEST	49955	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.734891891 CEST	443	49955	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.734981060 CEST	443	49949	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.735030890 CEST	443	49949	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.735085011 CEST	443	49947	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.735131979 CEST	443	49947	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.735152006 CEST	49949	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.735176086 CEST	49947	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.735181093 CEST	49955	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.735213995 CEST	443	49955	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.737834930 CEST	49947	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.737850904 CEST	443	49947	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.738462925 CEST	49949	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:20.738486052 CEST	443	49949	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:20.762085915 CEST	443	49952	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.762156010 CEST	443	49952	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.762366056 CEST	49952	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.763031960 CEST	49952	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.763057947 CEST	443	49952	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.763596058 CEST	443	49953	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.763748884 CEST	443	49953	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.763792038 CEST	49953	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.764560938 CEST	49953	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.764574051 CEST	443	49953	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.766998053 CEST	443	49951	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.767066002 CEST	443	49951	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.767194033 CEST	49951	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.768129110 CEST	49951	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.768136024 CEST	443	49951	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.778264999 CEST	49955	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.786664009 CEST	443	49950	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.786896944 CEST	443	49950	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.786967993 CEST	49950	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.788222075 CEST	49950	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.788235903 CEST	443	49950	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.848527908 CEST	49958	443	192.168.2.4	52.72.43.196
Apr 19, 2024 21:21:20.848586082 CEST	443	49958	52.72.43.196	192.168.2.4
Apr 19, 2024 21:21:20.848670006 CEST	49958	443	192.168.2.4	52.72.43.196
Apr 19, 2024 21:21:20.849631071 CEST	49959	443	192.168.2.4	151.101.1.44
Apr 19, 2024 21:21:20.849659920 CEST	443	49959	151.101.1.44	192.168.2.4
Apr 19, 2024 21:21:20.849773884 CEST	49959	443	192.168.2.4	151.101.1.44
Apr 19, 2024 21:21:20.850183010 CEST	49958	443	192.168.2.4	52.72.43.196
Apr 19, 2024 21:21:20.850214005 CEST	443	49958	52.72.43.196	192.168.2.4
Apr 19, 2024 21:21:20.850615978 CEST	49959	443	192.168.2.4	151.101.1.44
Apr 19, 2024 21:21:20.850629091 CEST	443	49959	151.101.1.44	192.168.2.4
Apr 19, 2024 21:21:20.863549948 CEST	49960	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:20.863570929 CEST	443	49960	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:20.863697052 CEST	49960	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:20.864048958 CEST	49960	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:20.864062071 CEST	443	49960	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:20.924824953 CEST	443	49955	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.924954891 CEST	443	49955	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.925041914 CEST	49955	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.926481009 CEST	49963	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.926500082 CEST	443	49963	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.926765919 CEST	49963	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.927050114 CEST	49963	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.927072048 CEST	443	49963	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.928385973 CEST	49964	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.928428888 CEST	443	49964	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.928500891 CEST	49964	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.928957939 CEST	49964	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.928987980 CEST	443	49964	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.930166960 CEST	49965	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.930227041 CEST	443	49965	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.930294991 CEST	49965	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.930742979 CEST	49965	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:20.930773973 CEST	443	49965	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:20.931185007 CEST	49955	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.931215048 CEST	443	49955	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.933901072 CEST	49966	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.933922052 CEST	443	49966	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.934000969 CEST	49966	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.934433937 CEST	49966	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:20.934458017 CEST	443	49966	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:20.971961021 CEST	49967	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:20.971981049 CEST	443	49967	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:20.972050905 CEST	49967	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:20.972445965 CEST	49967	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:20.972456932 CEST	443	49967	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.022877932 CEST	49969	443	192.168.2.4	108.177.122.154
Apr 19, 2024 21:21:21.022969961 CEST	443	49969	108.177.122.154	192.168.2.4
Apr 19, 2024 21:21:21.023036957 CEST	49969	443	192.168.2.4	108.177.122.154
Apr 19, 2024 21:21:21.023313999 CEST	49969	443	192.168.2.4	108.177.122.154
Apr 19, 2024 21:21:21.023335934 CEST	443	49969	108.177.122.154	192.168.2.4
Apr 19, 2024 21:21:21.082442999 CEST	443	49959	151.101.1.44	192.168.2.4
Apr 19, 2024 21:21:21.082782030 CEST	49959	443	192.168.2.4	151.101.1.44
Apr 19, 2024 21:21:21.082789898 CEST	443	49959	151.101.1.44	192.168.2.4
Apr 19, 2024 21:21:21.084424019 CEST	443	49959	151.101.1.44	192.168.2.4
Apr 19, 2024 21:21:21.084554911 CEST	49959	443	192.168.2.4	151.101.1.44
Apr 19, 2024 21:21:21.086080074 CEST	49959	443	192.168.2.4	151.101.1.44
Apr 19, 2024 21:21:21.086174965 CEST	443	49959	151.101.1.44	192.168.2.4
Apr 19, 2024 21:21:21.086596966 CEST	49959	443	192.168.2.4	151.101.1.44
Apr 19, 2024 21:21:21.086613894 CEST	443	49959	151.101.1.44	192.168.2.4
Apr 19, 2024 21:21:21.120570898 CEST	443	49960	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:21.120824099 CEST	49960	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:21.120842934 CEST	443	49960	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:21.121937037 CEST	443	49960	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:21.122710943 CEST	49960	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:21.122884035 CEST	443	49960	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:21.122975111 CEST	49960	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:21.127549887 CEST	49959	443	192.168.2.4	151.101.1.44
Apr 19, 2024 21:21:21.153393984 CEST	443	49966	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.153839111 CEST	49966	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.153908968 CEST	443	49966	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.155014038 CEST	443	49966	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.155452967 CEST	49966	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.155637980 CEST	443	49966	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.155684948 CEST	49966	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.164146900 CEST	443	49960	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:21.174006939 CEST	49960	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:21.178714037 CEST	443	49964	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.179013968 CEST	49964	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.179052114 CEST	443	49964	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.179506063 CEST	443	49963	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.179526091 CEST	443	49964	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.180061102 CEST	49964	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.180176973 CEST	443	49964	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.180299044 CEST	49963	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.180308104 CEST	443	49963	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.180404902 CEST	49964	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.180789948 CEST	443	49963	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.181174040 CEST	49963	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.181237936 CEST	49963	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.181243896 CEST	443	49963	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.181265116 CEST	443	49963	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.182296038 CEST	443	49965	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.182549000 CEST	49965	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.182573080 CEST	443	49965	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.186096907 CEST	443	49965	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.186187029 CEST	49965	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.186811924 CEST	49965	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.187028885 CEST	443	49965	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.187143087 CEST	49965	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.187158108 CEST	443	49965	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.196141005 CEST	443	49966	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.200999022 CEST	443	49967	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.201296091 CEST	49967	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.201303959 CEST	443	49967	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.202909946 CEST	443	49967	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.202997923 CEST	49967	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.204262018 CEST	49967	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.204341888 CEST	443	49967	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.204499960 CEST	49967	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.204514027 CEST	443	49967	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.204547882 CEST	49966	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.223284006 CEST	49971	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.223315001 CEST	443	49971	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.223512888 CEST	49971	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.223720074 CEST	49971	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.223731041 CEST	443	49971	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.228143930 CEST	443	49964	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.235310078 CEST	49963	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.235399961 CEST	49965	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.239758015 CEST	443	49969	108.177.122.154	192.168.2.4
Apr 19, 2024 21:21:21.239959955 CEST	49969	443	192.168.2.4	108.177.122.154
Apr 19, 2024 21:21:21.240017891 CEST	443	49969	108.177.122.154	192.168.2.4
Apr 19, 2024 21:21:21.241503954 CEST	443	49969	108.177.122.154	192.168.2.4
Apr 19, 2024 21:21:21.241583109 CEST	49969	443	192.168.2.4	108.177.122.154
Apr 19, 2024 21:21:21.242089033 CEST	49969	443	192.168.2.4	108.177.122.154
Apr 19, 2024 21:21:21.242197037 CEST	443	49969	108.177.122.154	192.168.2.4
Apr 19, 2024 21:21:21.242330074 CEST	49969	443	192.168.2.4	108.177.122.154
Apr 19, 2024 21:21:21.242347956 CEST	443	49969	108.177.122.154	192.168.2.4
Apr 19, 2024 21:21:21.251305103 CEST	49967	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.297637939 CEST	49969	443	192.168.2.4	108.177.122.154
Apr 19, 2024 21:21:21.330188036 CEST	443	49958	52.72.43.196	192.168.2.4
Apr 19, 2024 21:21:21.330452919 CEST	49958	443	192.168.2.4	52.72.43.196
Apr 19, 2024 21:21:21.330509901 CEST	443	49958	52.72.43.196	192.168.2.4
Apr 19, 2024 21:21:21.331372023 CEST	443	49958	52.72.43.196	192.168.2.4
Apr 19, 2024 21:21:21.331444979 CEST	49958	443	192.168.2.4	52.72.43.196
Apr 19, 2024 21:21:21.332973957 CEST	49958	443	192.168.2.4	52.72.43.196
Apr 19, 2024 21:21:21.333034039 CEST	443	49958	52.72.43.196	192.168.2.4
Apr 19, 2024 21:21:21.333187103 CEST	49958	443	192.168.2.4	52.72.43.196
Apr 19, 2024 21:21:21.333204031 CEST	443	49958	52.72.43.196	192.168.2.4
Apr 19, 2024 21:21:21.381835938 CEST	49958	443	192.168.2.4	52.72.43.196
Apr 19, 2024 21:21:21.416698933 CEST	443	49964	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.416896105 CEST	443	49964	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.416999102 CEST	49964	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.417252064 CEST	443	49967	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.417448997 CEST	443	49967	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.417547941 CEST	49967	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.418514013 CEST	49964	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.418540955 CEST	443	49964	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.418934107 CEST	443	49963	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.419131041 CEST	443	49963	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.419193029 CEST	49963	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.421132088 CEST	49963	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.421148062 CEST	443	49963	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.422523022 CEST	443	49965	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.422683954 CEST	443	49965	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.422743082 CEST	49965	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.423810005 CEST	49965	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:21.423824072 CEST	443	49965	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:21.424535036 CEST	49967	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.424544096 CEST	443	49967	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.424698114 CEST	443	49960	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:21.424763918 CEST	49960	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:21.424777031 CEST	443	49960	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:21.424845934 CEST	443	49960	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:21.425101995 CEST	49960	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:21.427824020 CEST	49960	443	192.168.2.4	68.67.160.117
Apr 19, 2024 21:21:21.427834988 CEST	443	49960	68.67.160.117	192.168.2.4
Apr 19, 2024 21:21:21.446141005 CEST	443	49959	151.101.1.44	192.168.2.4
Apr 19, 2024 21:21:21.447550058 CEST	443	49959	151.101.1.44	192.168.2.4
Apr 19, 2024 21:21:21.447633028 CEST	49959	443	192.168.2.4	151.101.1.44
Apr 19, 2024 21:21:21.448496103 CEST	49959	443	192.168.2.4	151.101.1.44
Apr 19, 2024 21:21:21.448514938 CEST	443	49959	151.101.1.44	192.168.2.4
Apr 19, 2024 21:21:21.449755907 CEST	49972	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:21.449781895 CEST	443	49972	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:21.449925900 CEST	49972	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:21.450263977 CEST	49972	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:21.450278044 CEST	443	49972	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:21.453478098 CEST	443	49958	52.72.43.196	192.168.2.4
Apr 19, 2024 21:21:21.453519106 CEST	443	49958	52.72.43.196	192.168.2.4
Apr 19, 2024 21:21:21.453782082 CEST	49958	443	192.168.2.4	52.72.43.196
Apr 19, 2024 21:21:21.454219103 CEST	49958	443	192.168.2.4	52.72.43.196
Apr 19, 2024 21:21:21.454235077 CEST	443	49958	52.72.43.196	192.168.2.4
Apr 19, 2024 21:21:21.459403038 CEST	49973	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:21.459427118 CEST	443	49973	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:21.459496021 CEST	49973	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:21.460020065 CEST	49973	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:21.460033894 CEST	443	49973	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:21.465516090 CEST	443	49969	108.177.122.154	192.168.2.4
Apr 19, 2024 21:21:21.465701103 CEST	443	49969	108.177.122.154	192.168.2.4
Apr 19, 2024 21:21:21.465760946 CEST	49969	443	192.168.2.4	108.177.122.154
Apr 19, 2024 21:21:21.466662884 CEST	49969	443	192.168.2.4	108.177.122.154
Apr 19, 2024 21:21:21.466691971 CEST	443	49969	108.177.122.154	192.168.2.4
Apr 19, 2024 21:21:21.473177910 CEST	443	49971	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.473912954 CEST	49971	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.473932028 CEST	443	49971	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.475544930 CEST	443	49971	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.475624084 CEST	49971	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.477642059 CEST	49971	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.477729082 CEST	443	49971	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.478216887 CEST	49971	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.478224993 CEST	443	49971	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.482688904 CEST	443	49966	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.482840061 CEST	443	49966	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.483000994 CEST	49966	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.485091925 CEST	49966	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.485101938 CEST	443	49966	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.518554926 CEST	49971	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.547156096 CEST	49974	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.547203064 CEST	443	49974	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.547262907 CEST	49974	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.547688961 CEST	49974	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.547719955 CEST	443	49974	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.549462080 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:21.549503088 CEST	443	49975	68.67.161.208	192.168.2.4
Apr 19, 2024 21:21:21.549664974 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:21.549992085 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:21.550014019 CEST	443	49975	68.67.161.208	192.168.2.4
Apr 19, 2024 21:21:21.571245909 CEST	49976	443	192.168.2.4	151.101.129.44
Apr 19, 2024 21:21:21.571290016 CEST	443	49976	151.101.129.44	192.168.2.4
Apr 19, 2024 21:21:21.571458101 CEST	49976	443	192.168.2.4	151.101.129.44
Apr 19, 2024 21:21:21.572118998 CEST	49976	443	192.168.2.4	151.101.129.44
Apr 19, 2024 21:21:21.572149992 CEST	443	49976	151.101.129.44	192.168.2.4
Apr 19, 2024 21:21:21.597394943 CEST	49977	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.597436905 CEST	443	49977	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.597506046 CEST	49977	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.597742081 CEST	49977	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.597769976 CEST	443	49977	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.673151016 CEST	443	49972	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:21.694766045 CEST	443	49971	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.694839001 CEST	443	49971	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.694935083 CEST	49971	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.697931051 CEST	49971	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.697948933 CEST	443	49971	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.698726892 CEST	49972	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:21.698746920 CEST	443	49972	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:21.699873924 CEST	443	49972	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:21.699940920 CEST	49972	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:21.702018976 CEST	49972	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:21.702102900 CEST	443	49972	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:21.702300072 CEST	49972	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:21.702317953 CEST	443	49972	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:21.702784061 CEST	443	49973	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:21.703098059 CEST	49973	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:21.703109980 CEST	443	49973	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:21.703430891 CEST	443	49973	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:21.703953981 CEST	49973	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:21.704016924 CEST	443	49973	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:21.704121113 CEST	49973	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:21.742892981 CEST	49972	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:21.743649960 CEST	49973	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:21.743663073 CEST	443	49973	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:21.768163919 CEST	443	49974	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.768852949 CEST	49974	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.768884897 CEST	443	49974	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.770725965 CEST	443	49974	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.770797014 CEST	49974	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.771308899 CEST	49974	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.771393061 CEST	443	49974	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.772016048 CEST	49974	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.772031069 CEST	443	49974	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:21.783097982 CEST	443	49976	151.101.129.44	192.168.2.4
Apr 19, 2024 21:21:21.783333063 CEST	49976	443	192.168.2.4	151.101.129.44
Apr 19, 2024 21:21:21.783373117 CEST	443	49976	151.101.129.44	192.168.2.4
Apr 19, 2024 21:21:21.784347057 CEST	443	49976	151.101.129.44	192.168.2.4
Apr 19, 2024 21:21:21.784427881 CEST	49976	443	192.168.2.4	151.101.129.44
Apr 19, 2024 21:21:21.785413027 CEST	49976	443	192.168.2.4	151.101.129.44
Apr 19, 2024 21:21:21.785482883 CEST	443	49976	151.101.129.44	192.168.2.4
Apr 19, 2024 21:21:21.785828114 CEST	49976	443	192.168.2.4	151.101.129.44
Apr 19, 2024 21:21:21.785845041 CEST	443	49976	151.101.129.44	192.168.2.4
Apr 19, 2024 21:21:21.815443039 CEST	443	49977	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.816247940 CEST	49977	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.816304922 CEST	443	49977	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.817081928 CEST	49978	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.817142963 CEST	443	49978	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.817239046 CEST	49978	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.817684889 CEST	49978	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:21.817718029 CEST	443	49978	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:21.818694115 CEST	443	49977	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.818784952 CEST	49977	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.819834948 CEST	49977	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.819936037 CEST	443	49977	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.819947958 CEST	49974	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:21.820117950 CEST	49977	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.820136070 CEST	443	49977	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:21.835521936 CEST	49976	443	192.168.2.4	151.101.129.44
Apr 19, 2024 21:21:21.866574049 CEST	49977	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:21.905469894 CEST	443	49972	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:21.905525923 CEST	49972	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:21.905555964 CEST	443	49972	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:21.905636072 CEST	443	49972	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:21.905685902 CEST	49972	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:21.906599045 CEST	49972	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:21.906615019 CEST	443	49972	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:21.936230898 CEST	443	49975	68.67.161.208	192.168.2.4
Apr 19, 2024 21:21:21.936463118 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:21.936523914 CEST	443	49975	68.67.161.208	192.168.2.4
Apr 19, 2024 21:21:21.939650059 CEST	443	49975	68.67.161.208	192.168.2.4
Apr 19, 2024 21:21:21.939723015 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:21.940376997 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:21.940376997 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:21.940466881 CEST	443	49975	68.67.161.208	192.168.2.4
Apr 19, 2024 21:21:21.947736025 CEST	443	49973	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:21.947813034 CEST	443	49973	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:21.947859049 CEST	49973	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:21.948594093 CEST	49973	443	192.168.2.4	18.213.234.13
Apr 19, 2024 21:21:21.948601961 CEST	443	49973	18.213.234.13	192.168.2.4
Apr 19, 2024 21:21:21.989440918 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:21.989490986 CEST	443	49975	68.67.161.208	192.168.2.4
Apr 19, 2024 21:21:21.998383999 CEST	443	49974	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:22.003771067 CEST	443	49974	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:22.003875971 CEST	49974	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:22.004129887 CEST	49974	443	192.168.2.4	35.244.159.8
Apr 19, 2024 21:21:22.004143000 CEST	443	49974	35.244.159.8	192.168.2.4
Apr 19, 2024 21:21:22.039678097 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:22.058326006 CEST	443	49978	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:22.058603048 CEST	49978	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:22.058633089 CEST	443	49978	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:22.060079098 CEST	443	49978	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:22.060162067 CEST	49978	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:22.060530901 CEST	49978	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:22.060620070 CEST	443	49978	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:22.060735941 CEST	49978	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:22.060750961 CEST	443	49978	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:22.067940950 CEST	443	49975	68.67.161.208	192.168.2.4
Apr 19, 2024 21:21:22.068027020 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:22.068041086 CEST	443	49975	68.67.161.208	192.168.2.4
Apr 19, 2024 21:21:22.068134069 CEST	443	49975	68.67.161.208	192.168.2.4
Apr 19, 2024 21:21:22.068193913 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:22.068882942 CEST	49975	443	192.168.2.4	68.67.161.208
Apr 19, 2024 21:21:22.068914890 CEST	443	49975	68.67.161.208	192.168.2.4
Apr 19, 2024 21:21:22.106910944 CEST	49978	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:22.141073942 CEST	443	49977	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:22.141239882 CEST	443	49977	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:22.141416073 CEST	49977	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:22.142241955 CEST	49977	443	192.168.2.4	104.18.36.155
Apr 19, 2024 21:21:22.142280102 CEST	443	49977	104.18.36.155	192.168.2.4
Apr 19, 2024 21:21:22.157720089 CEST	443	49976	151.101.129.44	192.168.2.4
Apr 19, 2024 21:21:22.158791065 CEST	443	49976	151.101.129.44	192.168.2.4
Apr 19, 2024 21:21:22.158862114 CEST	49976	443	192.168.2.4	151.101.129.44
Apr 19, 2024 21:21:22.158958912 CEST	49976	443	192.168.2.4	151.101.129.44
Apr 19, 2024 21:21:22.158992052 CEST	443	49976	151.101.129.44	192.168.2.4
Apr 19, 2024 21:21:22.257843018 CEST	49979	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:22.257889032 CEST	443	49979	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:22.258028030 CEST	49979	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:22.258609056 CEST	49979	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:22.258631945 CEST	443	49979	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:22.289974928 CEST	443	49978	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:22.290194988 CEST	443	49978	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:22.290266991 CEST	49978	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:22.290517092 CEST	49978	443	192.168.2.4	8.28.7.83
Apr 19, 2024 21:21:22.290555954 CEST	443	49978	8.28.7.83	192.168.2.4
Apr 19, 2024 21:21:22.387418032 CEST	49980	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:22.387474060 CEST	443	49980	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:22.387610912 CEST	49980	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:22.388288975 CEST	49980	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:22.388309002 CEST	443	49980	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:22.502310038 CEST	443	49979	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:22.502578974 CEST	49979	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:22.502603054 CEST	443	49979	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:22.502932072 CEST	443	49979	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:22.503349066 CEST	49979	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:22.503408909 CEST	443	49979	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:22.503684998 CEST	49979	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:22.548113108 CEST	443	49979	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:22.607801914 CEST	443	49980	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:22.608006954 CEST	49980	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:22.608031034 CEST	443	49980	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:22.609462976 CEST	443	49980	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:22.609525919 CEST	49980	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:22.609946966 CEST	49980	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:22.610029936 CEST	443	49980	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:22.610186100 CEST	49980	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:22.610193968 CEST	443	49980	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:22.651709080 CEST	49980	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:22.756910086 CEST	443	49979	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:22.756993055 CEST	443	49979	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:22.757080078 CEST	49979	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:22.780503988 CEST	49979	443	192.168.2.4	54.157.18.178
Apr 19, 2024 21:21:22.780531883 CEST	443	49979	54.157.18.178	192.168.2.4
Apr 19, 2024 21:21:22.846451044 CEST	443	49980	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:22.846529961 CEST	49980	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:22.846716881 CEST	443	49980	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:22.846901894 CEST	443	49980	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:22.847026110 CEST	49980	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:22.848064899 CEST	49980	443	192.168.2.4	31.13.88.35
Apr 19, 2024 21:21:22.848079920 CEST	443	49980	31.13.88.35	192.168.2.4
Apr 19, 2024 21:21:28.862077951 CEST	49752	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:21:28.862140894 CEST	443	49752	13.107.136.10	192.168.2.4
Apr 19, 2024 21:21:38.024265051 CEST	49983	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:21:38.024324894 CEST	443	49983	64.233.176.147	192.168.2.4
Apr 19, 2024 21:21:38.024456024 CEST	49983	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:21:38.025469065 CEST	49983	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:21:38.025489092 CEST	443	49983	64.233.176.147	192.168.2.4
Apr 19, 2024 21:21:38.240572929 CEST	443	49983	64.233.176.147	192.168.2.4
Apr 19, 2024 21:21:38.240868092 CEST	49983	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:21:38.240891933 CEST	443	49983	64.233.176.147	192.168.2.4
Apr 19, 2024 21:21:38.241347075 CEST	443	49983	64.233.176.147	192.168.2.4
Apr 19, 2024 21:21:38.241684914 CEST	49983	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:21:38.241765022 CEST	443	49983	64.233.176.147	192.168.2.4
Apr 19, 2024 21:21:38.290988922 CEST	49983	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:21:39.035298109 CEST	49771	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:21:39.035352945 CEST	443	49771	13.107.136.10	192.168.2.4
Apr 19, 2024 21:21:44.713033915 CEST	49752	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:21:44.713185072 CEST	443	49752	13.107.136.10	192.168.2.4
Apr 19, 2024 21:21:44.713260889 CEST	49752	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:21:45.059257030 CEST	49723	80	192.168.2.4	23.40.205.48
Apr 19, 2024 21:21:45.059314966 CEST	49724	80	192.168.2.4	173.223.239.132
Apr 19, 2024 21:21:45.164315939 CEST	80	49724	173.223.239.132	192.168.2.4
Apr 19, 2024 21:21:45.164383888 CEST	49724	80	192.168.2.4	173.223.239.132
Apr 19, 2024 21:21:45.167273998 CEST	80	49723	23.40.205.48	192.168.2.4
Apr 19, 2024 21:21:45.167330027 CEST	49723	80	192.168.2.4	23.40.205.48
Apr 19, 2024 21:21:48.260669947 CEST	443	49983	64.233.176.147	192.168.2.4
Apr 19, 2024 21:21:48.260798931 CEST	443	49983	64.233.176.147	192.168.2.4
Apr 19, 2024 21:21:48.261017084 CEST	49983	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:21:48.711266041 CEST	49983	443	192.168.2.4	64.233.176.147
Apr 19, 2024 21:21:48.711340904 CEST	443	49983	64.233.176.147	192.168.2.4
Apr 19, 2024 21:21:54.714644909 CEST	49771	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:21:54.714967012 CEST	443	49771	13.107.136.10	192.168.2.4
Apr 19, 2024 21:21:54.715352058 CEST	443	49771	13.107.136.10	192.168.2.4
Apr 19, 2024 21:21:54.715564966 CEST	49771	443	192.168.2.4	13.107.136.10
Apr 19, 2024 21:21:54.715564966 CEST	49771	443	192.168.2.4	13.107.136.10

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 19, 2024 21:20:34.264740944 CEST	53	52677	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:34.610434055 CEST	53	64532	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:35.215717077 CEST	53	50074	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:36.303005934 CEST	53416	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:36.307266951 CEST	53657	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:36.441541910 CEST	53	53416	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:36.448623896 CEST	53	53657	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:37.117541075 CEST	58007	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:37.117683887 CEST	52099	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:37.222935915 CEST	53	52099	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:37.223000050 CEST	53	58007	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:37.959188938 CEST	55314	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:37.959650993 CEST	60472	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:38.063709021 CEST	53	55314	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:38.065304041 CEST	53	60472	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:40.414463997 CEST	59319	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:40.414613962 CEST	63134	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:43.002988100 CEST	52236	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:43.003205061 CEST	63077	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:51.289885044 CEST	60376	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:51.290075064 CEST	49431	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:52.869982004 CEST	53	63550	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:53.523905039 CEST	57750	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:53.524211884 CEST	65099	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:54.220259905 CEST	50219	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:54.221471071 CEST	50626	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:54.254167080 CEST	61917	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:54.254681110 CEST	58023	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:20:54.363267899 CEST	53	61917	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:54.364274979 CEST	53	58023	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:55.844187975 CEST	53	61936	1.1.1.1	192.168.2.4
Apr 19, 2024 21:20:56.650918007 CEST	138	138	192.168.2.4	192.168.2.255
Apr 19, 2024 21:21:00.731738091 CEST	49693	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:00.732136011 CEST	63164	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:03.150669098 CEST	50388	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:03.150790930 CEST	49211	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:04.109064102 CEST	53	62014	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:04.611892939 CEST	63193	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:04.612158060 CEST	49735	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:05.238035917 CEST	58668	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:05.238409042 CEST	61127	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:07.247080088 CEST	56124	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:07.247231007 CEST	51178	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:11.691396952 CEST	53	49374	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:14.746169090 CEST	49836	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:14.746278048 CEST	55407	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:14.850538969 CEST	53	49836	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:14.850816011 CEST	53	55407	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:15.334682941 CEST	49644	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:15.334893942 CEST	65079	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:15.361685991 CEST	50768	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:15.361840963 CEST	54049	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:15.362272978 CEST	54586	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:15.362385035 CEST	54973	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:15.362855911 CEST	55397	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:15.363125086 CEST	51073	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:15.439471006 CEST	53	65079	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:15.439749002 CEST	53	49644	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:15.467490911 CEST	53	50768	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:15.467760086 CEST	53	51073	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:15.467797995 CEST	53	54973	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:15.467931032 CEST	53	54586	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:15.471910000 CEST	53	54049	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.011122942 CEST	62003	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.011471987 CEST	63142	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.013536930 CEST	61331	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.013681889 CEST	55221	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.116615057 CEST	53	63142	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.117033958 CEST	53	62003	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.122298002 CEST	53	61331	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.125185966 CEST	50651	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.125185966 CEST	63282	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.134294987 CEST	53	55221	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.229944944 CEST	53	50651	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.230117083 CEST	53	63282	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.309668064 CEST	65061	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.309786081 CEST	61186	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.412916899 CEST	57690	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.413022041 CEST	62201	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.414650917 CEST	53	61186	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.414665937 CEST	53	65061	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.518328905 CEST	53	62201	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.521686077 CEST	60225	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.521960974 CEST	50699	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.625871897 CEST	60415	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.626074076 CEST	63029	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.730494976 CEST	53	60415	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.730724096 CEST	53	63029	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.732300043 CEST	62571	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.732609987 CEST	58161	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.837045908 CEST	53	62571	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.837902069 CEST	55100	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.838011026 CEST	53	58161	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.838171005 CEST	57994	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.942852020 CEST	53	57994	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.943365097 CEST	53	55100	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:16.964412928 CEST	52808	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:16.964600086 CEST	63616	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.054023981 CEST	65013	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.054719925 CEST	62714	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.070112944 CEST	53	63616	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.135391951 CEST	60101	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.135613918 CEST	60817	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.205182076 CEST	51920	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.205337048 CEST	60142	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.214960098 CEST	55962	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.215461969 CEST	50797	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.240072966 CEST	53	60101	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.241111994 CEST	53	60817	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.309797049 CEST	53	60142	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.309811115 CEST	53	51920	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.319238901 CEST	53	55962	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.320144892 CEST	53	50797	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.343246937 CEST	56710	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.343713999 CEST	65129	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.346910000 CEST	60491	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.347587109 CEST	61035	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.448741913 CEST	53	56710	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.449853897 CEST	53	65129	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.452183962 CEST	53	60491	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.453397989 CEST	53	61035	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.633658886 CEST	52832	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.634260893 CEST	50945	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.639595985 CEST	54663	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.639859915 CEST	52214	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.744000912 CEST	53	54663	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.744609118 CEST	53	52214	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.758919001 CEST	51962	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.759650946 CEST	52276	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.766278028 CEST	60917	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.766784906 CEST	53665	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.768498898 CEST	55369	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.769267082 CEST	62218	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.849066019 CEST	59802	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.849364996 CEST	55793	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.853863001 CEST	54360	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.854235888 CEST	62056	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.864830017 CEST	53	52276	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.873310089 CEST	53	55369	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.874216080 CEST	53	62218	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.933691978 CEST	63677	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.934272051 CEST	64780	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:17.954449892 CEST	53	59802	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.954690933 CEST	53	55793	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.958560944 CEST	53	54360	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:17.959003925 CEST	53	62056	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:18.011351109 CEST	54714	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:18.012053967 CEST	56547	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:18.038609982 CEST	53	63677	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:18.039280891 CEST	53	64780	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:18.084722042 CEST	57711	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:18.085187912 CEST	51318	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:18.189903021 CEST	53	57711	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:18.190308094 CEST	53	51318	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:18.550497055 CEST	58278	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:18.550658941 CEST	59991	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:18.655143976 CEST	53	58278	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:18.655494928 CEST	53	59991	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:19.275253057 CEST	51518	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:19.276274920 CEST	65143	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:19.364373922 CEST	61109	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:19.364732027 CEST	60631	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:19.380882025 CEST	53	65143	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:19.411053896 CEST	56812	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:19.411283970 CEST	54213	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:19.469052076 CEST	53	60631	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:19.515896082 CEST	53	56812	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:19.516206980 CEST	53	54213	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:20.254362106 CEST	51334	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.254848003 CEST	54416	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.260481119 CEST	62760	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.260795116 CEST	53116	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.360984087 CEST	53	54416	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:20.365240097 CEST	53	62760	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:20.367428064 CEST	53	53116	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:20.740473986 CEST	50771	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.741103888 CEST	63773	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.741980076 CEST	63925	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.742363930 CEST	60747	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.846487045 CEST	53	50771	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:20.846786976 CEST	53	63925	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:20.847353935 CEST	53	63773	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:20.847420931 CEST	53	60747	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:20.865911007 CEST	49473	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.866569042 CEST	52523	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.914040089 CEST	63433	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.914351940 CEST	50807	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.915972948 CEST	49948	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.916224957 CEST	49749	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.937475920 CEST	52353	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.937657118 CEST	57523	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:20.970650911 CEST	53	49473	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:20.971479893 CEST	53	52523	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.020150900 CEST	53	50807	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.020479918 CEST	53	49948	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.021620989 CEST	53	49749	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.042397022 CEST	53	57523	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.117316008 CEST	52851	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.117639065 CEST	49857	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.175048113 CEST	56181	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.175395966 CEST	51742	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.222479105 CEST	53	49857	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.222872019 CEST	53	52851	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.279730082 CEST	53	56181	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.280616999 CEST	53	51742	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.281368971 CEST	53643	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.343269110 CEST	58227	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.343575001 CEST	61744	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.386511087 CEST	53	53643	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.441219091 CEST	64993	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.441792965 CEST	50828	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.443380117 CEST	51502	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.443902016 CEST	49344	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.447880030 CEST	53	58227	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.448070049 CEST	53	61744	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.465429068 CEST	51255	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.465862989 CEST	61636	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.491426945 CEST	63705	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.491951942 CEST	59433	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.545455933 CEST	53	64993	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.546700001 CEST	53	50828	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.547987938 CEST	53	51502	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.548732042 CEST	53	49344	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.570173979 CEST	53	61636	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.570425034 CEST	53	51255	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.595911980 CEST	53	63705	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.596604109 CEST	53	59433	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.710827112 CEST	53575	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.711103916 CEST	61739	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:21.815474987 CEST	53	61739	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:21.815752029 CEST	53	53575	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:22.255661011 CEST	61793	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:22.256107092 CEST	53111	53	192.168.2.4	1.1.1.1
Apr 19, 2024 21:21:22.360764027 CEST	53	53111	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:22.361504078 CEST	53	61793	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:33.620999098 CEST	53	54970	1.1.1.1	192.168.2.4
Apr 19, 2024 21:21:34.269203901 CEST	53	55701	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 19, 2024 21:20:53.738459110 CEST	192.168.2.4	1.1.1.1	c35f	(Port unreachable)	Destination Unreachable
Apr 19, 2024 21:21:00.866529942 CEST	192.168.2.4	1.1.1.1	c28d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 21:20:36.303005934 CEST	192.168.2.4	1.1.1.1	0x355e	Standard query (0)	us-west-2.protection.sophos.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:36.307266951 CEST	192.168.2.4	1.1.1.1	0x5525	Standard query (0)	us-west-2.protection.sophos.com	65	IN (0x0001)	false
Apr 19, 2024 21:20:37.117541075 CEST	192.168.2.4	1.1.1.1	0x9f81	Standard query (0)	linkprotect.cudasvc.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:37.117683887 CEST	192.168.2.4	1.1.1.1	0x1f66	Standard query (0)	linkprotect.cudasvc.com	65	IN (0x0001)	false
Apr 19, 2024 21:20:37.959188938 CEST	192.168.2.4	1.1.1.1	0x99ae	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:37.959650993 CEST	192.168.2.4	1.1.1.1	0x191a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 21:20:40.414463997 CEST	192.168.2.4	1.1.1.1	0x7c74	Standard query (0)	gunnauto-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:40.414613962 CEST	192.168.2.4	1.1.1.1	0x27ab	Standard query (0)	gunnauto-my.sharepoint.com	65	IN (0x0001)	false
Apr 19, 2024 21:20:43.002988100 CEST	192.168.2.4	1.1.1.1	0xbdaf	Standard query (0)	gunnauto-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:43.003205061 CEST	192.168.2.4	1.1.1.1	0xb9cd	Standard query (0)	gunnauto-my.sharepoint.com	65	IN (0x0001)	false
Apr 19, 2024 21:20:51.289885044 CEST	192.168.2.4	1.1.1.1	0xe25b	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:51.290075064 CEST	192.168.2.4	1.1.1.1	0xd57	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Apr 19, 2024 21:20:53.523905039 CEST	192.168.2.4	1.1.1.1	0x422f	Standard query (0)	gunnauto-my.sharepoint.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:53.524211884 CEST	192.168.2.4	1.1.1.1	0x4c2b	Standard query (0)	gunnauto-my.sharepoint.com	65	IN (0x0001)	false
Apr 19, 2024 21:20:54.220259905 CEST	192.168.2.4	1.1.1.1	0xd566	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:54.221471071 CEST	192.168.2.4	1.1.1.1	0xff6d	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Apr 19, 2024 21:20:54.254167080 CEST	192.168.2.4	1.1.1.1	0x4704	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:54.254681110 CEST	192.168.2.4	1.1.1.1	0x7a5f	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:00.731738091 CEST	192.168.2.4	1.1.1.1	0xeb8b	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:00.732136011 CEST	192.168.2.4	1.1.1.1	0x539d	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:03.150669098 CEST	192.168.2.4	1.1.1.1	0xedf9	Standard query (0)	acctcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:03.150790930 CEST	192.168.2.4	1.1.1.1	0x8c4e	Standard query (0)	acctcdn.msftauth.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:04.611892939 CEST	192.168.2.4	1.1.1.1	0x343b	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:04.612158060 CEST	192.168.2.4	1.1.1.1	0xe3e	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:05.238035917 CEST	192.168.2.4	1.1.1.1	0xd0be	Standard query (0)	signup.live.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:05.238409042 CEST	192.168.2.4	1.1.1.1	0x58f1	Standard query (0)	signup.live.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:07.247080088 CEST	192.168.2.4	1.1.1.1	0xa413	Standard query (0)	fpt.live.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:07.247231007 CEST	192.168.2.4	1.1.1.1	0x304b	Standard query (0)	fpt.live.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:14.746169090 CEST	192.168.2.4	1.1.1.1	0xf0cb	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:14.746278048 CEST	192.168.2.4	1.1.1.1	0x6d73	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:15.334682941 CEST	192.168.2.4	1.1.1.1	0x80a3	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.334893942 CEST	192.168.2.4	1.1.1.1	0x200	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:15.361685991 CEST	192.168.2.4	1.1.1.1	0x8954	Standard query (0)	mscom.demdex.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.361840963 CEST	192.168.2.4	1.1.1.1	0x2779	Standard query (0)	mscom.demdex.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:15.362272978 CEST	192.168.2.4	1.1.1.1	0xa46f	Standard query (0)	msftenterprise.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.362385035 CEST	192.168.2.4	1.1.1.1	0x3e4a	Standard query (0)	msftenterprise.sc.omtrdc.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:15.362855911 CEST	192.168.2.4	1.1.1.1	0x4de1	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.363125086 CEST	192.168.2.4	1.1.1.1	0xe535	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:16.011122942 CEST	192.168.2.4	1.1.1.1	0x9204	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.011471987 CEST	192.168.2.4	1.1.1.1	0xe47b	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:16.013536930 CEST	192.168.2.4	1.1.1.1	0x2933	Standard query (0)	msftenterprise.sc.omtrdc.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.013681889 CEST	192.168.2.4	1.1.1.1	0xe756	Standard query (0)	msftenterprise.sc.omtrdc.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:16.125185966 CEST	192.168.2.4	1.1.1.1	0x8dfc	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.125185966 CEST	192.168.2.4	1.1.1.1	0x3227	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:16.309668064 CEST	192.168.2.4	1.1.1.1	0xba22	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.309786081 CEST	192.168.2.4	1.1.1.1	0xc386	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:16.412916899 CEST	192.168.2.4	1.1.1.1	0x1485	Standard query (0)	rtd.tubemogul.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.413022041 CEST	192.168.2.4	1.1.1.1	0x17d4	Standard query (0)	rtd.tubemogul.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:16.521686077 CEST	192.168.2.4	1.1.1.1	0x6d26	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.521960974 CEST	192.168.2.4	1.1.1.1	0x585f	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:16.625871897 CEST	192.168.2.4	1.1.1.1	0x60eb	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.626074076 CEST	192.168.2.4	1.1.1.1	0xbdcb	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:16.732300043 CEST	192.168.2.4	1.1.1.1	0x9a63	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.732609987 CEST	192.168.2.4	1.1.1.1	0x6b41	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 19, 2024 21:21:16.837902069 CEST	192.168.2.4	1.1.1.1	0x74b6	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.838171005 CEST	192.168.2.4	1.1.1.1	0xf140	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:16.964412928 CEST	192.168.2.4	1.1.1.1	0xb7ab	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.964600086 CEST	192.168.2.4	1.1.1.1	0xe9aa	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.054023981 CEST	192.168.2.4	1.1.1.1	0x9e50	Standard query (0)	servedby.flashtalking.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.054719925 CEST	192.168.2.4	1.1.1.1	0xdbf3	Standard query (0)	servedby.flashtalking.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.135391951 CEST	192.168.2.4	1.1.1.1	0x4271	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.135613918 CEST	192.168.2.4	1.1.1.1	0xcc94	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.205182076 CEST	192.168.2.4	1.1.1.1	0xe067	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.205337048 CEST	192.168.2.4	1.1.1.1	0xb6e3	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.214960098 CEST	192.168.2.4	1.1.1.1	0x5ff1	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.215461969 CEST	192.168.2.4	1.1.1.1	0xcb68	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.343246937 CEST	192.168.2.4	1.1.1.1	0xd40f	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.343713999 CEST	192.168.2.4	1.1.1.1	0x6449	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.346910000 CEST	192.168.2.4	1.1.1.1	0x8b94	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.347587109 CEST	192.168.2.4	1.1.1.1	0xf4b8	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.633658886 CEST	192.168.2.4	1.1.1.1	0x4ad3	Standard query (0)	px.owneriq.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.634260893 CEST	192.168.2.4	1.1.1.1	0x5098	Standard query (0)	px.owneriq.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.639595985 CEST	192.168.2.4	1.1.1.1	0xf3fc	Standard query (0)	cms.quantserve.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.639859915 CEST	192.168.2.4	1.1.1.1	0x7a9b	Standard query (0)	cms.quantserve.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.758919001 CEST	192.168.2.4	1.1.1.1	0xae07	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.759650946 CEST	192.168.2.4	1.1.1.1	0x249c	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.766278028 CEST	192.168.2.4	1.1.1.1	0x9f9	Standard query (0)	ds.reson8.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.766784906 CEST	192.168.2.4	1.1.1.1	0x46f0	Standard query (0)	ds.reson8.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.768498898 CEST	192.168.2.4	1.1.1.1	0x2172	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.769267082 CEST	192.168.2.4	1.1.1.1	0x73da	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.849066019 CEST	192.168.2.4	1.1.1.1	0xe0ed	Standard query (0)	dmpsync.3lift.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.849364996 CEST	192.168.2.4	1.1.1.1	0xbf4e	Standard query (0)	dmpsync.3lift.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.853863001 CEST	192.168.2.4	1.1.1.1	0x6929	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.854235888 CEST	192.168.2.4	1.1.1.1	0x9470	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:17.933691978 CEST	192.168.2.4	1.1.1.1	0x963	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.934272051 CEST	192.168.2.4	1.1.1.1	0xda61	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:18.011351109 CEST	192.168.2.4	1.1.1.1	0x18bb	Standard query (0)	ag.innovid.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.012053967 CEST	192.168.2.4	1.1.1.1	0xbef5	Standard query (0)	ag.innovid.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:18.084722042 CEST	192.168.2.4	1.1.1.1	0xac63	Standard query (0)	rtb.adentifi.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.085187912 CEST	192.168.2.4	1.1.1.1	0x217d	Standard query (0)	rtb.adentifi.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:18.550497055 CEST	192.168.2.4	1.1.1.1	0xe2d	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.550658941 CEST	192.168.2.4	1.1.1.1	0xa1de	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:19.275253057 CEST	192.168.2.4	1.1.1.1	0xfb05	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:19.276274920 CEST	192.168.2.4	1.1.1.1	0x3933	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:19.364373922 CEST	192.168.2.4	1.1.1.1	0xd8cf	Standard query (0)	jadserve.postrelease.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:19.364732027 CEST	192.168.2.4	1.1.1.1	0xbd35	Standard query (0)	jadserve.postrelease.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:19.411053896 CEST	192.168.2.4	1.1.1.1	0x9c8d	Standard query (0)	bttrack.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:19.411283970 CEST	192.168.2.4	1.1.1.1	0xa565	Standard query (0)	bttrack.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:20.254362106 CEST	192.168.2.4	1.1.1.1	0xad7f	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.254848003 CEST	192.168.2.4	1.1.1.1	0x4ad3	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:20.260481119 CEST	192.168.2.4	1.1.1.1	0xa29f	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.260795116 CEST	192.168.2.4	1.1.1.1	0xa79c	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:20.740473986 CEST	192.168.2.4	1.1.1.1	0x33bb	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.741103888 CEST	192.168.2.4	1.1.1.1	0xc44d	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:20.741980076 CEST	192.168.2.4	1.1.1.1	0x3b3e	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.742363930 CEST	192.168.2.4	1.1.1.1	0xbc0c	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:20.865911007 CEST	192.168.2.4	1.1.1.1	0x8855	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.866569042 CEST	192.168.2.4	1.1.1.1	0x9899	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:20.914040089 CEST	192.168.2.4	1.1.1.1	0x5b17	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.914351940 CEST	192.168.2.4	1.1.1.1	0x1653	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:20.915972948 CEST	192.168.2.4	1.1.1.1	0x6040	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.916224957 CEST	192.168.2.4	1.1.1.1	0x92ac	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:20.937475920 CEST	192.168.2.4	1.1.1.1	0x7da8	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.937657118 CEST	192.168.2.4	1.1.1.1	0xb045	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:21.117316008 CEST	192.168.2.4	1.1.1.1	0x6465	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.117639065 CEST	192.168.2.4	1.1.1.1	0x35b1	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:21.175048113 CEST	192.168.2.4	1.1.1.1	0x5b3b	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.175395966 CEST	192.168.2.4	1.1.1.1	0x5f97	Standard query (0)	sync.search.spotxchange.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:21.281368971 CEST	192.168.2.4	1.1.1.1	0x8901	Standard query (0)	sync.search.spotxchange.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.343269110 CEST	192.168.2.4	1.1.1.1	0xf3b	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.343575001 CEST	192.168.2.4	1.1.1.1	0x14b7	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:21.441219091 CEST	192.168.2.4	1.1.1.1	0x66db	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.441792965 CEST	192.168.2.4	1.1.1.1	0x3477	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 19, 2024 21:21:21.443380117 CEST	192.168.2.4	1.1.1.1	0x7ce6	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.443902016 CEST	192.168.2.4	1.1.1.1	0x8274	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:21.465429068 CEST	192.168.2.4	1.1.1.1	0x14	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.465862989 CEST	192.168.2.4	1.1.1.1	0x780d	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:21.491426945 CEST	192.168.2.4	1.1.1.1	0x956b	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.491951942 CEST	192.168.2.4	1.1.1.1	0xacaa	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:21.710827112 CEST	192.168.2.4	1.1.1.1	0x37df	Standard query (0)	image2.pubmatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.711103916 CEST	192.168.2.4	1.1.1.1	0x2ba1	Standard query (0)	image2.pubmatic.com	65	IN (0x0001)	false
Apr 19, 2024 21:21:22.255661011 CEST	192.168.2.4	1.1.1.1	0xcaa4	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:22.256107092 CEST	192.168.2.4	1.1.1.1	0xcf8c	Standard query (0)	www.facebook.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 21:20:36.441541910 CEST	1.1.1.1	192.168.2.4	0x355e	No error (0)	us-west-2.protection.sophos.com	d2t07dpvw9bt1v.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:36.441541910 CEST	1.1.1.1	192.168.2.4	0x355e	No error (0)	d2t07dpvw9bt1v.cloudfront.net		99.84.191.68	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:36.441541910 CEST	1.1.1.1	192.168.2.4	0x355e	No error (0)	d2t07dpvw9bt1v.cloudfront.net		99.84.191.86	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:36.441541910 CEST	1.1.1.1	192.168.2.4	0x355e	No error (0)	d2t07dpvw9bt1v.cloudfront.net		99.84.191.39	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:36.441541910 CEST	1.1.1.1	192.168.2.4	0x355e	No error (0)	d2t07dpvw9bt1v.cloudfront.net		99.84.191.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:36.448623896 CEST	1.1.1.1	192.168.2.4	0x5525	No error (0)	us-west-2.protection.sophos.com	d2t07dpvw9bt1v.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:37.223000050 CEST	1.1.1.1	192.168.2.4	0x9f81	No error (0)	linkprotect.cudasvc.com		44.208.218.64	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:37.223000050 CEST	1.1.1.1	192.168.2.4	0x9f81	No error (0)	linkprotect.cudasvc.com		52.45.138.49	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:38.063709021 CEST	1.1.1.1	192.168.2.4	0x99ae	No error (0)	www.google.com		64.233.176.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:38.063709021 CEST	1.1.1.1	192.168.2.4	0x99ae	No error (0)	www.google.com		64.233.176.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:38.063709021 CEST	1.1.1.1	192.168.2.4	0x99ae	No error (0)	www.google.com		64.233.176.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:38.063709021 CEST	1.1.1.1	192.168.2.4	0x99ae	No error (0)	www.google.com		64.233.176.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:38.063709021 CEST	1.1.1.1	192.168.2.4	0x99ae	No error (0)	www.google.com		64.233.176.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:38.063709021 CEST	1.1.1.1	192.168.2.4	0x99ae	No error (0)	www.google.com		64.233.176.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:38.065304041 CEST	1.1.1.1	192.168.2.4	0x191a	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 21:20:40.649234056 CEST	1.1.1.1	192.168.2.4	0x27ab	No error (0)	gunnauto-my.sharepoint.com	gunnauto.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:40.649234056 CEST	1.1.1.1	192.168.2.4	0x27ab	No error (0)	gunnauto.sharepoint.com	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:40.649234056 CEST	1.1.1.1	192.168.2.4	0x27ab	No error (0)	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:40.649234056 CEST	1.1.1.1	192.168.2.4	0x27ab	No error (0)	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:40.669009924 CEST	1.1.1.1	192.168.2.4	0x7c74	No error (0)	gunnauto-my.sharepoint.com	gunnauto.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:40.669009924 CEST	1.1.1.1	192.168.2.4	0x7c74	No error (0)	gunnauto.sharepoint.com	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:40.669009924 CEST	1.1.1.1	192.168.2.4	0x7c74	No error (0)	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:40.669009924 CEST	1.1.1.1	192.168.2.4	0x7c74	No error (0)	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:40.669009924 CEST	1.1.1.1	192.168.2.4	0x7c74	No error (0)	192965-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:40.669009924 CEST	1.1.1.1	192.168.2.4	0x7c74	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:40.669009924 CEST	1.1.1.1	192.168.2.4	0x7c74	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:43.216837883 CEST	1.1.1.1	192.168.2.4	0xb9cd	No error (0)	gunnauto-my.sharepoint.com	gunnauto.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:43.216837883 CEST	1.1.1.1	192.168.2.4	0xb9cd	No error (0)	gunnauto.sharepoint.com	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:43.216837883 CEST	1.1.1.1	192.168.2.4	0xb9cd	No error (0)	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:43.216837883 CEST	1.1.1.1	192.168.2.4	0xb9cd	No error (0)	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:43.251473904 CEST	1.1.1.1	192.168.2.4	0xbdaf	No error (0)	gunnauto-my.sharepoint.com	gunnauto.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:43.251473904 CEST	1.1.1.1	192.168.2.4	0xbdaf	No error (0)	gunnauto.sharepoint.com	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:43.251473904 CEST	1.1.1.1	192.168.2.4	0xbdaf	No error (0)	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:43.251473904 CEST	1.1.1.1	192.168.2.4	0xbdaf	No error (0)	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:43.251473904 CEST	1.1.1.1	192.168.2.4	0xbdaf	No error (0)	192965-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:43.251473904 CEST	1.1.1.1	192.168.2.4	0xbdaf	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:43.251473904 CEST	1.1.1.1	192.168.2.4	0xbdaf	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:50.654911995 CEST	1.1.1.1	192.168.2.4	0x319e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:50.654911995 CEST	1.1.1.1	192.168.2.4	0x319e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:51.002684116 CEST	1.1.1.1	192.168.2.4	0x7c97	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:51.002684116 CEST	1.1.1.1	192.168.2.4	0x7c97	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:51.394946098 CEST	1.1.1.1	192.168.2.4	0xe25b	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:51.395529032 CEST	1.1.1.1	192.168.2.4	0xd57	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:52.461570978 CEST	1.1.1.1	192.168.2.4	0xf32e	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:52.461570978 CEST	1.1.1.1	192.168.2.4	0xf32e	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:52.461570978 CEST	1.1.1.1	192.168.2.4	0xf32e	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:53.630279064 CEST	1.1.1.1	192.168.2.4	0x422f	No error (0)	gunnauto-my.sharepoint.com	gunnauto.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:53.630279064 CEST	1.1.1.1	192.168.2.4	0x422f	No error (0)	gunnauto.sharepoint.com	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:53.630279064 CEST	1.1.1.1	192.168.2.4	0x422f	No error (0)	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:53.630279064 CEST	1.1.1.1	192.168.2.4	0x422f	No error (0)	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:53.630279064 CEST	1.1.1.1	192.168.2.4	0x422f	No error (0)	192965-ipv4v6.farm.dprodmgd105.aa-rt.sharepoint.com.dual-spo-0005.spo-msedge.net	dual-spo-0005.spo-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:53.630279064 CEST	1.1.1.1	192.168.2.4	0x422f	No error (0)	dual-spo-0005.spo-msedge.net		13.107.136.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:53.630279064 CEST	1.1.1.1	192.168.2.4	0x422f	No error (0)	dual-spo-0005.spo-msedge.net		13.107.138.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:53.738368034 CEST	1.1.1.1	192.168.2.4	0x4c2b	No error (0)	gunnauto-my.sharepoint.com	gunnauto.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:53.738368034 CEST	1.1.1.1	192.168.2.4	0x4c2b	No error (0)	gunnauto.sharepoint.com	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:53.738368034 CEST	1.1.1.1	192.168.2.4	0x4c2b	No error (0)	4784-ipv4v6e.clump.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:53.738368034 CEST	1.1.1.1	192.168.2.4	0x4c2b	No error (0)	192965-ipv4v6e.farm.dprodmgd105.aa-rt.sharepoint.com	192965-ipv4v6w.farm.dprodmgd105.sharepointonline.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:54.329303980 CEST	1.1.1.1	192.168.2.4	0xd566	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:54.331996918 CEST	1.1.1.1	192.168.2.4	0xff6d	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:54.363267899 CEST	1.1.1.1	192.168.2.4	0x4704	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:54.363267899 CEST	1.1.1.1	192.168.2.4	0x4704	No error (0)	cs1100.wpc.omegacdn.net		152.199.4.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:54.364274979 CEST	1.1.1.1	192.168.2.4	0x7a5f	No error (0)	aadcdn.msftauth.net	cs1100.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:56.041424990 CEST	1.1.1.1	192.168.2.4	0x62c7	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:20:56.041424990 CEST	1.1.1.1	192.168.2.4	0x62c7	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:20:56.041424990 CEST	1.1.1.1	192.168.2.4	0x62c7	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:00.837687016 CEST	1.1.1.1	192.168.2.4	0xeb8b	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:00.866430998 CEST	1.1.1.1	192.168.2.4	0x539d	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:02.948317051 CEST	1.1.1.1	192.168.2.4	0x7fa0	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:02.948317051 CEST	1.1.1.1	192.168.2.4	0x7fa0	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:02.948317051 CEST	1.1.1.1	192.168.2.4	0x7fa0	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:03.251981020 CEST	1.1.1.1	192.168.2.4	0x828c	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:03.251981020 CEST	1.1.1.1	192.168.2.4	0x828c	No error (0)	sni1gl.wpc.alphacdn.net		152.195.19.97	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:03.252146959 CEST	1.1.1.1	192.168.2.4	0x7cf3	No error (0)	scdn1efff.wpc.9da5e.alphacdn.net	sni1gl.wpc.alphacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:03.254118919 CEST	1.1.1.1	192.168.2.4	0x6a2c	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:03.254118919 CEST	1.1.1.1	192.168.2.4	0x6a2c	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:03.254118919 CEST	1.1.1.1	192.168.2.4	0x6a2c	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:03.255924940 CEST	1.1.1.1	192.168.2.4	0xedf9	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:03.255924940 CEST	1.1.1.1	192.168.2.4	0xedf9	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:03.255924940 CEST	1.1.1.1	192.168.2.4	0xedf9	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:03.255924940 CEST	1.1.1.1	192.168.2.4	0xedf9	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:03.256151915 CEST	1.1.1.1	192.168.2.4	0x8c4e	No error (0)	acctcdn.msftauth.net	acctcdn.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:04.101110935 CEST	1.1.1.1	192.168.2.4	0x89fc	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:04.101110935 CEST	1.1.1.1	192.168.2.4	0x89fc	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:04.101110935 CEST	1.1.1.1	192.168.2.4	0x89fc	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:04.717550993 CEST	1.1.1.1	192.168.2.4	0x343b	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:04.718317032 CEST	1.1.1.1	192.168.2.4	0xe3e	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:05.020020962 CEST	1.1.1.1	192.168.2.4	0xd359	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:05.020020962 CEST	1.1.1.1	192.168.2.4	0xd359	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:05.342437983 CEST	1.1.1.1	192.168.2.4	0xd0be	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:05.371764898 CEST	1.1.1.1	192.168.2.4	0x58f1	No error (0)	signup.live.com	account.msa.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:07.381920099 CEST	1.1.1.1	192.168.2.4	0xa413	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:07.395973921 CEST	1.1.1.1	192.168.2.4	0x304b	No error (0)	fpt.live.com	fpt.microsoft.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:10.224522114 CEST	1.1.1.1	192.168.2.4	0x1a4c	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:10.225430012 CEST	1.1.1.1	192.168.2.4	0xa365	No error (0)	consentdeliveryfd.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:10.225430012 CEST	1.1.1.1	192.168.2.4	0xa365	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:10.225430012 CEST	1.1.1.1	192.168.2.4	0xa365	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:10.225430012 CEST	1.1.1.1	192.168.2.4	0xa365	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850538969 CEST	1.1.1.1	192.168.2.4	0xf0cb	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850538969 CEST	1.1.1.1	192.168.2.4	0xf0cb	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850538969 CEST	1.1.1.1	192.168.2.4	0xf0cb	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850538969 CEST	1.1.1.1	192.168.2.4	0xf0cb	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.232.189.32	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850538969 CEST	1.1.1.1	192.168.2.4	0xf0cb	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.215.13.19	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850538969 CEST	1.1.1.1	192.168.2.4	0xf0cb	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.156.43.25	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850538969 CEST	1.1.1.1	192.168.2.4	0xf0cb	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.251.248	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850538969 CEST	1.1.1.1	192.168.2.4	0xf0cb	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.22.151.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850538969 CEST	1.1.1.1	192.168.2.4	0xf0cb	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		35.168.188.46	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850538969 CEST	1.1.1.1	192.168.2.4	0xf0cb	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.234.235.96	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850538969 CEST	1.1.1.1	192.168.2.4	0xf0cb	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.128.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850816011 CEST	1.1.1.1	192.168.2.4	0x6d73	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850816011 CEST	1.1.1.1	192.168.2.4	0x6d73	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:14.850816011 CEST	1.1.1.1	192.168.2.4	0x6d73	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439471006 CEST	1.1.1.1	192.168.2.4	0x200	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439471006 CEST	1.1.1.1	192.168.2.4	0x200	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439471006 CEST	1.1.1.1	192.168.2.4	0x200	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439749002 CEST	1.1.1.1	192.168.2.4	0x80a3	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439749002 CEST	1.1.1.1	192.168.2.4	0x80a3	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439749002 CEST	1.1.1.1	192.168.2.4	0x80a3	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439749002 CEST	1.1.1.1	192.168.2.4	0x80a3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.157.18.178	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439749002 CEST	1.1.1.1	192.168.2.4	0x80a3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.204.189.243	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439749002 CEST	1.1.1.1	192.168.2.4	0x80a3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.213.37.228	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439749002 CEST	1.1.1.1	192.168.2.4	0x80a3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.6.239.236	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439749002 CEST	1.1.1.1	192.168.2.4	0x80a3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.92.16.246	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439749002 CEST	1.1.1.1	192.168.2.4	0x80a3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.197.93.190	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439749002 CEST	1.1.1.1	192.168.2.4	0x80a3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.202.107.174	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.439749002 CEST	1.1.1.1	192.168.2.4	0x80a3	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		107.23.169.28	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467490911 CEST	1.1.1.1	192.168.2.4	0x8954	No error (0)	mscom.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467490911 CEST	1.1.1.1	192.168.2.4	0x8954	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467490911 CEST	1.1.1.1	192.168.2.4	0x8954	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467490911 CEST	1.1.1.1	192.168.2.4	0x8954	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.211.200.227	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467490911 CEST	1.1.1.1	192.168.2.4	0x8954	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.209.183.206	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467490911 CEST	1.1.1.1	192.168.2.4	0x8954	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.223.253.145	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467490911 CEST	1.1.1.1	192.168.2.4	0x8954	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		50.19.117.166	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467490911 CEST	1.1.1.1	192.168.2.4	0x8954	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		35.169.212.254	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467490911 CEST	1.1.1.1	192.168.2.4	0x8954	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.192.59.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467490911 CEST	1.1.1.1	192.168.2.4	0x8954	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.213.37.228	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467490911 CEST	1.1.1.1	192.168.2.4	0x8954	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.217.160.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467653990 CEST	1.1.1.1	192.168.2.4	0x4de1	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467760086 CEST	1.1.1.1	192.168.2.4	0xe535	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467931032 CEST	1.1.1.1	192.168.2.4	0xa46f	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467931032 CEST	1.1.1.1	192.168.2.4	0xa46f	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.224	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467931032 CEST	1.1.1.1	192.168.2.4	0xa46f	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.248	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467931032 CEST	1.1.1.1	192.168.2.4	0xa46f	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467931032 CEST	1.1.1.1	192.168.2.4	0xa46f	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467931032 CEST	1.1.1.1	192.168.2.4	0xa46f	No error (0)	msftenterprise.sc.omtrdc.net		63.140.38.91	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467931032 CEST	1.1.1.1	192.168.2.4	0xa46f	No error (0)	msftenterprise.sc.omtrdc.net		63.140.38.111	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467931032 CEST	1.1.1.1	192.168.2.4	0xa46f	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.22	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467931032 CEST	1.1.1.1	192.168.2.4	0xa46f	No error (0)	msftenterprise.sc.omtrdc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.467931032 CEST	1.1.1.1	192.168.2.4	0xa46f	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.240	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:15.471910000 CEST	1.1.1.1	192.168.2.4	0x2779	No error (0)	mscom.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.471910000 CEST	1.1.1.1	192.168.2.4	0x2779	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:15.471910000 CEST	1.1.1.1	192.168.2.4	0x2779	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.160.26	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.160.114	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.161.182	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.179.87	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.117033958 CEST	1.1.1.1	192.168.2.4	0x9204	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.122298002 CEST	1.1.1.1	192.168.2.4	0x2933	No error (0)	msftenterprise.sc.omtrdc.net		63.140.38.189	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.122298002 CEST	1.1.1.1	192.168.2.4	0x2933	No error (0)	msftenterprise.sc.omtrdc.net		63.140.38.236	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.122298002 CEST	1.1.1.1	192.168.2.4	0x2933	No error (0)	msftenterprise.sc.omtrdc.net		63.140.38.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.122298002 CEST	1.1.1.1	192.168.2.4	0x2933	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.82	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.122298002 CEST	1.1.1.1	192.168.2.4	0x2933	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.9	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.122298002 CEST	1.1.1.1	192.168.2.4	0x2933	No error (0)	msftenterprise.sc.omtrdc.net		63.140.38.112	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.122298002 CEST	1.1.1.1	192.168.2.4	0x2933	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.65	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.122298002 CEST	1.1.1.1	192.168.2.4	0x2933	No error (0)	msftenterprise.sc.omtrdc.net		63.140.38.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.122298002 CEST	1.1.1.1	192.168.2.4	0x2933	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.122298002 CEST	1.1.1.1	192.168.2.4	0x2933	No error (0)	msftenterprise.sc.omtrdc.net		63.140.39.93	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.229944944 CEST	1.1.1.1	192.168.2.4	0x8dfc	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.414665937 CEST	1.1.1.1	192.168.2.4	0xba22	No error (0)	cm.g.doubleclick.net		64.233.176.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.414665937 CEST	1.1.1.1	192.168.2.4	0xba22	No error (0)	cm.g.doubleclick.net		64.233.176.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.414665937 CEST	1.1.1.1	192.168.2.4	0xba22	No error (0)	cm.g.doubleclick.net		64.233.176.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.414665937 CEST	1.1.1.1	192.168.2.4	0xba22	No error (0)	cm.g.doubleclick.net		64.233.176.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.517754078 CEST	1.1.1.1	192.168.2.4	0x1485	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.518328905 CEST	1.1.1.1	192.168.2.4	0x17d4	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.627166033 CEST	1.1.1.1	192.168.2.4	0x6d26	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.627166033 CEST	1.1.1.1	192.168.2.4	0x6d26	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.627182007 CEST	1.1.1.1	192.168.2.4	0x585f	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.627182007 CEST	1.1.1.1	192.168.2.4	0x585f	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.730494976 CEST	1.1.1.1	192.168.2.4	0x60eb	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.730494976 CEST	1.1.1.1	192.168.2.4	0x60eb	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.730494976 CEST	1.1.1.1	192.168.2.4	0x60eb	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.730724096 CEST	1.1.1.1	192.168.2.4	0xbdcb	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.730724096 CEST	1.1.1.1	192.168.2.4	0xbdcb	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.837045908 CEST	1.1.1.1	192.168.2.4	0x9a63	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.837045908 CEST	1.1.1.1	192.168.2.4	0x9a63	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.837045908 CEST	1.1.1.1	192.168.2.4	0x9a63	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.837045908 CEST	1.1.1.1	192.168.2.4	0x9a63	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.942852020 CEST	1.1.1.1	192.168.2.4	0xf140	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.942852020 CEST	1.1.1.1	192.168.2.4	0xf140	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.943365097 CEST	1.1.1.1	192.168.2.4	0x74b6	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.943365097 CEST	1.1.1.1	192.168.2.4	0x74b6	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:16.943365097 CEST	1.1.1.1	192.168.2.4	0x74b6	No error (0)	global.px.quantserve.com		192.184.67.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.943365097 CEST	1.1.1.1	192.168.2.4	0x74b6	No error (0)	global.px.quantserve.com		192.184.67.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.943365097 CEST	1.1.1.1	192.168.2.4	0x74b6	No error (0)	global.px.quantserve.com		192.184.67.143	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.943365097 CEST	1.1.1.1	192.168.2.4	0x74b6	No error (0)	global.px.quantserve.com		192.184.67.18	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:16.943365097 CEST	1.1.1.1	192.168.2.4	0x74b6	No error (0)	global.px.quantserve.com		192.184.67.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.069793940 CEST	1.1.1.1	192.168.2.4	0xb7ab	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.069793940 CEST	1.1.1.1	192.168.2.4	0xb7ab	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.070112944 CEST	1.1.1.1	192.168.2.4	0xe9aa	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.070112944 CEST	1.1.1.1	192.168.2.4	0xe9aa	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.158632994 CEST	1.1.1.1	192.168.2.4	0x9e50	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.159009933 CEST	1.1.1.1	192.168.2.4	0xdbf3	No error (0)	servedby.flashtalking.com	servedby.flashtalking.com-v1.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.240072966 CEST	1.1.1.1	192.168.2.4	0x4271	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.240072966 CEST	1.1.1.1	192.168.2.4	0x4271	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.240072966 CEST	1.1.1.1	192.168.2.4	0x4271	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.240072966 CEST	1.1.1.1	192.168.2.4	0x4271	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.213.234.13	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.240072966 CEST	1.1.1.1	192.168.2.4	0x4271	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.44.150.149	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.240072966 CEST	1.1.1.1	192.168.2.4	0x4271	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.210.41.53	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.240072966 CEST	1.1.1.1	192.168.2.4	0x4271	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.209.244.20	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.240072966 CEST	1.1.1.1	192.168.2.4	0x4271	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.71.118.196	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.240072966 CEST	1.1.1.1	192.168.2.4	0x4271	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.225.90.78	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.240072966 CEST	1.1.1.1	192.168.2.4	0x4271	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.0.46.206	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.240072966 CEST	1.1.1.1	192.168.2.4	0x4271	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.198.48.92	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.241111994 CEST	1.1.1.1	192.168.2.4	0xcc94	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.241111994 CEST	1.1.1.1	192.168.2.4	0xcc94	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.241111994 CEST	1.1.1.1	192.168.2.4	0xcc94	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.309797049 CEST	1.1.1.1	192.168.2.4	0xb6e3	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Apr 19, 2024 21:21:17.309811115 CEST	1.1.1.1	192.168.2.4	0xe067	No error (0)	a.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.309811115 CEST	1.1.1.1	192.168.2.4	0xe067	No error (0)	a.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.319238901 CEST	1.1.1.1	192.168.2.4	0x5ff1	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.319238901 CEST	1.1.1.1	192.168.2.4	0x5ff1	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.319238901 CEST	1.1.1.1	192.168.2.4	0x5ff1	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.320144892 CEST	1.1.1.1	192.168.2.4	0xcb68	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.320144892 CEST	1.1.1.1	192.168.2.4	0xcb68	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.448741913 CEST	1.1.1.1	192.168.2.4	0xd40f	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.448741913 CEST	1.1.1.1	192.168.2.4	0xd40f	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.448741913 CEST	1.1.1.1	192.168.2.4	0xd40f	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.448741913 CEST	1.1.1.1	192.168.2.4	0xd40f	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.448741913 CEST	1.1.1.1	192.168.2.4	0xd40f	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.449853897 CEST	1.1.1.1	192.168.2.4	0x6449	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.449853897 CEST	1.1.1.1	192.168.2.4	0x6449	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.449853897 CEST	1.1.1.1	192.168.2.4	0x6449	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.452183962 CEST	1.1.1.1	192.168.2.4	0x8b94	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.452183962 CEST	1.1.1.1	192.168.2.4	0x8b94	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.452183962 CEST	1.1.1.1	192.168.2.4	0x8b94	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.452183962 CEST	1.1.1.1	192.168.2.4	0x8b94	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.739633083 CEST	1.1.1.1	192.168.2.4	0x5098	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.739840984 CEST	1.1.1.1	192.168.2.4	0x4ad3	No error (0)	px.owneriq.net	wildcard.owneriq.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.744000912 CEST	1.1.1.1	192.168.2.4	0xf3fc	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.744000912 CEST	1.1.1.1	192.168.2.4	0xf3fc	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.744000912 CEST	1.1.1.1	192.168.2.4	0xf3fc	No error (0)	global.px.quantserve.com		192.184.67.84	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.744000912 CEST	1.1.1.1	192.168.2.4	0xf3fc	No error (0)	global.px.quantserve.com		192.184.67.143	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.744000912 CEST	1.1.1.1	192.168.2.4	0xf3fc	No error (0)	global.px.quantserve.com		192.184.67.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.744000912 CEST	1.1.1.1	192.168.2.4	0xf3fc	No error (0)	global.px.quantserve.com		192.184.67.18	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.744000912 CEST	1.1.1.1	192.168.2.4	0xf3fc	No error (0)	global.px.quantserve.com		192.184.67.70	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.744609118 CEST	1.1.1.1	192.168.2.4	0x7a9b	No error (0)	cms.quantserve.com	2kpixel.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.744609118 CEST	1.1.1.1	192.168.2.4	0x7a9b	No error (0)	2kpixel.quantserve.com	global.px.quantserve.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.863886118 CEST	1.1.1.1	192.168.2.4	0xae07	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.864830017 CEST	1.1.1.1	192.168.2.4	0x249c	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.871260881 CEST	1.1.1.1	192.168.2.4	0x9f9	No error (0)	ds.reson8.com	ds.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.872675896 CEST	1.1.1.1	192.168.2.4	0x46f0	No error (0)	ds.reson8.com	ds.reson8.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.873310089 CEST	1.1.1.1	192.168.2.4	0x2172	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.873310089 CEST	1.1.1.1	192.168.2.4	0x2172	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.873310089 CEST	1.1.1.1	192.168.2.4	0x2172	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.954449892 CEST	1.1.1.1	192.168.2.4	0xe0ed	No error (0)	dmpsync.3lift.com	eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.954449892 CEST	1.1.1.1	192.168.2.4	0xe0ed	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.954449892 CEST	1.1.1.1	192.168.2.4	0xe0ed	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.954449892 CEST	1.1.1.1	192.168.2.4	0xe0ed	No error (0)	us-east-eb2.3lift.com		35.71.139.29	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.954449892 CEST	1.1.1.1	192.168.2.4	0xe0ed	No error (0)	us-east-eb2.3lift.com		52.223.22.214	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.954690933 CEST	1.1.1.1	192.168.2.4	0xbf4e	No error (0)	dmpsync.3lift.com	eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.954690933 CEST	1.1.1.1	192.168.2.4	0xbf4e	No error (0)	eb2.3lift.com	na-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.954690933 CEST	1.1.1.1	192.168.2.4	0xbf4e	No error (0)	na-eb2.3lift.com	us-east-eb2.3lift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:17.958560944 CEST	1.1.1.1	192.168.2.4	0x6929	No error (0)	s.tribalfusion.com		104.18.25.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.958560944 CEST	1.1.1.1	192.168.2.4	0x6929	No error (0)	s.tribalfusion.com		104.18.24.173	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:17.959003925 CEST	1.1.1.1	192.168.2.4	0x9470	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Apr 19, 2024 21:21:18.038609982 CEST	1.1.1.1	192.168.2.4	0x963	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:18.038609982 CEST	1.1.1.1	192.168.2.4	0x963	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:18.038609982 CEST	1.1.1.1	192.168.2.4	0x963	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:18.038609982 CEST	1.1.1.1	192.168.2.4	0x963	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		3.225.218.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.038609982 CEST	1.1.1.1	192.168.2.4	0x963	No error (0)	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		34.200.65.202	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.039280891 CEST	1.1.1.1	192.168.2.4	0xda61	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:18.039280891 CEST	1.1.1.1	192.168.2.4	0xda61	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:18.039280891 CEST	1.1.1.1	192.168.2.4	0xda61	No error (0)	prod.ups-ats.us-east-1.aolp-ds-prd.aws.oath.cloud	ats-eks.us-east-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:18.115767956 CEST	1.1.1.1	192.168.2.4	0x18bb	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:18.115767956 CEST	1.1.1.1	192.168.2.4	0x18bb	No error (0)	aragorn-virg-prod.inbake.com	aragorn-prod-va-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:18.115767956 CEST	1.1.1.1	192.168.2.4	0x18bb	No error (0)	aragorn-prod-va-lb.inbake.com		34.195.34.170	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.115767956 CEST	1.1.1.1	192.168.2.4	0x18bb	No error (0)	aragorn-prod-va-lb.inbake.com		44.198.63.255	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.115767956 CEST	1.1.1.1	192.168.2.4	0x18bb	No error (0)	aragorn-prod-va-lb.inbake.com		3.215.42.247	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.115767956 CEST	1.1.1.1	192.168.2.4	0x18bb	No error (0)	aragorn-prod-va-lb.inbake.com		3.227.140.205	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.115767956 CEST	1.1.1.1	192.168.2.4	0x18bb	No error (0)	aragorn-prod-va-lb.inbake.com		35.175.28.189	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.115767956 CEST	1.1.1.1	192.168.2.4	0x18bb	No error (0)	aragorn-prod-va-lb.inbake.com		54.172.56.209	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.115767956 CEST	1.1.1.1	192.168.2.4	0x18bb	No error (0)	aragorn-prod-va-lb.inbake.com		34.235.80.74	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.115767956 CEST	1.1.1.1	192.168.2.4	0x18bb	No error (0)	aragorn-prod-va-lb.inbake.com		34.237.61.161	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.117888927 CEST	1.1.1.1	192.168.2.4	0xbef5	No error (0)	ag.innovid.com	ag-6-split.ag.innovid.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:18.117888927 CEST	1.1.1.1	192.168.2.4	0xbef5	No error (0)	aragorn-virg-prod.inbake.com	aragorn-prod-va-lb.inbake.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:18.189903021 CEST	1.1.1.1	192.168.2.4	0xac63	No error (0)	rtb.adentifi.com		44.206.22.2	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.189903021 CEST	1.1.1.1	192.168.2.4	0xac63	No error (0)	rtb.adentifi.com		54.84.129.212	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.189903021 CEST	1.1.1.1	192.168.2.4	0xac63	No error (0)	rtb.adentifi.com		3.213.112.36	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.189903021 CEST	1.1.1.1	192.168.2.4	0xac63	No error (0)	rtb.adentifi.com		34.203.62.39	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.189903021 CEST	1.1.1.1	192.168.2.4	0xac63	No error (0)	rtb.adentifi.com		18.206.144.25	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.189903021 CEST	1.1.1.1	192.168.2.4	0xac63	No error (0)	rtb.adentifi.com		34.235.22.255	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.655143976 CEST	1.1.1.1	192.168.2.4	0xe2d	No error (0)	sync.crwdcntrl.net		44.195.233.246	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.655143976 CEST	1.1.1.1	192.168.2.4	0xe2d	No error (0)	sync.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.655143976 CEST	1.1.1.1	192.168.2.4	0xe2d	No error (0)	sync.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.655143976 CEST	1.1.1.1	192.168.2.4	0xe2d	No error (0)	sync.crwdcntrl.net		3.227.94.68	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.655143976 CEST	1.1.1.1	192.168.2.4	0xe2d	No error (0)	sync.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.655143976 CEST	1.1.1.1	192.168.2.4	0xe2d	No error (0)	sync.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.655143976 CEST	1.1.1.1	192.168.2.4	0xe2d	No error (0)	sync.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:18.655143976 CEST	1.1.1.1	192.168.2.4	0xe2d	No error (0)	sync.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:19.380371094 CEST	1.1.1.1	192.168.2.4	0xfb05	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:19.380371094 CEST	1.1.1.1	192.168.2.4	0xfb05	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:19.380371094 CEST	1.1.1.1	192.168.2.4	0xfb05	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:19.380882025 CEST	1.1.1.1	192.168.2.4	0x3933	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:19.380882025 CEST	1.1.1.1	192.168.2.4	0x3933	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:19.380882025 CEST	1.1.1.1	192.168.2.4	0x3933	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:19.469012022 CEST	1.1.1.1	192.168.2.4	0xd8cf	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:19.469052076 CEST	1.1.1.1	192.168.2.4	0xbd35	No error (0)	jadserve.postrelease.com	jadserve.postrelease.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:19.515896082 CEST	1.1.1.1	192.168.2.4	0x9c8d	No error (0)	bttrack.com		192.132.33.68	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:19.515896082 CEST	1.1.1.1	192.168.2.4	0x9c8d	No error (0)	bttrack.com		192.132.33.67	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:19.515896082 CEST	1.1.1.1	192.168.2.4	0x9c8d	No error (0)	bttrack.com		192.132.33.69	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.359339952 CEST	1.1.1.1	192.168.2.4	0xad7f	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:20.360984087 CEST	1.1.1.1	192.168.2.4	0x4ad3	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:20.365240097 CEST	1.1.1.1	192.168.2.4	0xa29f	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.365240097 CEST	1.1.1.1	192.168.2.4	0xa29f	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.367428064 CEST	1.1.1.1	192.168.2.4	0xa79c	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 19, 2024 21:21:20.846487045 CEST	1.1.1.1	192.168.2.4	0x33bb	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846487045 CEST	1.1.1.1	192.168.2.4	0x33bb	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846487045 CEST	1.1.1.1	192.168.2.4	0x33bb	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846487045 CEST	1.1.1.1	192.168.2.4	0x33bb	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846487045 CEST	1.1.1.1	192.168.2.4	0x33bb	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846786976 CEST	1.1.1.1	192.168.2.4	0x3b3e	No error (0)	sync.srv.stackadapt.com		52.72.43.196	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846786976 CEST	1.1.1.1	192.168.2.4	0x3b3e	No error (0)	sync.srv.stackadapt.com		54.158.97.181	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846786976 CEST	1.1.1.1	192.168.2.4	0x3b3e	No error (0)	sync.srv.stackadapt.com		52.55.65.131	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846786976 CEST	1.1.1.1	192.168.2.4	0x3b3e	No error (0)	sync.srv.stackadapt.com		52.70.223.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846786976 CEST	1.1.1.1	192.168.2.4	0x3b3e	No error (0)	sync.srv.stackadapt.com		54.209.244.95	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846786976 CEST	1.1.1.1	192.168.2.4	0x3b3e	No error (0)	sync.srv.stackadapt.com		54.157.225.250	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846786976 CEST	1.1.1.1	192.168.2.4	0x3b3e	No error (0)	sync.srv.stackadapt.com		54.204.240.229	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.846786976 CEST	1.1.1.1	192.168.2.4	0x3b3e	No error (0)	sync.srv.stackadapt.com		54.156.138.144	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.847353935 CEST	1.1.1.1	192.168.2.4	0xc44d	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:20.970650911 CEST	1.1.1.1	192.168.2.4	0x8855	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:20.970650911 CEST	1.1.1.1	192.168.2.4	0x8855	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.020150900 CEST	1.1.1.1	192.168.2.4	0x1653	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.020150900 CEST	1.1.1.1	192.168.2.4	0x1653	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.020479918 CEST	1.1.1.1	192.168.2.4	0x6040	No error (0)	cm.g.doubleclick.net		108.177.122.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.020479918 CEST	1.1.1.1	192.168.2.4	0x6040	No error (0)	cm.g.doubleclick.net		108.177.122.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.020479918 CEST	1.1.1.1	192.168.2.4	0x6040	No error (0)	cm.g.doubleclick.net		108.177.122.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.020479918 CEST	1.1.1.1	192.168.2.4	0x6040	No error (0)	cm.g.doubleclick.net		108.177.122.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.020639896 CEST	1.1.1.1	192.168.2.4	0x5b17	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.020639896 CEST	1.1.1.1	192.168.2.4	0x5b17	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.042324066 CEST	1.1.1.1	192.168.2.4	0x7da8	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.042397022 CEST	1.1.1.1	192.168.2.4	0xb045	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.222479105 CEST	1.1.1.1	192.168.2.4	0x35b1	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.222479105 CEST	1.1.1.1	192.168.2.4	0x35b1	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.222872019 CEST	1.1.1.1	192.168.2.4	0x6465	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.222872019 CEST	1.1.1.1	192.168.2.4	0x6465	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.222872019 CEST	1.1.1.1	192.168.2.4	0x6465	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.447880030 CEST	1.1.1.1	192.168.2.4	0xf3b	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.447880030 CEST	1.1.1.1	192.168.2.4	0xf3b	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.448070049 CEST	1.1.1.1	192.168.2.4	0x14b7	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.545455933 CEST	1.1.1.1	192.168.2.4	0x66db	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.545455933 CEST	1.1.1.1	192.168.2.4	0x66db	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.161.208	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.179.164	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.160.76	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.160.184	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.160.137	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.160.117	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.160.132	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.160.186	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.160.75	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.179.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.178.10	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.547987938 CEST	1.1.1.1	192.168.2.4	0x7ce6	No error (0)	ib.anycast.adnxs.com		68.67.179.166	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.570173979 CEST	1.1.1.1	192.168.2.4	0x780d	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.570425034 CEST	1.1.1.1	192.168.2.4	0x14	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.570425034 CEST	1.1.1.1	192.168.2.4	0x14	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.570425034 CEST	1.1.1.1	192.168.2.4	0x14	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.570425034 CEST	1.1.1.1	192.168.2.4	0x14	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.570425034 CEST	1.1.1.1	192.168.2.4	0x14	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.595911980 CEST	1.1.1.1	192.168.2.4	0x956b	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.595911980 CEST	1.1.1.1	192.168.2.4	0x956b	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:21.596604109 CEST	1.1.1.1	192.168.2.4	0xacaa	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 19, 2024 21:21:21.815474987 CEST	1.1.1.1	192.168.2.4	0x2ba1	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.815474987 CEST	1.1.1.1	192.168.2.4	0x2ba1	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.815752029 CEST	1.1.1.1	192.168.2.4	0x37df	No error (0)	image2.pubmatic.com	image2v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.815752029 CEST	1.1.1.1	192.168.2.4	0x37df	No error (0)	image2v2.pubmnet.com	pug-vac.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:21.815752029 CEST	1.1.1.1	192.168.2.4	0x37df	No error (0)	pug-vac.pubmnet.com		8.28.7.83	A (IP address)	IN (0x0001)	false
Apr 19, 2024 21:21:22.360764027 CEST	1.1.1.1	192.168.2.4	0xcf8c	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:22.361504078 CEST	1.1.1.1	192.168.2.4	0xcaa4	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 21:21:22.361504078 CEST	1.1.1.1	192.168.2.4	0xcaa4	No error (0)	star-mini.c10r.facebook.com		31.13.88.35	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

us-west-2.protection.sophos.com

linkprotect.cudasvc.com

fs.microsoft.com

gunnauto-my.sharepoint.com

https:

aadcdn.msauth.net

acctcdn.msauth.net

wcpstatic.microsoft.com

dpm.demdex.net

mscom.demdex.net

msftenterprise.sc.omtrdc.net

idsync.rlcdn.com

ib.adnxs.com

cm.g.doubleclick.net

analytics.twitter.com

match.adsrvr.org

cms.quantserve.com

a.tribalfusion.com

cms.analytics.yahoo.com

s.tribalfusion.com

dmpsync.3lift.com

bttrack.com

ups.analytics.yahoo.com

ag.innovid.com

rtb.adentifi.com

sync.crwdcntrl.net

dsum-sec.casalemedia.com

trc.taboola.com

us-u.openx.net

sync.srv.stackadapt.com

image2.pubmatic.com

www.facebook.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	99.84.191.68	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:36 UTC	1485	OUT	GET /?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_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&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RSt1V2wxeFozSmkzRlNIb3h4a0Rwb1Z3Tmd0eVovYlNhSDltbVpxaTEwdz0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ HTTP/1.1 Host: us-west-2.protection.sophos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:37 UTC	1035	IN	HTTP/1.1 302 Found Content-Type: text/html Content-Length: 0 Connection: close Date: Fri, 19 Apr 2024 19:20:37 GMT x-amzn-RequestId: 07664a46-3b5d-44dd-b02e-7b8da67b630b Referrer-Policy: no-referrer X-Robots-Tag: noindex, nofollow x-amz-apigw-id: WfOQ0E6YPHcEp4g= Location: https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3finvitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&c=E,1,yfCuoyElu4g2cC3vjihhEQ_2ynbXm46TZ87TVcpGUqCJgRjKizQCDp4RJPwOAaq2WXcRuYHMYn6sz9HbWJksgf80fKYtlvagjvAUOEc2QI2uGW105hZu3w,,&typo=1 X-Amzn-Trace-Id: Root=1-6622c404-5f6c3a244ff39acf2410eefd;Parent=3a229a19b8812a99;Sampled=0;lineage=b506645d:0 X-Cache: Miss from cloudfront Via: 1.1 dd6a13d6510988eea7236b9a3cd830fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-C2 X-Amz-Cf-Id: Uz-quLDeP4i0hV07L8QdVU06hF72Rd6VMMDGF9N21QH6Z4i88RhcPQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	44.208.218.64	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:37 UTC	1073	OUT	GET /url?a=https%3a%2f%2fgunnauto-my.sharepoint.com%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fRevokeInvite.aspx%3finvitation%3danonymous%26listId%3d7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%26itemId%3d8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272&c=E,1,yfCuoyElu4g2cC3vjihhEQ_2ynbXm46TZ87TVcpGUqCJgRjKizQCDp4RJPwOAaq2WXcRuYHMYn6sz9HbWJksgf80fKYtlvagjvAUOEc2QI2uGW105hZu3w,,&typo=1 HTTP/1.1 Host: linkprotect.cudasvc.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:40 UTC	1266	IN	HTTP/1.1 302 Moved Temporarily Cache-Control: max-age=0, no-cache, no-store, must-revalidate Content-Security-Policy: default-src 'self' 'unsafe-inline' npmcdn.com unpkg.com cdn.jsdelivr.net; script-src 'self' 'unsafe-inline' npmcdn.com cdnjs.cloudflare.com unpkg.com unpkg.com cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' unpkg.com cdnjs.cloudflare.com fonts.googleapis.com cdn.jsdelivr.net; font-src * data: 'self' 'unsafe-inline' fonts.gstatic.com; frame-src 'self'; worker-src * data: 'unsafe-eval' 'unsafe-inline' blob:; media-src 'self' d2rmfex73stak2.cloudfront.net; img-src 'self' d2rmfex73stak2.cloudfront.net; frame-ancestors 'none' Content-Type: text/html Date: Fri, 19 Apr 2024 19:20:40 GMT Expires: -1 Location: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272 Pragma: no-cache Referrer-Policy: no-referrer Server: nginx Strict-Transport-Security: max-age=31536000; includeSubDomains X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Content-Length: 138 Connection: Close
2024-04-19 19:20:40 UTC	138	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	23.44.104.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:39 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 19:20:39 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=128618 Date: Fri, 19 Apr 2024 19:20:39 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	23.44.104.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:39 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 19:20:40 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=128598 Date: Fri, 19 Apr 2024 19:20:40 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 19:20:40 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:41 UTC	857	OUT	GET /personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272 HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:42 UTC	1847	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 5087 Content-Type: text/html; charset=utf-8 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,525568,0,0,2070656,0,525568 X-SharePointHealthScore: 2 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: a99f20a1-d0b7-5000-5ae8-176230b2a280 request-id: a99f20a1-d0b7-5000-5ae8-176230b2a280 MS-CV: oSCfqbfQAFBa6BdiMLKigA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ebf86bb9-f642-4b12-a97c-cb5f0f37b474&destinationEndpoint=Edge-Prod-ATL33r5d&frontEnd=AFD&RemoteIP=81.181.57.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 X-FRAME-OPTIONS: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' teams.microsoft.com .teams.microsoft.com .skype.com .teams.microsoft.us local.teams.office.com .office365.com .powerapps.com .yammer.com engage.cloud.microsoft .officeapps.live.com .office.com .microsoft365.com .stream.azure-test.net .microsoftstream.com .dynamics.com .microsoft.com onedrive.live.com .onedrive.live.com securebroker.sharepointonline.com; SPRequestDuration: 970 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 675E4B6E69C74C11A86349E084272BDB Ref B: ATL331000107023 Ref C: 2024-04-19T19:20:41Z Date: Fri, 19 Apr 2024 19:20:41 GMT Connection: close
2024-04-19 19:20:42 UTC	2821	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3a 6f 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 6d 69 63 72 6f 73 6f 66 74 2d 63 6f 6d 3a 6f 66 66 69 63 65 3a 6f 66 66 69 63 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 64 69 72 3d 22 6c 74 72 22 3e 0d 0a 20 20 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 47 45 4e 45 52 41 54 4f 52 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 20 53 68 61 72 65 50 6f 69 6e 74 22 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns:o="urn:schemas-microsoft-com:office:office" lang="en-us" dir="ltr"> <head><meta name="GENERATOR" content="Microsoft SharePoint"
2024-04-19 19:20:42 UTC	2266	IN	Data Raw: 6f 6e 79 6d 6f 75 73 26 61 6d 70 3b 6c 69 73 74 49 64 3d 37 31 35 38 65 34 64 66 2d 33 33 34 66 2d 34 61 65 64 2d 39 30 61 36 2d 30 63 30 61 65 36 62 36 64 35 64 64 26 61 6d 70 3b 69 74 65 6d 49 64 3d 38 62 65 34 35 37 61 61 2d 30 39 31 62 2d 34 31 35 62 2d 38 64 37 61 2d 63 61 66 31 63 64 64 64 34 32 37 32 26 61 6d 70 3b 73 69 67 6e 49 6e 50 72 6f 76 69 64 65 72 3d 6c 69 76 65 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 63 6f 75 6e 74 22 3e 0d 0a 09 09 20 20 3c 69 6d 67 20 69 64 3d 22 57 69 6e 64 6f 77 73 4c 69 76 65 48 6f 74 6d 61 69 6c 49 6d 61 67 65 22 20 73 72 63 3d 22 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 69 6d 61 67 65 73 2f 57 69 6e 64 6f 77 73 4c 69 76 65 48 6f 74 6d 61 69 6c 2e 70 6e 67 22 20 61 6c 74 3d 22 4d 69 63 72 6f 73 6f Data Ascii: onymous&listId=7158e4df-334f-4aed-90a6-0c0ae6b6d5dd&itemId=8be457aa-091b-415b-8d7a-caf1cddd4272&signInProvider=live"><div class="account"> <img id="WindowsLiveHotmailImage" src="/_layouts/15/images/WindowsLiveHotmail.png" alt="Microso

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:42 UTC	829	OUT	GET /_layouts/15/images/O365BrandSuite.png?rev=47 HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:42 UTC	675	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 2122 Content-Type: image/png Last-Modified: Sat, 13 Apr 2024 02:47:00 GMT Accept-Ranges: bytes ETag: "0aa78db4c8dda1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" SPRequestDuration: 4 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D11D8F777E754800A591ADB92CE08893 Ref B: ATL331000106045 Ref C: 2024-04-19T19:20:42Z Date: Fri, 19 Apr 2024 19:20:42 GMT Connection: close
2024-04-19 19:20:42 UTC	660	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5f 00 00 00 1e 08 06 00 00 00 4a 48 c2 3c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR_JH<tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-04-19 19:20:42 UTC	1462	IN	Data Raw: 41 34 30 46 37 36 46 45 33 35 41 33 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 39 36 33 36 44 35 44 41 30 36 36 31 31 45 31 42 39 43 32 41 34 30 46 37 36 46 45 33 35 41 33 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 39 36 33 36 44 35 45 41 30 36 36 31 31 45 31 42 39 43 32 41 34 30 46 37 36 46 45 33 35 41 33 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e cb c8 04 ce 00 00 04 c0 49 44 41 54 78 da ec 98 79 6c 55 45 14 87 4b db d7 96 3d 4d 41 d3 86 28 11 22 e2 86 94 Data Ascii: A40F76FE35A3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C9636D5DA06611E1B9C2A40F76FE35A3" stRef:documentID="xmp.did:C9636D5EA06611E1B9C2A40F76FE35A3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>IDATxylUEK=MA("

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:42 UTC	826	OUT	GET /_layouts/15/images/WindowsLiveHotmail.png HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:42 UTC	674	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 2955 Content-Type: image/png Last-Modified: Sat, 13 Apr 2024 02:46:30 GMT Accept-Ranges: bytes ETag: "0797c94c8dda1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" SPRequestDuration: 5 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 0A0FB0B9D7AB4944ABD9270CF822872A Ref B: ATL331000103045 Ref C: 2024-04-19T19:20:42Z Date: Fri, 19 Apr 2024 19:20:42 GMT Connection: close
2024-04-19 19:20:42 UTC	23	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 Data Ascii: PNGIHDRP
2024-04-19 19:20:42 UTC	2932	IN	Data Raw: 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b 08 80 14 00 40 7a 8e 42 a6 00 40 46 01 80 9d 98 26 53 00 a0 04 00 60 Data Ascii: PpHYs.#.#x?vOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K@zB@F&S`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49745	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:42 UTC	832	OUT	GET /_layouts/15/images/MicrosoftOnlineServiceID.png HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:42 UTC	674	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 2521 Content-Type: image/png Last-Modified: Sat, 13 Apr 2024 02:46:30 GMT Accept-Ranges: bytes ETag: "0797c94c8dda1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 344566AEFB184ABF9C119EC18FE6983F Ref B: ATL331000105033 Ref C: 2024-04-19T19:20:42Z Date: Fri, 19 Apr 2024 19:20:42 GMT Connection: close
2024-04-19 19:20:42 UTC	1414	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 02 00 00 00 01 73 65 fa 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 38 2f 31 34 2f 31 32 68 25 47 8d 00 00 00 1e 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 35 2e 31 ab 1f 48 eb 00 00 09 30 49 44 41 54 78 9c dd 5c 5f 4c 1b c9 19 1f 6c bc 6b 7b 6d 8c 97 eb 62 3b 29 60 1c df 71 02 1a 53 11 41 4f 4a 8e 83 aa 52 a2 1e a2 52 d5 5c a4 93 c2 a9 89 5a dd cb d1 eb 5b fa d0 ab d4 f2 52 a9 6d 9e ee e1 5a 95 3e 5d 1e fa 90 e4 21 aa a2 23 e2 14 55 e2 94 48 31 32 a8 57 11 6c 20 c5 76 ac b0 e0 d8 5e fc 07 bb 7d 58 b2 Data Ascii: PNGIHDRPPsesBITOpHYs~tEXtCreation Time08/14/12h%GtEXtSoftwareAdobe Fireworks CS5.1H0IDATx\_Llk{mb;)`qSAOJRR\Z[RmZ>]!#UH12Wl v^}X
2024-04-19 19:20:42 UTC	1107	IN	Data Raw: bc 49 50 84 1f 18 33 d1 20 a7 25 b7 ea de 0e 6c 93 96 4b 14 0a ae 0c bd 86 62 d8 99 7c 45 ee f0 58 ba d5 88 f0 d6 21 61 51 b7 d0 9b 06 00 8c 76 bb b1 ea 03 00 26 c2 48 f6 19 df 3e 9c 64 2c dd 6a 40 00 72 63 5c dd 1a d4 38 4f d3 c1 68 b7 0b a5 1a b1 6e 61 98 34 c0 d7 2d 5c 8b 00 00 0c a0 8d 11 b1 6e 35 e8 90 29 ba d5 0c 10 eb 56 e3 19 30 a8 5b 4d 02 b1 6e 21 10 36 a6 5b cd 83 5c b7 4c 33 69 60 4c b7 e4 d2 82 08 f4 e8 55 de 78 b7 97 6e 77 20 65 6f f0 4c 1a 60 ea d6 e2 46 1e bd b2 88 18 f2 18 41 ba 85 b8 38 35 26 0c e9 16 a2 8a 8a 98 5f c5 be 6b b6 b8 a1 72 cd 4d 15 d0 d0 8c a1 25 03 90 1c b2 5e b7 30 84 ba 50 ae 7e fe 44 fd 6e a2 2a 32 f9 0a fa 18 09 e5 9a 3c 97 84 a8 5b 48 84 17 9e 1e 76 82 a1 ac 58 d1 e2 e7 4f 5e a0 a7 47 a4 1c 43 90 a5 07 7c ce 86 02 29 Data Ascii: IP3 %lKb\|EX!aQv&H>d,j@rc\8Ohna4-\n5)V0[Mn!6[\L3i`LUxnw eoL`FA85&_krM%^0P~Dn*2<[HvXO^GC\|)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:43 UTC	815	OUT	GET /_layouts/15/images/favicon.ico HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd&itemId=8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:43 UTC	679	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sat, 13 Apr 2024 02:47:19 GMT Accept-Ranges: bytes ETag: "80d5cbe64c8dda1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: D9EBD07D76FE48DF9CD977AFD3511747 Ref B: ATL331000102051 Ref C: 2024-04-19T19:20:43Z Date: Fri, 19 Apr 2024 19:20:43 GMT Connection: close
2024-04-19 19:20:43 UTC	3468	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2024-04-19 19:20:43 UTC	4418	IN	Data Raw: 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 bf 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 40 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 6c 03 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 70 6c 03 8f 70 6c 03 ff 70 6c 03 ff 70 6c 03 ff 70 Data Ascii: plplplplplplplplplplplplpl@plplplplplplplplplplplplplplplplpl@plplplplp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:43 UTC	394	OUT	GET /_layouts/15/images/O365BrandSuite.png?rev=47 HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:43 UTC	675	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 2122 Content-Type: image/png Last-Modified: Sat, 13 Apr 2024 02:47:00 GMT Accept-Ranges: bytes ETag: "0aa78db4c8dda1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24803 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 046804E9C73440CFA529AB9B41B6AADB Ref B: ATL331000103047 Ref C: 2024-04-19T19:20:43Z Date: Fri, 19 Apr 2024 19:20:43 GMT Connection: close
2024-04-19 19:20:43 UTC	1012	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5f 00 00 00 1e 08 06 00 00 00 4a 48 c2 3c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDR_JH<tEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00
2024-04-19 19:20:43 UTC	1110	IN	Data Raw: f2 bd 78 e5 7b e5 7b f1 ca f7 ca 4f 21 a5 f0 14 34 40 33 ac 87 47 e1 5c af da ce a5 4b 1a 71 7e 01 dc 0c 77 c1 55 d0 3d a4 4f 0b ec 80 07 a1 ce ab 39 73 cb 1f 06 f3 61 0f 2c 86 31 52 7c 87 ac be dd ea db 0d 2e 84 a1 59 5a e7 04 b8 17 f2 55 be 01 ee d3 3c 5d 4f 5b ed 1b cb 8f c0 66 68 4f fc 2b 1d d0 08 b5 f0 02 8c 85 3e 10 4f fc 57 aa 52 8c 59 06 0b 61 2b ec 84 3a 98 e8 f4 31 27 73 35 1c 85 ed 50 0c 35 2a 9b e7 5e 85 c3 70 7e c4 f7 48 46 0c e6 c2 4f 5a cb 5a 18 e8 f4 29 81 c5 b0 03 1a 60 9a ea 87 c0 2a f8 14 d6 8b 99 51 e6 cd 8f b8 47 97 c8 ea 8e c3 2c 78 05 8e 58 ed b1 13 3c 45 d7 c3 72 b9 a7 2f e1 30 94 c3 7b b0 10 1e 50 bf 0a 9d b0 db a1 06 2e 82 5b e0 21 a8 86 71 ba 77 9a 33 b4 c1 32 18 0b 5f 43 ab e6 f8 0c ce d3 1a cf 84 ef 74 ca 3f d4 89 0f dc ed 28 Data Ascii: x{{O!4@3G\Kq~wU=O9sa,1R\|.YZU<]O[fhO+>OWRYa+:1's5P5^p~HFOZZ)`QG,xX<Er/0{P.[!qw32_Ct?(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:43 UTC	391	OUT	GET /_layouts/15/images/WindowsLiveHotmail.png HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:43 UTC	674	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 2955 Content-Type: image/png Last-Modified: Sat, 13 Apr 2024 02:46:30 GMT Accept-Ranges: bytes ETag: "0797c94c8dda1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 161B2CC7E3FA4497B1439EECCA5855E0 Ref B: ATL331000108029 Ref C: 2024-04-19T19:20:43Z Date: Fri, 19 Apr 2024 19:20:43 GMT Connection: close
2024-04-19 19:20:43 UTC	2955	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRPPpHYs.#.#x?vOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49750	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:43 UTC	397	OUT	GET /_layouts/15/images/MicrosoftOnlineServiceID.png HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:43 UTC	674	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 2521 Content-Type: image/png Last-Modified: Sat, 13 Apr 2024 02:46:30 GMT Accept-Ranges: bytes ETag: "0797c94c8dda1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" SPRequestDuration: 4 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: DDAD18615A6140D19B8CC5391C383658 Ref B: ATL331000103019 Ref C: 2024-04-19T19:20:43Z Date: Fri, 19 Apr 2024 19:20:42 GMT Connection: close
2024-04-19 19:20:43 UTC	2521	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 02 00 00 00 01 73 65 fa 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 38 2f 31 34 2f 31 32 68 25 47 8d 00 00 00 1e 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 35 2e 31 ab 1f 48 eb 00 00 09 30 49 44 41 54 78 9c dd 5c 5f 4c 1b c9 19 1f 6c bc 6b 7b 6d 8c 97 eb 62 3b 29 60 1c df 71 02 1a 53 11 41 4f 4a 8e 83 aa 52 a2 1e a2 52 d5 5c a4 93 c2 a9 89 5a dd cb d1 eb 5b fa d0 ab d4 f2 52 a9 6d 9e ee e1 5a 95 3e 5d 1e fa 90 e4 21 aa a2 23 e2 14 55 e2 94 48 31 32 a8 57 11 6c 20 c5 76 ac b0 e0 d8 5e fc 07 bb 7d 58 b2 Data Ascii: PNGIHDRPPsesBITOpHYs~tEXtCreation Time08/14/12h%GtEXtSoftwareAdobe Fireworks CS5.1H0IDATx\_Llk{mb;)`qSAOJRR\Z[RmZ>]!#UH12Wl v^}X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:43 UTC	380	OUT	GET /_layouts/15/images/favicon.ico HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:43 UTC	679	IN	HTTP/1.1 200 OK Cache-Control: max-age=31536000 Content-Length: 7886 Content-Type: image/x-icon Last-Modified: Sat, 13 Apr 2024 02:47:19 GMT Accept-Ranges: bytes ETag: "80d5cbe64c8dda1:0" P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" SPRequestDuration: 3 SPIisLatency: 0 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 3439747C7B6B4C969B4D66E3F74ECDAB Ref B: ATL331000105017 Ref C: 2024-04-19T19:20:43Z Date: Fri, 19 Apr 2024 19:20:43 GMT Connection: close
2024-04-19 19:20:43 UTC	2241	IN	Data Raw: 00 00 01 00 03 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 de 10 00 00 10 10 00 00 01 00 20 00 68 04 00 00 66 1a 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 c6 37 30 d0 c6 37 af d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 ff d0 c6 37 af d0 c6 37 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 6 hf( @ 7077777770
2024-04-19 19:20:43 UTC	5645	IN	Data Raw: ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a cf 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff ff ff ff ff ff ff ff ff da d8 b0 ff 96 93 23 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 54 51 0a ff 91 8b 17 ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a 70 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff ff ff ff ff ff ff ff ff b4 b2 62 ff 87 83 03 ff 87 83 03 ff 96 93 23 ff a5 a2 42 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 87 83 03 ff 46 43 04 ff 91 8b 17 ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b 1a ff a1 9b Data Ascii: #TQpb#BFC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49758	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:49 UTC	841	OUT	GET /personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df-334f-4aed-90a6-0c0ae6b6d5dd&itemId=8be457aa-091b-415b-8d7a-caf1cddd4272&signInProvider=live HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:50 UTC	1245	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 466 Content-Type: text/html; charset=utf-8 Location: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2F%5Flayouts%2F15%2FRevokeInvite%2Easpx%3Finvitation%3Danonymous%26listId%3D7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd%26itemId%3D8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272%26signInProvider%3Dlive P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,1051136,4,7,10941923,0,1051136 X-SharePointHealthScore: 2 SPRequestGuid: ab9f20a1-e0ae-5000-498d-fcb96eab90ea request-id: ab9f20a1-e0ae-5000-498d-fcb96eab90ea MS-CV: oSCfq67gAFBJjfy5bquQ6g.0 Strict-Transport-Security: max-age=31536000 X-AspNet-Version: 4.0.30319 SPRequestDuration: 903 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: A74CBB117A34406189B92BB1883659C3 Ref B: ATL331000102051 Ref C: 2024-04-19T19:20:49Z Date: Fri, 19 Apr 2024 19:20:50 GMT Connection: close
2024-04-19 19:20:50 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 75 6e 6e 61 75 74 6f 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 61 65 72 6f 64 72 69 67 75 65 7a 5f 67 75 6e 6e 61 75 74 6f 5f 63 6f 6d 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 3f 53 6f 75 72 63 65 3d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 61 65 72 6f 64 72 69 67 75 65 7a 25 35 46 67 75 6e 6e 61 75 74 6f 25 35 46 63 6f 6d 25 32 46 25 35 46 6c 61 79 6f 75 74 73 25 32 46 31 35 25 32 46 52 65 76 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2F%5Flayouts%2F15%2FRev

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49757	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:50 UTC	963	OUT	GET /personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2F%5Flayouts%2F15%2FRevokeInvite%2Easpx%3Finvitation%3Danonymous%26listId%3D7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd%26itemId%3D8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272%26signInProvider%3Dlive HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:50 UTC	2281	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 545 Content-Type: text/html; charset=utf-8 Location: /_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252F%255Flayouts%252F15%252FRevokeInvite%252Easpx%253Finvitation%253Danonymous%2526listId%253D7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%2526itemId%253D8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272%2526signInProvider%253Dlive&Source=cookie P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGYWVyb2RyaWd1ZXolNUZndW5uYXV0byU1RmNvbSUyRiU1RmxheW91dHMlMkYxNSUyRlJldm9rZUludml0ZSUyRWFzcHglM0ZpbnZpdGF0aW9uJTNEYW5vbnltb3VzJTI2bGlzdElkJTNENzE1OGU0ZGYlMkQzMzRmJTJENGFlZCUyRDkwYTYlMkQwYzBhZTZiNmQ1ZGQlMjZpdGVtSWQlM0Q4YmU0NTdhYSUyRDA5MWIlMkQ0MTViJTJEOGQ3YSUyRGNhZjFjZGRkNDI3MiUyNnNpZ25JblByb3ZpZGVyJTNEbGl2ZQ==; expires=Fri, 19-Apr-2024 19:30:50 GMT; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,525568,0,0,188582,0,64370 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: ab9f20a1-b0fa-5000-34a3-d5c4ac85a1b8 request-id: ab9f20a1-b0fa-5000-34a3-d5c4ac85a1b8 MS-CV: oSCfq/qwAFA0o9XErIWhuA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-ATL33r5d&frontEnd=AFD&RemoteIP=81.181.57.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 13 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: EA85F1E1561B4157833E2E0DE7C60DC1 Ref B: ATL331000107053 Ref C: 2024-04-19T19:20:50Z Date: Fri, 19 Apr 2024 19:20:49 GMT Connection: close
2024-04-19 19:20:50 UTC	545	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 5f 66 6f 72 6d 73 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 70 65 72 73 6f 6e 61 6c 25 32 66 61 65 72 6f 64 72 69 67 75 65 7a 5f 67 75 6e 6e 61 75 74 6f 5f 63 6f 6d 25 32 66 5f 6c 61 79 6f 75 74 73 25 32 66 31 35 25 32 66 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 25 33 66 53 6f 75 72 63 65 25 33 64 25 32 35 32 46 70 65 72 73 6f 6e 61 6c 25 32 35 32 46 61 65 72 6f 64 72 69 67 75 65 7a 25 32 35 35 46 67 75 6e 6e 61 75 74 6f 25 32 35 35 46 63 6f 6d 25 32 35 32 46 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:50 UTC	1435	OUT	GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252F%255Flayouts%252F15%252FRevokeInvite%252Easpx%253Finvitation%253Danonymous%2526listId%253D7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%2526itemId%253D8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272%2526signInProvider%253Dlive&Source=cookie HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGYWVyb2RyaWd1ZXolNUZndW5uYXV0byU1RmNvbSUyRiU1RmxheW91dHMlMkYxNSUyRlJldm9rZUludml0ZSUyRWFzcHglM0ZpbnZpdGF0aW9uJTNEYW5vbnltb3VzJTI2bGlzdElkJTNENzE1OGU0ZGYlMkQzMzRmJTJENGFlZCUyRDkwYTYlMkQwYzBhZTZiNmQ1ZGQlMjZpdGVtSWQlM0Q4YmU0NTdhYSUyRDA5MWIlMkQ0MTViJTJEOGQ3YSUyRGNhZjFjZGRkNDI3MiUyNnNpZ25JblByb3ZpZGVyJTNEbGl2ZQ==
2024-04-19 19:20:51 UTC	4317	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 884 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://login.microsoftonline.com:443/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944%2DF471E08FFCA37B08D3003BB65DCDC47E37905BCE810360019223E637D094A519&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: nSGt-DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944=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; expires=Fri, 19-Apr-2024 19:24:51 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: nSGt-DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly Set-Cookie: RpsContextCookie=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; expires=Fri, 19-Apr-2024 19:30:51 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: RpsContextCookie=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly X-NetworkStatistics: 4294967295,4294967295,4294967295,4294967295,4294967295,4294967295,4294967295 X-SharePointHealthScore: 1 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: ac9f20a1-e021-5000-5ae8-1845e6a06b4b request-id: ac9f20a1-e021-5000-5ae8-1845e6a06b4b MS-CV: oSCfrCHgAFBa6BhF5qBrSw.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ebf86bb9-f642-4b12-a97c-cb5f0f37b474&destinationEndpoint=Edge-Prod-ATL33r5c&frontEnd=AFD&RemoteIP=81.181.57.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 71 SPIisLatency: 0 Include-Referred-Token-Binding-ID: true X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: F99D0D7D0AB244B6ABAC5177C96D47D9 Ref B: ATL331000106045 Ref C: 2024-04-19T19:20:50Z Date: Fri, 19 Apr 2024 19:20:50 GMT Connection: close
2024-04-19 19:20:51 UTC	731	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3a 34 34 33 2f 65 62 66 38 36 62 62 39 2d 66 36 34 32 2d 34 62 31 32 2d 61 39 37 63 2d 63 62 35 66 30 66 33 37 62 34 37 34 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 6d 6f 64 65 3d 66 6f 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com:443/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=for
2024-04-19 19:20:51 UTC	153	IN	Data Raw: 64 69 64 3d 31 31 62 64 38 30 38 33 25 32 44 38 37 65 30 25 32 44 34 31 62 35 25 32 44 62 62 37 38 25 32 44 30 62 63 34 33 63 38 61 38 65 38 61 26 61 6d 70 3b 63 6c 69 65 6e 74 25 32 44 72 65 71 75 65 73 74 25 32 44 69 64 3d 61 63 39 66 32 30 61 31 25 32 44 65 30 32 31 25 32 44 35 30 30 30 25 32 44 35 61 65 38 25 32 44 31 38 34 35 65 36 61 30 36 62 34 62 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: did=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ac9f20a1%2De021%2D5000%2D5ae8%2D1845e6a06b4b">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49766	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:52 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_3b4rnVNi70Sso4_c42_ImQ2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:53 UTC	791	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:52 GMT Content-Type: application/x-javascript Content-Length: 49617 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 14 Mar 2024 23:04:09 GMT ETag: 0x8DC447B0E3A90D2 x-ms-request-id: c4f1d989-701e-0055-36c3-9101a7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192052Z-r1f585c6b65ntpkvadzntctb54000000010g0000000013q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:53 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 87 89 27 26 e4 05 68 70 da 9d 27 0d 74 37 33 40 18 12 a6 67 16 58 2e 27 56 c0 dd c1 ce da 0e 34 03 39 bf fd d4 8b 64 cb 8e 43 f7 ec 7d ae f3 e5 cc 4b b0 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 f3 da ff 54 7e ae 6c fc f8 3f 95 c1 b0 77 3e ac f4 3f 54 86 9f 8e ce 0f 2a 67 f0 f6 67 e5 b4 3f 3c da 3f fc f1 7a f0 a3 f8 ff f0 ce 8f 2b 13 7f 2a 2a f0 77 e4 c6 c2 ab 84 41 25 8c 2a 7e 30 0e a3 59 18 b9 89 88 2b f7 f0 1b f9 ee b4 32 89 c2 fb 4a 72 27 2a b3 28 fc 22 c6 49 5c 99 fa 71 02 85 46 62 1a 3e 56 aa 50 5d e4 55 ce dc 28 79 aa 1c 9d 99 75 a8 5f 40 6d fe ad 1f 40 e9 71 38 7b 82 e7 bb a4 12 84 89 3f 16 15 37 f0 a8 b6 29 bc 04 b1 a8 cc 03 4f 44 95 c7 3b 7f 7c 57 39 f1 c7 51 18 87 93 a4 12 89 b1 f0 Data Ascii: m[80'&hp't73@gX.'V49dC}K,JUT~l?w>?Tgg?<?z+wA%~0Y+2Jr'*("I\qFb>VP]U(yu_@m@q8{?7)OD;\|W9Q
2024-04-19 19:20:53 UTC	16384	IN	Data Raw: 40 f9 e1 37 3c bc 02 60 fb 60 8a 7e 61 5a ce 9d 9f 29 2e 0d 3a bd c7 b8 ae 96 9c bf 28 3a 78 3f 22 a0 0a ac 8e 70 c2 47 93 d1 c1 f5 da 41 65 e9 b7 2a f2 bc d6 4a a4 be 64 57 8c 1a 1e 72 18 0b a5 a1 68 1f 31 9f e5 b1 50 0b d3 6a d0 4d 04 80 b8 d2 eb e5 96 ce 7a d3 6e 0f 8b b4 1a 43 cb c7 8b 10 d2 4b e3 aa a6 59 47 d1 49 19 ab 1a 11 e2 61 fd 26 de dd 63 9a af e0 76 db b4 e8 a0 93 06 9e 21 8e 47 7f 59 2e 63 3c 3b 38 32 45 1b 1e 23 8e a7 a0 cc 1d 1f 0f 65 21 0d 9f 4e 3b e6 d3 f5 f9 04 78 6b 4c b7 ce d7 27 cc 1c 6c 94 a3 82 72 8f 6e 4b cc f1 39 0d e4 09 9d 28 63 f1 81 50 d9 07 3d ed ec cd fc 55 76 53 75 74 d7 f4 52 5c cb 33 15 a7 96 1b dd d2 61 58 31 f4 53 5d 6a 78 1c ba 72 e9 18 44 fd 18 af 19 64 ec 3b cb a7 44 21 b6 dd 6a ee 1c 98 f1 fa fa da b4 9b d4 05 1d Data Ascii: @7<``~aZ).:(:x?"pGAe*JdWrh1PjMznCKYGIa&cv!GY.c<;82E#e!N;xkL'lrnK9(cP=UvSutR\3aX1S]jxrDd;D!j
2024-04-19 19:20:53 UTC	16384	IN	Data Raw: da 22 a6 62 47 ab 46 ba 85 c4 37 58 97 52 1d 0f 18 dc 56 31 6f 99 71 74 e2 b7 0e a2 fa 41 5f aa d0 ba 8c f5 ac d7 2c 58 8e 74 a6 4d 9d 2b 73 d2 d0 2d b5 9f 06 9c 84 b6 c1 2a 36 cc 8a b2 40 3a 7e d3 40 df fa d7 2a 2d 92 09 47 3a e8 1f ae fd cb 73 8f 4d b1 d6 b4 24 3d 7a 01 ce f9 fc 7b 0c a7 62 47 99 dc 9d 13 89 b1 b1 6e 90 2c 2c e4 3f 48 5c e7 7d 49 74 45 7d c1 1f 4c 57 e0 f3 07 4f 5e 3e 53 84 0b 79 a2 40 f0 40 e1 41 1a ab a6 65 b3 6b 26 c9 b4 0e b1 43 09 b5 0b 3a 32 59 12 bb ae b7 05 08 93 81 a5 ef e6 5b dd c9 fa 01 bf 67 7c 34 ad 8a 48 6c 81 24 8d 50 f5 7c 2e b0 c3 c3 b4 93 d4 a0 6e 08 b7 03 1d d3 e9 33 f5 d7 19 55 2d e2 04 6c 42 64 aa 69 9f 3e ee 8b 88 65 e4 0b 0b f8 71 b4 ca 7a 7a 67 e8 1a 3e a7 c8 8c ab df 78 3e 63 4a 2d a7 6f 4b 6c cc ea fe 49 8c 80 Data Ascii: "bGF7XRV1oqtA_,XtM+s-6@:~@-G:sM$=z{bGn,,?H\}ItE}LWO^>Sy@@Aek&C:2Y[g\|4Hl$P\|.n3U-lBdi>eqzzg>x>cJ-oKlI
2024-04-19 19:20:53 UTC	1256	IN	Data Raw: 42 62 e5 10 22 2e b9 c4 8d 09 9a 16 db 64 7c 76 e2 f5 9a 6e b7 ef 6a ba 72 70 7b eb 46 3d 47 79 f7 1e 80 f7 b8 2f 0e 0e d0 e6 e0 f0 22 c2 e8 28 af 75 31 a0 1f 20 61 a9 ca 51 07 e7 d1 83 f0 8d bb 96 21 0a 7a d7 9d 99 b0 c0 a4 44 d2 83 b2 d9 a8 91 7b 42 e7 ce 41 dd 95 27 ae 64 98 50 4e ee 9c 98 34 bc 19 cd d3 a2 ac 38 b6 6b 9c 8d 3d f0 9e b1 a8 e3 41 54 ee df 77 96 cb 6c 9a 2d 93 7c 71 76 91 ce ce 92 b3 8b e9 c5 f4 e3 e5 f9 82 da 92 2f d3 8f a9 c3 ce f6 78 09 6e 40 74 81 fc 36 e2 b8 26 11 7b 99 d7 fe 0e fb ee 28 f0 7d 7b 56 9c 57 b9 71 cc 69 38 e9 28 77 47 f6 dc 86 ab e1 c8 51 9a 5d e3 cc 62 fb 1a b9 8e 59 b0 23 38 d3 25 ed 39 78 5f d6 13 30 30 65 39 af da 20 c5 22 4d 1a 51 c4 a7 d6 ca fb 37 1d c5 a9 f8 62 e2 36 5b f1 57 e3 e5 a4 77 07 fa 38 07 58 98 3f 98 Data Ascii: Bb".d\|vnjrp{F=Gy/"(u1 aQ!zD{BA'dPN48k=ATwl-\|qv/xn@t6&{(}{VWqi8(wGQ]bY#8%9x_00e9 "MQ7b6[Ww8X?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49772	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:54 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:54 UTC	781	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:54 GMT Content-Type: text/css Content-Length: 20314 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 27 Dec 2023 18:18:12 GMT ETag: 0x8DC07082FBB8D2B x-ms-request-id: 54b992ee-501e-0047-749a-91e781000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192054Z-15497cdd9fd7xqjqsvryefhbyn000000024g00000000nnzb x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:54 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-04-19 19:20:54 UTC	4711	IN	Data Raw: e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 Data Ascii: a}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+76s^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49774	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:54 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_jHSrlUosdD1xxbmcR_lMNA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:55 UTC	798	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:54 GMT Content-Type: application/x-javascript Content-Length: 121212 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 27 Mar 2024 20:03:18 GMT ETag: 0x8DC4E98F25B224F x-ms-request-id: fcbbcc8e-e01e-003c-8062-923096000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192054Z-r1f585c6b6556d6thg3mb7h85s00000000yg000000002xvp x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:55 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 7b e3 38 8e 00 f8 fd 7e 85 a3 99 cb d8 1d c5 25 f9 dd 4a ab b3 ae bc 54 65 3b 89 33 71 aa bb 77 53 99 3c b2 44 3b ea c8 92 57 92 f3 32 8e f7 b7 1f 00 92 12 65 cb a9 aa d9 bd bb e7 9e eb 9d ad 58 24 48 82 20 08 82 20 08 7e f8 69 e7 ff a8 fc 54 d9 ff fe ff 2a a3 9b c1 f5 4d 65 78 5a b9 f9 7c 76 7d 5c b9 82 af ff a8 5c 0e 6f ce 8e 4e be bf 1e 6c 14 ff ff e6 c1 4f 2a 13 3f 60 15 f8 3b 76 12 e6 55 a2 b0 12 c5 15 3f 74 a3 78 1e c5 4e ca 92 ca 0c fe 8d 7d 27 a8 4c e2 68 56 49 1f 58 65 1e 47 7f 32 37 4d 2a 81 9f a4 50 68 cc 82 e8 b9 52 85 ea 62 af 72 e5 c4 e9 6b e5 ec aa 56 87 fa 19 d4 e6 4f fd 10 4a bb d1 fc 15 7e 3f a4 95 30 4a 7d 97 55 9c d0 a3 da 02 f8 08 13 56 59 84 1e 8b 2b cf 0f be fb 50 b9 f0 dd 38 4a a2 49 5a 89 99 Data Ascii: m{8~%JTe;3qwS<D;W2eX$H ~iTMexZ\|v}\\oNlO?`;vU?txN}'LhVIXeG27M*PhRbrkVOJ~?0J}UVY+P8JIZ
2024-04-19 19:20:55 UTC	16384	IN	Data Raw: b0 ef 62 55 51 a0 e9 cb 27 9f 3d a3 6d 30 b0 96 7c 26 fd 96 25 94 cd 6e 7f 53 66 e2 3e 4f 84 75 40 c2 24 a5 97 0f f8 d6 24 84 7c 74 3a 5e e5 77 0c 50 d0 e0 48 a7 e4 a8 89 96 43 e0 35 59 9f 95 56 9b 2d 34 b0 bd 86 78 37 2c c4 37 73 77 22 75 f3 e1 5f 38 2f 74 af 05 16 86 5f 43 fe 3c 3d 39 b2 67 1c 9f bc bd 49 de aa 97 df 9b a9 fe 68 8d 30 ef 14 1b 60 52 e4 74 98 9b 75 8a ef 91 f0 a7 31 48 37 d3 fe f2 df 7f b9 60 a8 33 a1 2e 75 7f 3e 82 6f 1e 4f 8c 79 f6 52 04 b2 e2 af 08 43 ce 9c 3f 54 ca 0f 32 10 12 63 4c 89 fd 03 e6 67 01 0a f2 87 0f 44 95 f2 8d d3 22 98 48 5c 6b 9a 42 5e 70 61 84 28 5c 46 29 86 d1 a3 bd 16 05 99 a2 9f 57 bf 1f 5b 26 de 65 7f c0 58 1c f8 ec 2e 8f 58 26 6d 0a 32 b0 08 46 e5 c8 43 8b 90 d6 78 01 6b ee 20 f0 9d 84 82 72 cd c6 e8 57 cf 9f 5b Data Ascii: bUQ'=m0\|&%nSf>Ou@$$\|t:^wPHC5YV-4x7,7sw"u_8/t_C<=9gIh0`Rtu1H7`3.u>oOyRC?T2cLgD"H\kB^pa(\F)W[&eX.X&m2FCxk rW[
2024-04-19 19:20:55 UTC	16384	IN	Data Raw: 31 80 37 9e 6f 95 62 00 67 7f 3b 0e f0 ad 2d 3e 8d 03 4c e7 25 87 ea 49 53 05 7d 91 d4 77 88 1c 5b f5 7b 53 3c f7 93 52 d4 97 70 ed 39 16 a9 0f f6 14 9e ad 6e f9 ab 6b cf b7 ce a1 08 89 38 c2 07 32 dd 4e a2 51 e0 a8 5f 6f 98 2b 47 5e 43 39 3c 36 3c 3e 00 d7 be 8c 05 0a 76 15 8f 21 70 9e 2a e1 3c 42 bc af 55 85 42 84 da 64 d2 d5 39 7a 3e df d8 20 df e7 12 c9 41 d5 10 64 fb e1 44 01 fd a8 86 aa 1e 57 90 19 62 73 47 65 d4 24 b5 91 9c 7e c8 5e 41 a1 84 24 bb 94 97 d7 01 23 26 9f 51 70 06 ff e4 57 80 e6 50 90 22 e9 15 56 47 25 ff c0 82 3b 40 7a 52 f2 44 2c ef 09 85 9d 40 3c 3c 43 d9 95 76 bf 03 08 0f 24 a1 c2 43 cc 8e 5f 7b dc 2a 20 38 f0 57 7b 5d 2f 26 76 45 97 04 b9 6d 28 10 45 41 67 52 3f 62 77 69 51 86 02 01 72 64 32 d7 64 5b 5f d4 74 32 50 b3 a0 41 b9 bd Data Ascii: 17obg;->L%IS}w[{S<Rp9nk82NQ_o+G^C9<6<>v!p<BUBd9z> AdDWbsGe$~^A$#&QpWP"VG%;@zRD,@<<Cv$C_{ 8W{]/&vEm(EAgR?bwiQrd2d[_t2PA
2024-04-19 19:20:55 UTC	16384	IN	Data Raw: 64 f0 28 03 b4 9b e4 f7 00 90 14 f2 82 3d 01 00 46 7d 9c b9 cf 35 2a 47 52 fc 3e 8d 46 71 7e bf c3 da ab b0 8f d1 e8 2e ba cf 1c 34 d6 c4 43 09 38 08 73 c8 77 c2 07 ad 32 15 b4 fd 5e 9a 22 35 0a bf f8 c8 c0 0f 46 07 83 36 d9 35 52 80 79 5a 78 ba 59 27 74 b3 e2 7e c5 1c 91 e4 bf 83 28 94 86 98 a3 be 72 87 73 d3 0f 73 fe b5 47 47 8c 7e 0e 7b 6c e3 f9 63 8f 81 d6 71 73 9f 15 4a 1d e9 1d d7 e1 72 99 57 cd c2 33 88 2f ef 5e c6 b2 8c 81 2c 3b 22 62 20 ee 9b bc 7f 13 b4 ca 31 28 43 d2 61 8f 11 21 e4 6d b8 72 30 6a 70 5e 31 e0 96 9a 85 f2 de 03 73 54 33 d4 f3 93 53 51 53 93 a0 ad 34 98 91 c5 e6 56 75 84 a9 60 69 ad 4d c6 d6 eb f8 db a3 d6 4e cc d9 10 4f 92 07 ee df 79 fe 5d f3 77 fe 90 72 90 bb f0 e1 77 1b 88 8b e6 69 f8 20 ed df ce ce 31 bc 78 d6 0f db 73 3f 53 Data Ascii: d(=F}5*GR>Fq~.4C8sw2^"5F65RyZxY't~(rssGG~{lcqsJrW3/^,;"b 1(Ca!mr0jp^1sT3SQS4Vu`iMNOy]wrwi 1xs?S
2024-04-19 19:20:55 UTC	16384	IN	Data Raw: 57 ee db 91 a4 65 5b fb 6e 83 b4 3b 96 d2 db 35 84 0e 7c 7d 7f 2e ec 22 48 f2 75 1f d6 18 85 c9 a1 b2 1f 7f a3 8a 39 6c 2d 74 7a 4e 14 50 e5 31 6a 69 9a 2d 97 43 d5 70 c6 6c 11 21 17 76 e4 96 7a ff 42 e3 58 37 18 24 e6 cf 14 ba 51 1b ef 5d c3 1a 65 90 14 40 cd 2a 32 6f a4 54 88 c0 49 10 06 eb 03 46 9c 4e 5e 96 92 86 37 3e 0d cf dc c1 da 5a 28 89 fc 60 1a 28 48 88 cd ce e8 5e 06 98 c5 5c 19 5d 03 12 69 44 6f 7f 9f f7 71 28 41 c6 e1 c3 95 38 6c b9 ce d5 75 aa 00 2b 68 a1 6c 60 d1 a0 52 e6 e5 17 c9 1a 92 16 89 ab c6 e8 71 1b 86 d9 b1 22 fe 30 10 14 7b d4 5f 13 a1 9c ab 9f e1 17 e2 25 68 4f 4c 4c b4 0f 9d c7 ba cf de 75 70 f1 7c f2 f0 b0 e1 d1 a7 d6 2e d6 36 06 ba 87 d9 cb 60 c2 66 0f dc 88 82 c2 9b 89 50 0b 20 61 80 73 4c 1d 12 a9 d7 ae c1 07 ce 9d 75 2f 7b Data Ascii: We[n;5\|}."Hu9l-tzNP1ji-Cpl!vzBX7$Q]e@*2oTIFN^7>Z(`(H^\]iDoq(A8lu+hl`Rq"0{_%hOLLup\|.6`fP asLu/{
2024-04-19 19:20:55 UTC	16384	IN	Data Raw: 51 e8 d8 49 1a c5 7e e0 d9 16 67 96 07 dd 24 06 a6 67 2e 3a 13 22 4e b9 73 c3 7d 82 d5 6e 0c ea d9 91 1f 4a 28 29 42 84 10 bd 29 34 59 91 49 cb 71 33 c8 8f cc 8f f8 6e 3a 4b 3c 1b aa 5e ec 0a 88 73 a8 c7 2e 70 1b 4c 50 30 61 b9 01 0b 63 77 37 eb 64 34 23 cb 0f 33 61 45 71 04 25 c5 b1 53 c9 5c 11 3b 99 6b 5b 8e c3 3d 58 06 bb e9 2c b1 21 16 dc 14 aa 44 c8 05 38 b8 25 18 83 25 e0 07 a4 b2 40 4f be d9 36 cb 6a 37 46 33 8a 63 d8 a3 2e 4c 98 48 78 31 73 1d c1 63 c9 a5 6b 65 41 40 42 72 37 f4 e4 25 16 68 34 62 69 e6 63 4d 2c 1f 82 c9 e1 2c f6 3c d2 9e 03 08 f6 dd 4c 9d d1 8c 52 1f e4 93 49 2f b2 c0 c6 dd d0 b2 bd c8 66 98 4d b0 58 61 59 ce 4e 38 b9 e3 27 8e 23 20 f3 32 32 0b 6d 2b 86 24 77 98 b0 3d 3b 82 7c 8f bc 30 0e 77 d2 8d d1 8c 62 e1 87 91 6d 05 ae 13 79 Data Ascii: QI~g$g.:"Ns}nJ()B)4YIq3n:K<^s.pLP0acw7d4#3aEq%S\;k[=X,!D8%%@O6j7F3c.LHx1sckeA@Br7%h4bicM,,<LRI/fMXaYN8'# 22m+$w=;\|0wbmy
2024-04-19 19:20:55 UTC	16384	IN	Data Raw: fa 8d 62 92 ff 9a 3b 5e 4f df 33 30 3a ba 6c ef 2b 3a 09 a6 ef 19 71 32 ea e5 2b 63 f2 57 d2 2a 7f b7 60 96 9b 2d 2a c8 61 5b 2e 04 2d e7 db e7 41 5b 04 47 33 d3 7e 65 e5 34 a3 a2 f1 6d 39 81 97 d9 3d 37 d1 47 77 c7 cf ae ac a3 7e b9 fe 73 95 9a 79 cd 32 ea 2c f1 d5 f7 5f 84 2c df 2e 8a b3 a3 b2 78 fc 41 f2 f3 c5 8a 57 68 fd f3 97 db d1 19 9b 37 35 a3 bf 7e 25 fe ff 55 a8 db 34 7e 33 ba 36 60 7f 6d 8a fe a6 f0 b3 59 b6 ba f3 64 63 5b d5 f7 3f 22 46 1c 9d 49 29 d2 f3 d3 b3 9d 8b f3 16 e6 94 a6 9b 6f 50 9e ff e1 f1 6e 87 12 f2 3f 5e ab 2d 0e d9 fc 01 6c d8 df 20 f2 e7 9b 30 53 5e e6 53 59 5e 47 da 2d a8 c2 37 e6 26 ff ed dc 97 3b 54 32 4b 9a fa 6a 5d ab 55 6e 9f 44 a2 bc 68 8d 32 0f e9 00 50 ef 6f 3d eb 4b 1c e9 3a 79 71 fe 9a b6 39 21 77 9d e0 b2 46 7e 54 Data Ascii: b;^O30:l+:q2+cW`-a[.-A[G3~e4m9=7Gw~sy2,_,.xAWh75~%U4~36`mYdc[?"FI)oPn?^-l 0S^SY^G-7&;T2Kj]UnDh2Po=K:yq9!wF~T
2024-04-19 19:20:55 UTC	7322	IN	Data Raw: 1f 07 4f 53 d4 c5 c3 63 98 d0 fe fd 26 b7 b8 5e e2 81 fb 3e 31 42 65 52 c6 b5 42 41 83 fd 4b 62 cc fd 28 d8 9f 11 23 a5 e4 6b ff 86 18 3e a7 51 fb 1f a1 7e 99 70 ed bf 03 f0 97 a9 d6 fe 29 d4 bf a6 3b f1 d0 9d cf d1 74 b5 1f 1b 21 13 9e f2 27 d9 dd 53 1c fb 65 27 ea f6 30 8e 31 9f 72 87 4d 36 ee 76 7b c0 00 e3 4e 16 1b 6e dc bd cb 57 3c 93 27 8f f3 04 ec d9 f9 0d 56 87 a0 f0 0c fb 60 81 44 01 57 00 16 8c 4c 2b 4f 31 d3 d5 57 3e ba fd 1d d3 40 89 80 66 59 20 bd f7 fc 2b 30 6a a4 3d fc e9 8b fc c7 ed 2d e9 71 60 bd 02 66 7d bd f8 91 dc dc 15 23 73 63 ee 41 c1 47 45 07 85 e3 a2 c1 6f bb e9 e7 28 f3 2f 3b fc 67 0f 6f f0 75 bf fa 6e 4a 5a 1f 7b 07 b0 0c 5c b8 dc 8f a9 90 82 e4 16 49 90 97 7c e1 15 60 83 bf 49 e2 e7 f3 c4 ff 88 31 b4 f1 59 e7 97 de e1 bb d9 e9 Data Ascii: OSc&^>1BeRBAKb(#k>Q~p);t!'Se'01rM6v{NnW<'V`DWL+O1W>@fY +0j=-q`f}#scAGEo(/;gounJZ{\I\|`I1Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49775	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:54 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_l2bvdjfwt697xziuhxpwsg2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:55 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:54 GMT Content-Type: application/x-javascript Content-Length: 15799 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 28 Mar 2024 02:23:53 GMT ETag: 0x8DC4ECE1D0444D4 x-ms-request-id: 49429fb1-001e-000e-2590-914783000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192054Z-15497cdd9fd7xqjqsvryefhbyn000000029000000000d45a x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:55 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 47 b2 d8 dd bf 02 8b 75 68 86 4f 3d 10 3e f8 89 11 34 06 01 70 06 4f 24 00 01 e0 50 0a 49 46 34 81 22 d8 4b a0 1b af bb 31 1c 2e 35 8e bd f9 f0 0e be da 37 1f 7c f2 d1 17 df fd 53 36 e2 f9 77 38 3f aa aa ab ba 1b 00 39 d2 d3 ee b3 42 c1 41 77 55 65 65 65 65 65 65 66 65 65 ff e1 66 ed 4f 63 2f f0 5f 8a bd 47 f5 bb 10 bc f4 f7 1e bd 9b 97 de 8f fe cf 7b a1 88 d7 a1 5f c0 df 25 f1 71 15 84 71 f4 fa 83 1b 16 e2 06 be 6a 3c ca 77 f5 c7 4f 8e 37 ab fb ce 22 70 67 62 56 ff 43 e5 d3 6b d9 54 60 d3 a9 bb 58 bc 8c 15 04 27 76 92 df c1 1e 3c 70 b3 c6 1f ca 49 c1 27 ec c6 6b 3c 6a 40 41 69 d9 10 4e 50 9a 36 3c f8 bb 6a 14 8b 4e f0 b2 bc f7 e9 e5 8f c9 30 9c c0 f1 00 f9 97 d5 3d c2 d2 6f 78 2f 2b 00 1f fe 39 d8 73 42 f8 e7 Data Ascii: }Ms#GuhO=>4pO$PIF4"K1.57\|S6w8?9BAwUeeeeeefeefOc/_G{_%qqj<wO7"pgbVCkT`X'v<pI'k<j@AiNP6<jN0=ox/+9sB
2024-04-19 19:20:55 UTC	212	IN	Data Raw: 4c d9 50 88 3d 11 31 a3 82 91 44 92 9b ac 27 fa 55 71 d0 e8 52 b2 83 36 27 fc b6 dc 23 94 e3 1e 80 37 6e 69 ad 92 7b 01 76 8e 29 d0 a4 f3 81 4e a5 61 fe e9 d7 44 09 47 be c4 aa 78 02 e5 da 24 f0 cf 03 17 6f 15 81 0e 9b 57 59 59 50 76 65 74 81 91 0e 08 e2 ca 8f 9f d0 09 e6 cc 63 f5 01 0c 1d b1 ff ac b6 da 7e a0 7c 70 78 3f 7a 67 ef 29 ac ad fb a8 08 00 af bb ab 0b 46 ef 41 74 8a 4c fb 39 f7 de 8d 28 4c 4b db fa 95 7d d4 f5 b7 b4 b4 70 4f 6e 04 ef ef ec d2 6a c8 b3 29 ad 7d 6c 5b d9 81 ae 31 dc 64 9c fb e5 ea ce 71 1a 0d 53 9d 56 9f d3 e9 b7 17 a3 2e 37 aa 7e fa f4 f3 9e c3 b9 43 4b 93 49 e3 0f e5 d7 ff 0f de d8 74 96 1f d7 00 00 Data Ascii: LP=1D'UqR6'#7ni{v)NaDGx$oWYYPvetc~\|px?zg)FAtL9(LK}pOnj)}l[1dqSV.7~CKIt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49778	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:55 UTC	2431	OUT	GET /personal/aerodriguez_gunnauto_com/_layouts/15/RevokeInvite.aspx?invitation=anonymous&listId=7158e4df-334f-4aed-90a6-0c0ae6b6d5dd&itemId=8be457aa-091b-415b-8d7a-caf1cddd4272&signInProvider=mso HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nSGt-DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944=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; RpsContextCookie=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
2024-04-19 19:20:56 UTC	1247	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 465 Content-Type: text/html; charset=utf-8 Location: https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2F%5Flayouts%2F15%2FRevokeInvite%2Easpx%3Finvitation%3Danonymous%26listId%3D7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd%26itemId%3D8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272%26signInProvider%3Dmso P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" X-NetworkStatistics: 0,2102272,44,108,3515053,0,1201715 X-SharePointHealthScore: 0 SPRequestGuid: ad9f20a1-1026-5000-34a3-df85b523f88f request-id: ad9f20a1-1026-5000-34a3-df85b523f88f MS-CV: oSCfrSYQAFA0o9+FtSP4jw.0 Strict-Transport-Security: max-age=31536000 X-AspNet-Version: 4.0.30319 SPRequestDuration: 1137 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 6937E213BC01479D8CB08EA8AB284F7C Ref B: ATL331000102021 Ref C: 2024-04-19T19:20:55Z Date: Fri, 19 Apr 2024 19:20:55 GMT Connection: close
2024-04-19 19:20:56 UTC	278	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 75 6e 6e 61 75 74 6f 2d 6d 79 2e 73 68 61 72 65 70 6f 69 6e 74 2e 63 6f 6d 2f 70 65 72 73 6f 6e 61 6c 2f 61 65 72 6f 64 72 69 67 75 65 7a 5f 67 75 6e 6e 61 75 74 6f 5f 63 6f 6d 2f 5f 6c 61 79 6f 75 74 73 2f 31 35 2f 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 3f 53 6f 75 72 63 65 3d 25 32 46 70 65 72 73 6f 6e 61 6c 25 32 46 61 65 72 6f 64 72 69 67 75 65 7a 25 35 46 67 75 6e 6e 61 75 74 6f 25 35 46 63 6f 6d 25 32 46 25 35 46 6c 61 79 6f 75 74 73 25 32 46 31 35 25 32 46 52 65 76 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://gunnauto-my.sharepoint.com/personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2F%5Flayouts%2F15%2FRev
2024-04-19 19:20:56 UTC	187	IN	Data Raw: 74 61 74 69 6f 6e 25 33 44 61 6e 6f 6e 79 6d 6f 75 73 25 32 36 6c 69 73 74 49 64 25 33 44 37 31 35 38 65 34 64 66 25 32 44 33 33 34 66 25 32 44 34 61 65 64 25 32 44 39 30 61 36 25 32 44 30 63 30 61 65 36 62 36 64 35 64 64 25 32 36 69 74 65 6d 49 64 25 33 44 38 62 65 34 35 37 61 61 25 32 44 30 39 31 62 25 32 44 34 31 35 62 25 32 44 38 64 37 61 25 32 44 63 61 66 31 63 64 64 64 34 32 37 32 25 32 36 73 69 67 6e 49 6e 50 72 6f 76 69 64 65 72 25 33 44 6d 73 6f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: tation%3Danonymous%26listId%3D7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd%26itemId%3D8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272%26signInProvider%3Dmso">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49770	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:55 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_7f0a8c2a247460fad87f.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:55 UTC	797	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:55 GMT Content-Type: application/x-javascript Content-Length: 54325 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Feb 2024 19:13:15 GMT ETag: 0x8DC2E5A2998EB1D x-ms-request-id: 26b6b65d-801e-0052-7058-92d0a9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192055Z-r1f585c6b659cdz28g4n6wfx0400000000hg000000008w8a x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:55 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 7b db 46 92 30 fa 7d 7f 05 85 67 46 06 4c 90 22 a9 8b 65 52 10 c7 76 92 79 bd 4f 12 fb d8 ce bc 67 8f cc c9 03 81 a0 84 98 02 b8 b8 d8 d6 88 dc df 7e aa aa ef 40 83 92 af c9 66 3c bb b1 88 46 a3 2f d5 dd d5 75 af bd fb 3b ff d1 b9 df e9 dd fd 7f 9d 97 af 1e bd 78 d5 79 f6 43 e7 d5 ff 79 fa e2 bb ce 73 78 fa af ce cf cf 5e 3d 7d f2 fd dd db c1 4e f1 bf 57 97 49 d1 59 24 cb b8 03 7f cf c3 22 9e 77 b2 b4 93 e5 9d 24 8d b2 7c 95 e5 61 19 17 9d 2b f8 37 4f c2 65 67 91 67 57 9d f2 32 ee ac f2 ec b7 38 2a 8b ce 32 29 4a f8 e8 3c 5e 66 ef 3a 2e 34 97 cf 3b cf c3 bc bc ee 3c 7d ee f5 a1 fd 18 5a 4b 2e 92 14 be 8e b2 d5 35 fc be 2c 3b 69 56 26 51 dc 09 d3 39 b5 b6 84 87 b4 88 3b 55 3a 8f f3 ce bb cb 24 ba ec fc 94 44 79 56 64 Data Ascii: k{F0}gFL"eRvyOg~@f<F/u;xyCysx^=}NWIY$"w$\|a+7OeggW28*2)J<^f:.4;<}ZK.5,;iV&Q9;U:$DyVd
2024-04-19 19:20:55 UTC	16384	IN	Data Raw: af 2c 68 22 6c ec af 0f f1 58 23 9c 57 4f 85 29 04 a2 a6 af 99 30 b3 14 9a 61 1d 83 94 a6 41 a5 e1 ba 40 8e 69 4d 84 c0 0c 7a ee 60 3d 99 b6 58 4f 32 bb c9 b1 51 33 f7 d0 cc 59 d4 64 3d a8 ea f4 ac 64 83 78 6e c2 77 d6 2c 2b 64 ba 9c e8 88 be 66 c5 8c df 66 99 b1 37 5b 0c 65 ed c6 b0 84 1d b8 27 9d b1 78 9f d1 85 0e f7 b3 61 34 de 22 6c a6 2f 35 ab 02 8b c7 89 b8 f8 6d be 19 44 1a 30 db e7 98 94 60 dc 01 03 75 61 53 a0 c6 87 a8 0e 1b 7a e3 5c 73 c0 60 ee 51 be 50 27 6e f4 b1 3e be 6e 52 fc db 7d 60 b6 9b e9 5b 3d 60 f2 fa ac ed ce 08 79 ab 13 40 ae a4 cc 80 81 49 2c 6b 50 9f d5 16 d2 7d b4 9d 74 bf 2b 55 8b fe 30 c4 64 10 31 bb 9d c9 e0 96 d3 e6 5e 6f 10 6f 75 1b 48 73 4a c9 96 29 ed 37 a6 64 1c 6a 49 ac e4 0d 41 ab af c5 fa 1e 4e 52 0c de 9d f6 7a ba 5f Data Ascii: ,h"lX#WO)0aA@iMz`=XO2Q3Yd=dxnw,+dff7[e'xa4"l/5mD0`uaSz\s`QP'n>nR}`[=`y@I,kP}t+U0d1^oouHsJ)7djIANRz_
2024-04-19 19:20:55 UTC	16384	IN	Data Raw: 0e 6a ee 80 44 c4 66 f1 6a 1b d6 a5 51 f4 e0 d1 11 ad 3c 3a ae a2 1c fd f7 9b 24 c3 f6 61 2e 2f 03 95 db 1a db 11 47 1c 6c 89 73 db 4d aa 52 da b0 57 db 32 bf 29 5f 14 77 2f 6b 5d 29 40 84 dd b9 1c e4 35 e5 58 be 7e cb 47 b9 bb 2a af 2e 8c 24 e3 da 82 16 69 69 c9 e0 a5 e4 f7 2e 25 75 e6 0a b6 d4 ed 8d c5 7c aa 50 dc 9c bf f5 32 fa f9 9a a1 fb 5b 8c 97 74 e1 59 21 ca 81 0c 11 73 4a 13 f3 55 f6 45 f9 3a bc a4 72 e9 69 3b 21 8d ae e3 f7 5e 42 e7 ce 71 21 e7 6f 59 7c ee e8 9b 5f a1 85 a7 01 59 7a 29 5e da 20 4b 2f c5 13 5d da b4 de 7b e9 8b e3 e6 74 04 65 da 5b 0f ca e4 1a c9 19 bf b1 7f 1f 64 ff df c5 f6 ba 6e 26 a0 b8 dd de 5a 6b db e4 cb ad 6d bf c0 ce 96 da d2 60 6a ab 5a e3 58 dc 52 e6 5f 6e 74 eb f6 74 f9 a7 8d fa af 6c a3 8e ae 2b bf a6 8d 7a b4 de 46 Data Ascii: jDfjQ<:$a./GlsMRW2)_w/k])@5X~G*.$ii.%u\|P2[tY!sJUE:ri;!^Bq!oY\|_Yz)^ K/]{te[dn&Zkm`jZXR_nttl+zF
2024-04-19 19:20:55 UTC	5970	IN	Data Raw: de 98 b0 b0 3e 49 0e 7e 63 40 3c 29 b8 d4 80 14 aa 30 32 c0 a4 8e 42 d4 35 3d 5f 18 b8 a3 11 36 4f 9a 57 c3 d9 74 ef a4 b8 f7 97 0d 0d bb 85 3e 8b 58 ca db be e7 c3 1b 78 bd b3 c3 96 68 64 69 85 5f 70 17 50 83 d8 fd 33 ab 3f bf a4 b3 1d 87 c9 32 e6 91 0b 6c 50 5a 4a f6 5c 2d 1d b3 22 79 95 55 3b 8d 66 e7 4b 13 fe f9 05 af ed 06 6b ab 90 17 34 34 0c 28 2d 2a bd f3 be c0 75 de d3 f6 02 7a 2f e0 69 a9 24 cb 5c ef 0f ef 5e 3c cd 2e 67 59 4a b6 fe 6a 52 34 68 93 b4 86 af 7e e1 84 3e d1 43 fe ac 88 cb 70 5e 4e 3a fd c3 de 59 54 c4 07 f7 85 be 29 16 8b 95 25 ab 59 35 e6 6f a8 db f0 2e 3e 7f fe 69 46 a2 81 57 38 17 aa 49 22 ed a7 b4 13 d1 92 8d eb 69 f9 16 09 1b 5c 25 e9 38 bb da 86 23 f6 4c d9 de 66 66 42 57 34 c8 1b fc 24 86 6d 5f d0 4a a9 01 18 3a 11 3d 65 48 Data Ascii: >I~c@<)02B5=_6OWt>Xxhdi_pP3?2lPZJ\-"yU;fKk44(-*uz/i$\^<.gYJjR4h~>Cp^N:YT)%Y5o.>iFW8I"i\%8#LffBW4$m_J:=eH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49780	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:55 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:55 UTC	744	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:55 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: dab893a0-a01e-0038-0d8e-919c9e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192055Z-15497cdd9fdrqxqjgry493ntmc000000026g000000002d9g x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:55 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-19 19:20:55 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49782	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:55 UTC	662	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:56 UTC	805	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:56 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: fa83c1cc-301e-0029-2557-9207be000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192056Z-16f7b4795d4fmxn4prvpma73gw00000000g0000000000gka x-fd-int-roxy-purgeid: 4554691 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:56 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49781	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:55 UTC	663	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:56 UTC	785	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:56 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: fc0bab5e-e01e-0078-3490-914f8f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192056Z-15497cdd9fdjjjvzcbyxy9ybew00000001xg00000000p7st x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:56 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49784	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:56 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_eb638da25d4055fbbb57.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:56 UTC	818	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:56 GMT Content-Type: application/x-javascript Content-Length: 35813 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Feb 2024 19:13:16 GMT ETag: 0x8DC2E5A29EDB0A1 x-ms-request-id: 0da4dbb9-401e-001a-3982-915ba9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192056Z-15497cdd9fd28c6zhavqxs647w000000023g000000009qqe x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-19 19:20:56 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 7f db 38 92 28 fa ff f9 14 b6 a6 c7 11 db b4 2c ea 2d db 8c c7 f1 a3 93 99 a4 93 cd a3 67 67 6c 75 86 a2 20 89 6d 8a 94 49 ca 8f c4 de cf 7e ab 0a 6f 52 76 92 d9 b3 e7 dc df bd 99 69 9a 28 14 0a 85 02 50 28 14 0a d4 ee cf 9b ff 6b e3 e7 8d 9d ef ff b7 f1 e1 e3 d1 fb 8f 1b 6f cf 36 3e be 7c f5 fe 64 e3 1d a4 fe b1 f1 eb db 8f af 8e 4f bf 9f 0e 56 8a ff 7d 9c 47 f9 c6 34 8a d9 06 fc 1d 07 39 9b 6c a4 c9 46 9a 6d 44 49 98 66 cb 34 0b 0a 96 6f 2c e0 99 45 41 bc 31 cd d2 c5 46 31 67 1b cb 2c fd 83 85 45 be 11 47 79 01 85 c6 2c 4e 6f 36 ea 40 2e 9b 6c bc 0b b2 e2 6e e3 d5 3b a7 01 f4 19 50 8b 66 51 02 a5 c3 74 79 07 ef f3 62 23 49 8b 28 64 1b 41 32 21 6a 31 24 92 9c 6d ac 92 09 cb 36 6e e6 51 38 df 78 13 85 59 9a a7 d3 62 Data Ascii: {8(,-gglu mI~oRvi(P(ko6>\|dOV}G49lFmDIf4o,EA1F1g,EGy,No6@.ln;PfQtyb#I(dA2!j1$m6nQ8xYb
2024-04-19 19:20:56 UTC	16384	IN	Data Raw: fb f4 8a 9f 60 92 f4 a9 99 cc fa b2 bd d7 13 b0 c4 06 dc ca 65 96 2c ec 0f e5 1d 27 21 95 80 e4 d4 cb 2b 1f 51 c4 8b 15 a2 2b 7a 64 54 7d 78 69 fe fa 15 f1 34 37 7f ff 6a 48 38 1a 63 c0 31 54 3e 0d 4a 3c 74 5e fb 49 76 ca 59 7b 5d bb 7c 7a dd 96 b0 75 ce 53 22 b3 de f0 a1 2c fb db ee 74 13 31 9f 8b df f9 c1 01 f8 21 9a a9 2f 3e 92 7d 93 1b 80 50 01 a6 12 d2 92 90 6b 1b a2 4f df 78 d2 08 c8 0e 38 44 1d a9 b7 45 fa aa 04 50 9f a1 66 22 2d 27 02 ed 08 cd ef cc 4d 44 5a 5d b0 9c 72 80 0a b5 a6 e3 0f 00 98 4b 42 87 83 cc 2f c2 11 eb e5 cf 3f d0 77 57 f9 cf 71 c9 a1 46 3d 8b e0 b5 83 72 11 e4 73 39 87 69 73 9b 2f ec 2f 29 53 cd e5 0e 5d 44 92 7e 5b 00 d4 47 1c 02 9e 54 2e b0 50 a4 55 20 57 a8 6e ee 7c 78 7b f6 51 8f 40 42 4c a7 85 1e 83 1c 12 1b de fe a9 80 48 Data Ascii: `e,'!+Q+zdT}xi47jH8c1T>J<t^IvY{]\|zuS",t1!/>}PkOx8DEPf"-'MDZ]rKB/?wWqF=rs9is//)S]D~[GT.PU Wn\|x{Q@BLH
2024-04-19 19:20:56 UTC	3863	IN	Data Raw: ac c2 18 06 70 37 5a 66 93 fc 61 14 40 f7 bf 8e fc cd dd a4 86 91 90 19 d3 45 f3 72 8f 21 d5 e4 0c 79 9a 4f 10 48 66 a8 4e a4 db e3 4b c1 87 72 bb 6d 34 d5 3e d9 cc 55 c8 ee 9c a4 a6 95 b9 d5 17 33 33 2c e8 70 fb 44 11 ed bb 2c 48 eb 8c 92 a6 b8 a8 8a e5 0a 9f 59 31 be e5 8c 34 65 74 1e 1c 19 75 de 81 31 86 b5 fe 29 4d 81 0b 7b 6d e1 fe 15 2e 1f 3e ef ec 93 cf 31 d1 93 93 0c 4e 1f 1b ff a4 f6 da 09 9c d7 b5 ee c9 6b 67 87 b8 3c 9d ce 19 2e 03 e2 e2 f1 42 df df f1 2b 2b 86 2b a8 9a 25 10 da a6 5a 4e ee 79 00 b9 f3 53 d2 6d 63 74 4b d1 35 fc e2 22 6c e8 e9 c0 6c bf f5 8e a0 23 c0 d8 95 3b 3d eb 13 df e7 53 29 ef 2b 5b 5d c9 12 0c 9e 8a 33 00 52 25 5a b7 87 89 f1 16 cb 67 4f 25 77 f7 16 52 dc ae f6 b1 c2 c6 4b c1 41 51 e7 9d 50 3f d3 0e 55 45 ba 19 14 a8 a5 Data Ascii: p7Zfa@Er!yOHfNKrm4>U33,pD,HY14etu1)M{m.>1Nkg<.B+++%ZNySmctK5"ll#;=S)+[]3R%ZgO%wRKAQP?UE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49785	13.107.246.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:56 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:56 UTC	744	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:56 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: dab893a0-a01e-0038-0d8e-919c9e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192056Z-15497cdd9fdrtvgd4t2mhqxwec000000028g000000003v7m x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:56 UTC	15640	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-19 19:20:56 UTC	1534	IN	Data Raw: 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49777	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:56 UTC	2553	OUT	GET /personal/aerodriguez_gunnauto_com/_layouts/15/Authenticate.aspx?Source=%2Fpersonal%2Faerodriguez%5Fgunnauto%5Fcom%2F%5Flayouts%2F15%2FRevokeInvite%2Easpx%3Finvitation%3Danonymous%26listId%3D7158e4df%2D334f%2D4aed%2D90a6%2D0c0ae6b6d5dd%26itemId%3D8be457aa%2D091b%2D415b%2D8d7a%2Dcaf1cddd4272%26signInProvider%3Dmso HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nSGt-DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944=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; RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGYWVyb2RyaWd1ZXolNUZndW5uYXV0byU1RmNvbSUyRiU1RmxheW91dHMlMkYxNSUyRlJldm9rZUludml0ZSUyRWFzcHglM0ZpbnZpdGF0aW9uJTNEYW5vbnltb3VzJTI2bGlzdElkJTNENzE1OGU0ZGYlMkQzMzRmJTJENGFlZCUyRDkwYTYlMkQwYzBhZTZiNmQ1ZGQlMjZpdGVtSWQlM0Q4YmU0NTdhYSUyRDA5MWIlMkQ0MTViJTJEOGQ3YSUyRGNhZjFjZGRkNDI3MiUyNnNpZ25JblByb3ZpZGVyJTNEbGl2ZSZQcmV2aW91c1JlcXVlc3RDb3JyZWxhdGlvbklkPWFjOWYyMGExJTJEZTAyMSUyRDUwMDAlMkQ1YWU4JTJEMTg0NWU2YTA2YjRiJlJldHVyblVybD0lMkZwZXJzb25hbCUyRmFlcm9kcmlndWV6JTVGZ3VubmF1dG8lNUZjb20lMkYlNUZsYXlvdXRzJTJGMTUlMkZBdXRoZW50aWNhdGUlMkVhc3B4JTNGU291cmNlJTNEJTI1MkZwZXJzb25hbCUyNTJGYWVyb2RyaWd1ZXolMjU1Rmd1bm5hdXRvJTI1NUZjb20lMjUyRiUyNTVGbGF5b3V0cyUyNTJGMTUlMjUyRlJldm9rZUludml0ZSUyNTJFYXNweCUyNTNGaW52aXRhdGlvbiUyNTNEYW5vbnltb3VzJTI1MjZsaXN0SWQlMjUzRDcxNThlNGRmJTI1MkQzMzRmJTI1MkQ0YWVkJTI1MkQ5MGE2JTI1MkQwYzBhZTZiNmQ1ZGQlMjUyNml0ZW1JZCUyNTNEOGJlNDU3YWElMjUyRDA5MWIlMjUyRDQxNWIlMjUyRDhkN2ElMjUyRGNhZjFjZGRkNDI3MiUyNTI2c2lnbkluUHJvdmlkZXIlMjUzRGxpdmU=
2024-04-19 19:20:56 UTC	2808	IN	HTTP/1.1 302 Found Cache-Control: private Content-Length: 544 Content-Type: text/html; charset=utf-8 Location: /_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252F%255Flayouts%252F15%252FRevokeInvite%252Easpx%253Finvitation%253Danonymous%2526listId%253D7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%2526itemId%253D8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272%2526signInProvider%253Dmso&Source=cookie P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: RpsContextCookie=UmV0dXJuVXJsPSUyRnBlcnNvbmFsJTJGYWVyb2RyaWd1ZXolNUZndW5uYXV0byU1RmNvbSUyRiU1RmxheW91dHMlMkYxNSUyRkF1dGhlbnRpY2F0ZSUyRWFzcHglM0ZTb3VyY2UlM0QlMjUyRnBlcnNvbmFsJTI1MkZhZXJvZHJpZ3VleiUyNTVGZ3VubmF1dG8lMjU1RmNvbSUyNTJGJTI1NUZsYXlvdXRzJTI1MkYxNSUyNTJGUmV2b2tlSW52aXRlJTI1MkVhc3B4JTI1M0ZpbnZpdGF0aW9uJTI1M0Rhbm9ueW1vdXMlMjUyNmxpc3RJZCUyNTNENzE1OGU0ZGYlMjUyRDMzNGYlMjUyRDRhZWQlMjUyRDkwYTYlMjUyRDBjMGFlNmI2ZDVkZCUyNTI2aXRlbUlkJTI1M0Q4YmU0NTdhYSUyNTJEMDkxYiUyNTJENDE1YiUyNTJEOGQ3YSUyNTJEY2FmMWNkZGQ0MjcyJTI1MjZzaWduSW5Qcm92aWRlciUyNTNEbGl2ZSZTb3VyY2U9JTJGcGVyc29uYWwlMkZhZXJvZHJpZ3VleiU1Rmd1bm5hdXRvJTVGY29tJTJGJTVGbGF5b3V0cyUyRjE1JTJGUmV2b2tlSW52aXRlJTJFYXNweCUzRmludml0YXRpb24lM0Rhbm9ueW1vdXMlMjZsaXN0SWQlM0Q3MTU4ZTRkZiUyRDMzNGYlMkQ0YWVkJTJEOTBhNiUyRDBjMGFlNmI2ZDVkZCUyNml0ZW1JZCUzRDhiZTQ1N2FhJTJEMDkxYiUyRDQxNWIlMkQ4ZDdhJTJEY2FmMWNkZGQ0MjcyJTI2c2lnbkluUHJvdmlkZXIlM0Rtc28=; expires=Fri, 19-Apr-2024 19:30:56 GMT; path=/; SameSite=None; secure; HttpOnly X-NetworkStatistics: 0,525568,0,0,931994,0,64154 X-SharePointHealthScore: 0 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: ad9f20a1-b07f-5000-34a3-df546856eeee request-id: ad9f20a1-b07f-5000-34a3-df546856eeee MS-CV: oSCfrX+wAFA0o99UaFbu7g.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=00000000-0000-0000-0000-000000000000&destinationEndpoint=Edge-Prod-ATL33r5c&frontEnd=AFD&RemoteIP=81.181.57.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 15 SPIisLatency: 1 X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: EB232BC144354C56BF40EC5611DFA8E0 Ref B: ATL331000105029 Ref C: 2024-04-19T19:20:56Z Date: Fri, 19 Apr 2024 19:20:56 GMT Connection: close
2024-04-19 19:20:56 UTC	544	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 5f 66 6f 72 6d 73 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 66 70 65 72 73 6f 6e 61 6c 25 32 66 61 65 72 6f 64 72 69 67 75 65 7a 5f 67 75 6e 6e 61 75 74 6f 5f 63 6f 6d 25 32 66 5f 6c 61 79 6f 75 74 73 25 32 66 31 35 25 32 66 41 75 74 68 65 6e 74 69 63 61 74 65 2e 61 73 70 78 25 33 66 53 6f 75 72 63 65 25 33 64 25 32 35 32 46 70 65 72 73 6f 6e 61 6c 25 32 35 32 46 61 65 72 6f 64 72 69 67 75 65 7a 25 32 35 35 46 67 75 6e 6e 61 75 74 6f 25 32 35 35 46 63 6f 6d 25 32 35 32 46 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49786	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:56 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:56 UTC	784	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:56 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 7290830d-901e-000f-258f-916c81000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192056Z-15497cdd9fd7xqjqsvryefhbyn000000024g00000000np4g x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:56 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49788	13.107.246.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:56 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:56 UTC	785	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:56 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: fc0bab5e-e01e-0078-3490-914f8f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192056Z-15497cdd9fd6xqg2gux9dtkys4000000026000000000dme4 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:56 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49787	13.107.246.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:56 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:56 UTC	784	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:56 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: bffe64de-301e-0039-187d-91b79c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192056Z-15497cdd9fdjvlbfxhrrthhyb000000002ag000000006fft x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:56 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49789	13.107.246.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:56 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:20:57 UTC	784	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:20:57 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 7290830d-901e-000f-258f-916c81000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192057Z-15497cdd9fdjjjvzcbyxy9ybew00000001xg00000000p7u3 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:20:57 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49790	13.107.136.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:20:56 UTC	2562	OUT	GET /_forms/default.aspx?ReturnUrl=%2fpersonal%2faerodriguez_gunnauto_com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fpersonal%252Faerodriguez%255Fgunnauto%255Fcom%252F%255Flayouts%252F15%252FRevokeInvite%252Easpx%253Finvitation%253Danonymous%2526listId%253D7158e4df%252D334f%252D4aed%252D90a6%252D0c0ae6b6d5dd%2526itemId%253D8be457aa%252D091b%252D415b%252D8d7a%252Dcaf1cddd4272%2526signInProvider%253Dmso&Source=cookie HTTP/1.1 Host: gunnauto-my.sharepoint.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: nSGt-DF0F42472B99D9F4C4AEE51FCF03A5086C236CF2F171F944=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; RpsContextCookie=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
2024-04-19 19:20:57 UTC	4313	IN	HTTP/1.1 302 Found Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 884 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://login.microsoftonline.com:443/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9%2D754088AC550404B3F34AF17BDBD92764A5912F1816A0C3E940AD7D9190356D0E&redirect%5Furi=https%3A%2F%2Fgunnauto%2Dmy%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=ad9f20a1%2Dd0a4%2D5000%2D498d%2Df35e97ae8794 P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI" Set-Cookie: nSGt-61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9=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; expires=Fri, 19-Apr-2024 19:24:57 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: nSGt-61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly Set-Cookie: RpsContextCookie=U291cmNlPSUyRnBlcnNvbmFsJTJGYWVyb2RyaWd1ZXolNUZndW5uYXV0byU1RmNvbSUyRiU1RmxheW91dHMlMkYxNSUyRlJldm9rZUludml0ZSUyRWFzcHglM0ZpbnZpdGF0aW9uJTNEYW5vbnltb3VzJTI2bGlzdElkJTNENzE1OGU0ZGYlMkQzMzRmJTJENGFlZCUyRDkwYTYlMkQwYzBhZTZiNmQ1ZGQlMjZpdGVtSWQlM0Q4YmU0NTdhYSUyRDA5MWIlMkQ0MTViJTJEOGQ3YSUyRGNhZjFjZGRkNDI3MiUyNnNpZ25JblByb3ZpZGVyJTNEbXNvJlByZXZpb3VzUmVxdWVzdENvcnJlbGF0aW9uSWQ9YWQ5ZjIwYTElMkRkMGE0JTJENTAwMCUyRDQ5OGQlMkRmMzVlOTdhZTg3OTQmUmV0dXJuVXJsPSUyRnBlcnNvbmFsJTJGYWVyb2RyaWd1ZXolNUZndW5uYXV0byU1RmNvbSUyRiU1RmxheW91dHMlMkYxNSUyRkF1dGhlbnRpY2F0ZSUyRWFzcHglM0ZTb3VyY2UlM0QlMjUyRnBlcnNvbmFsJTI1MkZhZXJvZHJpZ3VleiUyNTVGZ3VubmF1dG8lMjU1RmNvbSUyNTJGJTI1NUZsYXlvdXRzJTI1MkYxNSUyNTJGUmV2b2tlSW52aXRlJTI1MkVhc3B4JTI1M0ZpbnZpdGF0aW9uJTI1M0Rhbm9ueW1vdXMlMjUyNmxpc3RJZCUyNTNENzE1OGU0ZGYlMjUyRDMzNGYlMjUyRDRhZWQlMjUyRDkwYTYlMjUyRDBjMGFlNmI2ZDVkZCUyNTI2aXRlbUlkJTI1M0Q4YmU0NTdhYSUyNTJEMDkxYiUyNTJENDE1YiUyNTJEOGQ3YSUyNTJEY2FmMWNkZGQ0MjcyJTI1MjZzaWduSW5Qcm92aWRlciUyNTNEbXNv; expires=Fri, 19-Apr-2024 19:30:57 GMT; path=/; SameSite=None; secure; HttpOnly Set-Cookie: RpsContextCookie=; expires=Thu, 01-Jan-1970 08:00:00 GMT; path=/; SameSite=None; Partitioned; secure; HttpOnly X-NetworkStatistics: 4294967295,4294967295,4294967295,4294967295,4294967295,4294967295,4294967295 X-SharePointHealthScore: 3 X-AspNet-Version: 4.0.30319 X-DataBoundary: NONE X-1DSCollectorUrl: https://mobile.events.data.microsoft.com/OneCollector/1.0/ X-AriaCollectorURL: https://browser.pipe.aria.microsoft.com/Collector/3.0/ SPRequestGuid: ad9f20a1-d0a4-5000-498d-f35e97ae8794 request-id: ad9f20a1-d0a4-5000-498d-f35e97ae8794 MS-CV: oSCfraTQAFBJjfNel66HlA.0 Report-To: {"group":"network-errors","max_age":7200,"endpoints":[{"url":"https://spo.nel.measure.office.net/api/report?tenantId=ebf86bb9-f642-4b12-a97c-cb5f0f37b474&destinationEndpoint=Edge-Prod-ATL33r5a&frontEnd=AFD&RemoteIP=81.181.57.0"}]} NEL: {"report_to":"network-errors","max_age":7200,"success_fraction":0.001,"failure_fraction":1.0} Strict-Transport-Security: max-age=31536000 SPRequestDuration: 41 SPIisLatency: 0 Include-Referred-Token-Binding-ID: true X-Powered-By: ASP.NET MicrosoftSharePointTeamServices: 16.0.0.24727 X-Content-Type-Options: nosniff X-MS-InvokeApp: 1; RequireReadOnly X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E134AAD32A8F43438C7BA2787D6C2716 Ref B: ATL331000101021 Ref C: 2024-04-19T19:20:57Z Date: Fri, 19 Apr 2024 19:20:56 GMT Connection: close
2024-04-19 19:20:57 UTC	256	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 3a 34 34 33 2f 65 62 66 38 36 62 62 39 2d 66 36 34 32 2d 34 62 31 32 2d 61 39 37 63 2d 63 62 35 66 30 66 33 37 62 34 37 34 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 25 35 46 69 64 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 6d 6f 64 65 3d 66 6f 72 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://login.microsoftonline.com:443/ebf86bb9-f642-4b12-a97c-cb5f0f37b474/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=for
2024-04-19 19:20:57 UTC	628	IN	Data Raw: 25 35 46 70 6f 73 74 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 25 35 46 74 79 70 65 3d 63 6f 64 65 25 32 30 69 64 25 35 46 74 6f 6b 65 6e 26 61 6d 70 3b 72 65 73 6f 75 72 63 65 3d 30 30 30 30 30 30 30 33 25 32 44 30 30 30 30 25 32 44 30 66 66 31 25 32 44 63 65 30 30 25 32 44 30 30 30 30 30 30 30 30 30 30 30 30 26 61 6d 70 3b 73 63 6f 70 65 3d 6f 70 65 6e 69 64 26 61 6d 70 3b 6e 6f 6e 63 65 3d 36 31 39 30 30 44 39 39 35 34 34 42 36 38 34 41 37 45 43 34 31 46 44 34 39 34 39 46 42 32 42 45 31 35 32 46 39 37 36 32 31 38 33 43 38 30 46 39 25 32 44 37 35 34 30 38 38 41 43 35 35 30 34 30 34 42 33 46 33 34 41 46 31 37 42 44 42 44 39 32 37 36 34 41 35 39 31 32 46 31 38 31 36 41 30 43 33 45 39 34 30 41 44 37 44 39 31 39 30 33 35 36 44 30 45 26 61 6d 70 3b 72 65 64 69 Data Ascii: %5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=61900D99544B684A7EC41FD4949FB2BE152F9762183C80F9%2D754088AC550404B3F34AF17BDBD92764A5912F1816A0C3E940AD7D9190356D0E&redi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49797	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:03 UTC	608	OUT	GET /converged_ux_v2_nBE5FSqn9KpH44ZlTc3VqQ2.css?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:03 UTC	780	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:03 GMT Content-Type: text/css Content-Length: 17755 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Thu, 18 Apr 2024 01:45:56 GMT ETag: 0x8DC5F494A88C43F x-ms-request-id: 666f8388-001e-00ab-6b9d-9195ca000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192103Z-15497cdd9fdjss27kvz4y54h1c000000025g00000000f117 x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:21:03 UTC	15604	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 69 73 db 46 d2 f0 77 ff 0a ac 5c ae 58 59 12 e1 2d 4a aa a4 d6 87 12 eb 59 1f 2a 4b d9 ec 56 de 94 0b 22 21 11 6b 10 60 01 a0 65 85 0f ff fb db 73 5f 3d 00 28 c9 89 9f aa 44 b1 44 ce f4 f4 5c 3d 3d 3d 33 7d 7c f7 ed df 82 17 f9 ea b6 48 ae 17 55 f0 f4 c5 7e f0 26 99 15 79 99 5f 55 90 5e ac f2 22 aa 92 3c 0b 83 67 69 1a 50 a0 32 28 e2 32 2e 3e c5 f3 30 f8 f6 bb ef be fd db a3 6e fb ff 82 f3 8b 67 ef 2f 82 77 3f 06 17 af 4e df bf 0c ce e0 db 7f 82 b7 ef 2e 4e 5f 9c 04 ad b1 3c 7a 74 b1 48 ca e0 2a 49 e3 00 fe 5e 46 65 3c 0f f2 2c c8 8b 20 c9 66 bc d5 71 19 2c e1 77 91 44 69 70 55 e4 cb a0 5a c4 c1 aa c8 ff 1b cf a0 0f 69 52 56 50 e8 32 4e f3 9b e0 29 a0 2b e6 c1 59 54 54 b7 c1 e9 d9 7e 18 5c 00 6c 0e dd 4d 32 28 3d 93 e3 Data Ascii: }isFw\XY-JYKV"!k`es_=(DD\===3}\|HU~&y_U^"<giP2(2.>0ng/w?N.N_<ztHI^Fe<, fq,wDipUZiRVP2N)+YTT~\lM2(=
2024-04-19 19:21:03 UTC	2151	IN	Data Raw: a8 5f 47 3c ef 7d 14 7d 22 58 4f cb 8f 39 f0 de e0 2c af 58 7e b5 a0 7f 63 e0 31 37 d1 3c 26 2d 94 77 df c1 7f a2 57 71 c2 10 a8 c4 ff 59 c4 d9 b5 4a 8f d2 eb 75 16 fc 94 57 8b 64 46 7a 55 92 a9 ba 8e d3 3c 38 81 cd a4 8c 8c b2 af 12 d2 d3 5b 33 f1 6d 7c 13 5c 44 49 f0 7a 6d d6 7e b6 88 ae cb 33 13 96 c2 59 8d 4c 82 e7 11 f0 26 92 98 67 d7 c0 58 a3 4c a5 fc 2b 78 0e 29 e4 d3 6d 94 c1 3c 06 24 26 22 7c 7d 11 2d 61 fc a3 e0 0d 8c c0 9e 4e 35 4c f0 fb 7d d1 9d 65 fb 1d 2c bd ba d9 df 7c 25 b3 ff d7 8c df 7d c6 c9 cb 22 dd 12 dd b3 b3 be fe f5 ef 62 fd 87 03 e7 71 93 27 69 0f a0 23 4c a9 45 67 39 43 60 39 86 fe 58 78 40 71 d8 86 d9 e1 70 32 d4 6f 6a 69 ab 44 e2 5f 2c ee 2f 82 6f 45 f0 75 77 3d 3d 8d 70 c2 c3 21 23 43 93 34 29 79 6f 95 3a 11 3b 5f 68 c5 a6 0c Data Ascii: _G<}}"XO9,X~c17<&-wWqYJuWdFzU<8[3m\|\DIzm~3YL&gXL+x)m<$&"\|}-aN5L}e,\|%}"bq'i#LEg9C`9Xx@qp2ojiD_,/oEuw==p!#C4)yo:;_h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49801	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:03 UTC	626	OUT	GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:03 UTC	785	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:03 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Fri, 19 Apr 2024 05:26:18 GMT ETag: 0x8DC60313DDFB27B x-ms-request-id: b180b502-701e-0088-728e-9279ff000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192103Z-15497cdd9fd6xqg2gux9dtkys40000000280000000009314 x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_MISS Accept-Ranges: bytes
2024-04-19 19:21:03 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49800	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:03 UTC	588	OUT	GET /jqueryshim_hlu0tTfjWJFWYNt1WZrVqg2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:03 UTC	793	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:03 GMT Content-Type: application/javascript Content-Length: 5564 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Thu, 18 Apr 2024 01:46:09 GMT ETag: 0x8DC5F49522B605E x-ms-request-id: 7ce69a4b-501e-0022-1b98-91b18c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192103Z-15497cdd9fdjvlbfxhrrthhyb000000002c00000000032xs x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:21:03 UTC	5564	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cd 3c 6b 8f db 38 92 df fd 2b da c2 c2 90 10 c5 70 67 80 fb 60 b5 62 64 33 b3 97 e0 66 a6 f7 36 99 bd 3b 18 46 a0 b6 e9 b6 26 32 e9 a5 e8 ee 34 da fa ef 57 c5 87 44 52 92 fb e5 bb 64 06 88 5b 14 45 56 15 eb cd 22 d7 7b ba 14 39 a3 67 5f b2 d5 ea 97 1b 42 c5 af 79 29 08 25 3c 24 b1 88 69 74 4f 46 23 32 f6 5f ce da 4d 21 f6 9e 62 ef b3 9c 96 22 a3 4b c2 d6 67 1f 3e ff f6 eb 2f 05 d9 42 47 39 8e 10 d9 72 23 bf f3 1e c3 80 d1 e0 15 8e 51 ad 6b 98 ae 89 b8 e4 9f 88 f8 3b 67 bb f2 92 ea 81 4a 05 5a cc a3 fb 7c 0d df 5d fd 49 96 22 48 53 71 b7 c3 29 45 74 ff 65 cd f8 2f 30 f2 7f 90 3b 00 cb 8c 17 02 36 f0 22 bc c9 f8 59 99 4e e2 3c 25 63 02 43 96 49 79 91 8f 0b 42 af c5 26 29 5f bd 8a ee b1 07 4b f3 79 b9 48 f8 8c cd f9 62 4e 17 a9 Data Ascii: <k8+pg`bd3f6;F&24WDRd[EV"{9g_By)%<$itOF#2_M!b"Kg>/BG9r#Qk;gJZ\|]I"HSq)Ete/0;6"YN<%cCIyB&)_KyHbN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49796	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:03 UTC	592	OUT	GET /knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:03 UTC	815	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:03 GMT Content-Type: application/javascript Content-Length: 28582 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Fri, 19 Apr 2024 05:26:28 GMT ETag: 0x8DC6031437EFCEA x-ms-request-id: bbe97e00-701e-0098-2769-92c9dd000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192103Z-r1f585c6b655v9mp7bmcfntm7g00000000w0000000005qb3 x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-19 19:21:03 UTC	15569	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc bd 69 73 db 48 96 36 fa dd 11 fe 0f 20 5e 87 0c 94 52 90 54 d5 33 d3 0d 1a e6 95 25 d9 56 95 2c b9 25 b9 aa ab 69 b5 03 1b 17 13 5c 44 90 5a 2c f2 bf df f3 9c cc 04 12 20 e4 aa 9e 77 e6 c6 75 57 8b 40 22 f7 e5 e4 d9 cf ee 0f ad 9d 3f ff cf ba bc 3a b8 b8 b2 ce df 5a 57 ef 4f 2e 8e ac 8f f4 f6 bb 75 76 7e 75 72 78 6c fd e9 5a 9e 3f 7b fe ec 6a 30 cc ad de 30 4b 2d fa 8d c2 3c 4d ac e9 c4 9a ce ad e1 24 9e ce 67 d3 79 b8 48 73 6b 4c 7f e7 c3 30 b3 7a f3 e9 d8 5a 0c 52 6b 36 9f 7e 4d e3 45 6e 65 c3 7c 41 85 a2 34 9b de 59 0e 55 37 4f ac 8f e1 7c f1 60 9d 7c 74 3d eb 8a f2 4e e7 c3 fe 70 42 a5 e3 e9 ec 81 9e 07 0b 6b 32 5d 0c e3 d4 0a 27 09 d7 96 d1 cb 24 4f ad e5 24 49 e7 d6 dd 60 18 0f ac 0f c3 78 3e cd a7 bd 85 35 4f e3 74 Data Ascii: isH6 ^RT3%V,%i\DZ, wuW@"?:ZWO.uv~urxlZ?{j00K-<M$gyHskL0zZRk6~MEne\|A4YU7O\|`\|t=NpBk2]'$O$I`x>5Ot
2024-04-19 19:21:03 UTC	13013	IN	Data Raw: 3a c5 59 d4 c0 49 88 71 43 38 ba 65 69 4a ea 76 64 2b ca e6 a7 fa 0d ba b8 5c e4 b6 29 ef ad ce a4 2d a5 61 80 2b 6b 88 a6 f7 f0 64 c3 41 86 05 21 ca f3 30 19 4e 8b 14 46 27 56 ab 4c 73 eb 54 08 3f 39 d4 3a 75 43 f3 d8 e7 55 9a 09 3a ad ab 55 1f 56 67 ad 88 21 1a ca 25 84 16 0f 6f 96 29 8e 15 2b 32 38 95 e0 15 a5 1f 53 06 a5 69 45 01 04 ad 62 ab d8 50 da 19 d9 22 55 f0 b6 82 5b b2 16 ed c0 fb b5 58 81 96 ba 38 8c a9 0a 9e 3f 6b 3e b6 91 11 c5 59 a1 94 5a 63 99 6a c8 f3 3f 79 da 55 78 29 1c 9b cd 68 da 9d 3f 04 03 78 38 09 b5 eb 03 f6 22 a5 55 4f a5 a6 65 91 41 9b 7e 53 d7 78 60 d8 ca 1b 89 41 2c 8c 1a 69 f7 4a 1f ab 44 46 b2 ea c0 9f 1d 53 0c f0 43 17 28 ca 24 0d 90 c5 d6 df c0 0b 01 68 d1 ef ec 91 5e bf 30 af 5f 36 af 92 9e 68 bf ec a0 d2 71 69 dc 28 c6 Data Ascii: :YIqC8eiJvd+\)-a+kdA!0NF'VLsT?9:uCU:UVg!%o)+28SiEbP"U[X8?k>YZcj?yUx)h?x8"UOeA~Sx`A,iJDFSC($h^0_6hqi(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49798	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:03 UTC	615	OUT	GET /lwsignupstringscountrybirthdate_en-us_gdxUIqa3ijrOefuBnwhTKg2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:03 UTC	793	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:03 GMT Content-Type: application/javascript Content-Length: 7203 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Thu, 18 Apr 2024 01:46:11 GMT ETag: 0x8DC5F49538A4838 x-ms-request-id: edcdb1ad-501e-0076-70a6-917eb7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192103Z-15497cdd9fd6xqg2gux9dtkys4000000025000000000fuwe x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:21:03 UTC	7203	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 5c cd 72 e3 48 72 be fb 29 b0 b4 23 d4 e3 e8 51 f3 ff a7 b7 a5 b5 44 49 14 5b 24 c5 11 29 f5 cf ee c6 44 11 2c 91 18 81 28 4e 01 10 87 dd 31 11 be f8 21 7c f6 c1 b1 07 df fc 06 fd 26 7e 12 67 16 40 22 13 12 a0 c1 c4 ee a5 9b 02 b2 aa b2 be fc fb b2 00 f2 0f f7 a1 67 07 8e f2 5e 7d f7 55 cb 85 e3 07 52 8f c4 4a fa 6b 61 cb 57 a5 7f e9 2a ef de 59 94 be 7b 1d 7f 3a f4 97 42 cb f9 24 d0 8e b7 f0 8f be 96 a4 d6 4a fb a5 b7 5f 4b 5a fe 1c 3a 70 af f4 b6 34 5d 3a be e5 78 f7 4a af 04 4e 6e c1 9f bb db 87 a5 d7 25 b9 12 8e 7b 93 c8 9f 78 96 b9 64 89 f9 5c 4b df a7 f2 20 be 5e 2a 4f 52 71 cb 5c b1 bc 70 35 93 3a 2d 2c 7c 7f a3 f4 9c cb c7 17 53 b2 8e f7 28 5c 67 7e 8e 6b 5f 18 65 41 fa dc 03 0c ac 60 29 d3 3a 79 e6 62 b4 29 cb 57 Data Ascii: \rHr)#QDI[$)D,(N1!\|&~g@"g^}URJkaWY{:B$J_KZ:p4]:xJNn%{xd\K ^ORq\p5:-,\|S(\g~k_eA`):yb)W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49799	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:03 UTC	602	OUT	GET /lightweightsignuppackage_MwksSuxFBgQ4Y619ES0DZQ2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:03 UTC	815	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:03 GMT Content-Type: application/javascript Content-Length: 53469 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Wed, 10 Apr 2024 04:56:12 GMT ETag: 0x8DC591A8BBDE083 x-ms-request-id: ce4a52c0-201e-00fd-0194-910cf5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192103Z-15497cdd9fdhv4vv3fyv74385c000000025000000000fwru x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-19 19:21:03 UTC	15569	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec 7d 79 7f db b6 b2 e8 ff fe 14 32 eb a3 92 15 a4 48 f2 92 44 0a ad eb 25 69 dc 6c 6e 9c 34 6d 5d 35 8f 16 29 89 35 45 aa 24 e5 a5 96 ee 67 7f 33 03 80 04 37 d9 c9 69 ef b9 ef f7 7b 3d 27 16 09 80 58 06 83 d9 30 18 8c 17 fe 28 76 03 bf f6 dc 1f 85 b7 f3 58 77 58 cc 7c 66 19 77 57 56 58 0b cc f3 61 3f ba 76 e3 d1 54 f7 5b 71 f0 3a b8 76 c2 23 2b 72 74 c3 b8 1b c1 af 36 9a 4e a2 3f 23 4b eb b9 63 dd 5f 78 9e 69 3a cb 25 7f 88 8d bb d0 89 17 a1 5f c3 f7 55 60 9e 5a a3 4b 6b e2 9c 1d 1c 5b b1 85 0d 19 fd 8b d0 b1 2e fb b2 a6 f9 b5 5d 56 91 55 51 d1 5b e7 fa c0 b7 df 79 f6 e9 b5 0d d5 59 99 ea 72 75 55 54 01 5f be f3 bd 5b dd c9 7e eb fa 0f f9 d6 f5 cb be 0d 83 60 ac 7e 5d af af 07 c7 eb 60 e2 fa 27 7e 4c 40 c1 ac 4d d3 19 38 bd Data Ascii: }y2HD%iln4m]5)5E$g37i{='X0(vXwX\|fwWVXa?vT[q:v#+rt6N?#Kc_xi:%_U`ZKk[.]VUQ[yYruUT_[~`~]`'~L@M8
2024-04-19 19:21:03 UTC	16384	IN	Data Raw: f7 49 a1 95 da 2e d5 0d 3a 6d b9 3c 4c b4 fd 33 77 79 e3 dd 12 7e 50 0e af 08 54 dc ce 76 7b 0f 15 dc 3b 8d d2 5e b8 8e 67 bf 17 d7 cc 03 dd e3 35 74 da 9d 27 40 f0 e8 e5 39 c6 be 15 26 b1 17 74 0d b1 52 6c 7b 37 53 ec 39 5a aa a3 34 bf fb e4 b1 b6 5a ab 0d 45 a4 07 a7 30 45 9d 77 2e 9f 41 7d 9e 0b 78 a2 06 2d 28 19 79 c2 59 12 96 a8 37 db 1c 92 a4 54 2b 70 24 2f 97 04 8a b8 3b 65 27 30 ec 5d fd bd 6a 58 56 ca ca a9 60 d2 e1 ad bf f9 e5 49 d9 60 b9 49 68 60 ad ef f2 63 37 b3 f9 22 46 c7 5a 10 e8 d2 40 72 28 13 19 b8 3f 70 4f 91 56 7a 13 e3 11 5e c4 48 47 8b be f8 ab 5c 24 5d 79 b2 53 8d 44 5b 03 34 99 a0 ff 35 c8 71 5c ec 05 f1 2f 9c 5c e8 6d 06 ff 33 30 d2 02 5a c1 bf 69 d3 7f ea 2b 3d c3 2a a6 d2 dd dd 5d 26 fe a5 df 8c e9 3f f5 95 7f 13 f2 6f b6 bb 8c Data Ascii: I.:m<L3wy~PTv{;^g5t'@9&tRl{7S9Z4ZE0Ew.A}x-(yY7T+p$/;e'0]jXV`I`Ih`c7"FZ@r(?pOVz^HG\$]ySD[45q\/\m30Zi+=*]&?o
2024-04-19 19:21:03 UTC	16384	IN	Data Raw: 06 61 c2 3b d3 9d f9 5d 66 dd ba fe 78 f9 e1 83 93 84 49 67 f8 43 0c 42 5a ee e1 93 4d 17 fa 8d a0 0a a0 bf 1c c3 05 a6 7c c1 74 7c 16 5c 55 42 f1 46 67 dc 38 00 63 f3 8f 09 f4 37 19 fd a7 bb fe cb e5 2a 46 40 85 75 aa c3 09 35 0e 83 2f 04 f6 06 33 2f 74 6e 80 a3 ce c1 5e d6 b3 4e cf bf a6 28 ff 54 ac a9 e2 98 d8 99 a2 c5 85 3d ee 14 e6 b0 bd d6 1c 7e 19 c4 45 2e a8 d5 12 b8 d6 14 76 c5 c6 92 03 67 86 5e e5 dc be 26 f4 5b 9f 50 47 d1 10 fa 6f 36 bf 29 40 4b cc 99 71 5b cd 9e 64 15 63 da e9 12 57 ad ff 7d e1 be fa 7d f7 d5 af 97 56 79 6b bf 99 27 18 3f 3c 4e 3f fa e9 e4 d8 c3 b1 d7 9b 37 4e ba cd 00 55 5b 70 f0 83 e8 8c ec 59 30 2e fc be 0b 05 70 a8 a8 88 dd 6a 1d 2f 16 85 69 3f 68 a3 9f 09 9f 5c 38 0b 51 91 d0 66 55 64 2d 95 3a f9 b5 2c 4f 7a 78 a9 e3 87 Data Ascii: a;]fxIgCBZM\|t\|\UBFg8c7*F@u5/3/tn^N(T=~E.vg^&[PGo6)@Kq[dcW}}Vyk'?<N?7NU[pY0.pj/i?h\8QfUd-:,Ozx
2024-04-19 19:21:03 UTC	5132	IN	Data Raw: 74 92 05 78 9c a9 f1 7d 78 2e d3 86 6f ac 5a 35 35 81 2a ef a3 00 d3 d2 ef 28 e1 28 87 9c be ba 15 27 93 df 29 c6 df c4 93 c9 58 1b 8d 30 d4 8e 59 b9 ad a3 2f f8 32 d7 14 36 5e f8 af 36 0d 1c 0a 78 e1 43 d5 79 d5 29 3a b3 da a3 2a 8b 84 c5 c2 f8 88 f0 8c 87 7d 1f 24 d0 37 8a c3 44 f3 24 9a 3a 75 38 cc 44 2b b5 ac b6 01 26 77 ef ec 97 b9 55 33 ab 7b 71 09 b5 5f eb 3c 33 6d 57 f4 10 32 14 8b 16 c2 80 01 cd 49 e5 2c cd 0b 45 fc 40 c0 28 c1 6a de 64 a4 94 78 6b 5f 30 14 a0 ab 7a a5 8c 5b 7f 5c eb 85 e4 f5 b5 e1 77 4e d5 c4 6c 14 05 cb c5 a4 93 c8 ef 66 0f f9 39 87 8e cf ea 6f 66 5c 20 72 00 9c eb ee 78 94 a2 73 ce 74 73 15 81 7a dc f5 03 57 50 64 dd 93 fa 61 51 4a 0a 61 db 00 e7 7b 01 25 b0 9c 9c 2e 6c 03 81 a8 c6 99 fe 9d 01 a6 bb 1a 98 66 79 b0 ef 12 64 ca Data Ascii: tx}x.oZ55((')X0Y/26^6xCy):}$7D$:u8D+&wU3{q_<3mW2I,E@(jdxk_0z[\wNlf9of\ rxstszWPdaQJa{%.lfyd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49803	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:04 UTC	599	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:04 UTC	764	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:04 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 19 Apr 2024 05:26:17 GMT ETag: 0x8DC60313D466F6C x-ms-request-id: a064eb01-201e-0055-5829-929282000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192104Z-15497cdd9fdvrvz61z5a9rg5rn000000024000000000adru x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-19 19:21:04 UTC	15620	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-19 19:21:04 UTC	1554	IN	Data Raw: 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49802	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:04 UTC	553	OUT	GET /oneds_MC5gQfpbTUjLu60sQCwU1w2.js?v=1 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:04 UTC	816	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:04 GMT Content-Type: application/javascript Content-Length: 105716 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Thu, 18 Apr 2024 01:46:13 GMT ETag: 0x8DC5F4954A3A5B2 x-ms-request-id: 8397495b-601e-0005-474c-91f1b1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192104Z-15497cdd9fdrtvgd4t2mhqxwec000000025g0000000095kv x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-19 19:21:04 UTC	15568	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bc bd 69 73 db 48 b2 2e fc 7d 22 e6 3f 90 b8 0e 1d a0 59 a2 49 6d dd 06 5d c3 90 b5 d8 b2 ad c5 5a 6c 77 73 74 14 10 59 92 60 51 00 8d 45 8b 2d 9e df 7e f3 c9 2a 00 05 92 9e 99 7b ef 1b ef 4c 5b 44 ed 5b 56 56 66 56 66 d6 cb df 9a 7f ff 5b e3 b7 46 77 fb a4 f1 fe a4 71 b2 fd a1 b1 15 27 4a 34 56 db 2b ed 0d 4e da 8a 27 4f 49 78 7d 93 35 dc a1 d7 d8 0f 87 49 9c c6 57 59 23 88 46 8d 61 1c 65 49 78 99 67 71 92 b6 1b 9b e3 71 83 73 a6 8d 44 a5 2a b9 57 a3 36 57 e1 56 a5 f6 a2 4c 25 51 30 6e 1c 46 e3 27 0f a9 2f ff fe b7 fb 20 69 44 32 bb 09 53 a1 e4 55 1e 0d b3 30 8e dc c8 fb e9 e4 a9 6a a4 d4 c4 30 73 7a c8 75 24 9d 22 dd 11 b9 74 e2 cb 6f 8a d2 a8 98 93 47 23 75 15 46 6a e4 88 54 3a 93 24 ce e2 ec 69 a2 1c b1 23 9d 9b 20 3d 7c Data Ascii: isH.}"?YIm]ZlwstY`QE-~{L[D[VVfVf[Fwq'J4V+N'OIx}5IWY#FaeIxgqqsDW6WVL%Q0nF'/ iD2SU0j0szu$"toG#uFjT:$i# =\|
2024-04-19 19:21:04 UTC	16384	IN	Data Raw: b5 19 be 19 c7 97 7a 6f 74 3b dd 6a 14 4c 24 44 19 52 29 61 c5 a0 02 02 96 cd a1 6e 9f 71 48 b7 53 6d 45 7d dc 6c e5 b4 8d ef b6 b5 7b 31 33 70 43 70 50 ee 35 dd a3 7d 3a 3d 93 27 a7 3e d5 dd 0e e3 20 9c fb b4 9f 95 19 27 e2 69 61 60 21 a0 a9 07 46 65 99 df 11 47 61 78 b1 4d 6c 01 35 9a 87 e9 8d 1a 31 cb da e5 f8 b7 e0 15 c2 21 8e 07 e2 d4 11 b3 77 f4 79 8d 7a 98 d0 12 fa ab 26 e6 7e a3 88 59 e3 98 7d 1a c7 49 ce 7b d7 5f e7 18 f6 ae 75 90 df 5d aa c4 df e0 18 3a 94 08 b1 ea 97 cb 7f e7 98 93 70 52 54 f3 87 8e b8 cb ca 98 57 ba 29 56 ea c8 9e fc ae ee f6 59 12 fa 5d dd d3 dd ef a3 c8 ef ce f5 f1 23 ed ee 21 e5 5f 15 7a 42 55 62 16 a4 18 9a 09 fa f0 0c 00 aa 4c 4f 0d d1 15 63 9a 82 ad 38 cd b6 81 60 e8 54 a3 f1 13 3d 34 06 97 40 03 df bb bb 53 a3 10 ca 15 Data Ascii: zot;jL$DR)anqHSmE}l{13pCpP5}:='> 'ia`!FeGaxMl51!wyz&~Y}I{_u]:pRTW)VY]#!_zBUbLOc8`T=4@S
2024-04-19 19:21:04 UTC	16384	IN	Data Raw: 10 29 6d 3c f1 6c 94 9e fa 44 7a a7 84 db 12 0c 13 5b 6b 95 c7 3f 22 31 aa 47 51 e1 d5 c3 fc 06 6f a7 80 ed 11 3f d2 4e 94 70 67 3e 21 0f 1c 02 09 b1 70 14 e0 bb f8 98 f2 23 7a 39 bc 4b 06 7e a1 4c 98 0a 3f 53 b0 a3 85 79 a9 9f f2 a3 04 bc f3 e3 d9 4c 9d 83 bd 41 49 0b a3 d1 50 4a 48 1c 3a ae 63 b8 26 6b 9a 5e 5b 38 6e 58 e3 e1 97 9e 56 0e a3 4c f8 1b 99 5f fb 82 53 93 86 94 6e e4 83 b1 c6 fb 5c b0 ea 2f 9a d6 6c 11 ae 74 d1 2c 47 6e 04 fd ac da d3 03 8c ba 28 03 72 a8 30 98 74 1f 3d 8c 36 fd cd 27 8f 1f 3c 7c fc 98 a0 a0 4e d8 88 1e 01 d0 a9 11 03 bb 12 a9 96 01 9e 05 b0 ce 10 4b 39 ec ea bb 2d da a8 3f ab d1 52 e7 04 b2 e6 9e f6 bd c6 66 1b c1 39 47 ac 41 b7 d0 4f aa 8c 26 08 d0 0d 75 f3 5b c1 40 3e 70 1d 0c 2d 60 1c 6e 99 e3 d5 b8 fe fb cf b0 32 05 01 Data Ascii: )m<lDz[k?"1GQo?Npg>!p#z9K~L?SyLAIPJH:c&k^[8nXVL_Sn\/lt,Gn(r0t=6'<\|NK9-?Rf9GAO&u[@>p-`n2
2024-04-19 19:21:04 UTC	16384	IN	Data Raw: bf 47 f4 ef 77 fa f7 98 fe 3d a1 7f 21 fd 3b 85 c9 2e fd 63 5d 26 fa 77 e6 c0 0e 61 ac c0 a3 8d b7 1e 74 e2 46 c3 23 bc 82 ae fd 87 d8 ef 60 03 7b 7d ba 21 a3 3f fe 78 b0 d6 7e a8 1f 1f 57 8f ed 0d eb f9 51 f5 bc d1 b2 9e ad aa 1b 5c b7 63 2e d4 c7 0d 77 73 8d bf 32 6d 95 8c 98 a4 b7 67 66 5b 1e 9f a8 07 34 8d 0f 1c fd da de 54 9b 5e 23 33 6f 8f f0 a6 9f 9f 60 4d 18 8e 65 21 d1 9b ff f0 9f a3 c2 25 a5 2c 09 58 1a ce 1d 4d 4d cb 89 0c 22 12 d7 9c d0 dd 00 04 bd ff 57 ef cf 61 b8 7e d6 27 c4 cf d6 28 09 2d a4 91 1b dc dc 50 99 2d 39 9f 2c 94 a0 31 85 a1 8c 23 0f 19 4b 1d 8b df 2a 4b b0 3d b2 6b e5 a1 46 a2 e0 79 08 0c 10 88 41 ed dd 76 16 ba 75 6c 46 e9 d8 3d e2 8d 9d 30 c6 e7 44 08 76 42 8d db a4 41 d8 bb 83 68 12 1a e6 ae 16 4f de 44 e0 22 bd 84 12 bd 16 Data Ascii: Gw=!;.c]&watF#`{}!?x~WQ\c.ws2mgf[4T^#3o`Me!%,XMM"Wa~'(-P-9,1#K*K=kFyAvulF=0DvBAhOD"
2024-04-19 19:21:04 UTC	16384	IN	Data Raw: de 88 07 2e 03 8a 8e 2d f6 9e 3a 4d 29 c0 6f f0 92 c6 01 a5 b2 5d 7c f8 33 25 f8 4c 07 00 cf 26 39 03 da 93 13 b6 a3 ee a8 77 0b 0b 6d 26 f9 87 dd 5f 9a e6 33 50 7d f8 c4 2b f6 13 d0 26 0e 2b 20 21 13 24 8a 32 ac db 1b ea e4 b1 a5 5c 63 85 25 62 25 3f a2 a6 cc 6c 63 c8 d3 ff 7b 41 b1 a5 1a 46 df 60 98 a2 d7 46 62 93 f2 3d 09 28 f1 7f f3 b6 96 b1 e4 3f ce 10 f8 56 0e eb 39 d2 68 97 1d 8d a3 25 87 d7 bd d1 62 a9 45 c0 1c 35 64 85 35 4c f1 45 61 3d 28 96 28 c5 83 0a 01 16 79 67 ed 33 06 9c 6a d6 f5 50 05 48 53 0d d8 d8 0b 53 ee 02 12 db b3 ba fe 67 52 3f a5 78 34 c1 de 27 5f 13 3e d3 b1 d4 f5 51 f5 d8 23 33 b0 89 4f db 78 91 55 65 b3 d8 01 a2 f3 fa 9b 38 35 d6 ea d3 cd b2 48 99 22 72 08 30 8e f7 35 e8 79 15 8d e8 33 8f f5 e4 69 67 02 dd ea f8 3f 53 d9 9d c1 Data Ascii: .-:M)o]\|3%L&9wm&_3P}+&+ !$2\c%b%?lc{AF`Fb=(?V9h%bE5d5LEa=((yg3jPHSSgR?x4'_>Q#3OxUe85H"r05y3ig?S
2024-04-19 19:21:04 UTC	16384	IN	Data Raw: f6 3d bc 6d 12 b5 d0 d8 62 4b c7 16 d5 0a bb e6 7b b7 fc 1a 76 a5 f6 d5 ba 5a 55 c7 aa 0b 02 f8 6e 47 29 6b f3 f3 6b 85 d0 9d bc af 7f 49 5d b9 32 5a 86 10 3f 40 c0 d0 e3 b7 dc 2d ba 07 8c 35 87 69 33 88 83 3b 1e 75 d7 e4 51 d7 2e 6d f1 a3 ee a9 b8 5d af a8 e9 b2 7b aa 7c 2b ab d8 64 f5 8c a2 30 51 fe 81 a9 b4 af 96 99 59 08 9b 5d cf 70 6b 33 09 45 e2 56 9b e7 aa 79 94 85 5c ae 63 7c d6 b2 c1 78 4a d0 4f 9c 31 bb ce b1 6c c3 0e 6b 7c 15 11 4e 63 09 ba e5 b9 9c f5 4e 96 41 9a cd 81 50 d2 07 66 2b 19 a0 c9 b9 88 3d 6a 98 bb 60 c5 be 79 e1 9c c4 b2 de 6a 3d 68 3a 2b 62 c8 3e a6 96 30 2d 96 35 56 ab 54 83 c6 f9 06 1d 64 4d 85 87 c7 d1 c3 01 3b 49 b0 6c b1 56 1e 53 65 34 6f 87 ca 56 a7 79 ab 8b e4 e2 4c a7 e8 2e 5c b9 94 9f e1 39 63 9d c4 b2 e6 77 bb c3 3d 76 Data Ascii: =mbK{vZUnG)kkI]2Z?@-5i3;uQ.m]{\|+d0QY]pk3EVy\c\|xJO1lk\|NcNAPf+=j`yj=h:+b>0-5VTdM;IlVSe4oVyL.\9cw=v
2024-04-19 19:21:04 UTC	8228	IN	Data Raw: 57 0a ec 21 68 13 01 c7 b9 28 72 57 3f c7 80 ea b2 a2 7f 77 29 d3 a4 75 f7 72 65 cb 0e b4 a6 64 07 3c d5 2a 75 a5 6f 6f 41 f7 c3 60 17 93 75 ba 2b 78 70 b7 8a 94 48 fc 0d a4 a6 3d 3d 28 c8 1c c0 6c cb 59 44 00 a1 3a 30 a1 26 f8 98 a3 9f a5 1a c7 a1 6e 37 47 bb d6 d5 e8 93 7d 09 7c c0 92 6b 10 7c cf 72 96 c4 04 4b 69 51 d6 f4 6f ba 84 15 ec 77 11 be 5c 3d 65 42 f6 1d ae 67 a7 41 b6 3b c1 05 24 a5 08 84 11 08 31 40 70 31 4c 6d 4d 9a 1c 22 ea 01 3b b9 33 c2 3b c0 de 6c 5d 10 fe b4 e4 6d 33 e4 07 94 b0 53 9f 7f 76 33 1c 8b 9a 40 dc 3b 06 37 0a 97 fd d2 89 0d 58 55 67 48 2e c4 78 53 17 3a d3 04 dc f5 45 89 00 8f f6 5d df a6 4b d7 f5 51 1c 7e cb a7 2e 1c 20 cf 8a 4b 34 f5 23 94 46 c5 c2 a3 bc bb 26 4c 9d 0b 8c 77 f7 ab 62 09 62 36 39 6e 22 85 b1 4a 13 4a 6a b4 Data Ascii: W!h(rW?w)ured<*uooA`u+xpH==(lYD:0&n7G}\|k\|rKiQow\=eBgA;$1@p1LmM";3;l]m3Sv3@;7XUgH.xS:E]KQ~. K4#F&Lwbb69n"JJj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49805	13.107.246.40	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:04 UTC	391	OUT	GET /images/microsoft_logo_7lyNn7YkjJOP0NwZNw6QvQ2.svg HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:04 UTC	805	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:04 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Fri, 19 Apr 2024 05:26:18 GMT ETag: 0x8DC60313DDFB27B x-ms-request-id: b180b502-701e-0088-728e-9279ff000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192104Z-15497cdd9fdf95mbn5un4a9yqs00000001yg00000000mtb6 x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-19 19:21:04 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49806	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:04 UTC	592	OUT	GET /datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://signup.live.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:04 UTC	814	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:04 GMT Content-Type: application/javascript Content-Length: 3505 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Thu, 18 Apr 2024 01:45:56 GMT ETag: 0x8DC5F494A7D7B3E x-ms-request-id: ed240169-001e-007b-309b-91a1ac000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192104Z-15497cdd9fd7xqjqsvryefhbyn000000024g00000000npzx x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-19 19:21:04 UTC	3505	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ad 59 5b 73 db 36 16 7e cf af a0 51 8f 4c 8e 60 46 49 db dd ae 18 44 e3 da 71 e2 dc 63 2b cd 83 e3 e9 d0 24 24 31 a6 49 96 04 2d 2b 92 fe fb 7e 07 e0 4d 96 d2 d9 9d dd 4e 1d 13 07 07 07 e7 7e 81 f7 26 65 12 a8 28 4d 6c 67 59 7f 5a d2 96 9d 95 a2 55 2e 55 99 63 a7 d7 93 6e a1 7c 25 85 88 7b 3d 5b ba 59 2e ef 9a 0f 37 91 f7 4a 48 fd cb e1 e6 b7 de a4 0f 8d 21 0c a2 c3 4f 84 00 31 fb a4 c1 de 37 80 fd 06 a3 be a8 e4 b2 3e aa c9 27 65 1c f3 c5 e1 21 30 d6 0d 93 3e 31 19 4d ec 2e 83 a5 b3 bc f3 73 2b 17 fb 5e 3e b2 f3 8a b9 9a 5a ee 0c 71 39 ae 95 cd 4d 20 db ef af 5b a2 13 28 65 ef af 5e 6f ef ba d7 5b f4 7a f7 cf e7 60 f0 5a cc a3 24 4c e7 6e 21 d5 38 ba 95 69 a9 ec 29 2f 1c a7 3d 77 47 cc 98 ab ed 44 ce ad 13 10 77 dc a9 c1 b7 Data Ascii: Y[s6~QL`FIDqc+$$1I-+~MN~&e(MlgYZU.Ucn\|%{=[Y.7JH!O17>'e!0>1M.s+^>Zq9M [(e^o[z`Z$Ln!8i)/=wGDw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49810	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:04 UTC	613	OUT	GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signup.live.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:04 UTC	804	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:04 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Thu, 18 Apr 2024 01:45:57 GMT ETag: 0x8DC5F494ADD1986 x-ms-request-id: f589a3fe-801e-00b3-0ac5-917df9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192104Z-15497cdd9fd4s82z7b3b6e4cs800000000eg000000012z4e x-fd-int-roxy-purgeid: 67912908 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:21:04 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49814	13.107.246.40	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:05 UTC	378	OUT	GET /images/2_vD0yppaJX3jBnfbHF1hqXQ2.svg HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:05 UTC	804	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:05 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=604800 Content-Encoding: gzip Last-Modified: Thu, 18 Apr 2024 01:45:57 GMT ETag: 0x8DC5F494ADD1986 x-ms-request-id: f589a3fe-801e-00b3-0ac5-917df9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192105Z-15497cdd9fdr7qjrsrzpfd6yqc000000028000000000kz2k x-fd-int-roxy-purgeid: 67912908 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-19 19:21:05 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49815	13.107.246.40	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:05 UTC	364	OUT	GET /images/favicon.ico?v=2 HTTP/1.1 Host: acctcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:05 UTC	764	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:05 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=604800 Last-Modified: Fri, 19 Apr 2024 05:26:17 GMT ETag: 0x8DC60313D466F6C x-ms-request-id: 1c2c8f26-701e-00f0-067d-92d3ee000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20240419T192105Z-16f7b4795d4xft4nk2mmryd7dc00000000cg000000003vv0 x-fd-int-roxy-purgeid: 67912908 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-04-19 19:21:05 UTC	15620	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-04-19 19:21:05 UTC	1554	IN	Data Raw: 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 00 00 01 80 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49847	13.107.213.41	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:10 UTC	718	OUT	GET /mscc/lib/v2/wcp-consent.js HTTP/1.1 Host: wcpstatic.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; MS0=2d470abf00e14d009504460133884a20
2024-04-19 19:21:10 UTC	712	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:10 GMT Content-Type: application/javascript Content-Length: 52717 Connection: close Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding Age: 7943 Cache-Control: max-age=43200 Content-MD5: QT/MdZzBmCG2G2lBgIsptQ== Etag: 0x8DA85F6F74C6D08 Last-Modified: Wed, 24 Aug 2022 17:34:58 GMT Vary: Accept-Encoding X-Cache: CONFIG_NOCACHE x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 6c9045b5-e01e-005e-087c-92f8d1000000 x-ms-version: 2009-09-19 x-azure-ref: 20240419T192110Z-15497cdd9fdlwwdlsxvmtx2krs00000001yg00000000qde3 Accept-Ranges: bytes
2024-04-19 19:21:10 UTC	16384	IN	Data Raw: 76 61 72 20 57 63 70 43 6f 6e 73 65 6e 74 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 32 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 69 6e 64 6f 77 2c 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: var WcpConsent;!function(){var e={229:function(e){window,e.exports=function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}return o.m=e,o.c=t,o.d=function(e
2024-04-19 19:21:10 UTC	16382	IN	Data Raw: 2d 6c 61 62 65 6c 3d 22 27 2b 69 2e 65 73 63 61 70 65 48 74 6d 6c 28 74 68 69 73 2e 74 65 78 74 52 65 73 6f 75 72 63 65 73 2e 70 72 65 66 65 72 65 6e 63 65 73 44 69 61 6c 6f 67 43 6c 6f 73 65 4c 61 62 65 6c 29 2b 27 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 63 6c 6f 73 65 4d 6f 64 61 6c 49 63 6f 6e 2b 27 22 20 74 61 62 69 6e 64 65 78 3d 22 30 22 3e 26 23 78 32 37 31 35 3b 3c 2f 62 75 74 74 6f 6e 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 61 6c 42 6f 64 79 2b 27 22 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 27 2b 61 2e 6d 6f 64 Data Ascii: -label="'+i.escapeHtml(this.textResources.preferencesDialogCloseLabel)+'" class="'+a.closeModalIcon+'" tabindex="0">✕</button>\n <div role="document" class="'+a.modalBody+'">\n <div>\n <h1 class="'+a.mod
2024-04-19 19:21:11 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 22 2b 65 5b 22 72 61 64 69 6f 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 22 5d 2b 22 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 20 20 7d 22 7d 2c 65 7d 28 29 2c 64 3d 5b 22 61 72 22 2c 22 68 65 22 2c 22 70 73 22 2c 22 75 72 22 2c 22 66 61 22 2c 22 70 61 22 2c 22 73 64 22 2c 22 74 6b 22 2c 22 75 67 22 2c 22 79 69 22 2c 22 73 79 72 22 2c 22 6b 73 2d 61 72 61 62 22 5d 2c 75 3d 7b 22 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 22 3a 22 23 36 36 36 36 36 36 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 22 3a 22 31 22 2c 22 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f Data Ascii: background-color: "+e["radio-button-disabled-color"]+" !important;\n }"},e}(),d=["ar","he","ps","ur","fa","pa","sd","tk","ug","yi","syr","ks-arab"],u={"close-button-color":"#666666","secondary-button-disabled-opacity":"1","secondary-butto
2024-04-19 19:21:11 UTC	3567	IN	Data Raw: 28 22 2d 22 29 5b 30 5d 3b 6f 3d 65 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3d 3d 3d 6e 7d 72 65 74 75 72 6e 20 6f 7d 28 65 2c 63 29 7d 29 29 3b 73 26 26 30 3d 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 22 65 6e 2d 55 53 22 29 2c 6f 2e 70 6c 61 63 65 68 6f 6c 64 65 72 45 6c 65 6d 65 6e 74 3d 6c 2c 72 26 26 6f 2e 63 6f 6e 73 65 6e 74 43 68 61 6e 67 65 64 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 72 29 2c 6f 2e 73 61 76 65 43 6f 6f 6b 69 65 28 29 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 3d 6e 65 77 20 66 28 21 31 29 2c 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 28 76 6f 69 64 20 30 2c 6f 2e 73 69 74 65 43 6f 6e 73 65 6e 74 29 2c 6f 2e 69 73 49 6e 69 74 52 65 61 64 79 3d 21 30 2c 74 68 69 73 2e 63 6f 6e 73 65 6e 74 43 68 61 6e Data Ascii: ("-")[0];o=e.split("-")[0]===n}return o}(e,c)}));s&&0===s.length&&(e="en-US"),o.placeholderElement=l,r&&o.consentChangedCallbacks.registerCallback(r),o.saveCookie(),o.siteConsent=new f(!1),null==n\|\|n(void 0,o.siteConsent),o.isInitReady=!0,this.consentChan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49870	34.232.189.32	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:15 UTC	721	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1713554473345 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:15 UTC	821	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:15 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6666 Connection: close X-TID: 614dFnVlQmc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.microsoft.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-1-v059-00a733fb2.edge-va6.demdex.com 2 ms set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:15 UTC	6666	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 32 36 31 30 37 39 32 30 34 34 39 35 32 37 32 36 38 30 39 30 39 32 36 37 38 31 36 34 36 37 36 35 30 32 39 33 34 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"26107920449527268090926781646765029347","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49872	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:15 UTC	519	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1713554473345 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212
2024-04-19 19:21:15 UTC	712	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:15 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6649 Connection: close X-TID: DyL3DRGHR+0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-2-v059-0e56c4644.edge-va6.demdex.com 14 ms set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:15 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:15 UTC	6649	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 32 36 31 30 37 39 32 30 34 34 39 35 32 37 32 36 38 30 39 30 39 32 36 37 38 31 36 34 36 37 36 35 30 32 39 33 34 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"26107920449527268090926781646765029347","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49875	18.211.200.227	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:15 UTC	754	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: mscom.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212
2024-04-19 19:21:15 UTC	604	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:15 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: mooaL+OiTGw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Tue, 9 Apr 2024 12:56:54 GMT DCS: dcs-prod-va6-2-v059-076df3bc9.edge-va6.demdex.com 4 ms
2024-04-19 19:21:15 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49874	63.140.39.35	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:15 UTC	748	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=26107920449527268090926781646765029347&ts=1713554473956 HTTP/1.1 Host: msftenterprise.sc.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:15 UTC	442	IN	HTTP/1.1 200 OK access-control-allow-origin: https://www.microsoft.com access-control-allow-credentials: true date: Fri, 19 Apr 2024 19:21:15 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-19 19:21:15 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49876	34.232.189.32	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:16 UTC	934	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=26107920449527268090926781646765029347&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MC1%01749eee6039c5489b9db3000c7ab3f399%012&ts=1713554474609 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://www.microsoft.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212
2024-04-19 19:21:16 UTC	822	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:16 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6666 Connection: close X-TID: o9umIfMRSH0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://www.microsoft.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-2-v059-087fe9ca1.edge-va6.demdex.com 10 ms set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:16 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:16 UTC	6666	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 32 36 31 30 37 39 32 30 34 34 39 35 32 37 32 36 38 30 39 30 39 32 36 37 38 31 36 34 36 37 36 35 30 32 39 33 34 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"26107920449527268090926781646765029347","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49877	34.232.189.32	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:16 UTC	666	OUT	GET /ibs:dpid=411&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212
2024-04-19 19:21:16 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:16 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: bwb0olYHTTc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-03804015b.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:16 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:16 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49879	63.140.38.189	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:16 UTC	491	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=26107920449527268090926781646765029347&ts=1713554473956 HTTP/1.1 Host: msftenterprise.sc.omtrdc.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:16 UTC	378	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Fri, 19 Apr 2024 19:21:16 GMT p3p: CP="This is not a P3P policy" server: jag vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 2 cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-19 19:21:16 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49881	35.244.154.8	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:16 UTC	637	OUT	GET /365868.gif?partner_uid=26389280685137111260898653323266367212 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:16 UTC	736	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CKyqFhIxCi0IARCYEhomMjYzODkyODA2ODUxMzcxMTEyNjA4OTg2NTMzMjMyNjYzNjcyMTIQABoNCKyIi7EGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=e4hTswpaEMXd5mClAadxsUS6nRpwHJZoGE/ZOrtrwZo=; Path=/; Domain=rlcdn.com; Expires=Sat, 19 Apr 2025 19:21:16 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Tue, 18 Jun 2024 19:21:16 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 19 Apr 2024 19:21:16 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49878	68.67.160.117	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:16 UTC	644	OUT	GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:16 UTC	1493	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 19:21:16 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID AN-X-Request-Uuid: 1bc3c83a-4d24-4a60-aa18-e2bf7d22ec47 Set-Cookie: XANDR_PANID=O6o5GhbE32qsxaB0HIJ1fblnaIZQJS92xvi4KzC_EWAVz2cfsJZaHRjaM99A99quMGsLop8YDUnMNspBmQDRRk__RonFIp9htJ4y1Ye6FU4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 19:21:16 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 19:21:16 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=774620743932450137; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 19:21:16 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49882	64.233.176.154	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:16 UTC	797	OUT	GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=MjYzODkyODA2ODUxMzcxMTEyNjA4OTg2NTMzMjMyNjYzNjcyMTI= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:16 UTC	880	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=MjYzODkyODA2ODUxMzcxMTEyNjA4OTg2NTMzMjMyNjYzNjcyMTI=&google_tc= Date: Fri, 19 Apr 2024 19:21:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 378 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Fri, 19-Apr-2024 19:36:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 19:21:16 UTC	375	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 61 64 6f 62 65 5f 64 6d 70 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 64 70 72 3d 30 26 61 6d 70 3b 67 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&g
2024-04-19 19:21:16 UTC	3	IN	Data Raw: 3e 0d 0a Data Ascii: >

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49884	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:16 UTC	764	OUT	GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=26107920449527268090926781646765029347&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MC1%01749eee6039c5489b9db3000c7ab3f399%012&ts=1713554474609 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021
2024-04-19 19:21:16 UTC	711	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:16 GMT Content-Type: application/json;charset=utf-8 Content-Length: 6649 Connection: close X-TID: b9YkKI7kRkg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-2-v059-0ad6a5e9f.edge-va6.demdex.com 4 ms set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:16 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:16 UTC	6649	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 32 36 31 30 37 39 32 30 34 34 39 35 32 37 32 36 38 30 39 30 39 32 36 37 38 31 36 34 36 37 36 35 30 32 39 33 34 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 36 47 31 79 6e 59 63 4c 50 75 69 51 78 59 5a 72 73 7a 5f 70 6b 71 66 4c 47 39 79 4d 58 42 70 62 32 7a 58 35 64 76 4a 64 59 51 4a 7a 50 58 49 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"26107920449527268090926781646765029347","id_sync_ttl":604800,"d_blob":"6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49885	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:16 UTC	560	OUT	GET /ibs:dpid=411&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021; dpm=26389280685137111260898653323266367212
2024-04-19 19:21:16 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:16 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: YYflnW6dSdU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-076df3bc9.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:16 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:16 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49889	35.244.154.8	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:16 UTC	760	OUT	GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomMjYzODkyODA2ODUxMzcxMTEyNjA4OTg2NTMzMjMyNjYzNjcyMTIQABoNCKyIi7EGEgUI6AcQAEIASgA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=e4hTswpaEMXd5mClAadxsUS6nRpwHJZoGE/ZOrtrwZo=; pxrc=CAA=
2024-04-19 19:21:17 UTC	745	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://dpm.demdex.net/ibs:dpid=477&dpuuid=7c83c21a24cf8cd12a8fef63091a9790525ed605b0d5dca058d567e46e368457b0da87c991749652 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=rLt/PKehjKrd5mClAadxsUS6nRpwHJZoGE/ZOrtrwZo=; Path=/; Domain=rlcdn.com; Expires=Sat, 19 Apr 2025 19:21:17 GMT; Secure; SameSite=None Set-Cookie: pxrc=CK2Ii7EGEgUI6AcQABIGCPHrARAA; Path=/; Domain=rlcdn.com; Expires=Tue, 18 Jun 2024 19:21:17 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49888	68.67.160.117	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:16 UTC	860	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=O6o5GhbE32qsxaB0HIJ1fblnaIZQJS92xvi4KzC_EWAVz2cfsJZaHRjaM99A99quMGsLop8YDUnMNspBmQDRRk__RonFIp9htJ4y1Ye6FU4.; receive-cookie-deprecation=1; uuid2=774620743932450137
2024-04-19 19:21:17 UTC	1425	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://dpm.demdex.net/ibs:dpid=358&dpuuid=774620743932450137 AN-X-Request-Uuid: a71739d2-2204-4866-8ce2-7323abed499a Set-Cookie: XANDR_PANID=O6o5GhbE32qsxaB0HIJ1fblnaIZQJS92xvi4KzC_EWAVz2cfsJZaHRjaM99A99quMGsLop8YDUnMNspBmQDRRk__RonFIp9htJ4y1Ye6FU4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 19:21:17 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 19:21:17 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=774620743932450137; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 19:21:17 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49890	104.244.42.3	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:16 UTC	648	OUT	GET /i/adsct?p_user_id=26389280685137111260898653323266367212&p_id=38594 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:17 UTC	571	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 19:21:17 GMT perf: 7402827104 server: tsa_b set-cookie: personalization_id="v1_mYH8t0d7Enl9BO9j8knHKg=="; Max-Age=63072000; Expires=Sun, 19 Apr 2026 19:21:17 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: e3eaf4d109e3936b strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 7f67cb2ce091dad02b1a4612f8a75e840713f6084896b3d0a8dd74bb4712ad04 connection: close
2024-04-19 19:21:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49892	64.233.176.154	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	849	OUT	GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=MjYzODkyODA2ODUxMzcxMTEyNjA4OTg2NTMzMjMyNjYzNjcyMTI=&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-19 19:21:17 UTC	996	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEHZZI_UPriJ7zaZlyCVS4v4&google_cver=1?gdpr=0&gdpr_consent= Date: Fri, 19 Apr 2024 19:21:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 314 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUm7Wh-jfCRsWe7Nungmu515OKwdCUtCIH6WhHU1JhL5EjxhfFu9dYXKZtquN1U; expires=Sun, 19-Apr-2026 19:21:17 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 19:21:17 UTC	259	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 37 37 31 26 61 6d 70 3b 64 70 75 75 69 64 3d 43 41 45 53 45 48 5a 5a 49 5f 55 50 72 69 4a 37 7a 61 5a 6c 79 43 56 53 34 76 34 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESEHZZI_UPriJ7zaZlyCVS4v4&google_c
2024-04-19 19:21:17 UTC	55	IN	Data Raw: 31 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: 1?gdpr=0&gdpr_consent=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49891	3.33.220.150	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	661	OUT	GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:17 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 19:21:17 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49893	192.184.67.40	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	634	OUT	GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:17 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV" Pragma: no-cache Set-Cookie: mc=6622c42d-8479f-f9c4c-97408; expires=Tue, 20-May-2025 19:21:17 GMT; path=/; domain=.quantserve.com; SameSite=None; Secure Strict-Transport-Security: max-age=86400
2024-04-19 19:21:17 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49898	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	917	OUT	GET /ibs:dpid=992&dpuuid=1wuv5adz37oi2 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662
2024-04-19 19:21:17 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: hj6nbRQOQRc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-054eae7dc.edge-va6.demdex.com 3 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49897	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	984	OUT	GET /ibs:dpid=477&dpuuid=7c83c21a24cf8cd12a8fef63091a9790525ed605b0d5dca058d567e46e368457b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662
2024-04-19 19:21:17 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: T1+H5VGVTQk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-06dff2015.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49899	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	944	OUT	GET /ibs:dpid=358&dpuuid=774620743932450137 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770
2024-04-19 19:21:17 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ngvu3sSDT3M= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-0a13066c2.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49900	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	988	OUT	GET /ibs:dpid=771&dpuuid=CAESEHZZI_UPriJ7zaZlyCVS4v4&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770
2024-04-19 19:21:17 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: cw+hDsfxTn0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0ae7b9169.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49903	104.244.42.195	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	470	OUT	GET /i/adsct?p_user_id=26389280685137111260898653323266367212&p_id=38594 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_mYH8t0d7Enl9BO9j8knHKg=="
2024-04-19 19:21:17 UTC	400	IN	HTTP/1.1 200 OK date: Fri, 19 Apr 2024 19:21:17 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: e99257d5737b59f3 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 206d8af854a0b5639d1526e3b3251059581efdef82b4549ece2d2e9f64bbe7f1 connection: close
2024-04-19 19:21:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49902	104.18.24.173	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	713	OUT	GET /i.match?p=b13&u=26389280685137111260898653323266367212&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:17 UTC	894	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 3424 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=aPnoeUwZcF1voXarrecb7XsTqqSXaZaV0VpTLjms8a; path=/; domain=.tribalfusion.com; expires=Thu, 18-Jul-2024 19:21:17 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=aPnoeUwZcF1voXarrecb7XsTqqSXaZaV0VpTLjms8a; path=/; domain=.tribalfusion.com; expires=Thu, 18-Jul-2024 19:21:17 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b13&u=26389280685137111260898653323266367212&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876f41bdc9a24558-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 19:21:17 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-04-19 19:21:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49904	34.200.65.202	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	674	OUT	GET /cms?partner_id=ADOBE&_hosted_id=26389280685137111260898653323266367212&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:17 UTC	571	IN	HTTP/1.1 302 Redirect Date: Fri, 19 Apr 2024 19:21:17 GMT Connection: close Server: ATS/9.1.10.106 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=26389280685137111260898653323266367212&gdpr=0&gdpr_consent= Content-Type: text/html Content-Language: en Set-Cookie: A3=d=AQABBC3EImYCED2yUVI90XtLlcPKj9-owZkFEgEBAQEVJGYsZvGAziMA_eMAAA&S=AQAAAmMGZcOuxlXcBzKh8VTpBMA; Expires=Sun, 20 Apr 2025 01:21:17 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Content-Length: 415
2024-04-19 19:21:17 UTC	415	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49906	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	1008	OUT	GET /ibs:dpid=782&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114
2024-04-19 19:21:18 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: ZRnqID4kRKQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-06940698b.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49907	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	1025	OUT	GET /ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114
2024-04-19 19:21:18 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: iZb6BGfzQZw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0a1bcb8a9.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:17 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49905	35.71.131.137	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	425	OUT	GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:17 UTC	137	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:17 GMT Content-Type: image/gif Content-Length: 70 Connection: close server: Kestrel
2024-04-19 19:21:17 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49910	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:17 UTC	1050	OUT	GET /ibs:dpid=3047&dpuuid=5953B2DFE3273B&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236
2024-04-19 19:21:18 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:18 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: dLoH7MkTRdk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-06fb20693.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49911	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	813	OUT	GET /ibs:dpid=992&dpuuid=1wuv5adz37oi2 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342
2024-04-19 19:21:18 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:18 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: HbUR7kbpQws= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-01f00c7b4.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49913	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	880	OUT	GET /ibs:dpid=477&dpuuid=7c83c21a24cf8cd12a8fef63091a9790525ed605b0d5dca058d567e46e368457b0da87c991749652 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342
2024-04-19 19:21:18 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:18 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: N9it8BF/QBQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-07a8f34bd.edge-va6.demdex.com 6 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49914	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	818	OUT	GET /ibs:dpid=358&dpuuid=774620743932450137 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342
2024-04-19 19:21:18 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:18 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: GAf2/adMQLk= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0db865c58.edge-va6.demdex.com 5 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49912	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	862	OUT	GET /ibs:dpid=771&dpuuid=CAESEHZZI_UPriJ7zaZlyCVS4v4&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342
2024-04-19 19:21:18 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:18 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: cGmuKiHLQD0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-05484fc6f.edge-va6.demdex.com 5 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49918	104.18.25.173	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	775	OUT	GET /z/i.match?p=b13&u=26389280685137111260898653323266367212&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=aPnoeUwZcF1voXarrecb7XsTqqSXaZaV0VpTLjms8a
2024-04-19 19:21:18 UTC	853	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 19:21:18 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 209 X-Reuse-Index: 5326 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=ahnsuBm5ab6AyuoCTNTAZc6SZa97alYDA7UhZd63uN37oqV7TXl1Po0214T1kyZbosntQ04iTCb9bMPXwZabf; path=/; domain=.tribalfusion.com; expires=Thu, 18-Jul-2024 19:21:18 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=ahnsuBm5ab6AyuoCTNTAZc6SZa97alYDA7UhZd63uN37oqV7TXl1Po0214T1kyZbosntQ04iTCb9bMPXwZabf; path=/; domain=.tribalfusion.com; expires=Thu, 18-Jul-2024 19:21:18 GMT; Location: https://dpm.demdex.net/ibs:dpid=22054 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 876f41c1e88a4558-ATL alt-svc: h3=":443"; ma=86400
2024-04-19 19:21:18 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-04-19 19:21:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49919	35.71.139.29	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	697	OUT	GET /getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: dmpsync.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:18 UTC	735	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 19:21:18 GMT Content-Length: 0 Connection: close Location: /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3461195966407693141416; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 18 Jul 2024 19:21:18 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3461195966407693141416; Max-Age=7776000; Expires=Thu, 18 Jul 2024 19:21:18 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49909	192.184.67.84	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	437	OUT	GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1 Host: cms.quantserve.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=6622c42d-8479f-f9c4c-97408
2024-04-19 19:21:18 UTC	354	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:18 GMT Content-Type: image/gif Content-Length: 35 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Cache-Control: private, no-cache, no-store, proxy-revalidate Expires: Fri, 04 Aug 1978 12:00:00 GMT Pragma: no-cache Strict-Transport-Security: max-age=86400
2024-04-19 19:21:18 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 80 ff ff ff 00 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49921	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	860	OUT	GET /ibs:dpid=782&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588
2024-04-19 19:21:18 UTC	895	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:18 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: FZcys5XFQTA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcscanary-prod-va6-1-v073-0a807f8f8.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49920	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	877	OUT	GET /ibs:dpid=1957&dpuuid=375E6F2E0D8F6B9C2CEB7C8E098F6DFE HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588
2024-04-19 19:21:18 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:18 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: W7ReviKcQn4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-0a2d4d9ba.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:18 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:18 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49917	192.132.33.68	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	632	OUT	GET /dmp/adobe/user?dd_uuid=26389280685137111260898653323266367212 HTTP/1.1 Host: bttrack.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:18 UTC	258	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 X-ServerName: Track003-iad Date: Fri, 19 Apr 2024 19:21:06 GMT Connection: close Content-Length: 35 Strict-Transport-Security: max-age=31536000;
2024-04-19 19:21:18 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49922	3.225.218.10	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	791	OUT	GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=26389280685137111260898653323266367212&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBC3EImYCED2yUVI90XtLlcPKj9-owZkFEgEBAQEVJGYsZvGAziMA_eMAAA&S=AQAAAmMGZcOuxlXcBzKh8VTpBMA
2024-04-19 19:21:18 UTC	230	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 19:21:18 GMT Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Age: 0 Connection: close Server: ATS/9.1.10.106

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49923	34.195.34.170	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:18 UTC	587	OUT	GET /dv/sync?tid=6 HTTP/1.1 Host: ag.innovid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:18 UTC	388	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 19:21:18 GMT Content-Length: 0 Connection: close Location: https://dpm.demdex.net/ibs:dpid=80742&dpuuid=43007455-0780-4ae3-9e60-f61159d50f9d Set-Cookie: uuid=43007455-0780-4ae3-9e60-f61159d50f9d-20240419 15:21:18; Max-Age=7776000; Expires=Thu, 18 Jul 2024 19:21:18 GMT; SameSite=None; Path=/; Domain=.innovid.com; Secure Request-Time: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49925	44.206.22.2	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:19 UTC	591	OUT	GET /CookieSyncAdobe HTTP/1.1 Host: rtb.adentifi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:19 UTC	128	IN	HTTP/1.1 204 No Content Date: Fri, 19 Apr 2024 19:21:19 GMT Content-Type: text/plain Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49927	44.195.233.246	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:19 UTC	737	OUT	GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=26389280685137111260898653323266367212?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:19 UTC	536	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 19:21:19 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.11.78 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=26389280685137111260898653323266367212?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49929	35.71.139.29	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:19 UTC	779	OUT	GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1 Host: dmpsync.3lift.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tluidp=3461195966407693141416; tluid=3461195966407693141416
2024-04-19 19:21:19 UTC	689	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 19:21:19 GMT Content-Length: 0 Connection: close Location: https://dpm.demdex.net/ibs:dpid=72352&dpuuid=3461195966407693141416&gdpr=0&gdpr_consent= Cache-Control: no-cache, no-store, must-revalidate Set-Cookie: tluidp=3461195966407693141416; Path=/; Domain=.3lift.com; Max-Age=7776000; Expires=Thu, 18 Jul 2024 19:21:19 GMT; Secure; SameSite=None; Partitioned; P3P: policyref="http://cdn.3lift.com/w3c/p3p.xml", CP="NON DSP COR NID OUR DEL SAM OTR UNR COM NAV INT DEM CNT STA PRE LOC OTC" set-cookie: tluid=3461195966407693141416; Max-Age=7776000; Expires=Thu, 18 Jul 2024 19:21:19 GMT; Path=/; Domain=.3lift.com; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49928	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:19 UTC	1251	OUT	GET /ibs:dpid=57282&dpuuid=AF316644E9C7D9165ECD79E0FBEC1395 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773
2024-04-19 19:21:19 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:19 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: XfCTHNt3Qvc= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-0200580d4.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:19 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49931	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:19 UTC	1211	OUT	GET /ibs:dpid=22054 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773
2024-04-19 19:21:19 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:19 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: RY0ptj41QEs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0e1764cf6.edge-va6.demdex.com 0 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:19 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49932	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:19 UTC	1239	OUT	GET /ibs:dpid=53196&dpuuid=Q7668408781822501030 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773
2024-04-19 19:21:19 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:19 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: BcZYY6YHShg= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-09f4641e3.edge-va6.demdex.com 4 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:19 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49933	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:19 UTC	1255	OUT	GET /ibs:dpid=80742&dpuuid=43007455-0780-4ae3-9e60-f61159d50f9d HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773
2024-04-19 19:21:19 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:19 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 8JrbnVzLSyE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0dcd199b5.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:19 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49934	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:19 UTC	1040	OUT	GET /ibs:dpid=3047&dpuuid=5953B2DFE3273B&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962
2024-04-19 19:21:19 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:19 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: tYkO0CD9SGw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-02c8760c3.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:19 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:19 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:19 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49939	44.195.233.246	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:19 UTC	763	OUT	GET /map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=26389280685137111260898653323266367212?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-04-19 19:21:19 UTC	729	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 19:21:19 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.58.114 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Tue, 14-Jan-2025 19:01:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=8647ef753ba0b6bc0c21c4f679cc985b;Path=/;Domain=crwdcntrl.net;Expires=Tue, 14-Jan-2025 19:01:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Location: https://dpm.demdex.net/ibs:dpid=121998&dpuuid=8647ef753ba0b6bc0c21c4f679cc985b Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49941	192.132.33.68	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:19 UTC	396	OUT	GET /dmp/adobe/user?dd_uuid=26389280685137111260898653323266367212 HTTP/1.1 Host: bttrack.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:20 UTC	258	IN	HTTP/1.1 200 OK Cache-Control: private,no-cache Pragma: no-cache Content-Type: image/gif Expires: -1 X-ServerName: Track003-iad Date: Fri, 19 Apr 2024 19:21:08 GMT Connection: close Content-Length: 35 Strict-Transport-Security: max-age=31536000;
2024-04-19 19:21:20 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49948	64.233.176.154	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:20 UTC	751	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WmlMRUt3QUFBTDE5eXdOdw== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7Wh-jfCRsWe7Nungmu515OKwdCUtCIH6WhHU1JhL5EjxhfFu9dYXKZtquN1U
2024-04-19 19:21:20 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 19 Apr 2024 19:21:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 19:21:20 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49945	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:20 UTC	1331	OUT	GET /ibs:dpid=72352&dpuuid=3461195966407693141416&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176
2024-04-19 19:21:20 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:20 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: uBRHymPUQAE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-07a8f34bd.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49947	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:20 UTC	1302	OUT	GET /ibs:dpid=782&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176
2024-04-19 19:21:20 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:20 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: xZAN5xF9SnY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-0f4bb3f6e.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49949	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:20 UTC	1321	OUT	GET /ibs:dpid=121998&dpuuid=8647ef753ba0b6bc0c21c4f679cc985b HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176
2024-04-19 19:21:20 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:20 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: x9nlLA26Q/U= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-05f7481c3.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49952	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:20 UTC	1107	OUT	GET /ibs:dpid=57282&dpuuid=AF316644E9C7D9165ECD79E0FBEC1395 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873
2024-04-19 19:21:20 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:20 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: PRHEemu4Rl8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-004cce7b2.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49953	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:20 UTC	1067	OUT	GET /ibs:dpid=22054 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873
2024-04-19 19:21:20 UTC	903	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:20 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: +drwmzNgQr8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Error: 300 X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-0d9fa4780.edge-va6.demdex.com 0 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49951	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:20 UTC	1111	OUT	GET /ibs:dpid=80742&dpuuid=43007455-0780-4ae3-9e60-f61159d50f9d HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873
2024-04-19 19:21:20 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:20 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: pL0CkowQQMw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-0a95d21ae.edge-va6.demdex.com 3 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49950	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:20 UTC	1095	OUT	GET /ibs:dpid=53196&dpuuid=Q7668408781822501030 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873
2024-04-19 19:21:20 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:20 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: GLOJC+CDSWU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0f1c979d1.edge-va6.demdex.com 9 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:20 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49955	104.18.36.155	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:20 UTC	634	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZiLEKwAAAL19ywNw HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:20 UTC	1168	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 19:21:20 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=88&external_user_id=ZiLEKwAAAL19ywNw&C=1 CF-Ray: 876f41d0efa953b5-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiLEMMAoImAAADurAsfBWwAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 19:21:20 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=2047; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 19:21:20 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=2047; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 19:21:20 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EB0QCNILrYDSgU3vPPUTBNSiCjKLBbCmZKKIGCr20HvUKjjTG%2BjyKZ%2FHXM%2Bl%2FY36c%2FR7rxFmaW43zd390JkCFoYkH3A4AOP6kx7RNP%2FY5vTAa3HHebsqaiYQ8zYj2ZuOhlcPbanA2YP8Zw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49959	151.101.1.44	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	609	OUT	GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: trc.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:21 UTC	598	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 165806 Accept-Ranges: bytes Date: Fri, 19 Apr 2024 19:21:21 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-pdk-kfty2130055-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713554481.227205,VS0,VE167 X-vcl-time-ms: 167 transfer-encoding: chunked
2024-04-19 19:21:21 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-04-19 19:21:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-04-19 19:21:21 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 19:21:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49960	68.67.160.117	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	797	OUT	GET /setuid?entity=158&code=ZiLEKwAAAL19ywNw HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=O6o5GhbE32qsxaB0HIJ1fblnaIZQJS92xvi4KzC_EWAVz2cfsJZaHRjaM99A99quMGsLop8YDUnMNspBmQDRRk__RonFIp9htJ4y1Ye6FU4.; receive-cookie-deprecation=1; uuid2=774620743932450137
2024-04-19 19:21:21 UTC	1517	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 19:21:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 25f1719d-6a80-4d8d-bc91-67a9b81c085c Set-Cookie: XANDR_PANID=O6o5GhbE32qsxaB0HIJ1fblnaIZQJS92xvi4KzC_EWAVz2cfsJZaHRjaM99A99quMGsLop8YDUnMNspBmQDRRk__RonFIp9htJ4y1Ye6FU4.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 19:21:21 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FErk#WF']wIg2IledV+kv!]tbPl1MwL(!R7qUY#RMS2rO<YWJXJXp1kKCg-yqRudrG(j#iP(Md+uBZ.Nkx3I%>=Y`s=B+NK1Q67Oe!@GG:*CBKv; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 19:21:21 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 19:21:21 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=774620743932450137; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 19:21:21 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 676.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 19:21:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49966	104.18.36.155	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	700	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZiLEKwAAAL19ywNw&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiLEMMAoImAAADurAsfBWwAA; CMPS=2047; CMPRO=2047
2024-04-19 19:21:21 UTC	986	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:21 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 876f41d46d3444d6-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiLEMMAoImAAADurAsfBWwAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 19:21:21 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2047; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 19:21:21 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QaP9QrQ6ib56jFh4evJC4ytay8NCy%2Fj%2BZg9rRsJcP5vTDnU%2FT8ahI%2FLKgJMJsdb6TAoeLBDAH7JrLzpDxAp6sBtcER0zXA23LZnmZu7x3l9zfAoMg0aH8HaxlmnVURCOJQ0IrXJCSlBSWw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 19:21:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49964	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	1210	OUT	GET /ibs:dpid=72352&dpuuid=3461195966407693141416&gdpr=0&gdpr_consent= HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873\|144236-1-1713554478986\|144237-1-1713554479093\|147592-1-1713554479200\|390122-1-1713554479301
2024-04-19 19:21:21 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:21 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 6nnzu6t2RgM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-07261d572.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:21 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:21 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49963	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	1181	OUT	GET /ibs:dpid=782&dpuuid=ZiLEKwAAAL19ywNw HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873\|144236-1-1713554478986\|144237-1-1713554479093\|147592-1-1713554479200\|390122-1-1713554479301
2024-04-19 19:21:21 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:21 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: iUj5LihXSp8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0ad6a5e9f.edge-va6.demdex.com 1 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:21 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:21 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49965	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	1200	OUT	GET /ibs:dpid=121998&dpuuid=8647ef753ba0b6bc0c21c4f679cc985b HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873\|144236-1-1713554478986\|144237-1-1713554479093\|147592-1-1713554479200\|390122-1-1713554479301
2024-04-19 19:21:21 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:21 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: +gOBXbN8TiY= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-01f00c7b4.edge-va6.demdex.com 2 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:21 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:21 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49967	35.244.159.8	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	616	OUT	GET /w/1.0/sd?id=537148856&val=ZiLEKwAAAL19ywNw HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:21 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 19 Apr 2024 19:21:21 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 19:21:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49969	108.177.122.154	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	612	OUT	GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WmlMRUt3QUFBTDE5eXdOdw== HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7Wh-jfCRsWe7Nungmu515OKwdCUtCIH6WhHU1JhL5EjxhfFu9dYXKZtquN1U
2024-04-19 19:21:21 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Fri, 19 Apr 2024 19:21:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 19:21:21 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49958	52.72.43.196	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	597	OUT	GET /sync?nid=adobe HTTP/1.1 Host: sync.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:21 UTC	1319	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Date: Fri, 19 Apr 2024 19:21:21 GMT Location: https://dpm.demdex.net/ibs:dpid=390122&dpuuid=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-574b2083-e644-55af-4eb8-953600e21e55.5Im1BFauFSUnckImSoYn1aEIKCjJGftJCQQ4twNbUCM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AV0sgg-ZEVa9OuJU2AOIeVVG1OTQ.iuFi%2B%2BwQ%2BsWs3itb4vZJnyvNcd57P6%2BYmS%2F5wbPCLn4; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCxiIuxBjABOgT87-jmQgSRxhKi.aLvDb1CVWXpDo7XDl%2FzvDAYIpq%2FdNPdFoXwKye6EZrM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIAZouYp5pPxwFrVhMMCIDCU4C5by5nimyt9O26vIDsFyEHwYBCCxiIuxBjABOgT87-jmQgSRxhKi.aLvDb1CVWXpDo7XDl%2FzvDAYIpq%2FdNPdFoXwKye6EZrM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Content-Length: 100 Connection: Close
2024-04-19 19:21:21 UTC	100	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 69 62 73 3a 64 70 69 64 3d 33 39 30 31 32 32 26 61 6d 70 3b 64 70 75 75 69 64 3d 56 30 73 67 67 2d 5a 45 56 61 39 4f 75 4a 55 32 41 4f 49 65 56 56 47 31 4f 54 51 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://dpm.demdex.net/ibs:dpid=390122&dpuuid=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49971	8.28.7.83	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	679	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=ZiLEKwAAAL19ywNw HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:21 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 19 Apr 2024 19:21:20 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-19 19:21:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49972	31.13.88.35	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	636	OUT	GET /fr/b.php?p=1531105787105294&e=ZiLEKwAAAL19ywNw&t=2592000&o=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:21 UTC	1781	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/gif report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} Date: Fri, 19 Apr 2024 12:21:21 PDT document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" Pragma: public Cache-Control: public, max-age=0 Expires: Fri, 19 Apr 2024 12:21:21 PDT X-Content-Type-Options: nosniff
2024-04-19 19:21:21 UTC	706	IN	Data Raw: 72 65 70 6f 72 74 69 6e 67 2d 65 6e 64 70 6f 69 6e 74 73 3a 20 63 6f 6f 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 6f 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 63 6f 65 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 65 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 64 65 66 61 75 6c 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 72 6f 77 73 65 72 5f 65 72 72 6f 72 5f 72 65 70 6f 72 74 73 2f 3f 64 65 76 69 63 65 5f 6c 65 76 65 6c 3d 75 6e 6b 6e 6f 77 6e 22 2c Data Ascii: reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown",
2024-04-19 19:21:21 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49973	18.213.234.13	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	1431	OUT	GET /ibs:dpid=390122&dpuuid=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mscom.demdex.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873\|144236-1-1713554478986\|144237-1-1713554479093\|147592-1-1713554479200\|390122-1-1713554479301
2024-04-19 19:21:21 UTC	889	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:21 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: vK5VwjLETvE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0a4221cee.edge-va6.demdex.com 8 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:21 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:21 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49974	35.244.159.8	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	380	OUT	GET /w/1.0/sd?id=537148856&val=ZiLEKwAAAL19ywNw HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:21 UTC	366	IN	HTTP/1.1 200 OK Vary: Accept Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Fri, 19 Apr 2024 19:21:21 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 19:21:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49976	151.101.129.44	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	373	OUT	GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1 Host: trc.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:22 UTC	598	IN	HTTP/1.1 200 OK Connection: close Server: nginx Cache-Control: no-cache, no-store Pragma: no-cache P3P: policyref="http://trc.taboola.com/p3p.xml", CP="NOI DSP COR LAW NID CURa ADMa DEVa PSAa PSDa OUR BUS IND UNI COM NAV INT DEM" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true X-Fastly-to-NLB-rtt: 166051 Accept-Ranges: bytes Date: Fri, 19 Apr 2024 19:21:22 GMT Via: 1.1 varnish X-SERVICE-VERSION: v1 X-Served-By: cache-pdk-kfty2130087-PDK X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1713554482.938828,VS0,VE167 X-vcl-time-ms: 167 transfer-encoding: chunked
2024-04-19 19:21:22 UTC	4	IN	Data Raw: 32 62 0d 0a Data Ascii: 2b
2024-04-19 19:21:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;
2024-04-19 19:21:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-04-19 19:21:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49977	104.18.36.155	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	464	OUT	GET /rum?cm_dsp_id=88&external_user_id=ZiLEKwAAAL19ywNw&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=ZiLEMMAoImAAADurAsfBWwAA; CMPS=2047; CMPRO=2047
2024-04-19 19:21:22 UTC	982	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 876f41d89fa912de-ATL CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=ZiLEMMAoImAAADurAsfBWwAA; Path=/; Domain=casalemedia.com; Expires=Sat, 19 Apr 2025 19:21:22 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=2047; Path=/; Domain=casalemedia.com; Expires=Thu, 18 Jul 2024 19:21:22 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=roOMUhbJlJJ%2FHY6B4XR6EiAe3UVCdYqG9H7IxJAnWyvJUx8eVyRvyt4mHw753%2B2bYsHLhzbKhOcyRsS8ukZH5vwIuyDpMa7e1qhM3Dm50ySs3VXGdAvnu4W3Z8CYRT6jSbCJn3uWJunI3g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-19 19:21:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49975	68.67.161.208	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:21 UTC	535	OUT	GET /setuid?entity=158&code=ZiLEKwAAAL19ywNw HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid2=774620743932450137; anj=dTM7k!M4.FErk#WF']wIg2IledV+kv!]tbPl1MwL(!R7qUY#RMS2rO<YWJXJXp1kKCg-yqRudrG(j#iP(Md+uBZ.Nkx3I%>=Y`s=B+NK1Q67Oe!@GG:*CBKv
2024-04-19 19:21:22 UTC	1517	IN	HTTP/1.1 200 OK Server: nginx/1.23.4 Date: Fri, 19 Apr 2024 19:21:22 GMT Content-Type: image/gif Content-Length: 43 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness AN-X-Request-Uuid: 9e5f687f-c3ea-4cf7-9424-19de726735e6 Set-Cookie: XANDR_PANID=nZ4ObmD0oeRDJI2q0oH5_C8Hq0DBPJUXSCGjKM-ZQStVJHzcOSZKd604vo11cSRxv5VfgttTuof7WmZQhbUAKAunIF6GYLlyJxt6aR6S6-k.; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 19:21:22 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: anj=dTM7k!M4.FErk#WF']wIg2IledV+kv!]tb?8i_jAez_UZ18%4Q=LVD+IcwZn.'.8tIph]K=he'2ki'G=*f=kWO]g0jJtL#jD`X(pX!X4ZO.bGw#XsgQSw!6a; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 19:21:22 GMT; Domain=.adnxs.com; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Fri, 07-Apr-2034 19:21:22 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=774620743932450137; SameSite=None; Path=/; Max-Age=7776000; Expires=Thu, 18-Jul-2024 19:21:22 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 81.181.57.52; 81.181.57.52; 806.bm-nginx-loadbalancer.mgmt.nym2.adnexus.net; adnxs.com
2024-04-19 19:21:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 01 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 40 02 02 4c 01 00 3b Data Ascii: GIF89a!,@L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49978	8.28.7.83	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:22 UTC	443	OUT	GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=ZiLEKwAAAL19ywNw HTTP/1.1 Host: image2.pubmatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:22 UTC	327	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 19 Apr 2024 19:21:20 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close P3P: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-store, no-cache, private
2024-04-19 19:21:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49979	54.157.18.178	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:22 UTC	1195	OUT	GET /ibs:dpid=390122&dpuuid=V0sgg-ZEVa9OuJU2AOIeVVG1OTQ HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=26389280685137111260898653323266367212; dpm=26389280685137111260898653323266367212; dextp=358-1-1713554474618\|477-1-1713554474733\|771-1-1713554474917\|782-1-1713554475021\|992-1-1713554475130\|1123-1-1713554475233\|903-1-1713554475338\|1175-1-1713554475446\|1957-1-1713554475556\|3047-1-1713554475662\|22054-1-1713554475770\|30646-1-1713554475902\|53196-1-1713554476012\|38117-1-1713554476114\|57282-1-1713554476236\|49276-1-1713554476342\|72352-1-1713554476456\|80742-1-1713554476588\|81309-1-1713554476691\|121998-1-1713554476793\|144228-1-1713554477316\|144229-1-1713554477440\|144230-1-1713554477571\|144231-1-1713554477773\|144232-1-1713554477962\|144233-1-1713554478070\|144234-1-1713554478176\|144235-1-1713554478873\|144236-1-1713554478986\|144237-1-1713554479093\|147592-1-1713554479200\|390122-1-1713554479301
2024-04-19 19:21:22 UTC	890	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 19:21:22 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: CxHlnx7CRQ4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0fcd4173c.edge-va6.demdex.com 16 ms set-cookie: dpm=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:22 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=26389280685137111260898653323266367212; Max-Age=15552000; Expires=Wed, 16 Oct 2024 19:21:22 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-19 19:21:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49980	31.13.88.35	443	480	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 19:21:22 UTC	400	OUT	GET /fr/b.php?p=1531105787105294&e=ZiLEKwAAAL19ywNw&t=2592000&o=0 HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 19:21:22 UTC	1781	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/gif report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} Date: Fri, 19 Apr 2024 12:21:22 PDT document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), usb=(), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy" cross-origin-resource-policy: cross-origin cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report" cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report" Pragma: public Cache-Control: public, max-age=0 Expires: Fri, 19 Apr 2024 12:21:22 PDT X-Content-Type-Options: nosniff
2024-04-19 19:21:22 UTC	706	IN	Data Raw: 72 65 70 6f 72 74 69 6e 67 2d 65 6e 64 70 6f 69 6e 74 73 3a 20 63 6f 6f 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 6f 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 63 6f 65 70 5f 72 65 70 6f 72 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 62 72 6f 77 73 65 72 5f 72 65 70 6f 72 74 69 6e 67 2f 63 6f 65 70 2f 3f 6d 69 6e 69 6d 69 7a 65 3d 30 22 2c 20 64 65 66 61 75 6c 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 61 6a 61 78 2f 62 72 6f 77 73 65 72 5f 65 72 72 6f 72 5f 72 65 70 6f 72 74 73 2f 3f 64 65 76 69 63 65 5f 6c 65 76 65 6c 3d 75 6e 6b 6e 6f 77 6e 22 2c Data Ascii: reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown",
2024-04-19 19:21:22 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 908, Parent PID: 2936

General

Target ID:	0
Start time:	21:20:29
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 480, Parent PID: 908

General

Target ID:	2
Start time:	21:20:31
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1980,i,11233055407409997117,13529957178688894726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6468, Parent PID: 2936

General

Target ID:	3
Start time:	21:20:34
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us-west-2.protection.sophos.com/?d=cudasvc.com&u=aHR0cHM6Ly9saW5rcHJvdGVjdC5jdWRhc3ZjLmNvbS91cmw_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&p=m&i=NjVjNTQ0OGE0ZWZhMmU3ZjY4MzI4ZTU2&t=RSt1V2wxeFozSmkzRlNIb3h4a0Rwb1Z3Tmd0eVovYlNhSDltbVpxaTEwdz0=&h=e542e25ebbc74310ab02d99468d3cd3c&s=AVNPUEhUT0NFTkNSWVBUSVaAbgs17mmhlH_9EhbEh07dSxVIMNlJSUD1cUzHaTNepQ"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129